[Sun Jul 12 18:00:43.489500 2026] [lsapi:notice] [pid 803757:tid 803757] mod_lsapi: version 1.1-92 [Sun Jul 12 18:00:43.501082 2026] [:notice] [pid 940444:tid 940444] [host root@box2216.bluehost.com] mod_lsapi: Selfstarter 940444 started [Sun Jul 12 18:00:43.553191 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: oxycleanfresh.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.560841 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-72b38f27.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.585229 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.601590 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: annamarieakinsphotography.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.624700 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sarahdrakedesign.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.747791 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: donate.cecweb.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.765475 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: turnweb.cecillinois.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.766915 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cecweb-org.cecillinois.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.791876 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mail.sumikrishnan.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.826555 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-1774172e.versatileintelligence.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.924511 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gatetechinc.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.939195 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: amplifygov.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.940500 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: playmatchgame.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.941796 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: californiahasfaults.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.962391 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cloud5.golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.963738 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: learntheconstitution.golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.965025 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.977339 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: faberrug.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:43.984506 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dryougrfx.planopercussion.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.018118 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kitchenfusions.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.053407 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sheehytoyotavolvo.com.automotiveadvertisinggroup.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.142574 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: forum.brisbaneplasticsurgery.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.143891 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: brisbaneplasticsurgery.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.266136 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: redplatefoods.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.478828 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: rmfw-org.bcx.jru.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.482127 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: christmissionacademy-us.christmission.us:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.495132 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: crowderscustomizing.crowdersllc.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.496591 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: timberwolfsports.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.583452 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: iblivrex.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.584858 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cscauto-ca.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.586334 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mmdservices-ca.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.853541 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: acnear-me.subzero.repair:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.854619 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: subzerorepairhillsborobeach-info.subzero.repair:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.863530 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: machinelat-org.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.866143 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-fb8a969a.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.867483 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-086c8c6a.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.868731 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: insideguille-site.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.905155 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shadowarchitect-net.shadowarchitects.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.942654 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: turista-ph.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.944103 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fmehrconsulting.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.947283 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-99894f3c.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.971728 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paulamarcelle.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.975046 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vibraniumacademy.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.976589 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theinterviewbook-website.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.977885 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: exhibit-merrill-pebble-in-the-pond-space.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.980246 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: faso-la.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.982952 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: martes-am.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.985467 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-e98d59b3.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.986799 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9a62c3b7.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.988072 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-75989e1e.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.989302 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-2f702a47.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.990766 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-25b94e8b.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:44.992162 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-1cc13384.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.074971 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: churrup.com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.076273 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-fc8ea813.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.078043 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-ed75465b.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.079264 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-cfb42606.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.117388 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-c6aeb1d1.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.118709 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-b08ddc9f.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.120151 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9b674029.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.122743 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-41ecc610.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.124074 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-0e478e45.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.137730 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: claudinehope-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.139014 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: pleasurerooms-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.140322 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cavernmenswear.co.uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.141763 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: deskinternacional.com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.143084 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: the-hospitality-center.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.144573 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: hangar34liverpool-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.146082 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thenewyorkpizzacompany-co.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.147417 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mossmanconstruction-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.148856 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: housingdisrepairadvisors-com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.163890 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kwemoh.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.165723 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fatheel-com.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.167524 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-beaf8a14.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.223498 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: monreagh-net.monreagh-television.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.229840 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: monreaghulsterscotscentre.monreagh-television.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.239176 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: matiasdeangelis.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.240975 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9fd20ce0.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.242787 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: 98d67e85-9e7c-485a-91da-ea4414ad2769.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.276445 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gringocanada.lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.277940 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gringorestaurants.lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.279415 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cobcllc.las.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.289873 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katherinejezekdesign.katherinejezek.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.331526 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cuvermagazine.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.332947 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: abigailspenser.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.334324 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-31b38a40.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.335837 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-2c1c19e1.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.337139 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: abigailspenserhu.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.338707 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: themillennialshandbook.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.378092 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: homeyeats.kristinayazmin.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.386779 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kingsparkplug.guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.388781 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: motorcyclecylinder.guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.474436 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: recoverytoolsrus.firmwaremuseum.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.475700 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: whymicroformats.esl-games.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.513990 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: solvinghealthcare-ca.solvinghealthcare.ca:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.515134 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: resourceoptimizationnetwork.solvinghealthcare.ca:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.517769 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: curtis-company.curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.519153 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: rotarywinefest-org123.curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.554542 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: clarebeloved.biglovesista.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.579549 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: whatliesbeyond-co.dko.sqs.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.583616 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: imexcoindustrial.atlanticpowers.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.619609 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-68a41425.adrastiacoons.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.639180 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: enchanteddreamstx.abacustaxestx.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.647703 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.666435 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vernsteinartandframe.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.673047 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: uk-taxrefund.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.678186 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: tracingtrauma.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.700141 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theaveragetouristtravel.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.707013 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: tecniasteel.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.711434 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: xyb.mhd.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.719051 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: stp.tlv.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.721966 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cruisecurator.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.727265 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.736511 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: slgaskins.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.749819 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shadowarchitects.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.764564 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.771148 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: htl.bzx.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.772507 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: qualtechauto.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.780967 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.782305 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.784779 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paradynemedical.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.791416 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: 1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.797995 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.818506 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.822650 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mbcwva.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.832583 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: magnoliacreative.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.846654 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.849271 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lambda.enterprises:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.850324 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kwdesigns.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.856540 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katieostrommd.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.857844 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katherinejezek.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.860070 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kaiyadesigns.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.865034 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.896071 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gulf52.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.897402 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.905869 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: glamorous-beauty.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.923631 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: foreignfreshfierce.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.927876 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: etteonline.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.932699 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: engleman.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.961633 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cottageluxe.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.976621 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: casafernandes.com.ar:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:45.978964 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: carlplaysdrums.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.026096 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: nwuav.nwuav.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.256545 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: jaybutler.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.257618 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: divfemleaders.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.258878 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: celestehartwell.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.259998 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theeaseofbusiness.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.263904 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: divinefeminineleaders.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.295251 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: falconaviation.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.299724 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: j2labs.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.311437 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fctakoradi.kg-ifa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.320697 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mppisec.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.337761 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: grahamconcrete.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.357292 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dvd-copy-all.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.359617 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dorasti.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.360902 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shop-caviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.362405 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dorasticaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.363722 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thefinestcaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.365013 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dailycaviarnews.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.366351 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: onlinecaviarshop.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.367595 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: caviarnewsonline.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.368878 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thecaviarmagazine.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.371517 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: buy-caviar-online.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.372790 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: organicgourmetcaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.374106 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: luxurycaviarcatering.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.376542 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gourmetcaviarcatering.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.428167 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lower-hire.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.429545 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: brazentrail.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.431236 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: iotatraining.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.436818 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-388a60bf.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.446263 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.526121 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sarahjoyyoga.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.539317 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:00:46.570364 2026] [qos:notice] [pid 803757:tid 803757] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients) [Sun Jul 12 18:00:47.305032 2026] [http2:info] [pid 803757:tid 803757] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.69.0), initializing... [ N 2026-07-12 18:00:47.4593 940714/T1 age/Wat/WatchdogMain.cpp:1377 ]: Starting Passenger watchdog... [ N 2026-07-12 18:00:47.4838 940721/T1 age/Cor/CoreMain.cpp:1340 ]: Starting Passenger core... [ N 2026-07-12 18:00:47.4840 940721/T1 age/Cor/CoreMain.cpp:256 ]: Passenger core running in multi-application mode. [ N 2026-07-12 18:00:47.5488 940721/T1 age/Cor/CoreMain.cpp:1015 ]: Passenger core online, PID 940721 [Sun Jul 12 18:00:47.588260 2026] [mpm_event:notice] [pid 803757:tid 803757] AH00489: Apache/2.4.68 (cPanel) OpenSSL/1.1.1w Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 Phusion_Passenger/6.0.20 mod_rbld2.0 configured -- resuming normal operations [Sun Jul 12 18:00:47.588340 2026] [core:notice] [pid 803757:tid 803757] AH00094: Command line: '/usr/sbin/httpd' [Sun Jul 12 18:00:47.809651 2026] [http2:info] [pid 940777:tid 940777] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:00:47.865419 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:43594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/users/test.php"] [unique_id "alQqr5ihQxksrpCflyE3PQAAAIg"] [Sun Jul 12 18:00:47.872035 2026] [security2:error] [pid 940777:tid 940918] [client 65.21.113.206:40480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2JiLTMzNzUzLWJibjQ5LTM3NjctYm40.cgi"] [unique_id "alQqr5ihQxksrpCflyE3PwAAAIY"] [Sun Jul 12 18:00:47.872340 2026] [security2:error] [pid 940777:tid 940922] [client 143.244.57.92:41544] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "alQqr5ihQxksrpCflyE3PgAAAIo"] [Sun Jul 12 18:00:47.875827 2026] [security2:error] [pid 940777:tid 940919] [client 168.100.149.123:48058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30030/bargainor/2307_mediator.jsp"] [unique_id "alQqr5ihQxksrpCflyE3QQAAAIc"] [Sun Jul 12 18:00:47.923407 2026] [security2:error] [pid 940777:tid 940946] [client 168.100.149.225:39512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30095/bargainor/2307_gurian.jsp"] [unique_id "alQqr5ihQxksrpCflyE3QgAAAKI"] [Sun Jul 12 18:00:48.027089 2026] [security2:error] [pid 940777:tid 940970] [client 168.100.149.28:54464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30160/bargainor/2307_monkey.jsp"] [unique_id "alQqr5ihQxksrpCflyE3TAAAALo"] [Sun Jul 12 18:00:48.035196 2026] [security2:error] [pid 940777:tid 940981] [client 168.100.149.204:40216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30290/bargainor/2307_gunz.jsp"] [unique_id "alQqr5ihQxksrpCflyE3TQAAAMU"] [Sun Jul 12 18:00:48.049133 2026] [security2:error] [pid 940777:tid 940974] [client 168.100.149.110:59334] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30355/bargainor/2307_monadically.jsp"] [unique_id "alQqr5ihQxksrpCflyE3TwAAAL4"] [Sun Jul 12 18:00:48.065936 2026] [security2:error] [pid 940777:tid 940922] [client 216.244.66.200:40846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "codingfiend.com"] [uri "/examples/greeting_card/"] [unique_id "alQqsJihQxksrpCflyE3XAAAAIo"] [Sun Jul 12 18:00:48.076934 2026] [security2:error] [pid 940777:tid 940989] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "alQqr5ihQxksrpCflyE3UgAAAM0"] [Sun Jul 12 18:00:48.101885 2026] [security2:error] [pid 940777:tid 940922] [client 216.244.66.200:40846] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "codingfiend.com"] [uri "/examples/greeting_card/"] [unique_id "alQqsJihQxksrpCflyE3XAAAAIo"] [Sun Jul 12 18:00:48.108193 2026] [security2:error] [pid 940777:tid 940934] [client 51.68.111.199:14809] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "jodieskitchen.com"] [uri "/robots.txt"] [unique_id "alQqsJihQxksrpCflyE3XwAAAJY"] [Sun Jul 12 18:00:48.143160 2026] [security2:error] [pid 940777:tid 940934] [client 51.68.111.199:14809] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "jodieskitchen.com"] [uri "/robots.txt"] [unique_id "alQqsJihQxksrpCflyE3XwAAAJY"] [Sun Jul 12 18:00:48.179926 2026] [security2:error] [pid 940777:tid 940912] [remote 74.7.227.188:42752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQqsJihQxksrpCflyE3agAAtXw"], referer: https://www.stephenspublishing.com/crayons-stock-p-71.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:00:48.185690 2026] [security2:error] [pid 940777:tid 940994] [client 20.63.87.152:26586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/.dj/index.php"] [unique_id "alQqsJihQxksrpCflyE3awAAANI"] [Sun Jul 12 18:00:48.193355 2026] [security2:error] [pid 940777:tid 941010] [client 20.63.87.152:6804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/.dj/index.php"] [unique_id "alQqsJihQxksrpCflyE3bwAAAOI"] [Sun Jul 12 18:00:48.233207 2026] [security2:error] [pid 940777:tid 940930] [client 209.50.181.55:19721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqsJihQxksrpCflyE3YgAAAJI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:48.570799 2026] [security2:error] [pid 940777:tid 941005] [client 197.48.221.253:60726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3gQAAAN0"] [Sun Jul 12 18:00:48.631980 2026] [security2:error] [pid 940777:tid 941005] [client 197.48.221.253:60726] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3gQAAAN0"] [Sun Jul 12 18:00:48.636394 2026] [security2:error] [pid 940777:tid 941013] [client 94.187.171.125:52205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3iQAAAOU"] [Sun Jul 12 18:00:48.647121 2026] [security2:error] [pid 940777:tid 940798] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/webdav/phpinfo.php"] [unique_id "alQqsJihQxksrpCflyE3igAApgw"] [Sun Jul 12 18:00:48.737131 2026] [security2:error] [pid 940777:tid 941008] [client 74.244.119.215:37755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3jgAAAOA"] [Sun Jul 12 18:00:48.738956 2026] [security2:error] [pid 940777:tid 941013] [client 94.187.171.125:52205] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3iQAAAOU"] [Sun Jul 12 18:00:48.788105 2026] [security2:error] [pid 940777:tid 940903] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/whturk/.env"] [unique_id "alQqsJihQxksrpCflyE3ngAApnM"] [Sun Jul 12 18:00:48.804815 2026] [security2:error] [pid 940777:tid 941008] [client 74.244.119.215:37755] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3jgAAAOA"] [Sun Jul 12 18:00:48.851221 2026] [http2:info] [pid 941081:tid 941081] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:00:49.014321 2026] [security2:error] [pid 940777:tid 940802] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/webstatic/.env"] [unique_id "alQqsJihQxksrpCflyE3mgAAphA"] [Sun Jul 12 18:00:49.094342 2026] [security2:error] [pid 940777:tid 940941] [client 104.207.51.248:16263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqsJihQxksrpCflyE3tAAAAJ0"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:49.177543 2026] [authz_core:error] [pid 941081:tid 941221] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:49.178348 2026] [authz_core:error] [pid 941081:tid 941221] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:49.143719 2026] [security2:error] [pid 940777:tid 941012] [client 146.190.83.166:58688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.83.190.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.pug-love-crochet.com"] [uri "/xmlrpc.php"] [unique_id "alQqsJihQxksrpCflyE3rAAAAOQ"], referer: https://www.pubadvocate.nyc//wp-login.php [Sun Jul 12 18:00:49.274346 2026] [security2:error] [pid 941081:tid 941258] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/404.html"] [unique_id "alQqseZnN2CRos_GBqXreAAAAbc"] [Sun Jul 12 18:00:49.257265 2026] [security2:error] [pid 940777:tid 941002] [client 62.171.167.118:44128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config-backup.php"] [unique_id "alQqsJihQxksrpCflyE3swAAANo"] [Sun Jul 12 18:00:49.295238 2026] [security2:error] [pid 940777:tid 940931] [client 20.63.87.152:9653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/.trash7206/index.php"] [unique_id "alQqsZihQxksrpCflyE3vwAAAJM"] [Sun Jul 12 18:00:49.273571 2026] [security2:error] [pid 940777:tid 940804] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/windows/tests/9.3.x/.env"] [unique_id "alQqsJihQxksrpCflyE3pQAAphI"] [Sun Jul 12 18:00:49.371187 2026] [security2:error] [pid 940777:tid 940981] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/contact-form-7/"] [unique_id "alQqsJihQxksrpCflyE3kQAAAMU"] [Sun Jul 12 18:00:49.355893 2026] [security2:error] [pid 940777:tid 940811] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/webstatic/.env"] [unique_id "alQqsJihQxksrpCflyE3sAAAphk"], referer: http://67.222.38.115/webstatic/.env [Sun Jul 12 18:00:49.511968 2026] [security2:error] [pid 940777:tid 940981] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wordpress/"] [unique_id "alQqsZihQxksrpCflyE3zQAAAMU"] [Sun Jul 12 18:00:49.611162 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:49.629479 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:49.780255 2026] [security2:error] [pid 941081:tid 941234] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqseZnN2CRos_GBqXrcAAAAZ8"] [Sun Jul 12 18:00:49.780312 2026] [security2:error] [pid 941081:tid 941234] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqseZnN2CRos_GBqXrcAAAAZ8"] [Sun Jul 12 18:00:49.808954 2026] [security2:error] [pid 941081:tid 941262] [client 65.111.22.69:29045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.22.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqseZnN2CRos_GBqXrgQAAAbs"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:49.837412 2026] [security2:error] [pid 940777:tid 940990] [client 65.21.113.206:44330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2JiLTMzNzUzLWJibjQ5LTM3NjctYm40.cgi"] [unique_id "alQqsJihQxksrpCflyE3fgAAAM4"] [Sun Jul 12 18:00:49.873265 2026] [security2:error] [pid 940777:tid 940912] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/wp-admin/.env"] [unique_id "alQqsJihQxksrpCflyE3tgAApnw"], referer: http://67.222.38.115/wp-admin/.env [Sun Jul 12 18:00:49.851564 2026] [security2:error] [pid 940777:tid 940972] [client 168.100.149.87:58434] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30225/bargainor/2307_impeccance.jsp"] [unique_id "alQqsZihQxksrpCflyE33AAAALw"] [Sun Jul 12 18:00:49.996891 2026] [security2:error] [pid 940777:tid 940808] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/wp-admin/.env"] [unique_id "alQqsJihQxksrpCflyE3qgAAphY"] [Sun Jul 12 18:00:50.161609 2026] [security2:error] [pid 941081:tid 941278] [client 168.100.149.94:25690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30420/bargainor/2307_enhalo.jsp"] [unique_id "alQqsuZnN2CRos_GBqXrjAAAAcs"] [Sun Jul 12 18:00:50.177475 2026] [security2:error] [pid 940777:tid 940826] [remote 5.255.231.107:48696] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/goods/00312248757.html"] [unique_id "alQqsZihQxksrpCflyE33gAA6Cg"] [Sun Jul 12 18:00:50.369246 2026] [security2:error] [pid 940777:tid 940788] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config-backup.php"] [unique_id "alQqsZihQxksrpCflyE34gAApgI"] [Sun Jul 12 18:00:50.402408 2026] [security2:error] [pid 941081:tid 941281] [client 209.50.181.89:63379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqsuZnN2CRos_GBqXrkAAAAc4"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:50.605317 2026] [security2:error] [pid 940777:tid 941038] [client 102.202.74.82:14995] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQqsZihQxksrpCflyE3ugAAAP4"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-V330-15IKB(81AX00JUGE)-portable-batterie.htm [Sun Jul 12 18:00:50.694945 2026] [security2:error] [pid 941081:tid 941339] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/404.html"] [unique_id "alQqsuZnN2CRos_GBqXrngAAAgg"] [Sun Jul 12 18:00:50.713982 2026] [security2:error] [pid 940777:tid 941020] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/wordpress/"] [unique_id "alQqsZihQxksrpCflyE32QAAAOw"] [Sun Jul 12 18:00:50.888099 2026] [security2:error] [pid 940777:tid 940845] [remote 161.97.129.228:57732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.129.97.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sarahrweidman.com"] [uri "/wp-login.php"] [unique_id "alQqspihQxksrpCflyE4CAAAwDo"] [Sun Jul 12 18:00:50.938200 2026] [security2:error] [pid 940777:tid 941012] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/images/"] [unique_id "alQqspihQxksrpCflyE4DgAAAOQ"] [Sun Jul 12 18:00:50.955959 2026] [security2:error] [pid 941081:tid 941290] [client 216.26.243.5:11001] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqsuZnN2CRos_GBqXrqwAAAdc"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:50.996443 2026] [proxy:warn] [pid 940777:tid 940932] [client 66.132.172.96:40128] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:00:51.020853 2026] [proxy:error] [pid 940777:tid 940932] (70014)End of file found: [client 66.132.172.96:40128] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 66.132.172.96 () [Sun Jul 12 18:00:51.045541 2026] [security2:error] [pid 940777:tid 940937] [client 74.7.241.191:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE3lAAAAJk"], referer: http://getsalon-softwarehq.com/robots.txt [Sun Jul 12 18:00:51.064761 2026] [security2:error] [pid 940777:tid 940922] [client 20.63.87.152:16768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQqs5ihQxksrpCflyE4GQAAAIo"] [Sun Jul 12 18:00:51.277837 2026] [security2:error] [pid 940777:tid 940965] [client 75.157.119.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqsZihQxksrpCflyE3wgAAALU"] [Sun Jul 12 18:00:51.286366 2026] [security2:error] [pid 941081:tid 941227] [client 24.203.79.110:49629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqs-ZnN2CRos_GBqXrtQAAAZg"] [Sun Jul 12 18:00:51.286808 2026] [security2:error] [pid 941081:tid 941227] [client 24.203.79.110:49629] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqs-ZnN2CRos_GBqXrtQAAAZg"] [Sun Jul 12 18:00:51.308173 2026] [security2:error] [pid 940777:tid 940968] [client 74.7.241.191:51076] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "salon-software.com"] [uri "/"] [unique_id "alQqsJihQxksrpCflyE3XgAAALg"], referer: http://getsalon-softwarehq.com/robots.txt [Sun Jul 12 18:00:51.337693 2026] [security2:error] [pid 941081:tid 941222] [client 20.63.87.152:34576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQqs-ZnN2CRos_GBqXrtwAAAZM"] [Sun Jul 12 18:00:51.393025 2026] [security2:error] [pid 941081:tid 941095] [remote 103.82.20.130:36356] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQqs-ZnN2CRos_GBqXruQAB5gc"] [Sun Jul 12 18:00:51.446920 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE3ZwAAAKI"], referer: http://67.222.38.115/sh.sh [Sun Jul 12 18:00:51.487596 2026] [security2:error] [pid 940777:tid 940945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE3aQAAAKE"] [Sun Jul 12 18:00:51.505789 2026] [security2:error] [pid 940777:tid 940964] [client 168.100.149.162:47106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30485/bargainor/2307_metalogical.jsp"] [unique_id "alQqs5ihQxksrpCflyE4JAAAALQ"] [Sun Jul 12 18:00:51.529649 2026] [security2:error] [pid 940777:tid 940952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE3aAAAAKg"] [Sun Jul 12 18:00:51.635569 2026] [security2:error] [pid 940777:tid 940989] [client 20.63.87.152:16343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQqs5ihQxksrpCflyE4MQAAAM0"] [Sun Jul 12 18:00:51.788359 2026] [security2:error] [pid 940777:tid 941028] [client 104.207.51.103:64219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqs5ihQxksrpCflyE4LQAAAPQ"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:52.445176 2026] [security2:error] [pid 940777:tid 940953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE3bgAAAKk"], referer: http://67.222.38.115/settings/aws_credentials [Sun Jul 12 18:00:52.512218 2026] [security2:error] [pid 940777:tid 940963] [client 185.177.189.101:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqspihQxksrpCflyE3-wAAALM"] [Sun Jul 12 18:00:52.531400 2026] [security2:error] [pid 940777:tid 941022] [client 172.252.119.181:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQqspihQxksrpCflyE4EgAAAO4"] [Sun Jul 12 18:00:52.562420 2026] [security2:error] [pid 940777:tid 941019] [client 216.26.244.21:9399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqtJihQxksrpCflyE4QwAAAOs"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:52.672787 2026] [security2:error] [pid 941081:tid 941274] [client 20.63.87.152:7973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/0.kb-v3.php"] [unique_id "alQqtOZnN2CRos_GBqXr2QAAAcc"] [Sun Jul 12 18:00:52.789983 2026] [security2:error] [pid 940777:tid 940924] [client 45.233.112.248:15121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqtJihQxksrpCflyE4TwAAAIw"] [Sun Jul 12 18:00:52.810740 2026] [security2:error] [pid 940777:tid 940924] [client 45.233.112.248:15121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqtJihQxksrpCflyE4TwAAAIw"] [Sun Jul 12 18:00:52.884793 2026] [authz_core:error] [pid 940777:tid 940917] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:52.888082 2026] [authz_core:error] [pid 940777:tid 940917] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:52.901303 2026] [security2:error] [pid 940777:tid 940976] [client 172.225.31.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.hanoverhumanesociety.org"] [uri "/index.php"] [unique_id "alQqs5ihQxksrpCflyE4NAAAAMA"], referer: https://www.hanoverhumanesociety.org/ [Sun Jul 12 18:00:52.958042 2026] [security2:error] [pid 940777:tid 940870] [remote 47.128.22.94:25630] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bellesprit.com"] [uri "/energy-healing/"] [unique_id "alQqtJihQxksrpCflyE4WQAAw1I"] [Sun Jul 12 18:00:53.021541 2026] [autoindex:error] [pid 940777:tid 941006] [client 143.244.57.92:46188] AH01276: Cannot serve directory /home1/galilep7/public_html/galileopress/wp-admin/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:00:53.025021 2026] [security2:error] [pid 940777:tid 941006] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "403"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/images/"] [unique_id "alQqs5ihQxksrpCflyE4HQAAAN4"] [Sun Jul 12 18:00:53.098591 2026] [security2:error] [pid 940777:tid 940993] [client 20.63.87.152:11155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/0.php"] [unique_id "alQqtZihQxksrpCflyE4XAAAANE"] [Sun Jul 12 18:00:53.154091 2026] [security2:error] [pid 941081:tid 941338] [client 45.3.54.204:32337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqteZnN2CRos_GBqXr7gAAAgc"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:53.240147 2026] [security2:error] [pid 940777:tid 940926] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "alQqtZihQxksrpCflyE4ZAAAAI4"] [Sun Jul 12 18:00:53.315784 2026] [security2:error] [pid 940777:tid 940878] [remote 103.82.20.130:43100] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQqtZihQxksrpCflyE4ZwAAkFo"] [Sun Jul 12 18:00:53.419134 2026] [security2:error] [pid 940777:tid 940983] [client 92.178.252.50:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQqsZihQxksrpCflyE38AAAxxY"] [Sun Jul 12 18:00:53.434802 2026] [security2:error] [pid 941081:tid 941319] [client 20.63.87.152:7946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/002.php"] [unique_id "alQqteZnN2CRos_GBqXr-QAAAfQ"] [Sun Jul 12 18:00:53.478803 2026] [security2:error] [pid 940777:tid 940919] [client 34.153.19.39:41924] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQqsJihQxksrpCflyE30wAAhx8"], referer: http://www.mattbeyer.com/blog/ [Sun Jul 12 18:00:53.645157 2026] [autoindex:error] [pid 941081:tid 941235] [client 143.244.57.92:0] AH01276: Cannot serve directory /home1/galilep7/public_html/galileopress/wp-content/plugins/wordpress-seo/js/dist/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:00:53.654879 2026] [security2:error] [pid 941081:tid 941235] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/403.html"] [unique_id "alQqteZnN2CRos_GBqXr-wAAAaA"] [Sun Jul 12 18:00:53.658196 2026] [security2:error] [pid 940777:tid 941011] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "403"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/wordpress-seo/js/dist/"] [unique_id "alQqtZihQxksrpCflyE4agAAAOM"] [Sun Jul 12 18:00:53.684298 2026] [security2:error] [pid 941081:tid 941251] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2JnLTI0MjYxLWJnODl6LTI1Mi1nODk=.cgi"] [unique_id "alQqteZnN2CRos_GBqXsAQAAAbA"] [Sun Jul 12 18:00:53.723010 2026] [security2:error] [pid 940777:tid 941015] [client 20.63.87.152:9602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/01.php"] [unique_id "alQqtZihQxksrpCflyE4dQAAAOc"] [Sun Jul 12 18:00:53.755859 2026] [security2:error] [pid 941081:tid 941229] [client 104.207.52.136:19873] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 136.52.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqteZnN2CRos_GBqXsAAAAAZo"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:53.947902 2026] [security2:error] [pid 941081:tid 941292] [client 5.1.54.165:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQqteZnN2CRos_GBqXr7QAAAdk"] [Sun Jul 12 18:00:54.029108 2026] [security2:error] [pid 940777:tid 940964] [client 20.63.87.152:33417] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/0x.php"] [unique_id "alQqtpihQxksrpCflyE4igAAALQ"] [Sun Jul 12 18:00:54.046375 2026] [security2:error] [pid 940777:tid 940959] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "alQqtpihQxksrpCflyE4jAAAAK8"] [Sun Jul 12 18:00:54.367713 2026] [security2:error] [pid 940777:tid 941023] [client 168.100.149.22:55182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30550/bargainor/2307_psychoreflex.jsp"] [unique_id "alQqtpihQxksrpCflyE4kAAAAO8"] [Sun Jul 12 18:00:54.470030 2026] [security2:error] [pid 940777:tid 940917] [client 20.63.87.152:6948] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webmail.cobcllc.com"] [uri "/1.php"] [unique_id "alQqtpihQxksrpCflyE4pQAAAIU"] [Sun Jul 12 18:00:54.551065 2026] [security2:error] [pid 940777:tid 940917] [client 20.63.87.152:6948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/1.php"] [unique_id "alQqtpihQxksrpCflyE4pQAAAIU"] [Sun Jul 12 18:00:54.695332 2026] [security2:error] [pid 940777:tid 940989] [client 216.26.243.197:33249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqtpihQxksrpCflyE4qAAAAM0"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:54.710917 2026] [security2:error] [pid 940777:tid 940803] [remote 46.105.28.235:42764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.28.105.46.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.hanoverhumanesociety.com"] [uri "/wp-login.php"] [unique_id "alQqtpihQxksrpCflyE4kwAAtxE"] [Sun Jul 12 18:00:54.769784 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:44136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.local.php"] [unique_id "alQqtpihQxksrpCflyE4owAAAOE"] [Sun Jul 12 18:00:54.827565 2026] [security2:error] [pid 941081:tid 941283] [client 57.141.18.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr0gAAAdA"] [Sun Jul 12 18:00:55.008130 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:55.008938 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:55.035203 2026] [security2:error] [pid 940777:tid 940991] [client 20.63.87.152:26079] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/100.php"] [unique_id "alQqtpihQxksrpCflyE4tgAAAM8"] [Sun Jul 12 18:00:55.105117 2026] [security2:error] [pid 941081:tid 941320] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/wordpress-seo/index.php"] [unique_id "alQqtuZnN2CRos_GBqXsMQAAAfU"] [Sun Jul 12 18:00:55.119654 2026] [security2:error] [pid 940777:tid 941028] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/wordpress-seo/"] [unique_id "alQqtpihQxksrpCflyE4nwAAAPQ"] [Sun Jul 12 18:00:55.128129 2026] [security2:error] [pid 940777:tid 940792] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.local.php"] [unique_id "alQqt5ihQxksrpCflyE4ugAApgY"] [Sun Jul 12 18:00:55.224619 2026] [security2:error] [pid 940777:tid 940977] [client 197.48.221.253:61322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqt5ihQxksrpCflyE4vwAAAME"] [Sun Jul 12 18:00:55.233243 2026] [security2:error] [pid 940777:tid 940977] [client 197.48.221.253:61322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqt5ihQxksrpCflyE4vwAAAME"] [Sun Jul 12 18:00:55.303563 2026] [security2:error] [pid 941081:tid 941242] [client 216.26.243.230:19175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqt-ZnN2CRos_GBqXsOgAAAac"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:55.319767 2026] [security2:error] [pid 940777:tid 941000] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/js/"] [unique_id "alQqt5ihQxksrpCflyE4xwAAANg"] [Sun Jul 12 18:00:55.334376 2026] [security2:error] [pid 940777:tid 941024] [client 20.63.87.152:24309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/122.php"] [unique_id "alQqt5ihQxksrpCflyE4yAAAAPA"] [Sun Jul 12 18:00:55.378820 2026] [security2:error] [pid 940777:tid 940953] [client 34.153.19.39:41924] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQqtpihQxksrpCflyE4tQAAqS4"], referer: http://www.mattbeyer.com/backup/ [Sun Jul 12 18:00:55.472764 2026] [security2:error] [pid 941081:tid 941221] [client 168.100.149.168:26760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30615/bargainor/2307_mailable.jsp"] [unique_id "alQqt-ZnN2CRos_GBqXsQAAAAZI"] [Sun Jul 12 18:00:55.543283 2026] [security2:error] [pid 940777:tid 940965] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/404.html"] [unique_id "alQqt5ihQxksrpCflyE4zgAAALU"] [Sun Jul 12 18:00:55.565334 2026] [security2:error] [pid 940777:tid 941010] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/js/"] [unique_id "alQqt5ihQxksrpCflyE4zAAAAOI"] [Sun Jul 12 18:00:55.578558 2026] [security2:error] [pid 941081:tid 941326] [client 20.63.87.152:22099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/123.php"] [unique_id "alQqt-ZnN2CRos_GBqXsQwAAAfs"] [Sun Jul 12 18:00:55.641524 2026] [security2:error] [pid 940777:tid 941022] [client 62.171.167.118:44150] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php-backup"] [unique_id "alQqt5ihQxksrpCflyE40gAAAO4"] [Sun Jul 12 18:00:55.715550 2026] [security2:error] [pid 940777:tid 940981] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "alQqt5ihQxksrpCflyE41gAAAMU"] [Sun Jul 12 18:00:55.720150 2026] [security2:error] [pid 940777:tid 940922] [client 62.171.167.118:44114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php.aws"] [unique_id "alQqt5ihQxksrpCflyE42AAAAIo"] [Sun Jul 12 18:00:55.720149 2026] [security2:error] [pid 940777:tid 940807] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php-backup"] [unique_id "alQqt5ihQxksrpCflyE41wAAphU"] [Sun Jul 12 18:00:55.720842 2026] [security2:error] [pid 940777:tid 940807] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php.aws"] [unique_id "alQqt5ihQxksrpCflyE42QAAphU"] [Sun Jul 12 18:00:55.720932 2026] [security2:error] [pid 940777:tid 940838] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php.dist"] [unique_id "alQqt5ihQxksrpCflyE42gAApjQ"] [Sun Jul 12 18:00:55.731221 2026] [security2:error] [pid 940777:tid 940794] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php.err"] [unique_id "alQqt5ihQxksrpCflyE43AAApgg"] [Sun Jul 12 18:00:55.734323 2026] [security2:error] [pid 941081:tid 941237] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqtuZnN2CRos_GBqXsMgAAAaI"] [Sun Jul 12 18:00:55.734388 2026] [security2:error] [pid 941081:tid 941237] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqtuZnN2CRos_GBqXsMgAAAaI"] [Sun Jul 12 18:00:55.736989 2026] [security2:error] [pid 941081:tid 941301] [client 65.21.113.206:39998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2JnLTI0MjYxLWJnODl6LTI1Mi1nODk=.cgi"] [unique_id "alQqtuZnN2CRos_GBqXsFwAAAeI"] [Sun Jul 12 18:00:55.796985 2026] [security2:error] [pid 940777:tid 940841] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.38.115"] [uri "/wp-config.php.tar"] [unique_id "alQqt5ihQxksrpCflyE43wAApjY"] [Sun Jul 12 18:00:55.805501 2026] [security2:error] [pid 940777:tid 940917] [client 66.132.172.99:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "50.87.179.89"] [uri "/index.php"] [unique_id "alQqt5ihQxksrpCflyE4yQAAAIU"] [Sun Jul 12 18:00:55.807074 2026] [security2:error] [pid 940777:tid 940947] [client 34.153.19.39:41924] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQqt5ihQxksrpCflyE4ywAAozU"], referer: http://www.mattbeyer.com/wp/ [Sun Jul 12 18:00:55.827246 2026] [security2:error] [pid 941081:tid 941283] [client 216.26.244.103:29063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqt-ZnN2CRos_GBqXsSgAAAdA"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:55.840307 2026] [security2:error] [pid 940777:tid 940905] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php3"] [unique_id "alQqt5ihQxksrpCflyE44QAApnU"] [Sun Jul 12 18:00:55.935173 2026] [security2:error] [pid 941081:tid 941136] [remote 216.73.216.33:46380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index1.xml"] [unique_id "alQqt-ZnN2CRos_GBqXsUgAB6zA"] [Sun Jul 12 18:00:55.942411 2026] [security2:error] [pid 940777:tid 940991] [client 20.63.87.152:24287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/13.php"] [unique_id "alQqt5ihQxksrpCflyE46QAAAM8"] [Sun Jul 12 18:00:55.947304 2026] [security2:error] [pid 941081:tid 941318] [client 74.244.119.215:46643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqt-ZnN2CRos_GBqXsUwAAAfM"] [Sun Jul 12 18:00:55.959551 2026] [security2:error] [pid 941081:tid 941318] [client 74.244.119.215:46643] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqt-ZnN2CRos_GBqXsUwAAAfM"] [Sun Jul 12 18:00:55.975710 2026] [security2:error] [pid 941081:tid 941243] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/404.html"] [unique_id "alQqt-ZnN2CRos_GBqXsVAAAAag"] [Sun Jul 12 18:00:55.978749 2026] [security2:error] [pid 940777:tid 941012] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/woocommerce/assets/js/"] [unique_id "alQqt5ihQxksrpCflyE45QAAAOQ"] [Sun Jul 12 18:00:56.053463 2026] [security2:error] [pid 940777:tid 941011] [client 62.171.167.118:44644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2010"] [unique_id "alQquJihQxksrpCflyE46wAAAOM"] [Sun Jul 12 18:00:56.063312 2026] [authz_core:error] [pid 941081:tid 941328] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:56.063968 2026] [authz_core:error] [pid 941081:tid 941328] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:56.086957 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2010"] [unique_id "alQquJihQxksrpCflyE47QAApiY"] [Sun Jul 12 18:00:56.120118 2026] [security2:error] [pid 940777:tid 940964] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "alQquJihQxksrpCflyE47gAAALQ"] [Sun Jul 12 18:00:56.148009 2026] [security2:error] [pid 940777:tid 941008] [client 94.187.171.125:52699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQquJihQxksrpCflyE47wAAAOA"] [Sun Jul 12 18:00:56.148328 2026] [security2:error] [pid 940777:tid 941008] [client 94.187.171.125:52699] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQquJihQxksrpCflyE47wAAAOA"] [Sun Jul 12 18:00:56.216908 2026] [security2:error] [pid 941081:tid 941224] [client 20.63.87.152:22627] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/133.php"] [unique_id "alQquOZnN2CRos_GBqXsXQAAAZU"] [Sun Jul 12 18:00:56.335548 2026] [security2:error] [pid 941081:tid 941306] [client 45.3.54.251:22265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 251.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQquOZnN2CRos_GBqXsXgAAAec"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:56.351214 2026] [security2:error] [pid 940777:tid 940904] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2014"] [unique_id "alQquJihQxksrpCflyE48QAApnQ"] [Sun Jul 12 18:00:56.354595 2026] [security2:error] [pid 940777:tid 941032] [client 34.153.19.39:41924] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQqt5ihQxksrpCflyE45wAA-A0"], referer: http://www.mattbeyer.com/new/ [Sun Jul 12 18:00:56.362876 2026] [security2:error] [pid 941081:tid 941340] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/404.html"] [unique_id "alQquOZnN2CRos_GBqXsYAAAAgk"] [Sun Jul 12 18:00:56.363992 2026] [security2:error] [pid 940777:tid 941038] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/woocommerce/"] [unique_id "alQquJihQxksrpCflyE48AAAAP4"] [Sun Jul 12 18:00:56.439037 2026] [security2:error] [pid 941081:tid 941232] [client 20.63.87.152:22101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/155.php"] [unique_id "alQquOZnN2CRos_GBqXsYwAAAZ0"] [Sun Jul 12 18:00:56.494890 2026] [security2:error] [pid 941081:tid 941281] [client 62.171.167.118:44646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2014"] [unique_id "alQquOZnN2CRos_GBqXsZQAAAc4"] [Sun Jul 12 18:00:56.497020 2026] [security2:error] [pid 941081:tid 941279] [client 62.171.167.118:44652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2016"] [unique_id "alQquOZnN2CRos_GBqXsZgAAAcw"] [Sun Jul 12 18:00:56.518809 2026] [security2:error] [pid 940777:tid 940935] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/meta/"] [unique_id "alQquJihQxksrpCflyE48wAAAJc"] [Sun Jul 12 18:00:56.700848 2026] [security2:error] [pid 940777:tid 940972] [client 66.132.172.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "69.89.28.191"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4RAAAALw"] [Sun Jul 12 18:00:56.714408 2026] [security2:error] [pid 940777:tid 941042] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/meta/"] [unique_id "alQquJihQxksrpCflyE49gAAAQI"] [Sun Jul 12 18:00:56.719556 2026] [security2:error] [pid 940777:tid 940998] [client 20.63.87.152:4282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/177.php"] [unique_id "alQquJihQxksrpCflyE49wAAANY"] [Sun Jul 12 18:00:56.784133 2026] [security2:error] [pid 940777:tid 941000] [client 34.153.19.39:41924] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQquJihQxksrpCflyE48gAA2BQ"], referer: http://www.mattbeyer.com/old/ [Sun Jul 12 18:00:56.865658 2026] [security2:error] [pid 940777:tid 941041] [client 65.111.23.192:37893] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQquJihQxksrpCflyE4-gAAAQE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:56.906273 2026] [security2:error] [pid 940777:tid 940930] [client 143.244.57.92:57058] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/network/"] [unique_id "alQquJihQxksrpCflyE4-wAAAJI"] [Sun Jul 12 18:00:56.945172 2026] [security2:error] [pid 940777:tid 940823] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2016"] [unique_id "alQquJihQxksrpCflyE4_AAApiU"] [Sun Jul 12 18:00:56.949392 2026] [authz_core:error] [pid 941081:tid 941329] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:56.949895 2026] [authz_core:error] [pid 941081:tid 941329] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:56.980652 2026] [security2:error] [pid 941081:tid 941303] [client 20.63.87.152:31454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/1index.php"] [unique_id "alQquOZnN2CRos_GBqXsbQAAAeQ"] [Sun Jul 12 18:00:57.160950 2026] [security2:error] [pid 940777:tid 940850] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2017"] [unique_id "alQquZihQxksrpCflyE4_gAApj8"] [Sun Jul 12 18:00:57.347345 2026] [security2:error] [pid 941081:tid 941222] [client 20.63.87.152:27533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/2.php"] [unique_id "alQqueZnN2CRos_GBqXscgAAAZM"] [Sun Jul 12 18:00:57.365657 2026] [security2:error] [pid 940777:tid 940796] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2020"] [unique_id "alQquZihQxksrpCflyE5AgAApgo"] [Sun Jul 12 18:00:57.433248 2026] [security2:error] [pid 940777:tid 940955] [client 209.50.180.121:46959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.180.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQquZihQxksrpCflyE5AQAAAKs"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:57.443778 2026] [security2:error] [pid 940777:tid 940801] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2021"] [unique_id "alQquZihQxksrpCflyE5AwAApg8"] [Sun Jul 12 18:00:57.476903 2026] [security2:error] [pid 940777:tid 940923] [client 168.100.149.169:62936] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30680/bargainor/2307_epidemiology.jsp"] [unique_id "alQquZihQxksrpCflyE5BQAAAIs"] [Sun Jul 12 18:00:57.564511 2026] [security2:error] [pid 940777:tid 940933] [client 62.171.167.118:44658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2021"] [unique_id "alQquZihQxksrpCflyE5CQAAAJU"] [Sun Jul 12 18:00:57.616944 2026] [security2:error] [pid 941081:tid 941223] [client 20.63.87.152:32201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/222.php"] [unique_id "alQqueZnN2CRos_GBqXsdwAAAZQ"] [Sun Jul 12 18:00:57.685446 2026] [security2:error] [pid 941081:tid 941231] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2N5Y3luLzM3NTQvY3kvMzYwNDUveQ=="] [unique_id "alQqueZnN2CRos_GBqXseQAAAZw"] [Sun Jul 12 18:00:57.768638 2026] [authz_core:error] [pid 940777:tid 940958] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:57.769155 2026] [authz_core:error] [pid 940777:tid 940958] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:57.816553 2026] [security2:error] [pid 941081:tid 941251] [client 20.63.87.152:6936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/2p.update.php"] [unique_id "alQqueZnN2CRos_GBqXsfAAAAbA"] [Sun Jul 12 18:00:57.953727 2026] [security2:error] [pid 941081:tid 941311] [client 45.3.54.157:45887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 157.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqueZnN2CRos_GBqXsfgAAAew"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:58.182522 2026] [security2:error] [pid 941081:tid 941224] [client 20.63.87.152:5346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/3.php"] [unique_id "alQquuZnN2CRos_GBqXsggAAAZU"] [Sun Jul 12 18:00:58.488872 2026] [security2:error] [pid 940777:tid 941016] [client 65.111.22.242:30437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.22.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqupihQxksrpCflyE5FQAAAOg"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:58.525178 2026] [security2:error] [pid 941081:tid 941320] [client 20.63.87.152:3082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQquuZnN2CRos_GBqXslAAAAfU"] [Sun Jul 12 18:00:58.610424 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:58.611103 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:58.760124 2026] [security2:error] [pid 941081:tid 941242] [client 20.63.87.152:13963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/403.php"] [unique_id "alQquuZnN2CRos_GBqXsmwAAAac"] [Sun Jul 12 18:00:58.789770 2026] [security2:error] [pid 940777:tid 940932] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqupihQxksrpCflyE5EgAAAJQ"] [Sun Jul 12 18:00:58.789828 2026] [security2:error] [pid 940777:tid 940932] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqupihQxksrpCflyE5EgAAAJQ"] [Sun Jul 12 18:00:58.793068 2026] [security2:error] [pid 941081:tid 941331] [client 65.21.113.206:40006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2N5Y3luLzM3NTQvY3kvMzYwNDUveQ=="] [unique_id "alQquuZnN2CRos_GBqXsgQAAAgA"] [Sun Jul 12 18:00:58.838166 2026] [security2:error] [pid 940777:tid 940812] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2022"] [unique_id "alQqupihQxksrpCflyE5HgAApho"] [Sun Jul 12 18:00:58.960519 2026] [security2:error] [pid 941081:tid 941245] [client 62.171.167.118:44670] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2022"] [unique_id "alQquuZnN2CRos_GBqXsnAAAAao"] [Sun Jul 12 18:00:58.971680 2026] [security2:error] [pid 941081:tid 941264] [client 62.171.167.118:44680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2023"] [unique_id "alQquuZnN2CRos_GBqXsnQAAAb0"] [Sun Jul 12 18:00:59.011086 2026] [security2:error] [pid 941081:tid 941230] [client 65.111.22.193:50611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 193.22.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQquuZnN2CRos_GBqXsngAAAZs"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:59.035401 2026] [authz_core:error] [pid 941081:tid 941244] [client 43.153.27.244:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/php.ini, referer: http://67.222.45.213 [Sun Jul 12 18:00:59.083882 2026] [security2:error] [pid 941081:tid 941233] [client 20.63.87.152:13965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.cobcllc.com"] [uri "/404.php"] [unique_id "alQqu-ZnN2CRos_GBqXsoQAAAZ4"] [Sun Jul 12 18:00:59.133227 2026] [security2:error] [pid 941081:tid 941261] [client 20.63.87.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fraudvanguard.com"] [uri "/index.php"] [unique_id "alQqseZnN2CRos_GBqXrgAAAAbo"] [Sun Jul 12 18:00:59.154763 2026] [security2:error] [pid 940777:tid 940995] [client 47.128.19.206:15130] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.hhworld.net"] [uri "/blog/"] [unique_id "alQqu5ihQxksrpCflyE5IgAAANM"] [Sun Jul 12 18:00:59.167091 2026] [security2:error] [pid 941081:tid 941238] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqseZnN2CRos_GBqXrcgAAAaM"] [Sun Jul 12 18:00:59.174220 2026] [authz_core:error] [pid 941081:tid 941244] [client 43.153.27.244:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/error_log, referer: http://67.222.45.213 [Sun Jul 12 18:00:59.205929 2026] [security2:error] [pid 940777:tid 940998] [client 20.63.87.152:6827] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/.trash7206/index.php"] [unique_id "alQqu5ihQxksrpCflyE5IwAAANY"] [Sun Jul 12 18:00:59.366213 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:00:59.366885 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:00:59.489579 2026] [security2:error] [pid 941081:tid 941223] [client 168.100.149.175:40646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30745/bargainor/2307_secque.jsp"] [unique_id "alQqu-ZnN2CRos_GBqXsqQAAAZQ"] [Sun Jul 12 18:00:59.499505 2026] [security2:error] [pid 941081:tid 941263] [client 104.207.51.103:54461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqu-ZnN2CRos_GBqXsqgAAAbw"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:00:59.630996 2026] [autoindex:error] [pid 940777:tid 941034] [client 20.63.87.152:0] AH01276: Cannot serve directory /home4/fraudvan/public_html/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:00:59.677093 2026] [security2:error] [pid 941081:tid 941253] [client 64.176.198.37:64806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "weshouldbesleeping.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQqu-ZnN2CRos_GBqXsrQAAAbI"] [Sun Jul 12 18:00:59.822774 2026] [autoindex:error] [pid 941081:tid 941307] [client 20.63.87.152:0] AH01276: Cannot serve directory /home4/fraudvan/public_html/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:00:59.877918 2026] [security2:error] [pid 941081:tid 941268] [client 20.63.87.152:12980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQqu-ZnN2CRos_GBqXssgAAAcE"] [Sun Jul 12 18:01:00.015921 2026] [security2:error] [pid 940777:tid 940956] [client 62.171.167.118:44684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2024"] [unique_id "alQqvJihQxksrpCflyE5MAAAAKw"] [Sun Jul 12 18:01:00.035172 2026] [security2:error] [pid 941081:tid 941337] [client 65.111.23.0:23109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 0.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqu-ZnN2CRos_GBqXsswAAAgY"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:00.164611 2026] [security2:error] [pid 940777:tid 940946] [client 20.63.87.152:12951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQqvJihQxksrpCflyE5NAAAAKI"] [Sun Jul 12 18:01:00.243897 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:00.249075 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:00.271273 2026] [security2:error] [pid 941081:tid 941257] [client 146.190.83.166:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQqs-ZnN2CRos_GBqXrxQAAAbY"], referer: https://www.pubadvocate.nyc//wp-login.php [Sun Jul 12 18:01:00.411641 2026] [security2:error] [pid 941081:tid 941226] [client 20.63.87.152:18905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQqvOZnN2CRos_GBqXsuwAAAZc"] [Sun Jul 12 18:01:00.423719 2026] [security2:error] [pid 940777:tid 940960] [client 201.219.234.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqu5ihQxksrpCflyE5LgAAALA"] [Sun Jul 12 18:01:00.582247 2026] [security2:error] [pid 941081:tid 941299] [client 104.207.53.21:60947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.53.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqvOZnN2CRos_GBqXsvQAAAeA"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:00.673464 2026] [security2:error] [pid 941081:tid 941243] [client 20.63.87.152:20296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/0.kb-v3.php"] [unique_id "alQqvOZnN2CRos_GBqXswgAAAag"] [Sun Jul 12 18:01:00.910183 2026] [security2:error] [pid 941081:tid 941318] [client 20.63.87.152:21049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/0.php"] [unique_id "alQqvOZnN2CRos_GBqXsygAAAfM"] [Sun Jul 12 18:01:01.014249 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:01.014974 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:01.168838 2026] [security2:error] [pid 941081:tid 941285] [client 104.207.52.236:65405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.52.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqveZnN2CRos_GBqXszAAAAdI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:01.283142 2026] [security2:error] [pid 940777:tid 941020] [client 20.63.87.152:39695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/002.php"] [unique_id "alQqvZihQxksrpCflyE5PQAAAOw"] [Sun Jul 12 18:01:01.487357 2026] [security2:error] [pid 941081:tid 941342] [client 110.249.202.78:29538] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "rogeredwards.net"] [uri "/robots.txt"] [unique_id "alQqveZnN2CRos_GBqXs0wAAAgs"] [Sun Jul 12 18:01:01.512863 2026] [security2:error] [pid 941081:tid 941276] [client 20.63.87.152:39685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/01.php"] [unique_id "alQqveZnN2CRos_GBqXs1AAAAck"] [Sun Jul 12 18:01:01.685231 2026] [security2:error] [pid 941081:tid 941222] [client 146.190.83.166:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQqvOZnN2CRos_GBqXsvgAAAZM"], referer: https://www.pubadvocate.nyc//wp-login.php [Sun Jul 12 18:01:01.703235 2026] [security2:error] [pid 941081:tid 941245] [client 45.3.54.97:27173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqveZnN2CRos_GBqXs2AAAAao"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:01.845386 2026] [security2:error] [pid 941081:tid 941332] [client 24.203.79.110:50126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqveZnN2CRos_GBqXs3wAAAgE"] [Sun Jul 12 18:01:01.845717 2026] [security2:error] [pid 941081:tid 941332] [client 24.203.79.110:50126] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqveZnN2CRos_GBqXs3wAAAgE"] [Sun Jul 12 18:01:01.883293 2026] [security2:error] [pid 941081:tid 941238] [client 20.63.87.152:30829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/0x.php"] [unique_id "alQqveZnN2CRos_GBqXs4QAAAaM"] [Sun Jul 12 18:01:01.953513 2026] [security2:error] [pid 941081:tid 941219] [client 31.173.86.126:24296] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQqveZnN2CRos_GBqXs4AAAAZA"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:01:01.959647 2026] [security2:error] [pid 941081:tid 941310] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2N5Y3luLzY0ODYvY3kvMzYwNDUveQ=="] [unique_id "alQqveZnN2CRos_GBqXs5AAAAes"] [Sun Jul 12 18:01:01.994441 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:01.995095 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:02.145847 2026] [security2:error] [pid 940777:tid 941022] [client 168.100.149.120:34240] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30810/bargainor/2307_dislevelment.jsp"] [unique_id "alQqvpihQxksrpCflyE5SgAAAO4"] [Sun Jul 12 18:01:02.152975 2026] [security2:error] [pid 941081:tid 941227] [client 20.63.87.152:7830] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "fraudvanguard.com"] [uri "/1.php"] [unique_id "alQqvuZnN2CRos_GBqXs6AAAAZg"] [Sun Jul 12 18:01:02.153391 2026] [security2:error] [pid 941081:tid 941227] [client 20.63.87.152:7830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/1.php"] [unique_id "alQqvuZnN2CRos_GBqXs6AAAAZg"] [Sun Jul 12 18:01:02.285900 2026] [security2:error] [pid 941081:tid 941270] [client 45.3.42.183:42021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqvuZnN2CRos_GBqXs6gAAAcM"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:02.290241 2026] [security2:error] [pid 940777:tid 940983] [client 66.132.172.99:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.179.89"] [uri "/index.php"] [unique_id "alQqvZihQxksrpCflyE5QQAAAMc"] [Sun Jul 12 18:01:02.413882 2026] [security2:error] [pid 941081:tid 941272] [client 20.63.87.152:8350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/100.php"] [unique_id "alQqvuZnN2CRos_GBqXs6wAAAcU"] [Sun Jul 12 18:01:02.619018 2026] [security2:error] [pid 941081:tid 941291] [client 146.190.83.166:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQqveZnN2CRos_GBqXs4wAAAdg"], referer: https://www.pubadvocate.nyc//wp-login.php [Sun Jul 12 18:01:02.696369 2026] [security2:error] [pid 941081:tid 941328] [client 20.63.87.152:20310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/122.php"] [unique_id "alQqvuZnN2CRos_GBqXs8gAAAf0"] [Sun Jul 12 18:01:02.847188 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:02.847945 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:02.853031 2026] [security2:error] [pid 940777:tid 941019] [client 45.3.54.142:9673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 142.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqvpihQxksrpCflyE5UgAAAOs"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:02.978272 2026] [security2:error] [pid 940777:tid 940957] [client 20.63.87.152:18413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/123.php"] [unique_id "alQqvpihQxksrpCflyE5XQAAAK0"] [Sun Jul 12 18:01:03.117368 2026] [security2:error] [pid 941081:tid 941266] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXryQAAAb8"], referer: http://67.222.38.115/wp-config.aws [Sun Jul 12 18:01:03.151756 2026] [security2:error] [pid 941081:tid 941318] [client 136.0.168.40:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQqvuZnN2CRos_GBqXs7gAAAfM"] [Sun Jul 12 18:01:03.196801 2026] [security2:error] [pid 940777:tid 940942] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqvpihQxksrpCflyE5TAAAAJ4"] [Sun Jul 12 18:01:03.196870 2026] [security2:error] [pid 940777:tid 940942] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqvpihQxksrpCflyE5TAAAAJ4"] [Sun Jul 12 18:01:03.200582 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:40016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2N5Y3luLzY0ODYvY3kvMzYwNDUveQ=="] [unique_id "alQqvpihQxksrpCflyE5SwAAANE"] [Sun Jul 12 18:01:03.224497 2026] [security2:error] [pid 941081:tid 941293] [client 20.63.87.152:35375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/13.php"] [unique_id "alQqv-ZnN2CRos_GBqXs_gAAAdo"] [Sun Jul 12 18:01:03.307849 2026] [security2:error] [pid 940777:tid 941032] [client 45.233.112.248:15593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqv5ihQxksrpCflyE5ZAAAAPg"] [Sun Jul 12 18:01:03.308168 2026] [security2:error] [pid 940777:tid 941032] [client 45.233.112.248:15593] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqv5ihQxksrpCflyE5ZAAAAPg"] [Sun Jul 12 18:01:03.447871 2026] [security2:error] [pid 940777:tid 940991] [client 216.26.244.18:13867] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 18.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqv5ihQxksrpCflyE5ZQAAAM8"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:03.450815 2026] [security2:error] [pid 940777:tid 940974] [client 20.63.87.152:30843] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/133.php"] [unique_id "alQqv5ihQxksrpCflyE5ZgAAAL4"] [Sun Jul 12 18:01:03.666087 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:03.666571 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:03.693546 2026] [security2:error] [pid 941081:tid 941222] [client 20.63.87.152:6097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/155.php"] [unique_id "alQqv-ZnN2CRos_GBqXtAgAAAZM"] [Sun Jul 12 18:01:03.932197 2026] [security2:error] [pid 941081:tid 941345] [client 20.63.87.152:35339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/177.php"] [unique_id "alQqv-ZnN2CRos_GBqXtCAAAAg4"] [Sun Jul 12 18:01:03.975419 2026] [security2:error] [pid 941081:tid 941329] [client 65.111.22.122:39765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 122.22.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqv-ZnN2CRos_GBqXtBwAAAf4"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:04.114559 2026] [security2:error] [pid 941081:tid 941313] [client 168.100.149.45:49578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30875/bargainor/2307_limnoria.jsp"] [unique_id "alQqwOZnN2CRos_GBqXtCwAAAe4"] [Sun Jul 12 18:01:04.183723 2026] [security2:error] [pid 941081:tid 941221] [client 20.63.87.152:4719] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/1index.php"] [unique_id "alQqwOZnN2CRos_GBqXtDAAAAZI"] [Sun Jul 12 18:01:04.194959 2026] [security2:error] [pid 941081:tid 941219] [client 31.173.86.126:24296] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQqveZnN2CRos_GBqXs4AAAAZA"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:01:04.195116 2026] [security2:error] [pid 941081:tid 941219] [client 31.173.86.126:24296] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQqveZnN2CRos_GBqXs4AAAAZA"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:01:04.256313 2026] [security2:error] [pid 940777:tid 941010] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/network/index.php"] [unique_id "alQquZihQxksrpCflyE4_QAAAOI"] [Sun Jul 12 18:01:04.462259 2026] [security2:error] [pid 941081:tid 941305] [client 20.63.87.152:6089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/2.php"] [unique_id "alQqwOZnN2CRos_GBqXtEQAAAeY"] [Sun Jul 12 18:01:04.471314 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:04.471983 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:04.512462 2026] [security2:error] [pid 941081:tid 941272] [client 62.171.167.118:58260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2025"] [unique_id "alQqwOZnN2CRos_GBqXtFQAAAcU"] [Sun Jul 12 18:01:04.530171 2026] [security2:error] [pid 941081:tid 941229] [client 104.207.50.153:65157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 153.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqwOZnN2CRos_GBqXtEgAAAZo"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:04.703192 2026] [security2:error] [pid 941081:tid 941235] [client 20.63.87.152:20293] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/222.php"] [unique_id "alQqwOZnN2CRos_GBqXtGAAAAaA"] [Sun Jul 12 18:01:04.955609 2026] [security2:error] [pid 941081:tid 941341] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/user/"] [unique_id "alQqwOZnN2CRos_GBqXtHAAAAgo"] [Sun Jul 12 18:01:05.031136 2026] [security2:error] [pid 941081:tid 941289] [client 20.63.87.152:7826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/2p.update.php"] [unique_id "alQqweZnN2CRos_GBqXtIAAAAdY"] [Sun Jul 12 18:01:05.054236 2026] [security2:error] [pid 941081:tid 941320] [client 104.207.50.43:57209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 43.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqwOZnN2CRos_GBqXtHgAAAfU"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:05.132209 2026] [security2:error] [pid 940777:tid 940926] [client 197.48.221.253:61913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqwZihQxksrpCflyE5gwAAAI4"] [Sun Jul 12 18:01:05.132477 2026] [security2:error] [pid 940777:tid 940926] [client 197.48.221.253:61913] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqwZihQxksrpCflyE5gwAAAI4"] [Sun Jul 12 18:01:05.236052 2026] [security2:error] [pid 940777:tid 940939] [client 20.63.87.152:18394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/3.php"] [unique_id "alQqwZihQxksrpCflyE5hgAAAJs"] [Sun Jul 12 18:01:05.338584 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:05.339144 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:05.424554 2026] [security2:error] [pid 941081:tid 941306] [client 74.244.119.215:39406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqweZnN2CRos_GBqXtLwAAAec"] [Sun Jul 12 18:01:05.424841 2026] [security2:error] [pid 941081:tid 941306] [client 74.244.119.215:39406] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqweZnN2CRos_GBqXtLwAAAec"] [Sun Jul 12 18:01:05.453522 2026] [security2:error] [pid 940777:tid 940992] [client 20.63.87.152:20303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQqwZihQxksrpCflyE5iwAAANA"] [Sun Jul 12 18:01:05.486918 2026] [security2:error] [pid 940777:tid 940943] [client 168.100.149.217:43050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30940/bargainor/2307_milksopism.jsp"] [unique_id "alQqwZihQxksrpCflyE5jAAAAJ8"] [Sun Jul 12 18:01:05.605447 2026] [security2:error] [pid 940777:tid 940937] [client 216.26.243.10:44099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqwZihQxksrpCflyE5jgAAAJk"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:05.646059 2026] [security2:error] [pid 941081:tid 941303] [client 20.63.87.152:4734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/403.php"] [unique_id "alQqweZnN2CRos_GBqXtMgAAAeQ"] [Sun Jul 12 18:01:05.668941 2026] [security2:error] [pid 940777:tid 941019] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/user/index.php"] [unique_id "alQqwZihQxksrpCflyE5gAAAAOs"] [Sun Jul 12 18:01:05.890710 2026] [security2:error] [pid 941081:tid 941244] [client 20.63.87.152:35338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/404.php"] [unique_id "alQqweZnN2CRos_GBqXtNgAAAak"] [Sun Jul 12 18:01:06.036439 2026] [security2:error] [pid 941081:tid 941329] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/"] [unique_id "alQqwuZnN2CRos_GBqXtNwAAAf4"] [Sun Jul 12 18:01:06.129894 2026] [security2:error] [pid 941081:tid 941298] [client 104.207.52.48:37045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.52.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqwuZnN2CRos_GBqXtOAAAAd8"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:06.171024 2026] [authz_core:error] [pid 940777:tid 940974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:06.171734 2026] [authz_core:error] [pid 940777:tid 940974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:06.324540 2026] [security2:error] [pid 940777:tid 941040] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/index.php"] [unique_id "alQqwpihQxksrpCflyE5mQAAAQA"] [Sun Jul 12 18:01:06.324648 2026] [security2:error] [pid 940777:tid 940998] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/"] [unique_id "alQqwpihQxksrpCflyE5lwAAANY"] [Sun Jul 12 18:01:06.511764 2026] [cgid:error] [pid 940777:tid 941025] [client 202.46.62.3:63032] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/when-call-bookmarks-custom-p-586.html?osCsid=9dgh38cmqvpiulp7i5qdqmuti4 [Sun Jul 12 18:01:06.514106 2026] [security2:error] [pid 941081:tid 941287] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/"] [unique_id "alQqwuZnN2CRos_GBqXtPAAAAdQ"] [Sun Jul 12 18:01:06.630642 2026] [security2:error] [pid 941081:tid 941237] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NfMzc1NC9jZ2UvMzYwOTNfZ2U=.htm"] [unique_id "alQqwuZnN2CRos_GBqXtRQAAAaI"] [Sun Jul 12 18:01:06.654296 2026] [security2:error] [pid 941081:tid 941263] [client 45.3.42.140:48699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 140.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqwuZnN2CRos_GBqXtRAAAAbw"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:06.755875 2026] [security2:error] [pid 940777:tid 941034] [client 62.171.167.118:58272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/~cats/php/phpinfo.php"] [unique_id "alQqwpihQxksrpCflyE5ogAAAPo"] [Sun Jul 12 18:01:06.820220 2026] [security2:error] [pid 941081:tid 941235] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/index.php"] [unique_id "alQqwuZnN2CRos_GBqXtSgAAAaA"] [Sun Jul 12 18:01:06.821368 2026] [security2:error] [pid 940777:tid 940984] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/plugins/"] [unique_id "alQqwpihQxksrpCflyE5oQAAAMg"] [Sun Jul 12 18:01:06.823542 2026] [security2:error] [pid 941081:tid 941219] [client 94.187.171.125:53201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqwuZnN2CRos_GBqXtUQAAAZA"] [Sun Jul 12 18:01:06.823767 2026] [security2:error] [pid 941081:tid 941219] [client 94.187.171.125:53201] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqwuZnN2CRos_GBqXtUQAAAZA"] [Sun Jul 12 18:01:06.946081 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:06.946711 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:07.011030 2026] [security2:error] [pid 941081:tid 941233] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/themes/"] [unique_id "alQqw-ZnN2CRos_GBqXtWwAAAZ4"] [Sun Jul 12 18:01:07.020154 2026] [core:error] [pid 940777:tid 940923] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:07.020226 2026] [core:error] [pid 940777:tid 940923] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:07.234230 2026] [security2:error] [pid 941081:tid 941236] [client 216.26.244.100:25621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqw-ZnN2CRos_GBqXtXwAAAaE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:07.308279 2026] [security2:error] [pid 941081:tid 941292] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/themes/index.php"] [unique_id "alQqw-ZnN2CRos_GBqXtYQAAAdk"] [Sun Jul 12 18:01:07.310085 2026] [security2:error] [pid 940777:tid 940970] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/themes/"] [unique_id "alQqw5ihQxksrpCflyE5qgAAALo"] [Sun Jul 12 18:01:07.347013 2026] [security2:error] [pid 941081:tid 941279] [client 57.141.18.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQqwuZnN2CRos_GBqXtUAAAAcw"] [Sun Jul 12 18:01:07.473337 2026] [security2:error] [pid 941081:tid 941312] [client 168.100.149.63:63628] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31005/bargainor/2307_capnoides.jsp"] [unique_id "alQqw-ZnN2CRos_GBqXtYgAAAe0"] [Sun Jul 12 18:01:07.503056 2026] [security2:error] [pid 941081:tid 941244] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/includes/"] [unique_id "alQqw-ZnN2CRos_GBqXtZAAAAak"] [Sun Jul 12 18:01:07.753545 2026] [security2:error] [pid 940777:tid 940917] [client 65.111.23.13:37987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqw5ihQxksrpCflyE5vAAAAIU"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:07.810142 2026] [security2:error] [pid 941081:tid 941255] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqw-ZnN2CRos_GBqXtXgAAAbQ"] [Sun Jul 12 18:01:07.810265 2026] [security2:error] [pid 941081:tid 941255] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqw-ZnN2CRos_GBqXtXgAAAbQ"] [Sun Jul 12 18:01:07.812186 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:38960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NfMzc1NC9jZ2UvMzYwOTNfZ2U=.htm"] [unique_id "alQqw5ihQxksrpCflyE5qQAAAO4"] [Sun Jul 12 18:01:07.841344 2026] [authz_core:error] [pid 940777:tid 941021] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:07.842079 2026] [authz_core:error] [pid 940777:tid 941021] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:07.927148 2026] [autoindex:error] [pid 940777:tid 940987] [client 143.244.57.92:46188] AH01276: Cannot serve directory /home1/galilep7/public_html/galileopress/wp-admin/includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:01:07.929175 2026] [security2:error] [pid 940777:tid 940987] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "403"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/includes/"] [unique_id "alQqw5ihQxksrpCflyE5uAAAAMs"] [Sun Jul 12 18:01:08.119212 2026] [security2:error] [pid 941081:tid 941256] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/"] [unique_id "alQqxOZnN2CRos_GBqXtbAAAAbU"] [Sun Jul 12 18:01:08.271386 2026] [security2:error] [pid 941081:tid 941270] [client 216.26.243.184:64227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxOZnN2CRos_GBqXtcgAAAcM"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:08.336773 2026] [security2:error] [pid 941081:tid 941231] [client 150.228.105.218:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqw-ZnN2CRos_GBqXtaAAAAZw"] [Sun Jul 12 18:01:08.681755 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:08.682305 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:08.773620 2026] [security2:error] [pid 940777:tid 940972] [client 104.207.51.120:25465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 120.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxJihQxksrpCflyE50wAAALw"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:08.788433 2026] [security2:error] [pid 940777:tid 941004] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-admin/index.php"] [unique_id "alQqxJihQxksrpCflyE5ygAAANw"] [Sun Jul 12 18:01:09.224369 2026] [security2:error] [pid 941081:tid 941292] [client 143.244.57.92:60976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/upgrade/"] [unique_id "alQqxeZnN2CRos_GBqXthgAAAdk"] [Sun Jul 12 18:01:09.327357 2026] [security2:error] [pid 941081:tid 941280] [client 104.207.50.87:36419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxeZnN2CRos_GBqXthwAAAc0"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:09.480178 2026] [security2:error] [pid 940777:tid 941009] [client 168.100.149.33:44406] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31070/bargainor/2307_deft.jsp"] [unique_id "alQqxZihQxksrpCflyE53wAAAOE"] [Sun Jul 12 18:01:09.483116 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:09.483592 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:09.570806 2026] [autoindex:error] [pid 941081:tid 941316] [client 143.244.57.92:0] AH01276: Cannot serve directory /home1/galilep7/public_html/galileopress/wp-content/upgrade/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:01:09.573595 2026] [security2:error] [pid 941081:tid 941316] [client 143.244.57.92:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "galileopress-org.galileolions.org"] [uri "/cgi-sys/403.html"] [unique_id "alQqxeZnN2CRos_GBqXtjgAAAfE"] [Sun Jul 12 18:01:09.575426 2026] [security2:error] [pid 940777:tid 940980] [client 143.244.57.92:46188] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "403"] [hostname "galileopress-org.galileolions.org"] [uri "/wp-content/upgrade/"] [unique_id "alQqxZihQxksrpCflyE53gAAAMQ"] [Sun Jul 12 18:01:09.849852 2026] [security2:error] [pid 941081:tid 941329] [client 57.141.18.17:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQqxeZnN2CRos_GBqXtkgAAAf4"] [Sun Jul 12 18:01:09.851456 2026] [security2:error] [pid 940777:tid 941029] [client 45.3.54.171:42069] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 171.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxZihQxksrpCflyE55wAAAPU"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:10.096773 2026] [security2:error] [pid 941081:tid 941241] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqs-ZnN2CRos_GBqXruAAAAaY"] [Sun Jul 12 18:01:10.323343 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:10.323871 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:10.371826 2026] [security2:error] [pid 941081:tid 941322] [client 45.3.42.181:64661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 181.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxuZnN2CRos_GBqXtoQAAAfc"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:10.612392 2026] [security2:error] [pid 940777:tid 941021] [client 155.117.163.33:34160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.163.117.155.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQqxpihQxksrpCflyE58wAAAO0"], referer: https://www.cidclan.net/ [Sun Jul 12 18:01:10.649836 2026] [security2:error] [pid 941081:tid 941301] [client 47.128.114.54:61708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cecweb.org"] [uri "/robots.txt"] [unique_id "alQqxuZnN2CRos_GBqXtqAAAAeI"] [Sun Jul 12 18:01:10.899879 2026] [security2:error] [pid 941081:tid 941242] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NfNTg1My9jOWwvMjQ5NDlfOWw=.htm"] [unique_id "alQqxuZnN2CRos_GBqXtrwAAAac"] [Sun Jul 12 18:01:10.928233 2026] [security2:error] [pid 940777:tid 940993] [client 104.207.50.2:43229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqxpihQxksrpCflyE5-wAAANE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:11.183829 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:11.184504 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:11.465616 2026] [security2:error] [pid 941081:tid 941227] [client 104.207.50.38:30217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.50.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqx-ZnN2CRos_GBqXtvwAAAZg"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:12.002030 2026] [authz_core:error] [pid 941081:tid 941313] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:12.002534 2026] [authz_core:error] [pid 941081:tid 941313] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:12.009220 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqx-ZnN2CRos_GBqXtvQAAAas"] [Sun Jul 12 18:01:12.009272 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqx-ZnN2CRos_GBqXtvQAAAas"] [Sun Jul 12 18:01:12.010771 2026] [security2:error] [pid 940777:tid 941026] [client 65.21.113.206:38962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NfNTg1My9jOWwvMjQ5NDlfOWw=.htm"] [unique_id "alQqx5ihQxksrpCflyE6BQAAAPI"] [Sun Jul 12 18:01:12.017758 2026] [security2:error] [pid 941081:tid 941241] [client 104.207.51.192:10859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqx-ZnN2CRos_GBqXtzAAAAaY"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:12.162047 2026] [security2:error] [pid 940777:tid 941035] [client 168.100.149.228:55632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31135/bargainor/2307_did.jsp"] [unique_id "alQqyJihQxksrpCflyE6FAAAAPs"] [Sun Jul 12 18:01:12.430357 2026] [security2:error] [pid 941081:tid 941248] [client 173.211.7.91:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQqx-ZnN2CRos_GBqXtxgAAAa0"] [Sun Jul 12 18:01:12.437531 2026] [security2:error] [pid 940777:tid 941041] [client 24.203.79.110:50616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqyJihQxksrpCflyE6GQAAAQE"] [Sun Jul 12 18:01:12.443209 2026] [security2:error] [pid 940777:tid 941041] [client 24.203.79.110:50616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQqyJihQxksrpCflyE6GQAAAQE"] [Sun Jul 12 18:01:12.518038 2026] [security2:error] [pid 940777:tid 941010] [client 45.3.42.68:48969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqyJihQxksrpCflyE6HAAAAOI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:12.829599 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:12.830198 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:13.022187 2026] [security2:error] [pid 940777:tid 941016] [client 45.3.42.51:18467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqyJihQxksrpCflyE6JQAAAOg"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:13.317035 2026] [security2:error] [pid 941081:tid 941245] [client 57.141.18.26:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQqyOZnN2CRos_GBqXt2gAAAao"] [Sun Jul 12 18:01:13.430699 2026] [security2:error] [pid 940777:tid 940906] [remote 195.250.29.165:46470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.29.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "undameta.com"] [uri "/wp-login.php"] [unique_id "alQqyZihQxksrpCflyE6MAAA0XY"] [Sun Jul 12 18:01:13.476945 2026] [security2:error] [pid 940777:tid 940991] [client 168.100.149.189:41246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31200/bargainor/2307_delphian.jsp"] [unique_id "alQqyZihQxksrpCflyE6MwAAAM8"] [Sun Jul 12 18:01:13.519555 2026] [security2:error] [pid 940777:tid 940999] [client 45.3.54.84:54021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqyZihQxksrpCflyE6NQAAANc"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:13.664336 2026] [authz_core:error] [pid 941081:tid 941316] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:13.665012 2026] [authz_core:error] [pid 941081:tid 941316] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:13.802677 2026] [security2:error] [pid 941081:tid 941261] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NfNjQ4Ni9jZ2UvMzYwOTNfZ2U=.htm"] [unique_id "alQqyeZnN2CRos_GBqXt5gAAAbo"] [Sun Jul 12 18:01:14.034498 2026] [security2:error] [pid 940777:tid 941004] [client 65.111.23.12:37935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqypihQxksrpCflyE6OAAAANw"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:14.076168 2026] [security2:error] [pid 941081:tid 941228] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqs-ZnN2CRos_GBqXrtgAAAZk"], referer: http://67.222.38.115/wp-config.conf [Sun Jul 12 18:01:14.082384 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4UwAAAPk"] [Sun Jul 12 18:01:14.095797 2026] [security2:error] [pid 941081:tid 941234] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXrygAAAZ8"] [Sun Jul 12 18:01:14.134605 2026] [security2:error] [pid 941081:tid 941267] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXrywAAAcA"], referer: http://67.222.38.115/wp-config.dump [Sun Jul 12 18:01:14.143397 2026] [security2:error] [pid 941081:tid 941271] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXrzQAAAcQ"], referer: http://67.222.38.115/wp-config.c [Sun Jul 12 18:01:14.354704 2026] [security2:error] [pid 940777:tid 941026] [client 45.233.112.248:64408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqypihQxksrpCflyE6QgAAAPI"] [Sun Jul 12 18:01:14.355315 2026] [security2:error] [pid 940777:tid 941026] [client 45.233.112.248:64408] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQqypihQxksrpCflyE6QgAAAPI"] [Sun Jul 12 18:01:14.463934 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:14.464414 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:14.589391 2026] [security2:error] [pid 941081:tid 941321] [client 65.111.23.227:13965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.23.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqyuZnN2CRos_GBqXt8AAAAfY"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:14.849325 2026] [security2:error] [pid 940777:tid 940933] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqypihQxksrpCflyE6QAAAAJU"] [Sun Jul 12 18:01:14.849375 2026] [security2:error] [pid 940777:tid 940933] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqypihQxksrpCflyE6QAAAAJU"] [Sun Jul 12 18:01:14.851768 2026] [security2:error] [pid 940777:tid 940996] [client 65.21.113.206:35528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NfNjQ4Ni9jZ2UvMzYwOTNfZ2U=.htm"] [unique_id "alQqypihQxksrpCflyE6PwAAANQ"] [Sun Jul 12 18:01:15.084051 2026] [security2:error] [pid 940777:tid 941013] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4SAAAAOU"] [Sun Jul 12 18:01:15.088238 2026] [security2:error] [pid 941081:tid 941335] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr4AAAAgQ"], referer: http://67.222.38.115/wp-config.good [Sun Jul 12 18:01:15.149338 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtpihQxksrpCflyE4kgAAAKQ"] [Sun Jul 12 18:01:15.154054 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4TQAAALg"] [Sun Jul 12 18:01:15.221881 2026] [security2:error] [pid 940777:tid 940930] [client 209.50.181.172:19669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqy5ihQxksrpCflyE6SwAAAJI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:15.257935 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:15.258430 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:15.349731 2026] [core:error] [pid 941081:tid 941238] [client 23.180.120.147:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:15.349773 2026] [core:error] [pid 941081:tid 941238] [client 23.180.120.147:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:15.652270 2026] [security2:error] [pid 941081:tid 941324] [client 197.48.221.253:62511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqy-ZnN2CRos_GBqXt_wAAAfk"] [Sun Jul 12 18:01:15.652572 2026] [security2:error] [pid 941081:tid 941324] [client 197.48.221.253:62511] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQqy-ZnN2CRos_GBqXt_wAAAfk"] [Sun Jul 12 18:01:15.801783 2026] [security2:error] [pid 940777:tid 940964] [client 209.50.181.150:46135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqy5ihQxksrpCflyE6VQAAALQ"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:15.918981 2026] [security2:error] [pid 941081:tid 941312] [client 74.244.119.215:62073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqy-ZnN2CRos_GBqXuBwAAAe0"] [Sun Jul 12 18:01:15.930692 2026] [security2:error] [pid 941081:tid 941312] [client 74.244.119.215:62073] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQqy-ZnN2CRos_GBqXuBwAAAe0"] [Sun Jul 12 18:01:16.039013 2026] [authz_core:error] [pid 941081:tid 941264] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:16.039484 2026] [authz_core:error] [pid 941081:tid 941264] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:16.079748 2026] [security2:error] [pid 941081:tid 941295] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr5wAAAdw"], referer: http://67.222.38.115/wp-config.html [Sun Jul 12 18:01:16.084070 2026] [security2:error] [pid 940777:tid 940941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4TgAAAJ0"], referer: http://67.222.38.115/wp-config.htm [Sun Jul 12 18:01:16.087452 2026] [security2:error] [pid 940777:tid 940982] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4UgAAAMY"] [Sun Jul 12 18:01:16.090439 2026] [security2:error] [pid 941081:tid 941225] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr6gAAAZY"] [Sun Jul 12 18:01:16.098103 2026] [security2:error] [pid 940777:tid 940931] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4WAAAAJM"] [Sun Jul 12 18:01:16.113394 2026] [security2:error] [pid 941081:tid 941310] [client 168.100.149.90:17410] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31265/bargainor/2307_anisodactyli.jsp"] [unique_id "alQqzOZnN2CRos_GBqXuCQAAAes"] [Sun Jul 12 18:01:16.150126 2026] [security2:error] [pid 940777:tid 940961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqs5ihQxksrpCflyE4NgAAALE"] [Sun Jul 12 18:01:16.171961 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtJihQxksrpCflyE4UAAAAJw"], referer: http://67.222.38.115/wp-config.err [Sun Jul 12 18:01:16.357850 2026] [security2:error] [pid 940777:tid 940958] [client 216.26.243.6:48207] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.243.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzJihQxksrpCflyE6YQAAAK4"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:16.652530 2026] [security2:error] [pid 940777:tid 940927] [client 220.196.160.40:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQqzJihQxksrpCflyE6XwAAAI8"] [Sun Jul 12 18:01:16.787927 2026] [security2:error] [pid 941081:tid 941263] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NfODk5L2M5bC8yNDk0OV85bA==.htm"] [unique_id "alQqzOZnN2CRos_GBqXuFAAAAbw"] [Sun Jul 12 18:01:16.899468 2026] [authz_core:error] [pid 941081:tid 941307] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:16.900158 2026] [authz_core:error] [pid 941081:tid 941307] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:16.901029 2026] [security2:error] [pid 941081:tid 941290] [client 209.50.181.182:58409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzOZnN2CRos_GBqXuFQAAAdc"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:17.108182 2026] [security2:error] [pid 941081:tid 941302] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr6QAAAeM"] [Sun Jul 12 18:01:17.152470 2026] [security2:error] [pid 940777:tid 941007] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtpihQxksrpCflyE4rAAAAN8"], referer: http://67.222.38.115/wp-config.inc [Sun Jul 12 18:01:17.199441 2026] [security2:error] [pid 941081:tid 941304] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr6wAAAeU"], referer: http://67.222.38.115/wp-config.in [Sun Jul 12 18:01:17.415679 2026] [security2:error] [pid 941081:tid 941257] [client 209.50.181.11:13905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.181.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzeZnN2CRos_GBqXuIQAAAbY"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:17.533360 2026] [security2:error] [pid 941081:tid 941313] [client 94.187.171.125:53710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqzeZnN2CRos_GBqXuJQAAAe4"] [Sun Jul 12 18:01:17.533646 2026] [security2:error] [pid 941081:tid 941313] [client 94.187.171.125:53710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQqzeZnN2CRos_GBqXuJQAAAe4"] [Sun Jul 12 18:01:17.698761 2026] [authz_core:error] [pid 941081:tid 941328] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:17.699237 2026] [authz_core:error] [pid 941081:tid 941328] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:17.942451 2026] [security2:error] [pid 940777:tid 941010] [client 104.207.53.107:63521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.53.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzZihQxksrpCflyE6fAAAAOI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:17.999782 2026] [security2:error] [pid 941081:tid 941327] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqzeZnN2CRos_GBqXuHwAAAfw"] [Sun Jul 12 18:01:17.999890 2026] [security2:error] [pid 941081:tid 941327] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQqzeZnN2CRos_GBqXuHwAAAfw"] [Sun Jul 12 18:01:18.001092 2026] [security2:error] [pid 941081:tid 941323] [client 65.21.113.206:35530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NfODk5L2M5bC8yNDk0OV85bA==.htm"] [unique_id "alQqzeZnN2CRos_GBqXuHQAAAfg"] [Sun Jul 12 18:01:18.114548 2026] [security2:error] [pid 941081:tid 941330] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtOZnN2CRos_GBqXr3gAAAf8"] [Sun Jul 12 18:01:18.134479 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtpihQxksrpCflyE4sQAAAIk"] [Sun Jul 12 18:01:18.160421 2026] [security2:error] [pid 941081:tid 941308] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtuZnN2CRos_GBqXsJwAAAek"] [Sun Jul 12 18:01:18.163646 2026] [security2:error] [pid 941081:tid 941264] [client 168.100.149.195:42172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31330/bargainor/2307_birefraction.jsp"] [unique_id "alQqzuZnN2CRos_GBqXuOwAAAb0"] [Sun Jul 12 18:01:18.190365 2026] [security2:error] [pid 940777:tid 940997] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqtpihQxksrpCflyE4swAAANU"], referer: http://67.222.38.115/wp-config.java [Sun Jul 12 18:01:18.200261 2026] [security2:error] [pid 940777:tid 940811] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2023"] [unique_id "alQqu5ihQxksrpCflyE6ggAAphk"] [Sun Jul 12 18:01:18.203788 2026] [security2:error] [pid 940777:tid 940804] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2025"] [unique_id "alQqwZihQxksrpCflyE6hAAAphI"] [Sun Jul 12 18:01:18.204717 2026] [security2:error] [pid 940777:tid 940811] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/wp-config.php_old2024"] [unique_id "alQqvpihQxksrpCflyE6gwAAphk"] [Sun Jul 12 18:01:18.207127 2026] [security2:error] [pid 940777:tid 940804] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/www/.env"] [unique_id "alQqwpihQxksrpCflyE6hgAAphI"] [Sun Jul 12 18:01:18.209073 2026] [security2:error] [pid 940777:tid 940804] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/~cats/php/phpinfo.php"] [unique_id "alQqwpihQxksrpCflyE6iAAAphI"] [Sun Jul 12 18:01:18.282362 2026] [security2:error] [pid 941081:tid 941286] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqt-ZnN2CRos_GBqXsOQAAAdM"], referer: http://67.222.38.115/wp-config.ini [Sun Jul 12 18:01:18.468061 2026] [authz_core:error] [pid 940777:tid 941016] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:18.468556 2026] [authz_core:error] [pid 940777:tid 941016] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:18.496197 2026] [security2:error] [pid 941081:tid 941287] [client 104.207.52.212:33005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 212.52.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzuZnN2CRos_GBqXuRAAAAdQ"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:18.600711 2026] [cgid:error] [pid 941081:tid 941299] [client 142.248.80.200:0] AH01265: stderr from /home4/globalf1/public_html/co2neutralroses/cgi-bin/: attempt to invoke directory as script [Sun Jul 12 18:01:19.012711 2026] [security2:error] [pid 941081:tid 941233] [client 45.3.42.104:25813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqzuZnN2CRos_GBqXuVgAAAZ4"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:19.268181 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:19.268693 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:19.523214 2026] [security2:error] [pid 940777:tid 941028] [client 216.26.244.61:65511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqz5ihQxksrpCflyE6mgAAAPQ"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:20.050589 2026] [authz_core:error] [pid 940777:tid 940965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:20.051341 2026] [authz_core:error] [pid 940777:tid 940965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:20.062701 2026] [security2:error] [pid 941081:tid 941223] [client 104.207.53.148:15885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.53.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQqz-ZnN2CRos_GBqXuZAAAAZQ"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:20.120519 2026] [security2:error] [pid 940777:tid 940958] [client 168.100.149.201:59828] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31395/bargainor/2307_mediator.jsp"] [unique_id "alQq0JihQxksrpCflyE6pgAAAK4"] [Sun Jul 12 18:01:20.168353 2026] [security2:error] [pid 941081:tid 941231] [client 43.172.195.124:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQqz-ZnN2CRos_GBqXuWwABnBw"] [Sun Jul 12 18:01:20.619247 2026] [security2:error] [pid 941081:tid 941225] [client 45.3.42.224:43153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 224.42.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq0OZnN2CRos_GBqXubAAAAZY"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:20.905644 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:20.906201 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:21.127807 2026] [security2:error] [pid 941081:tid 941222] [client 65.111.22.100:22247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.22.111.65.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq0eZnN2CRos_GBqXufAAAAZM"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:21.132544 2026] [security2:error] [pid 940777:tid 940985] [client 43.172.198.144:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQq0JihQxksrpCflyE6pwAAyVk"] [Sun Jul 12 18:01:21.196394 2026] [security2:error] [pid 941081:tid 941268] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NiLTI0MTIxLWNiM2F4LTc0ODMtYjNh.cgi"] [unique_id "alQq0eZnN2CRos_GBqXufQAAAcE"] [Sun Jul 12 18:01:21.203565 2026] [security2:error] [pid 940777:tid 940826] [remote 47.128.58.151:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sourcecodecontrol.co"] [uri "/robots.txt"] [unique_id "alQq0ZihQxksrpCflyE6uQAAoCg"] [Sun Jul 12 18:01:21.208148 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqzpihQxksrpCflyE6iwAAALw"] [Sun Jul 12 18:01:21.213366 2026] [security2:error] [pid 940777:tid 940855] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/www/.env"] [unique_id "alQqwpihQxksrpCflyE6ugAApkQ"], referer: http://67.222.38.115/www/.env [Sun Jul 12 18:01:21.215036 2026] [security2:error] [pid 941081:tid 941292] [client 216.10.216.121:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq0OZnN2CRos_GBqXubwAAAdk"] [Sun Jul 12 18:01:21.256943 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqwpihQxksrpCflyE6kAAAphc"] [Sun Jul 12 18:01:21.322730 2026] [security2:error] [pid 940777:tid 941010] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqzpihQxksrpCflyE6jwAAAJ8"], referer: http://67.222.38.115/wp-config.staging [Sun Jul 12 18:01:21.630939 2026] [security2:error] [pid 940777:tid 940957] [client 45.3.54.215:54999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.54.3.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq0ZihQxksrpCflyE61wAAAK0"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:21.740416 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:21.741075 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:21.807517 2026] [security2:error] [pid 941081:tid 941319] [client 47.128.118.148:43272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cobcllc.com"] [uri "/robots.txt"] [unique_id "alQq0eZnN2CRos_GBqXujQAAAfQ"] [Sun Jul 12 18:01:22.098558 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqzpihQxksrpCflyE6jgAAAPM"] [Sun Jul 12 18:01:22.140127 2026] [security2:error] [pid 940777:tid 941003] [client 168.100.149.23:17010] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31460/bargainor/2307_gurian.jsp"] [unique_id "alQq0pihQxksrpCflyE64gAAANs"] [Sun Jul 12 18:01:22.184827 2026] [security2:error] [pid 941081:tid 941252] [client 104.207.51.206:49695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 206.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq0uZnN2CRos_GBqXukAAAAbE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:22.264820 2026] [security2:error] [pid 941081:tid 941301] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq0eZnN2CRos_GBqXuiwAAAeI"] [Sun Jul 12 18:01:22.264909 2026] [security2:error] [pid 941081:tid 941301] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq0eZnN2CRos_GBqXuiwAAAeI"] [Sun Jul 12 18:01:22.265978 2026] [security2:error] [pid 940777:tid 941006] [client 65.21.113.206:35546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NiLTI0MTIxLWNiM2F4LTc0ODMtYjNh.cgi"] [unique_id "alQq0ZihQxksrpCflyE62AAAAN4"] [Sun Jul 12 18:01:22.487778 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:22.488257 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:22.680078 2026] [security2:error] [pid 941081:tid 941251] [client 216.26.244.167:45269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq0uZnN2CRos_GBqXuoQAAAbA"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:23.107101 2026] [security2:error] [pid 940777:tid 941019] [client 140.248.75.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE63AAAAOs"] [Sun Jul 12 18:01:23.112284 2026] [security2:error] [pid 940777:tid 940952] [client 140.248.75.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE63QAAAKg"] [Sun Jul 12 18:01:23.134873 2026] [security2:error] [pid 941081:tid 941275] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/.dj/index.php"] [unique_id "alQq0-ZnN2CRos_GBqXurQAAAcg"] [Sun Jul 12 18:01:23.143864 2026] [security2:error] [pid 941081:tid 941329] [client 24.203.79.110:51109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq0-ZnN2CRos_GBqXuqwAAAf4"] [Sun Jul 12 18:01:23.144200 2026] [security2:error] [pid 941081:tid 941329] [client 24.203.79.110:51109] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq0-ZnN2CRos_GBqXuqwAAAf4"] [Sun Jul 12 18:01:23.228442 2026] [security2:error] [pid 940777:tid 940988] [client 209.50.180.221:44887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 221.180.50.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq05ihQxksrpCflyE69gAAAMw"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:23.259826 2026] [authz_core:error] [pid 941081:tid 941228] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:23.304061 2026] [proxy:error] [pid 940777:tid 940953] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:01:23.316442 2026] [proxy_http:error] [pid 940777:tid 940953] [client 74.7.241.181:43424] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:01:23.317353 2026] [authz_core:error] [pid 941081:tid 941228] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:23.320081 2026] [proxy:error] [pid 940777:tid 940953] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:01:23.320317 2026] [proxy_http:error] [pid 940777:tid 940953] [client 74.7.241.181:43424] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:01:23.320657 2026] [security2:error] [pid 940777:tid 940953] [client 74.7.241.181:43424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.ballymenapresbytery.org"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQq05ihQxksrpCflyE69wAAAKk"] [Sun Jul 12 18:01:23.371472 2026] [security2:error] [pid 940777:tid 940958] [client 157.100.105.177:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQq0pihQxksrpCflyE67AAAAK4"] [Sun Jul 12 18:01:23.523300 2026] [core:error] [pid 941081:tid 941229] [client 74.7.241.181:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:23.523356 2026] [core:error] [pid 941081:tid 941229] [client 74.7.241.181:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:01:23.523714 2026] [security2:error] [pid 941081:tid 941229] [client 74.7.241.181:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.ballymenapresbytery.org"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "alQq0-ZnN2CRos_GBqXutgAAAZo"] [Sun Jul 12 18:01:23.525170 2026] [security2:error] [pid 941081:tid 941292] [client 74.7.241.181:59906] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.ballymenapresbytery.org"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "alQq0-ZnN2CRos_GBqXutAAB2X8"] [Sun Jul 12 18:01:23.849180 2026] [security2:error] [pid 940777:tid 941009] [client 104.207.51.62:50977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.51.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq05ihQxksrpCflyE7AAAAAOE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:24.022556 2026] [authz_core:error] [pid 940777:tid 940986] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:24.023072 2026] [authz_core:error] [pid 940777:tid 940986] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:24.039729 2026] [security2:error] [pid 941081:tid 941305] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/.trash7206/index.php"] [unique_id "alQq1OZnN2CRos_GBqXuuQAAAeY"] [Sun Jul 12 18:01:24.196289 2026] [security2:error] [pid 940777:tid 941030] [client 168.100.149.156:25454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31525/bargainor/2307_monkey.jsp"] [unique_id "alQq1JihQxksrpCflyE7BwAAAPY"] [Sun Jul 12 18:01:24.301283 2026] [security2:error] [pid 941081:tid 941339] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NrczFvLzk3L2NrLzQ0Mzg5L2s="] [unique_id "alQq1OZnN2CRos_GBqXuwQAAAgg"] [Sun Jul 12 18:01:24.390272 2026] [security2:error] [pid 941081:tid 941237] [client 104.207.53.243:25067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.53.207.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq1OZnN2CRos_GBqXuwgAAAaI"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:24.541501 2026] [security2:error] [pid 941081:tid 941309] [client 45.233.112.248:64940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq1OZnN2CRos_GBqXuyQAAAeo"] [Sun Jul 12 18:01:24.541877 2026] [security2:error] [pid 941081:tid 941309] [client 45.233.112.248:64940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq1OZnN2CRos_GBqXuyQAAAeo"] [Sun Jul 12 18:01:24.800014 2026] [authz_core:error] [pid 941081:tid 941340] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:24.800643 2026] [authz_core:error] [pid 941081:tid 941340] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:24.917221 2026] [security2:error] [pid 941081:tid 941236] [client 216.26.244.211:41981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 211.244.26.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spooniepreneur.net"] [uri "/wp-login.php"] [unique_id "alQq1OZnN2CRos_GBqXu1AAAAaE"], referer: https://spooniepreneur.net/wp-login.php [Sun Jul 12 18:01:25.417854 2026] [security2:error] [pid 941081:tid 941245] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq1OZnN2CRos_GBqXu0gAAAao"] [Sun Jul 12 18:01:25.417918 2026] [security2:error] [pid 941081:tid 941245] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq1OZnN2CRos_GBqXu0gAAAao"] [Sun Jul 12 18:01:25.418987 2026] [security2:error] [pid 940777:tid 940925] [client 65.21.113.206:57248] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NrczFvLzk3L2NrLzQ0Mzg5L2s="] [unique_id "alQq1JihQxksrpCflyE7EQAAAI0"] [Sun Jul 12 18:01:25.514003 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:25.514474 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:25.688995 2026] [security2:error] [pid 941081:tid 941331] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQq1eZnN2CRos_GBqXu4AAAAgA"] [Sun Jul 12 18:01:25.860186 2026] [security2:error] [pid 941081:tid 941272] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/.well-known/logs233/index.php"] [unique_id "alQq1eZnN2CRos_GBqXu5QAAAcU"] [Sun Jul 12 18:01:25.934908 2026] [security2:error] [pid 941081:tid 941330] [client 92.40.190.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq1eZnN2CRos_GBqXu3AAAAf8"] [Sun Jul 12 18:01:26.137865 2026] [security2:error] [pid 941081:tid 941297] [client 168.100.149.237:62138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31590/bargainor/2307_impeccance.jsp"] [unique_id "alQq1uZnN2CRos_GBqXu6QAAAd4"] [Sun Jul 12 18:01:26.157188 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqwpihQxksrpCflyE6uwAAplQ"] [Sun Jul 12 18:01:26.162196 2026] [security2:error] [pid 941081:tid 941288] [client 197.48.221.253:63105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq1uZnN2CRos_GBqXu6AAAAdU"] [Sun Jul 12 18:01:26.162471 2026] [security2:error] [pid 941081:tid 941288] [client 197.48.221.253:63105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq1uZnN2CRos_GBqXu6AAAAdU"] [Sun Jul 12 18:01:26.197536 2026] [security2:error] [pid 941081:tid 941253] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/.well-known/wp-cron.php"] [unique_id "alQq1uZnN2CRos_GBqXu8gAAAbI"] [Sun Jul 12 18:01:26.322546 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:26.323075 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:26.531122 2026] [security2:error] [pid 941081:tid 941293] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/0.kb-v3.php"] [unique_id "alQq1uZnN2CRos_GBqXu-gAAAdo"] [Sun Jul 12 18:01:26.544385 2026] [security2:error] [pid 941081:tid 941275] [client 74.244.119.215:9064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq1uZnN2CRos_GBqXu-QAAAcg"] [Sun Jul 12 18:01:26.544597 2026] [security2:error] [pid 941081:tid 941275] [client 74.244.119.215:9064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq1uZnN2CRos_GBqXu-QAAAcg"] [Sun Jul 12 18:01:26.610535 2026] [security2:error] [pid 941081:tid 941339] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NtLzIyNDg3L2NtLzIzNjQvbW55.asp"] [unique_id "alQq1uZnN2CRos_GBqXu_AAAAgg"] [Sun Jul 12 18:01:26.863324 2026] [security2:error] [pid 941081:tid 941267] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/0.php"] [unique_id "alQq1uZnN2CRos_GBqXu_wAAAcA"] [Sun Jul 12 18:01:27.048592 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:27.049122 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:27.198121 2026] [security2:error] [pid 940777:tid 941014] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/002.php"] [unique_id "alQq15ihQxksrpCflyE7RAAAAOY"] [Sun Jul 12 18:01:27.555821 2026] [security2:error] [pid 941081:tid 941221] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/01.php"] [unique_id "alQq1-ZnN2CRos_GBqXvCwAAAZI"] [Sun Jul 12 18:01:27.635252 2026] [security2:error] [pid 941081:tid 941309] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq1-ZnN2CRos_GBqXvAwAAAeo"] [Sun Jul 12 18:01:27.635307 2026] [security2:error] [pid 941081:tid 941309] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq1-ZnN2CRos_GBqXvAwAAAeo"] [Sun Jul 12 18:01:27.636813 2026] [security2:error] [pid 940777:tid 940958] [client 65.21.113.206:57250] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NtLzIyNDg3L2NtLzIzNjQvbW55.asp"] [unique_id "alQq15ihQxksrpCflyE7QAAAAK4"] [Sun Jul 12 18:01:27.819547 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:27.820079 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:27.890335 2026] [security2:error] [pid 940777:tid 940973] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/0x.php"] [unique_id "alQq15ihQxksrpCflyE7TQAAAL0"] [Sun Jul 12 18:01:28.096637 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE6wwAAAIg"], referer: http://67.222.38.115/__clockwork/latest [Sun Jul 12 18:01:28.121563 2026] [security2:error] [pid 940777:tid 940996] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE6xQAAANQ"], referer: http://67.222.38.115/___graphql [Sun Jul 12 18:01:28.132796 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQqw5ihQxksrpCflyE6vQAApmA"], referer: http://67.222.38.115/__/firebase/init.json [Sun Jul 12 18:01:28.160120 2026] [security2:error] [pid 941081:tid 941249] [client 94.187.171.125:54190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq2OZnN2CRos_GBqXvHAAAAa4"] [Sun Jul 12 18:01:28.180035 2026] [security2:error] [pid 941081:tid 941249] [client 94.187.171.125:54190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq2OZnN2CRos_GBqXvHAAAAa4"] [Sun Jul 12 18:01:28.171179 2026] [security2:error] [pid 940777:tid 940926] [client 168.100.149.48:41446] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31655/bargainor/2307_gunz.jsp"] [unique_id "alQq2JihQxksrpCflyE7UgAAAI4"] [Sun Jul 12 18:01:28.281355 2026] [cgid:error] [pid 940777:tid 941011] [client 154.54.100.177:58252] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/iaqsentinel/404.shtml [Sun Jul 12 18:01:28.392951 2026] [core:error] [pid 940777:tid 940913] (13)Permission denied: [remote 43.173.179.72:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/events/list/page/4/?tribe-bar-date=2024-05-06 [Sun Jul 12 18:01:28.537995 2026] [core:error] [pid 940777:tid 940906] (13)Permission denied: [remote 43.173.179.64:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/events/list/page/4/?tribe-bar-date=2024-05-06 [Sun Jul 12 18:01:28.560173 2026] [cgid:error] [pid 940777:tid 941003] [client 154.54.100.177:58254] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/iaqsentinel/404.shtml [Sun Jul 12 18:01:28.599065 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:28.599584 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:28.801995 2026] [security2:error] [pid 940777:tid 940995] [client 74.7.244.33:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.website-032aad10.versatileintelligence.com"] [uri "/index.php"] [unique_id "alQq1ZihQxksrpCflyE7IAAAANM"] [Sun Jul 12 18:01:28.802643 2026] [security2:error] [pid 940777:tid 941038] [client 74.7.244.33:49496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.website-032aad10.versatileintelligence.com"] [uri "/robots.txt"] [unique_id "alQq1ZihQxksrpCflyE7HgAAAP4"] [Sun Jul 12 18:01:29.112883 2026] [security2:error] [pid 941081:tid 941222] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0uZnN2CRos_GBqXukgAAAbY"] [Sun Jul 12 18:01:29.117261 2026] [security2:error] [pid 941081:tid 941305] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0eZnN2CRos_GBqXuhAAAAgw"], referer: http://67.222.38.115/__debug__/ [Sun Jul 12 18:01:29.147074 2026] [security2:error] [pid 940777:tid 941029] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE6yAAAAPU"] [Sun Jul 12 18:01:29.269215 2026] [security2:error] [pid 941081:tid 941271] [client 20.226.22.37:0] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.mmdservices.ca"] [uri "/1.php"] [unique_id "alQq2eZnN2CRos_GBqXvKQAAAcQ"] [Sun Jul 12 18:01:29.269593 2026] [security2:error] [pid 941081:tid 941271] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/1.php"] [unique_id "alQq2eZnN2CRos_GBqXvKQAAAcQ"] [Sun Jul 12 18:01:29.373580 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:29.374072 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:29.595585 2026] [security2:error] [pid 941081:tid 941267] [client 2a03:2880:f800:8:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQq2eZnN2CRos_GBqXvMAABwFA"] [Sun Jul 12 18:01:29.603755 2026] [security2:error] [pid 941081:tid 941284] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/100.php"] [unique_id "alQq2eZnN2CRos_GBqXvNgAAAdE"] [Sun Jul 12 18:01:29.953479 2026] [security2:error] [pid 941081:tid 941311] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/122.php"] [unique_id "alQq2eZnN2CRos_GBqXvOQAAAew"] [Sun Jul 12 18:01:30.099422 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE6ygAAAKQ"] [Sun Jul 12 18:01:30.105528 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:30.106237 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:30.114247 2026] [security2:error] [pid 941081:tid 941251] [client 65.21.113.206:56722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NvLTE2MDg1LWNvODR5LTY4MTYtbzg0.cgi"] [unique_id "alQq2uZnN2CRos_GBqXvOwAAAbA"] [Sun Jul 12 18:01:30.175262 2026] [security2:error] [pid 941081:tid 941336] [client 168.100.149.130:23508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31720/bargainor/2307_monadically.jsp"] [unique_id "alQq2uZnN2CRos_GBqXvPgAAAgU"] [Sun Jul 12 18:01:30.275744 2026] [security2:error] [pid 941081:tid 941230] [client 74.179.67.139:27584] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQq2eZnN2CRos_GBqXvMQABm0c"], referer: https://mackinstyle.com/wp-login.php?action=rp [Sun Jul 12 18:01:30.289062 2026] [security2:error] [pid 941081:tid 941245] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/123.php"] [unique_id "alQq2uZnN2CRos_GBqXvPwAAAao"] [Sun Jul 12 18:01:30.594723 2026] [security2:error] [pid 941081:tid 941230] [client 74.179.67.139:27584] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQq2eZnN2CRos_GBqXvMgABm1I"], referer: https://mackinstyle.com/wp-login.php [Sun Jul 12 18:01:30.622148 2026] [security2:error] [pid 941081:tid 941249] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/13.php"] [unique_id "alQq2uZnN2CRos_GBqXvTQAAAa4"] [Sun Jul 12 18:01:30.922405 2026] [authz_core:error] [pid 941081:tid 941329] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:30.922931 2026] [authz_core:error] [pid 941081:tid 941329] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:30.953909 2026] [security2:error] [pid 941081:tid 941288] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/133.php"] [unique_id "alQq2uZnN2CRos_GBqXvVQAAAdU"] [Sun Jul 12 18:01:31.137598 2026] [security2:error] [pid 941081:tid 941330] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq2uZnN2CRos_GBqXvTgAAAf8"] [Sun Jul 12 18:01:31.137711 2026] [security2:error] [pid 941081:tid 941330] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq2uZnN2CRos_GBqXvTgAAAf8"] [Sun Jul 12 18:01:31.151519 2026] [security2:error] [pid 941081:tid 941340] [client 65.21.113.206:57260] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NvLTE2MDg1LWNvODR5LTY4MTYtbzg0.cgi"] [unique_id "alQq2uZnN2CRos_GBqXvSwAAAgk"] [Sun Jul 12 18:01:31.313697 2026] [security2:error] [pid 941081:tid 941296] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/155.php"] [unique_id "alQq2-ZnN2CRos_GBqXvXgAAAd0"] [Sun Jul 12 18:01:31.645982 2026] [security2:error] [pid 940777:tid 941042] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/177.php"] [unique_id "alQq25ihQxksrpCflyE7gAAAAQI"] [Sun Jul 12 18:01:31.672687 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:31.673181 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:31.977839 2026] [security2:error] [pid 940777:tid 940939] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/1index.php"] [unique_id "alQq25ihQxksrpCflyE7gQAAAJs"] [Sun Jul 12 18:01:32.131839 2026] [security2:error] [pid 941081:tid 941242] [client 168.100.149.81:34930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31785/bargainor/2307_enhalo.jsp"] [unique_id "alQq3OZnN2CRos_GBqXvgQAAAac"] [Sun Jul 12 18:01:32.312538 2026] [security2:error] [pid 940777:tid 940986] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/2.php"] [unique_id "alQq3JihQxksrpCflyE7hwAAAMo"] [Sun Jul 12 18:01:32.415539 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:32.416046 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:32.635708 2026] [security2:error] [pid 941081:tid 941258] [client 14.176.107.165:55751] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQq3OZnN2CRos_GBqXvmgAAAbc"], referer: https://www.portables-batterie.fr/lenovo/ThinkPad-X1c-portable-batterie.htm [Sun Jul 12 18:01:32.646573 2026] [security2:error] [pid 941081:tid 941323] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/222.php"] [unique_id "alQq3OZnN2CRos_GBqXvnAAAAfg"] [Sun Jul 12 18:01:32.993549 2026] [security2:error] [pid 941081:tid 941276] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/2p.update.php"] [unique_id "alQq3OZnN2CRos_GBqXvqgAAAck"] [Sun Jul 12 18:01:33.191705 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:33.192214 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:33.327524 2026] [security2:error] [pid 941081:tid 941343] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/3.php"] [unique_id "alQq3eZnN2CRos_GBqXvsgAAAgw"] [Sun Jul 12 18:01:33.659467 2026] [security2:error] [pid 941081:tid 941293] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQq3eZnN2CRos_GBqXvuQAAAdo"] [Sun Jul 12 18:01:33.784129 2026] [security2:error] [pid 941081:tid 941312] [client 24.203.79.110:51599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq3eZnN2CRos_GBqXvvgAAAe0"] [Sun Jul 12 18:01:33.784315 2026] [security2:error] [pid 941081:tid 941312] [client 24.203.79.110:51599] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq3eZnN2CRos_GBqXvvgAAAe0"] [Sun Jul 12 18:01:33.905091 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:33.905565 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:33.993183 2026] [security2:error] [pid 940777:tid 941004] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/403.php"] [unique_id "alQq3ZihQxksrpCflyE7mAAAANw"] [Sun Jul 12 18:01:34.178215 2026] [security2:error] [pid 940777:tid 941020] [client 168.100.149.5:49432] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31850/bargainor/2307_metalogical.jsp"] [unique_id "alQq3pihQxksrpCflyE7nAAAAOw"] [Sun Jul 12 18:01:34.304771 2026] [security2:error] [pid 941081:tid 941237] [client 130.210.6.241:49951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.6.210.130.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "socialacademy.cc"] [uri "/wp-login.php"] [unique_id "alQq3uZnN2CRos_GBqXvxAAAAaI"], referer: https://www.google.com/search?q=wordpress [Sun Jul 12 18:01:34.361930 2026] [security2:error] [pid 941081:tid 941284] [client 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.mmdservices.ca"] [uri "/404.php"] [unique_id "alQq3uZnN2CRos_GBqXvxQAAAdE"] [Sun Jul 12 18:01:34.688398 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:34.689086 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:34.800576 2026] [security2:error] [pid 940777:tid 941028] [client 130.210.6.241:50183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.6.210.130.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "socialacademy.cc"] [uri "/wp-login.php"] [unique_id "alQq3pihQxksrpCflyE7qgAAAPQ"], referer: https://www.google.com/ [Sun Jul 12 18:01:35.187274 2026] [security2:error] [pid 940777:tid 940966] [client 45.233.112.248:16991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq35ihQxksrpCflyE7rwAAALY"] [Sun Jul 12 18:01:35.187510 2026] [security2:error] [pid 940777:tid 940966] [client 45.233.112.248:16991] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq35ihQxksrpCflyE7rwAAALY"] [Sun Jul 12 18:01:35.270957 2026] [security2:error] [pid 940777:tid 940814] [remote 52.167.144.210:4522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 210.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mtcalvarywordoffaith.org"] [uri "/wordoffaith-home/ministries.php"] [unique_id "alQq35ihQxksrpCflyE7sAAAhxw"] [Sun Jul 12 18:01:35.439143 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:35.439638 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:35.808336 2026] [security2:error] [pid 940777:tid 940931] [client 31.173.81.107:16395] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQq3ZihQxksrpCflyE7lQAAAJM"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:01:35.808471 2026] [security2:error] [pid 940777:tid 940931] [client 31.173.81.107:16395] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQq3ZihQxksrpCflyE7lQAAAJM"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:01:35.908719 2026] [security2:error] [pid 940777:tid 940940] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NwLTQzMzAxLWNwdjZ6LTE4NTUtcHY2.cgi"] [unique_id "alQq35ihQxksrpCflyE7zAAAAJw"] [Sun Jul 12 18:01:36.183334 2026] [security2:error] [pid 940777:tid 940991] [client 168.100.149.240:50886] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31915/bargainor/2307_psychoreflex.jsp"] [unique_id "alQq4JihQxksrpCflyE70wAAAM8"] [Sun Jul 12 18:01:36.251236 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:36.251738 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:36.293291 2026] [security2:error] [pid 941081:tid 941116] [remote 38.84.24.90:46352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.24.84.38.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQq4OZnN2CRos_GBqXv3gACBxw"] [Sun Jul 12 18:01:36.593273 2026] [security2:error] [pid 940777:tid 940989] [client 197.48.221.253:63694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq4JihQxksrpCflyE73wAAAM0"] [Sun Jul 12 18:01:36.593510 2026] [security2:error] [pid 940777:tid 940989] [client 197.48.221.253:63694] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq4JihQxksrpCflyE73wAAAM0"] [Sun Jul 12 18:01:36.925079 2026] [security2:error] [pid 940777:tid 940988] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq4JihQxksrpCflyE72QAAAMw"] [Sun Jul 12 18:01:36.925113 2026] [security2:error] [pid 940777:tid 941025] [client 65.21.113.206:52158] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NwLTQzMzAxLWNwdjZ6LTE4NTUtcHY2.cgi"] [unique_id "alQq4JihQxksrpCflyE71wAAAPE"] [Sun Jul 12 18:01:36.925153 2026] [security2:error] [pid 940777:tid 940988] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq4JihQxksrpCflyE72QAAAMw"] [Sun Jul 12 18:01:37.030002 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:37.030500 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:37.157236 2026] [security2:error] [pid 940777:tid 940970] [client 74.244.119.215:43309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq4ZihQxksrpCflyE78wAAALo"] [Sun Jul 12 18:01:37.157456 2026] [security2:error] [pid 940777:tid 940970] [client 74.244.119.215:43309] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq4ZihQxksrpCflyE78wAAALo"] [Sun Jul 12 18:01:37.306265 2026] [security2:error] [pid 940777:tid 940985] [client 179.42.126.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq4JihQxksrpCflyE75gAAAMk"] [Sun Jul 12 18:01:37.352382 2026] [security2:error] [pid 940777:tid 941018] [client 195.2.80.133:57951] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "195.2.80.133" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQq4ZihQxksrpCflyE79wAAAOo"], referer: https://singularstudiosnj.com/product/cd-booklets/#comment-8767 [Sun Jul 12 18:01:37.352577 2026] [security2:error] [pid 940777:tid 941018] [client 195.2.80.133:57951] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQq4ZihQxksrpCflyE79wAAAOo"], referer: https://singularstudiosnj.com/product/cd-booklets/#comment-8767 [Sun Jul 12 18:01:37.501083 2026] [security2:error] [pid 940777:tid 940955] [client 168.100.149.64:60784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31980/bargainor/2307_mailable.jsp"] [unique_id "alQq4ZihQxksrpCflyE7-gAAAKs"] [Sun Jul 12 18:01:37.827647 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:37.828173 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:38.155325 2026] [security2:error] [pid 940777:tid 941015] [client 20.244.27.100:51136] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "marcybudwick.com"] [uri "/index.php"] [unique_id "alQq35ihQxksrpCflyE7ywAAAOc"], referer: binance.com [Sun Jul 12 18:01:38.202827 2026] [security2:error] [pid 941081:tid 941267] [client 45.81.136.186:51707] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.136.81.45.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQq4uZnN2CRos_GBqXwBwAAAcA"], referer: https://singularstudiosnj.com/product/cd-booklets/#comment-8767 [Sun Jul 12 18:01:38.203120 2026] [security2:error] [pid 941081:tid 941267] [client 45.81.136.186:51707] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQq4uZnN2CRos_GBqXwBwAAAcA"], referer: https://singularstudiosnj.com/product/cd-booklets/#comment-8767 [Sun Jul 12 18:01:38.592053 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:38.592612 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:38.870976 2026] [security2:error] [pid 941081:tid 941258] [client 94.187.171.125:54685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq4uZnN2CRos_GBqXwEgAAAbc"] [Sun Jul 12 18:01:38.871167 2026] [security2:error] [pid 941081:tid 941258] [client 94.187.171.125:54685] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq4uZnN2CRos_GBqXwEgAAAbc"] [Sun Jul 12 18:01:39.104137 2026] [security2:error] [pid 941081:tid 941310] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1uZnN2CRos_GBqXu8QAAAes"], referer: http://67.222.38.115/__nuxt__/ [Sun Jul 12 18:01:39.368404 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:39.368973 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:39.558404 2026] [security2:error] [pid 940777:tid 940976] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2NwLTQzMzAxLWNwdjZ6LTgxNDEtcHY2.cgi"] [unique_id "alQq45ihQxksrpCflyE8GQAAAMA"] [Sun Jul 12 18:01:39.686054 2026] [security2:error] [pid 941081:tid 941230] [client 216.244.66.243:57468] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.charterschoolofexcellence.org"] [uri "/robots.txt"] [unique_id "alQq4-ZnN2CRos_GBqXwIAAAAZs"] [Sun Jul 12 18:01:39.686280 2026] [security2:error] [pid 941081:tid 941230] [client 216.244.66.243:57468] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.charterschoolofexcellence.org"] [uri "/robots.txt"] [unique_id "alQq4-ZnN2CRos_GBqXwIAAAAZs"] [Sun Jul 12 18:01:40.122131 2026] [security2:error] [pid 941081:tid 941322] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1uZnN2CRos_GBqXu8wAAAfc"], referer: http://67.222.38.115/__swagger__/ [Sun Jul 12 18:01:40.126016 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1pihQxksrpCflyE7OQAAANY"], referer: http://67.222.38.115/__pycache__/ [Sun Jul 12 18:01:40.129367 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:40.130280 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:40.158373 2026] [security2:error] [pid 940777:tid 940938] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1pihQxksrpCflyE7OgAAAJo"] [Sun Jul 12 18:01:40.181105 2026] [security2:error] [pid 940777:tid 940919] [client 168.100.149.76:25380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32045/bargainor/2307_epidemiology.jsp"] [unique_id "alQq5JihQxksrpCflyE8JgAAAIc"] [Sun Jul 12 18:01:40.577285 2026] [security2:error] [pid 940777:tid 940975] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq5JihQxksrpCflyE8IgAAAL8"] [Sun Jul 12 18:01:40.577339 2026] [security2:error] [pid 940777:tid 940975] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq5JihQxksrpCflyE8IgAAAL8"] [Sun Jul 12 18:01:40.580126 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:52168] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2NwLTQzMzAxLWNwdjZ6LTgxNDEtcHY2.cgi"] [unique_id "alQq5OZnN2CRos_GBqXwKQAAAdo"] [Sun Jul 12 18:01:40.908472 2026] [authz_core:error] [pid 941081:tid 941297] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:40.908968 2026] [authz_core:error] [pid 941081:tid 941297] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log 403 (Forbidden): 403 Forbidden Executing in an invalid environment for the supplied user at /usr/local/cpanel/Cpanel/CGI/NoForm.pm line 157. [Sun Jul 12 18:01:41.104306 2026] [security2:error] [pid 941081:tid 941263] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1uZnN2CRos_GBqXu9AAAAbw"] [Sun Jul 12 18:01:41.114224 2026] [security2:error] [pid 940777:tid 940999] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1pihQxksrpCflyE7OAAAANc"], referer: http://67.222.38.115/_/ [Sun Jul 12 18:01:41.146065 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1pihQxksrpCflyE7NwAAALM"] [Sun Jul 12 18:01:41.150135 2026] [security2:error] [pid 941081:tid 941229] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1uZnN2CRos_GBqXu9QAAAZo"], referer: http://67.222.38.115/_admin [Sun Jul 12 18:01:41.151419 2026] [security2:error] [pid 940777:tid 940945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq1pihQxksrpCflyE7NgAAAKE"] [Sun Jul 12 18:01:41.641126 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:41.641607 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:42.086400 2026] [security2:error] [pid 940777:tid 940979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2JihQxksrpCflyE7UQAAAMM"] [Sun Jul 12 18:01:42.165386 2026] [security2:error] [pid 941081:tid 941239] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2uZnN2CRos_GBqXvPQAAAaQ"] [Sun Jul 12 18:01:42.167216 2026] [security2:error] [pid 941081:tid 941339] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2eZnN2CRos_GBqXvIwAAAgg"], referer: http://67.222.38.115/_admin/log [Sun Jul 12 18:01:42.167464 2026] [security2:error] [pid 941081:tid 941224] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2eZnN2CRos_GBqXvJwAAAZU"] [Sun Jul 12 18:01:42.177485 2026] [security2:error] [pid 940777:tid 940977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2JihQxksrpCflyE7VgAAAME"] [Sun Jul 12 18:01:42.195486 2026] [security2:error] [pid 940777:tid 940921] [client 168.100.149.140:30120] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32110/bargainor/2307_secque.jsp"] [unique_id "alQq5pihQxksrpCflyE8RAAAAIk"] [Sun Jul 12 18:01:42.200349 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2eZnN2CRos_GBqXvJgAAAec"], referer: http://67.222.38.115/_admin/metrics [Sun Jul 12 18:01:42.211470 2026] [security2:error] [pid 940777:tid 940957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq2JihQxksrpCflyE7VQAAAK0"], referer: http://67.222.38.115/_admin/aardvark [Sun Jul 12 18:01:42.424991 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:42.425459 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:43.089766 2026] [security2:error] [pid 940777:tid 940930] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2RfNDI1NC9kajYvMTQxX2o2.htm"] [unique_id "alQq55ihQxksrpCflyE8WgAAAJI"] [Sun Jul 12 18:01:43.193968 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:43.194490 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:43.449128 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq5pihQxksrpCflyE8RwAAAIg"] [Sun Jul 12 18:01:43.470528 2026] [security2:error] [pid 941081:tid 941292] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq5uZnN2CRos_GBqXwSgAAAdk"] [Sun Jul 12 18:01:43.959744 2026] [authz_core:error] [pid 941081:tid 941235] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:43.960234 2026] [authz_core:error] [pid 941081:tid 941235] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:44.110388 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq55ihQxksrpCflyE8bAAAAOc"] [Sun Jul 12 18:01:44.110458 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq55ihQxksrpCflyE8bAAAAOc"] [Sun Jul 12 18:01:44.111560 2026] [security2:error] [pid 940777:tid 940991] [client 65.21.113.206:37758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2RfNDI1NC9kajYvMTQxX2o2.htm"] [unique_id "alQq55ihQxksrpCflyE8agAAAM8"] [Sun Jul 12 18:01:44.150176 2026] [security2:error] [pid 940777:tid 941007] [client 168.100.149.193:42884] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32175/bargainor/2307_dislevelment.jsp"] [unique_id "alQq6JihQxksrpCflyE8cgAAAN8"] [Sun Jul 12 18:01:44.325519 2026] [security2:error] [pid 941081:tid 941229] [client 116.97.108.221:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq5-ZnN2CRos_GBqXwbgAAAZo"] [Sun Jul 12 18:01:44.359919 2026] [security2:error] [pid 941081:tid 941301] [client 24.203.79.110:52087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq6OZnN2CRos_GBqXwdQAAAeI"] [Sun Jul 12 18:01:44.360197 2026] [security2:error] [pid 941081:tid 941301] [client 24.203.79.110:52087] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq6OZnN2CRos_GBqXwdQAAAeI"] [Sun Jul 12 18:01:44.472452 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq55ihQxksrpCflyE8aQAAAPA"], referer: http://67.222.38.115/_apis/pipelines [Sun Jul 12 18:01:44.502480 2026] [security2:error] [pid 941081:tid 941282] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq5-ZnN2CRos_GBqXwZAAAAc8"] [Sun Jul 12 18:01:44.522022 2026] [cgid:error] [pid 941081:tid 941286] [client 202.46.62.69:21899] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/when-call-bookmarks-custom-p-586.html?osCsid=0500hj6tq0crd132covg97qra6 [Sun Jul 12 18:01:44.731881 2026] [authz_core:error] [pid 941081:tid 941249] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:44.732524 2026] [authz_core:error] [pid 941081:tid 941249] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:44.807831 2026] [security2:error] [pid 940777:tid 940963] [client 31.173.81.107:26321] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-admin/admin.php"] [unique_id "alQq6JihQxksrpCflyE8cwAAALM"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:01:44.815962 2026] [security2:error] [pid 940777:tid 940978] [client 143.14.6.101:42482] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6JihQxksrpCflyE8fAAAAMI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.105023 2026] [security2:error] [pid 940777:tid 941032] [client 143.20.253.200:46096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8hQAAAPg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.138365 2026] [security2:error] [pid 940777:tid 940966] [client 143.14.6.113:27708] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8iAAAALY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.204589 2026] [security2:error] [pid 940777:tid 940968] [client 144.31.35.120:58208] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8jAAAALg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.213195 2026] [security2:error] [pid 941081:tid 941220] [client 143.20.253.200:46070] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6eZnN2CRos_GBqXwggAAAZE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.281515 2026] [security2:error] [pid 940777:tid 940952] [client 143.14.6.101:42470] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8jwAAAKg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.294556 2026] [security2:error] [pid 940777:tid 940988] [client 143.14.6.30:23772] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8jgAAAMw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.297688 2026] [security2:error] [pid 940777:tid 940939] [client 143.14.6.113:27718] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8kAAAAJs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.359616 2026] [security2:error] [pid 940777:tid 940934] [client 144.31.35.51:64938] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8kQAAAJY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.365433 2026] [security2:error] [pid 940777:tid 940933] [client 144.31.35.120:58196] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8kgAAAJU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.460122 2026] [security2:error] [pid 940777:tid 940959] [client 143.20.253.200:46082] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8lAAAAK8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.494243 2026] [security2:error] [pid 940777:tid 940976] [client 207.180.11.180:18590] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6ZihQxksrpCflyE8lwAAAMA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:45.507353 2026] [security2:error] [pid 940777:tid 940996] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6JihQxksrpCflyE8dwAAANQ"], referer: http://67.222.38.115/_apis/projects [Sun Jul 12 18:01:45.516254 2026] [security2:error] [pid 941081:tid 941256] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6OZnN2CRos_GBqXwegAAAbU"] [Sun Jul 12 18:01:45.573468 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:45.574225 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:45.821603 2026] [security2:error] [pid 940777:tid 941035] [client 45.233.112.248:49612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq6ZihQxksrpCflyE8qgAAAPs"] [Sun Jul 12 18:01:45.821872 2026] [security2:error] [pid 940777:tid 941035] [client 45.233.112.248:49612] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq6ZihQxksrpCflyE8qgAAAPs"] [Sun Jul 12 18:01:45.987176 2026] [security2:error] [pid 940777:tid 941038] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2RfNDY4OC9kajYvMTQxX2o2.htm"] [unique_id "alQq6ZihQxksrpCflyE8qwAAAP4"] [Sun Jul 12 18:01:46.174534 2026] [security2:error] [pid 941081:tid 941319] [client 168.100.149.159:29008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32240/bargainor/2307_limnoria.jsp"] [unique_id "alQq6uZnN2CRos_GBqXwlwAAAfQ"] [Sun Jul 12 18:01:46.383467 2026] [authz_core:error] [pid 941081:tid 941250] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:46.383977 2026] [authz_core:error] [pid 941081:tid 941250] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:46.519956 2026] [security2:error] [pid 940777:tid 941020] [client 14.187.128.20:58423] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6pihQxksrpCflyE8tQAAAOw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:46.771005 2026] [security2:error] [pid 940777:tid 941007] [client 57.141.18.95:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQq6pihQxksrpCflyE8swAAAN8"] [Sun Jul 12 18:01:47.071192 2026] [security2:error] [pid 940777:tid 941028] [client 197.48.221.253:64286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq65ihQxksrpCflyE8wQAAAPQ"] [Sun Jul 12 18:01:47.071481 2026] [security2:error] [pid 940777:tid 941028] [client 197.48.221.253:64286] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq65ihQxksrpCflyE8wQAAAPQ"] [Sun Jul 12 18:01:47.105711 2026] [security2:error] [pid 940777:tid 940953] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq6pihQxksrpCflyE8tgAAAKk"] [Sun Jul 12 18:01:47.105768 2026] [security2:error] [pid 940777:tid 940953] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq6pihQxksrpCflyE8tgAAAKk"] [Sun Jul 12 18:01:47.107225 2026] [security2:error] [pid 941081:tid 941316] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2RfNDY4OC9kajYvMTQxX2o2.htm"] [unique_id "alQq6uZnN2CRos_GBqXwoQAAAfE"] [Sun Jul 12 18:01:47.200408 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:47.201039 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:47.383679 2026] [security2:error] [pid 940777:tid 940979] [client 187.189.214.145:20659] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq65ihQxksrpCflyE8wgAAAMM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:47.392205 2026] [security2:error] [pid 941081:tid 941320] [client 186.216.30.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "sinfully-desilicious.com"] [uri "/index.php"] [unique_id "alQq6uZnN2CRos_GBqXwqQAAAfU"] [Sun Jul 12 18:01:47.445984 2026] [security2:error] [pid 941081:tid 941229] [client 57.141.18.114:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQq6-ZnN2CRos_GBqXwtgAAAZo"] [Sun Jul 12 18:01:47.508294 2026] [security2:error] [pid 941081:tid 941334] [client 168.100.149.7:27472] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32305/bargainor/2307_milksopism.jsp"] [unique_id "alQq6-ZnN2CRos_GBqXwwgAAAgM"] [Sun Jul 12 18:01:47.559865 2026] [security2:error] [pid 940777:tid 940957] [client 74.244.119.215:19494] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq65ihQxksrpCflyE8wwAAAK0"] [Sun Jul 12 18:01:47.560056 2026] [security2:error] [pid 940777:tid 940957] [client 74.244.119.215:19494] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq65ihQxksrpCflyE8wwAAAK0"] [Sun Jul 12 18:01:47.717874 2026] [security2:error] [pid 941081:tid 941245] [client 190.124.20.243:1465] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6-ZnN2CRos_GBqXwxgAAAao"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:47.720938 2026] [security2:error] [pid 941081:tid 941295] [client 78.100.217.172:56134] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq6-ZnN2CRos_GBqXwxwAAAdw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:47.797807 2026] [autoindex:error] [pid 940777:tid 941001] [client 52.167.144.158:0] AH01276: Cannot serve directory /home2/cecillin/public_html/cecweb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:01:48.012516 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:48.013186 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:48.083321 2026] [security2:error] [pid 941081:tid 941285] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6eZnN2CRos_GBqXwigAAAdI"] [Sun Jul 12 18:01:48.129005 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6eZnN2CRos_GBqXwiwAAAec"] [Sun Jul 12 18:01:48.446441 2026] [security2:error] [pid 941081:tid 941326] [client 217.19.215.112:55252] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7OZnN2CRos_GBqXw2AAAAfs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:48.621380 2026] [security2:error] [pid 941081:tid 941258] [client 112.211.120.134:27145] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7OZnN2CRos_GBqXw3QAAAbc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:48.788978 2026] [security2:error] [pid 940777:tid 940980] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2RwcTR2el80MTQ4L2RwLzUwNTMzL3A=.html"] [unique_id "alQq7JihQxksrpCflyE84QAAAMQ"] [Sun Jul 12 18:01:48.817889 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:48.818389 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:48.868485 2026] [security2:error] [pid 941081:tid 941253] [client 129.122.153.12:43558] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7OZnN2CRos_GBqXw4AAAAbI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:48.895437 2026] [security2:error] [pid 941081:tid 941343] [client 51.36.221.88:3604] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7OZnN2CRos_GBqXw4gAAAgw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:49.016765 2026] [security2:error] [pid 941081:tid 941254] [client 169.224.9.178:6566] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7OZnN2CRos_GBqXw4wAAAbM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:49.071160 2026] [security2:error] [pid 941081:tid 941337] [client 57.141.18.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hangar34liverpool.co.uk"] [uri "/index.php"] [unique_id "alQq6eZnN2CRos_GBqXwhQAAAgY"] [Sun Jul 12 18:01:49.108418 2026] [security2:error] [pid 941081:tid 941300] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6eZnN2CRos_GBqXwjQAAAeE"] [Sun Jul 12 18:01:49.160570 2026] [security2:error] [pid 940777:tid 941044] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq6ZihQxksrpCflyE8pAAAAQQ"], referer: http://67.222.38.115/_apis/release/definitions [Sun Jul 12 18:01:49.346560 2026] [cgid:error] [pid 941081:tid 941273] [client 66.132.195.87:0] AH01265: stderr from /home4/globalf1/public_html/carbonneutralroses/cgi-bin/: attempt to invoke directory as script, referer: https://www.carbonneutralroses.globalflower.net:443/cgi-bin [Sun Jul 12 18:01:49.402361 2026] [security2:error] [pid 941081:tid 941274] [client 213.230.76.11:3695] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7eZnN2CRos_GBqXw7wAAAcc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:49.520609 2026] [security2:error] [pid 941081:tid 941279] [client 94.187.171.125:55171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq7eZnN2CRos_GBqXw9gAAAcw"] [Sun Jul 12 18:01:49.520866 2026] [security2:error] [pid 941081:tid 941279] [client 94.187.171.125:55171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq7eZnN2CRos_GBqXw9gAAAcw"] [Sun Jul 12 18:01:49.579427 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:49.579930 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:49.682814 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq7eZnN2CRos_GBqXw7AAAAZ4"] [Sun Jul 12 18:01:49.682862 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq7eZnN2CRos_GBqXw7AAAAZ4"] [Sun Jul 12 18:01:49.683918 2026] [security2:error] [pid 940777:tid 940967] [client 65.21.113.206:37780] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2RwcTR2el80MTQ4L2RwLzUwNTMzL3A=.html"] [unique_id "alQq7ZihQxksrpCflyE86QAAALc"] [Sun Jul 12 18:01:49.798413 2026] [security2:error] [pid 940777:tid 940923] [client 153.67.110.122:1872] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQq7ZihQxksrpCflyE89QAAAIs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:01:50.211537 2026] [security2:error] [pid 941081:tid 941311] [client 168.100.149.62:46846] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32370/bargainor/2307_capnoides.jsp"] [unique_id "alQq7uZnN2CRos_GBqXxDQAAAew"] [Sun Jul 12 18:01:50.245433 2026] [security2:error] [pid 941081:tid 941303] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smartrvinspect.com"] [uri "/wp-admin/install.php"] [unique_id "alQq7uZnN2CRos_GBqXxDAAAAeQ"] [Sun Jul 12 18:01:50.314973 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:50.315453 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:50.831849 2026] [security2:error] [pid 940777:tid 940856] [remote 74.7.227.188:54476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQq7pihQxksrpCflyE8_QAAikU"], referer: https://www.stephenspublishing.com/child-kits-stock-p-68.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:01:51.037510 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:51.038078 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:51.164135 2026] [security2:error] [pid 940777:tid 941011] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2U0LTE1NTgxLWU0aHczLTY0NTAtNGh3.cgi"] [unique_id "alQq75ihQxksrpCflyE8_wAAAOM"] [Sun Jul 12 18:01:51.394468 2026] [security2:error] [pid 941081:tid 941329] [client 62.171.167.118:51828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/_profiler/phpinfo.php"] [unique_id "alQq7-ZnN2CRos_GBqXxMgAAAf4"] [Sun Jul 12 18:01:51.420554 2026] [security2:error] [pid 941081:tid 941271] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "codingfiend.com"] [uri "/website_705ea3b3/wp-admin/install.php"] [unique_id "alQq7-ZnN2CRos_GBqXxMQABxHE"] [Sun Jul 12 18:01:51.785643 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:51.786206 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:52.062334 2026] [security2:error] [pid 940777:tid 940934] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq75ihQxksrpCflyE9EQAAAJY"] [Sun Jul 12 18:01:52.062388 2026] [security2:error] [pid 940777:tid 940934] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq75ihQxksrpCflyE9EQAAAJY"] [Sun Jul 12 18:01:52.063315 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:37790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2U0LTE1NTgxLWU0aHczLTY0NTAtNGh3.cgi"] [unique_id "alQq75ihQxksrpCflyE9DgAAAPg"] [Sun Jul 12 18:01:52.130825 2026] [security2:error] [pid 940777:tid 940985] [client 168.100.149.173:29068] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32435/bargainor/2307_deft.jsp"] [unique_id "alQq8JihQxksrpCflyE9GwAAAMk"] [Sun Jul 12 18:01:52.168762 2026] [security2:error] [pid 940777:tid 940844] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq0ZihQxksrpCflyE80AAApjk"] [Sun Jul 12 18:01:52.555962 2026] [authz_core:error] [pid 940777:tid 940928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:52.556443 2026] [authz_core:error] [pid 940777:tid 940928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:53.116711 2026] [security2:error] [pid 941081:tid 941292] [client 31.54.137.187:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq8OZnN2CRos_GBqXxTwAAAdk"] [Sun Jul 12 18:01:53.130818 2026] [security2:error] [pid 940777:tid 940986] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7JihQxksrpCflyE81gAAAMo"] [Sun Jul 12 18:01:53.139080 2026] [security2:error] [pid 941081:tid 941344] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7OZnN2CRos_GBqXw0AAAAg0"], referer: http://67.222.38.115/_apis/release/releases [Sun Jul 12 18:01:53.196284 2026] [security2:error] [pid 941081:tid 941275] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7OZnN2CRos_GBqXw0gAAAcg"], referer: http://67.222.38.115/_bulk [Sun Jul 12 18:01:53.235990 2026] [security2:error] [pid 940777:tid 941037] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7JihQxksrpCflyE82AAAAP0"], referer: http://67.222.38.115/_cat/allocation [Sun Jul 12 18:01:53.237205 2026] [security2:error] [pid 941081:tid 941299] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7OZnN2CRos_GBqXw0QAAAeA"], referer: http://67.222.38.115/_apis/serviceendpoint/endpoints [Sun Jul 12 18:01:53.256144 2026] [security2:error] [pid 941081:tid 941296] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7eZnN2CRos_GBqXw5wAAAd0"] [Sun Jul 12 18:01:53.326253 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:53.326794 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:53.532878 2026] [security2:error] [pid 940777:tid 941041] [client 102.88.108.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQq8ZihQxksrpCflyE9MQAAAQE"] [Sun Jul 12 18:01:53.629170 2026] [security2:error] [pid 940777:tid 940921] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2VfMzE0OS9lZW4vMTE0NTNfZW4=.htm"] [unique_id "alQq8ZihQxksrpCflyE9OwAAAIk"] [Sun Jul 12 18:01:54.053930 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:54.054412 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:54.090991 2026] [security2:error] [pid 940777:tid 941006] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7ZihQxksrpCflyE86AAAAN4"] [Sun Jul 12 18:01:54.149759 2026] [security2:error] [pid 941081:tid 941316] [client 168.100.149.22:59760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32500/bargainor/2307_did.jsp"] [unique_id "alQq8uZnN2CRos_GBqXxaAAAAfE"] [Sun Jul 12 18:01:54.392832 2026] [rewrite:error] [pid 940777:tid 940864] [remote 111.225.214.168:0] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:01:54.593576 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq8uZnN2CRos_GBqXxagAAAag"] [Sun Jul 12 18:01:54.593650 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq8uZnN2CRos_GBqXxagAAAag"] [Sun Jul 12 18:01:54.595357 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:44892] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2VfMzE0OS9lZW4vMTE0NTNfZW4=.htm"] [unique_id "alQq8uZnN2CRos_GBqXxZQAAAgs"] [Sun Jul 12 18:01:54.876931 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:54.877402 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:54.983931 2026] [security2:error] [pid 941081:tid 941235] [client 24.203.79.110:52579] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq8uZnN2CRos_GBqXxdAAAAaA"] [Sun Jul 12 18:01:54.984241 2026] [security2:error] [pid 941081:tid 941235] [client 24.203.79.110:52579] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq8uZnN2CRos_GBqXxdAAAAaA"] [Sun Jul 12 18:01:55.225754 2026] [security2:error] [pid 940777:tid 941021] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq8ZihQxksrpCflyE9OAAAAO0"] [Sun Jul 12 18:01:55.257922 2026] [security2:error] [pid 941081:tid 941302] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq8uZnN2CRos_GBqXxZgAAAeM"] [Sun Jul 12 18:01:55.484379 2026] [rewrite:error] [pid 940777:tid 940851] [remote 111.225.214.172:0] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:01:55.505417 2026] [security2:error] [pid 941081:tid 941280] [client 168.100.149.10:38758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32565/bargainor/2307_delphian.jsp"] [unique_id "alQq8-ZnN2CRos_GBqXxfwAAAc0"] [Sun Jul 12 18:01:55.706825 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:55.707459 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:55.896338 2026] [security2:error] [pid 940777:tid 940932] [client 34.195.16.23:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "marcybudwick.com"] [uri "/index.php"] [unique_id "alQq85ihQxksrpCflyE9UAAAAJQ"] [Sun Jul 12 18:01:56.085853 2026] [security2:error] [pid 940777:tid 940951] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2VfOTY1Ni9lZW4vMTE0NTNfZW4=.htm"] [unique_id "alQq9JihQxksrpCflyE9WQAAAKc"] [Sun Jul 12 18:01:56.255441 2026] [security2:error] [pid 941081:tid 941230] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq8-ZnN2CRos_GBqXxewAAAZs"] [Sun Jul 12 18:01:56.293861 2026] [security2:error] [pid 940777:tid 940987] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq85ihQxksrpCflyE9TQAAAMs"] [Sun Jul 12 18:01:56.432719 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:56.433246 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:56.435216 2026] [security2:error] [pid 941081:tid 941327] [client 45.233.112.248:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq9OZnN2CRos_GBqXxqQAAAfw"] [Sun Jul 12 18:01:56.435552 2026] [security2:error] [pid 941081:tid 941327] [client 45.233.112.248:50166] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq9OZnN2CRos_GBqXxqQAAAfw"] [Sun Jul 12 18:01:56.990389 2026] [security2:error] [pid 940777:tid 940969] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq9JihQxksrpCflyE9YQAAALk"] [Sun Jul 12 18:01:56.990441 2026] [security2:error] [pid 940777:tid 940969] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq9JihQxksrpCflyE9YQAAALk"] [Sun Jul 12 18:01:56.991572 2026] [security2:error] [pid 941081:tid 941270] [client 65.21.113.206:44902] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2VfOTY1Ni9lZW4vMTE0NTNfZW4=.htm"] [unique_id "alQq9OZnN2CRos_GBqXxrgAAAcM"] [Sun Jul 12 18:01:57.132292 2026] [security2:error] [pid 941081:tid 941106] [remote 216.73.216.33:40859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index31.xml"] [unique_id "alQq9eZnN2CRos_GBqXxuwAB-hI"] [Sun Jul 12 18:01:57.178507 2026] [security2:error] [pid 941081:tid 941283] [client 82.102.18.116:51494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQq9eZnN2CRos_GBqXxvAAAAdA"] [Sun Jul 12 18:01:57.195359 2026] [authz_core:error] [pid 941081:tid 941290] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:57.195876 2026] [authz_core:error] [pid 941081:tid 941290] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:57.274267 2026] [security2:error] [pid 941081:tid 941334] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9OZnN2CRos_GBqXxpgAAAgM"] [Sun Jul 12 18:01:57.299925 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9OZnN2CRos_GBqXxogAAAZE"] [Sun Jul 12 18:01:57.498004 2026] [security2:error] [pid 941081:tid 941242] [client 82.102.18.116:51504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "firstjobtipsheet.com"] [uri "/xmlrpc.php"] [unique_id "alQq9eZnN2CRos_GBqXxyAAAAac"] [Sun Jul 12 18:01:57.643355 2026] [security2:error] [pid 941081:tid 941219] [client 197.48.221.253:64880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq9eZnN2CRos_GBqXx0wAAAZA"] [Sun Jul 12 18:01:57.643728 2026] [security2:error] [pid 941081:tid 941219] [client 197.48.221.253:64880] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQq9eZnN2CRos_GBqXx0wAAAZA"] [Sun Jul 12 18:01:57.949358 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:57.951695 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:58.011326 2026] [security2:error] [pid 941081:tid 941229] [client 82.102.18.116:51508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQq9uZnN2CRos_GBqXx2gAAAZo"] [Sun Jul 12 18:01:58.136818 2026] [security2:error] [pid 940777:tid 941041] [client 74.244.119.215:10572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq9pihQxksrpCflyE9fwAAAQE"] [Sun Jul 12 18:01:58.137065 2026] [security2:error] [pid 940777:tid 941041] [client 74.244.119.215:10572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQq9pihQxksrpCflyE9fwAAAQE"] [Sun Jul 12 18:01:58.149045 2026] [security2:error] [pid 940777:tid 940997] [client 168.100.149.118:41214] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32630/bargainor/2307_anisodactyli.jsp"] [unique_id "alQq9pihQxksrpCflyE9gAAAANU"] [Sun Jul 12 18:01:58.296487 2026] [security2:error] [pid 940777:tid 941027] [client 82.102.18.116:55824] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQq9pihQxksrpCflyE9gQAAAPM"] [Sun Jul 12 18:01:58.361569 2026] [security2:error] [pid 940777:tid 940828] [remote 4.155.129.51:44482] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQq9ZihQxksrpCflyE9egAA4io"], referer: https://theresilientva.com/Jostar-Modello-Viaggio-Taupe-Senza-Ferro-Elastico-362097/ [Sun Jul 12 18:01:58.554536 2026] [security2:error] [pid 940777:tid 940939] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2VhLTI4MDY5LWVhcmc4LTE4MjctYXJn.cgi"] [unique_id "alQq9pihQxksrpCflyE9hgAAAJs"] [Sun Jul 12 18:01:58.580071 2026] [security2:error] [pid 941081:tid 941286] [client 82.102.18.116:55840] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQq9uZnN2CRos_GBqXx6AAAAdM"] [Sun Jul 12 18:01:58.740118 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:58.740589 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:58.871576 2026] [security2:error] [pid 940777:tid 940985] [client 82.102.18.116:55856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQq9pihQxksrpCflyE9jQAAAMk"] [Sun Jul 12 18:01:59.156543 2026] [security2:error] [pid 940777:tid 940928] [client 82.102.18.116:55860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQq95ihQxksrpCflyE9lwAAAJA"] [Sun Jul 12 18:01:59.244174 2026] [security2:error] [pid 941081:tid 941226] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9eZnN2CRos_GBqXxwQAAAZc"], referer: http://67.222.38.115/_db/_system/_admin/aardvark/index.html [Sun Jul 12 18:01:59.266850 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9eZnN2CRos_GBqXxwwAAAec"] [Sun Jul 12 18:01:59.467059 2026] [security2:error] [pid 940777:tid 940977] [client 82.102.18.116:55862] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "alQq95ihQxksrpCflyE9swAAAME"] [Sun Jul 12 18:01:59.508408 2026] [security2:error] [pid 941081:tid 941236] [client 168.100.149.191:57198] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32695/bargainor/2307_birefraction.jsp"] [unique_id "alQq9-ZnN2CRos_GBqXyTAAAAaE"] [Sun Jul 12 18:01:59.584848 2026] [security2:error] [pid 941081:tid 941248] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq9-ZnN2CRos_GBqXx_AAAAa0"] [Sun Jul 12 18:01:59.584959 2026] [security2:error] [pid 941081:tid 941248] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq9-ZnN2CRos_GBqXx_AAAAa0"] [Sun Jul 12 18:01:59.586115 2026] [security2:error] [pid 941081:tid 941336] [client 65.21.113.206:44904] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2VhLTI4MDY5LWVhcmc4LTE4MjctYXJn.cgi"] [unique_id "alQq9-ZnN2CRos_GBqXx-gAAAgU"] [Sun Jul 12 18:01:59.663495 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:01:59.664202 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:01:59.762075 2026] [security2:error] [pid 940777:tid 940952] [client 82.102.18.116:55866] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQq95ihQxksrpCflyE9uwAAAKg"] [Sun Jul 12 18:02:00.057633 2026] [security2:error] [pid 940777:tid 940946] [client 82.102.18.116:55874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "alQq-JihQxksrpCflyE9wgAAAKI"] [Sun Jul 12 18:02:00.107055 2026] [security2:error] [pid 940777:tid 941000] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9ZihQxksrpCflyE9bgAAANg"], referer: http://67.222.38.115/_debug [Sun Jul 12 18:02:00.151824 2026] [security2:error] [pid 940777:tid 940944] [client 94.187.171.125:55654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq-JihQxksrpCflyE9xAAAAKA"] [Sun Jul 12 18:02:00.152127 2026] [security2:error] [pid 940777:tid 940944] [client 94.187.171.125:55654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQq-JihQxksrpCflyE9xAAAAKA"] [Sun Jul 12 18:02:00.171000 2026] [security2:error] [pid 941081:tid 941299] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9eZnN2CRos_GBqXxxQAAAeA"], referer: http://67.222.38.115/_dashboards/api/status [Sun Jul 12 18:02:00.356811 2026] [security2:error] [pid 940777:tid 940985] [client 82.102.18.116:55886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQq-JihQxksrpCflyE9yQAAAMk"] [Sun Jul 12 18:02:00.500913 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:00.501400 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:00.524128 2026] [security2:error] [pid 941081:tid 941310] [client 34.62.181.128:58886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.174.140"] [uri "/"] [unique_id "alQq-OZnN2CRos_GBqXyZAAAAes"] [Sun Jul 12 18:02:00.647684 2026] [security2:error] [pid 941081:tid 941286] [client 82.102.18.116:55888] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQq-OZnN2CRos_GBqXyaQAAAdM"] [Sun Jul 12 18:02:00.812879 2026] [security2:error] [pid 940777:tid 940974] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2Y4NXYxLzMzNzEvZjgvMzc1ODUvOA=="] [unique_id "alQq-JihQxksrpCflyE9zAAAAL4"] [Sun Jul 12 18:02:00.945206 2026] [security2:error] [pid 941081:tid 941312] [client 82.102.18.116:55894] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "firstjobtipsheet.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQq-OZnN2CRos_GBqXyeQAAAe0"] [Sun Jul 12 18:02:01.180906 2026] [security2:error] [pid 941081:tid 941287] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-OZnN2CRos_GBqXyVwAAAdQ"], referer: http://67.222.38.115/_debug_toolbar [Sun Jul 12 18:02:01.336291 2026] [authz_core:error] [pid 941081:tid 941343] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:01.336825 2026] [authz_core:error] [pid 941081:tid 941343] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:01.358009 2026] [rewrite:error] [pid 940777:tid 940896] [remote 116.179.33.18:0] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:02:01.384601 2026] [security2:error] [pid 941081:tid 941268] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-OZnN2CRos_GBqXyWQAAAcE"] [Sun Jul 12 18:02:01.449157 2026] [security2:error] [pid 941081:tid 941337] [client 207.46.13.168:18564] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.manitheuncanny.com"] [uri "/index.php"] [unique_id "alQq9OZnN2CRos_GBqXxsAACBg4"] [Sun Jul 12 18:02:01.808271 2026] [security2:error] [pid 941081:tid 941215] [remote 124.253.251.121:22419] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQq-eZnN2CRos_GBqXyoAAB2n4"] [Sun Jul 12 18:02:01.876410 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq-ZihQxksrpCflyE92wAAAMs"] [Sun Jul 12 18:02:01.876465 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq-ZihQxksrpCflyE92wAAAMs"] [Sun Jul 12 18:02:01.879603 2026] [security2:error] [pid 940777:tid 940967] [client 65.21.113.206:44906] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2Y4NXYxLzMzNzEvZjgvMzc1ODUvOA=="] [unique_id "alQq-ZihQxksrpCflyE92QAAALc"] [Sun Jul 12 18:02:02.210376 2026] [security2:error] [pid 941081:tid 941301] [client 168.100.149.193:60106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32760/bargainor/2307_mediator.jsp"] [unique_id "alQq-uZnN2CRos_GBqXyqgAAAeI"] [Sun Jul 12 18:02:02.285206 2026] [authz_core:error] [pid 941081:tid 941342] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:02.285925 2026] [authz_core:error] [pid 941081:tid 941342] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:02.758853 2026] [security2:error] [pid 941081:tid 941224] [client 14.177.92.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQq-uZnN2CRos_GBqXyrgAAAZU"] [Sun Jul 12 18:02:02.807168 2026] [security2:error] [pid 941081:tid 941310] [client 116.98.246.115:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq-uZnN2CRos_GBqXysQAAAes"] [Sun Jul 12 18:02:03.115001 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:03.115579 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:03.320327 2026] [security2:error] [pid 941081:tid 941345] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-eZnN2CRos_GBqXyigAAAg4"], referer: http://67.222.38.115/_debugbar [Sun Jul 12 18:02:03.503442 2026] [security2:error] [pid 940777:tid 940927] [client 47.128.49.16:37716] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mcknightfinancesuite.com"] [uri "/robots.txt"] [unique_id "alQq-5ihQxksrpCflyE-BgAAAI8"] [Sun Jul 12 18:02:03.636365 2026] [security2:error] [pid 941081:tid 941245] [client 34.32.146.22:49152] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.storeatcoldspring.com"] [uri "/"] [unique_id "alQq--ZnN2CRos_GBqXy0wAAAao"] [Sun Jul 12 18:02:03.636687 2026] [security2:error] [pid 941081:tid 941245] [client 34.32.146.22:49152] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.storeatcoldspring.com"] [uri "/"] [unique_id "alQq--ZnN2CRos_GBqXy0wAAAao"] [Sun Jul 12 18:02:03.934488 2026] [authz_core:error] [pid 940777:tid 940942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:03.935184 2026] [authz_core:error] [pid 940777:tid 940942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:04.105741 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-ZihQxksrpCflyE91wAAAPk"] [Sun Jul 12 18:02:04.129697 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2Y5MmJvLTcwMzAvZjktMzIyMzMvOTJibw=="] [unique_id "alQq_JihQxksrpCflyE-FgAAALA"] [Sun Jul 12 18:02:04.219261 2026] [security2:error] [pid 941081:tid 941342] [client 168.100.149.57:53596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32825/bargainor/2307_gurian.jsp"] [unique_id "alQq_OZnN2CRos_GBqXy6gAAAgs"] [Sun Jul 12 18:02:04.559890 2026] [security2:error] [pid 941081:tid 941300] [client 5.61.209.92:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "69.89.28.191"] [uri "/index.php"] [unique_id "alQq_OZnN2CRos_GBqXy9AAAAeE"] [Sun Jul 12 18:02:04.762202 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:04.762736 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:05.063059 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq_JihQxksrpCflyE-JAAAAMs"] [Sun Jul 12 18:02:05.063114 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq_JihQxksrpCflyE-JAAAAMs"] [Sun Jul 12 18:02:05.064176 2026] [security2:error] [pid 940777:tid 940917] [client 65.21.113.206:51930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2Y5MmJvLTcwMzAvZjktMzIyMzMvOTJibw=="] [unique_id "alQq_JihQxksrpCflyE-IQAAAIU"] [Sun Jul 12 18:02:05.098613 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-ZihQxksrpCflyE94AAAAKQ"], referer: http://67.222.38.115/_debugbar/assets/javascript [Sun Jul 12 18:02:05.107155 2026] [security2:error] [pid 941081:tid 941244] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-eZnN2CRos_GBqXyiwAAAak"] [Sun Jul 12 18:02:05.562885 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:05.563482 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:05.647201 2026] [security2:error] [pid 941081:tid 941240] [client 24.203.79.110:53072] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq_eZnN2CRos_GBqXzFgAAAaU"] [Sun Jul 12 18:02:05.702648 2026] [security2:error] [pid 941081:tid 941240] [client 24.203.79.110:53072] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQq_eZnN2CRos_GBqXzFgAAAaU"] [Sun Jul 12 18:02:05.863937 2026] [security2:error] [pid 940777:tid 940971] [client 74.7.241.131:33428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.paradynemedical.com"] [uri "/robots.txt"] [unique_id "alQq_ZihQxksrpCflyE-QAAAALs"] [Sun Jul 12 18:02:06.188487 2026] [security2:error] [pid 941081:tid 941299] [client 168.100.149.3:57200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32890/bargainor/2307_monkey.jsp"] [unique_id "alQq_uZnN2CRos_GBqXzHwAAAeA"] [Sun Jul 12 18:02:06.334756 2026] [authz_core:error] [pid 941081:tid 941307] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:06.335226 2026] [authz_core:error] [pid 941081:tid 941307] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:06.710225 2026] [security2:error] [pid 940777:tid 941034] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2YtNDUyMC9mb2cvMzM2NDUtb2dqNQ=="] [unique_id "alQq_pihQxksrpCflyE-RwAAAPo"] [Sun Jul 12 18:02:06.950721 2026] [security2:error] [pid 941081:tid 941305] [client 45.233.112.248:18315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq_uZnN2CRos_GBqXzNAAAAeY"] [Sun Jul 12 18:02:06.950971 2026] [security2:error] [pid 941081:tid 941305] [client 45.233.112.248:18315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQq_uZnN2CRos_GBqXzNAAAAeY"] [Sun Jul 12 18:02:07.058140 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:07.058825 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:07.528380 2026] [security2:error] [pid 940777:tid 940928] [client 168.100.149.13:23006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32955/bargainor/2307_impeccance.jsp"] [unique_id "alQq_5ihQxksrpCflyE-WQAAAJA"] [Sun Jul 12 18:02:07.727019 2026] [security2:error] [pid 941081:tid 941295] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq_-ZnN2CRos_GBqXzOQAAAdw"] [Sun Jul 12 18:02:07.727093 2026] [security2:error] [pid 941081:tid 941295] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQq_-ZnN2CRos_GBqXzOQAAAdw"] [Sun Jul 12 18:02:07.729086 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:51932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2YtNDUyMC9mb2cvMzM2NDUtb2dqNQ=="] [unique_id "alQq_5ihQxksrpCflyE-VQAAALA"] [Sun Jul 12 18:02:07.871949 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:07.872434 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:08.097354 2026] [security2:error] [pid 940777:tid 941004] [client 197.48.221.253:65476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrAJihQxksrpCflyE-aQAAANw"] [Sun Jul 12 18:02:08.097640 2026] [security2:error] [pid 940777:tid 941004] [client 197.48.221.253:65476] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrAJihQxksrpCflyE-aQAAANw"] [Sun Jul 12 18:02:08.318874 2026] [security2:error] [pid 940777:tid 940980] [client 50.87.253.215:21024] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2020/08/20200731_080903-1.jpg"] [unique_id "alQq_5ihQxksrpCflyE-YAAAAMQ"] [Sun Jul 12 18:02:08.704777 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:08.705275 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:08.711537 2026] [security2:error] [pid 940777:tid 940922] [client 74.244.119.215:32869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrAJihQxksrpCflyE-dAAAAIo"] [Sun Jul 12 18:02:08.711842 2026] [security2:error] [pid 940777:tid 940922] [client 74.244.119.215:32869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrAJihQxksrpCflyE-dAAAAIo"] [Sun Jul 12 18:02:08.786144 2026] [security2:error] [pid 941081:tid 941220] [client 57.141.18.86:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQq_-ZnN2CRos_GBqXzOgAAAZE"] [Sun Jul 12 18:02:09.015008 2026] [security2:error] [pid 940777:tid 940972] [client 43.156.79.172:60504] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.79.156.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/forum.php"] [unique_id "alQrAJihQxksrpCflyE-dQAAALw"] [Sun Jul 12 18:02:09.141863 2026] [security2:error] [pid 940777:tid 940927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-5ihQxksrpCflyE-AgAAAKs"], referer: http://67.222.38.115/_debugbar/open [Sun Jul 12 18:02:09.190014 2026] [security2:error] [pid 941081:tid 941302] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq--ZnN2CRos_GBqXyzAAAAfA"] [Sun Jul 12 18:02:09.403510 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZfMjI0NTFfZmw5ai9sXzIzNjRfOWpr.html"] [unique_id "alQrAZihQxksrpCflyE-egAAAK0"] [Sun Jul 12 18:02:09.550830 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:09.551332 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:09.664560 2026] [security2:error] [pid 940777:tid 940939] [client 74.7.241.131:32820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.paradynemedical.com"] [uri "/index.php"] [unique_id "alQq_pihQxksrpCflyE-QwAAm3o"], referer: http://mail.paradynemedical.com/robots.txt [Sun Jul 12 18:02:09.679264 2026] [security2:error] [pid 941081:tid 941292] [client 168.0.154.57:14870] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQq_uZnN2CRos_GBqXzMwAAAdk"] [Sun Jul 12 18:02:10.072915 2026] [security2:error] [pid 941081:tid 941309] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq_OZnN2CRos_GBqXy5QAAAeo"] [Sun Jul 12 18:02:10.097552 2026] [authz_core:error] [pid 941081:tid 941296] [client 65.49.1.152:0] AH01630: client denied by server configuration: /home4/sarahdra/public_html/php.ini [Sun Jul 12 18:02:10.163592 2026] [security2:error] [pid 941081:tid 941279] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq--ZnN2CRos_GBqXyygAAAgM"], referer: http://67.222.38.115/_debugbar/assets/stylesheets [Sun Jul 12 18:02:10.167469 2026] [security2:error] [pid 941081:tid 941334] [client 168.100.149.13:23012] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33020/bargainor/2307_gunz.jsp"] [unique_id "alQrAuZnN2CRos_GBqXzgAAAAgM"] [Sun Jul 12 18:02:10.185859 2026] [security2:error] [pid 941081:tid 941233] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq--ZnN2CRos_GBqXyywAAAZ4"] [Sun Jul 12 18:02:10.186936 2026] [security2:error] [pid 941081:tid 941245] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq_eZnN2CRos_GBqXzDgAAAao"], referer: http://67.222.38.115/_field_caps [Sun Jul 12 18:02:10.202441 2026] [security2:error] [pid 940777:tid 940952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-5ihQxksrpCflyE-AwAAAKg"], referer: http://67.222.38.115/_debugbar/open?max=20&offset=0 [Sun Jul 12 18:02:10.264304 2026] [security2:error] [pid 941081:tid 941337] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq_eZnN2CRos_GBqXzDwAAAgY"] [Sun Jul 12 18:02:10.386451 2026] [authz_core:error] [pid 940777:tid 941035] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:10.386969 2026] [authz_core:error] [pid 940777:tid 941035] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:10.405460 2026] [security2:error] [pid 941081:tid 941302] [client 113.196.56.150:40328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "team.nke.rvq.mybluehost.me"] [uri "/"] [unique_id "alQrAuZnN2CRos_GBqXziQAAAeM"] [Sun Jul 12 18:02:10.484950 2026] [security2:error] [pid 941081:tid 941288] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrAeZnN2CRos_GBqXzeQAAAdU"] [Sun Jul 12 18:02:10.485006 2026] [security2:error] [pid 941081:tid 941288] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrAeZnN2CRos_GBqXzeQAAAdU"] [Sun Jul 12 18:02:10.485933 2026] [security2:error] [pid 941081:tid 941280] [client 65.21.113.206:51946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZfMjI0NTFfZmw5ai9sXzIzNjRfOWpr.html"] [unique_id "alQrAeZnN2CRos_GBqXzdgAAAc0"] [Sun Jul 12 18:02:10.526829 2026] [security2:error] [pid 940777:tid 941030] [client 2a03:2880:f800:2e:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQrApihQxksrpCflyE-iQAA9gM"] [Sun Jul 12 18:02:10.530070 2026] [core:error] [pid 940777:tid 940901] (13)Permission denied: [remote 47.155.122.172:0] AH00132: file permissions deny server access: /home4/girlwjb6/public_html/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://girlwithbluesails.com/5-things-to-do-in-bass-lake/?amp=1 [Sun Jul 12 18:02:10.658498 2026] [core:error] [pid 940777:tid 940842] (13)Permission denied: [remote 47.155.122.172:0] AH00132: file permissions deny server access: /home4/girlwjb6/public_html/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://girlwithbluesails.com/5-things-to-do-in-bass-lake/?amp=1 [Sun Jul 12 18:02:10.758197 2026] [security2:error] [pid 941081:tid 941271] [client 94.187.171.125:56142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrAuZnN2CRos_GBqXznQAAAcQ"] [Sun Jul 12 18:02:10.758443 2026] [security2:error] [pid 941081:tid 941271] [client 94.187.171.125:56142] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrAuZnN2CRos_GBqXznQAAAcQ"] [Sun Jul 12 18:02:10.828325 2026] [security2:error] [pid 941081:tid 941290] [client 104.28.251.199:35029] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/.env"] [unique_id "alQrAuZnN2CRos_GBqXznwAAAdc"] [Sun Jul 12 18:02:10.880894 2026] [security2:error] [pid 940777:tid 940978] [client 104.28.219.199:46647] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-kgAAAMI"] [Sun Jul 12 18:02:10.919504 2026] [security2:error] [pid 940777:tid 941005] [client 104.28.219.199:38192] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-lAAAAN0"] [Sun Jul 12 18:02:10.920911 2026] [security2:error] [pid 940777:tid 940960] [client 104.28.219.199:21336] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-kwAAALA"] [Sun Jul 12 18:02:10.988028 2026] [security2:error] [pid 940777:tid 940948] [client 104.28.251.199:35034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/wp-config.php~"] [unique_id "alQrApihQxksrpCflyE-mQAAAKQ"] [Sun Jul 12 18:02:10.988029 2026] [security2:error] [pid 941081:tid 941248] [client 104.28.251.199:35046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/wp-config.php.bak"] [unique_id "alQrAuZnN2CRos_GBqXzogAAAa0"] [Sun Jul 12 18:02:10.988431 2026] [security2:error] [pid 941081:tid 941289] [client 104.28.251.199:35038] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/wp-config.php.old"] [unique_id "alQrAuZnN2CRos_GBqXzowAAAdY"] [Sun Jul 12 18:02:10.998491 2026] [security2:error] [pid 941081:tid 941313] [client 104.28.251.199:35029] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrAuZnN2CRos_GBqXzoAAAAe4"] [Sun Jul 12 18:02:11.004139 2026] [security2:error] [pid 941081:tid 941268] [client 104.28.251.199:35041] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 199.251.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/wp-config.php"] [unique_id "alQrAuZnN2CRos_GBqXzpAAAAcE"] [Sun Jul 12 18:02:11.006811 2026] [security2:error] [pid 940777:tid 941022] [client 104.28.219.199:46647] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-lgAAAO4"] [Sun Jul 12 18:02:11.044514 2026] [security2:error] [pid 940777:tid 940918] [client 104.28.219.199:38192] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-mAAAAIY"] [Sun Jul 12 18:02:11.051384 2026] [security2:error] [pid 940777:tid 941023] [client 104.28.219.199:21336] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-lwAAAO8"] [Sun Jul 12 18:02:11.116273 2026] [security2:error] [pid 941081:tid 941234] [client 104.28.251.199:35029] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQrA-ZnN2CRos_GBqXzrgAAAZ8"] [Sun Jul 12 18:02:11.243143 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:11.243861 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:11.847928 2026] [proxy:error] [pid 941081:tid 941303] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:02:11.848103 2026] [proxy_http:error] [pid 941081:tid 941303] [client 195.96.139.114:46469] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:02:11.850261 2026] [proxy:error] [pid 941081:tid 941303] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:02:11.850436 2026] [proxy_http:error] [pid 941081:tid 941303] [client 195.96.139.114:46469] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:02:11.988126 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:11.988605 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:12.069736 2026] [security2:error] [pid 941081:tid 941277] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrAuZnN2CRos_GBqXzhAAAAco"] [Sun Jul 12 18:02:12.095680 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrApihQxksrpCflyE-hwAAAL8"], referer: http://67.222.38.115/_ignition/execute-solution [Sun Jul 12 18:02:12.158718 2026] [security2:error] [pid 940777:tid 940922] [client 168.100.149.85:24518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33085/bargainor/2307_monadically.jsp"] [unique_id "alQrBJihQxksrpCflyE-qQAAAIo"] [Sun Jul 12 18:02:12.735266 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:12.736016 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:13.492151 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:13.493003 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:13.948386 2026] [security2:error] [pid 940777:tid 940974] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZfNjUxNy9mMWkvMjI5MDVfMWk=.htm"] [unique_id "alQrBZihQxksrpCflyE-tgAAAL4"] [Sun Jul 12 18:02:13.973137 2026] [security2:error] [pid 940777:tid 940940] [client 34.147.16.58:57344] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "autodiscover.zuresh.com"] [uri "/"] [unique_id "alQrBZihQxksrpCflyE-uAAAAJw"] [Sun Jul 12 18:02:13.973402 2026] [security2:error] [pid 940777:tid 940940] [client 34.147.16.58:57344] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "autodiscover.zuresh.com"] [uri "/"] [unique_id "alQrBZihQxksrpCflyE-uAAAAJw"] [Sun Jul 12 18:02:14.036860 2026] [security2:error] [pid 941081:tid 941322] [client 181.233.76.50:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrBeZnN2CRos_GBqX0KAAAAfc"] [Sun Jul 12 18:02:14.129325 2026] [security2:error] [pid 941081:tid 941331] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBOZnN2CRos_GBqXz-AAAAgA"] [Sun Jul 12 18:02:14.145659 2026] [security2:error] [pid 941081:tid 941291] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBOZnN2CRos_GBqXz_AAAAdg"] [Sun Jul 12 18:02:14.203146 2026] [security2:error] [pid 941081:tid 941297] [client 168.100.149.95:26560] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33150/bargainor/2307_enhalo.jsp"] [unique_id "alQrBuZnN2CRos_GBqX0OAAAAd4"] [Sun Jul 12 18:02:14.228935 2026] [security2:error] [pid 941081:tid 941218] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBOZnN2CRos_GBqXz_QAAAY8"], referer: http://67.222.38.115/_ignition/health-check [Sun Jul 12 18:02:14.317985 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:14.318459 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:14.817734 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrBuZnN2CRos_GBqX0RgAAAgQ"] [Sun Jul 12 18:02:14.817803 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrBuZnN2CRos_GBqX0RgAAAgQ"] [Sun Jul 12 18:02:14.821574 2026] [security2:error] [pid 941081:tid 941264] [client 65.21.113.206:47758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZfNjUxNy9mMWkvMjI5MDVfMWk=.htm"] [unique_id "alQrBuZnN2CRos_GBqX0RAAAAb0"] [Sun Jul 12 18:02:15.071289 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBJihQxksrpCflyE-qAAAAIk"] [Sun Jul 12 18:02:15.113881 2026] [authz_core:error] [pid 940777:tid 940960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:15.114527 2026] [authz_core:error] [pid 940777:tid 940960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:15.238364 2026] [access_compat:error] [pid 940777:tid 941019] [client 45.177.76.52:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/fujitsu-ac-adapter [Sun Jul 12 18:02:15.240475 2026] [access_compat:error] [pid 940777:tid 941019] [client 45.177.76.52:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/401.shtml [Sun Jul 12 18:02:15.912081 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:15.912604 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:16.105843 2026] [authz_core:error] [pid 941081:tid 941235] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/error_log, referer: binance.com [Sun Jul 12 18:02:16.197243 2026] [security2:error] [pid 940777:tid 940951] [client 168.100.149.102:48460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33215/bargainor/2307_metalogical.jsp"] [unique_id "alQrCJihQxksrpCflyE-5wAAAKc"] [Sun Jul 12 18:02:16.223205 2026] [security2:error] [pid 941081:tid 941265] [client 24.203.79.110:53562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrCOZnN2CRos_GBqX0dAAAAb4"] [Sun Jul 12 18:02:16.230688 2026] [security2:error] [pid 941081:tid 941265] [client 24.203.79.110:53562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrCOZnN2CRos_GBqX0dAAAAb4"] [Sun Jul 12 18:02:16.522132 2026] [security2:error] [pid 941081:tid 941253] [client 62.84.168.162:15245] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "www.spartan-web.com"] [uri "/xmlrpc.php"] [unique_id "alQrCOZnN2CRos_GBqX0dgAAAbI"], referer: https://www.spartan-web.com/ [Sun Jul 12 18:02:16.703090 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:16.703556 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:16.861391 2026] [security2:error] [pid 940777:tid 940973] [client 43.172.196.199:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrB5ihQxksrpCflyE-5QAAvRQ"] [Sun Jul 12 18:02:16.950163 2026] [security2:error] [pid 941081:tid 941286] [client 43.173.181.10:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrB-ZnN2CRos_GBqX0bgAB00A"] [Sun Jul 12 18:02:17.092349 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZsLTI5MDQ5LWZsd3JzLTE1ODctbHdy.cgi"] [unique_id "alQrCZihQxksrpCflyE-8gAAAI8"] [Sun Jul 12 18:02:17.450111 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:17.450651 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:17.580419 2026] [security2:error] [pid 940777:tid 941026] [client 45.233.112.248:51222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQrCZihQxksrpCflyE-9wAAAPI"] [Sun Jul 12 18:02:17.580698 2026] [security2:error] [pid 940777:tid 941026] [client 45.233.112.248:51222] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQrCZihQxksrpCflyE-9wAAAPI"] [Sun Jul 12 18:02:18.049457 2026] [security2:error] [pid 940777:tid 940953] [client 104.156.225.167:52344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "voiceonclick.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQrCpihQxksrpCflyE-_AAAAKk"] [Sun Jul 12 18:02:18.162164 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrCeZnN2CRos_GBqX0lgAAAdA"] [Sun Jul 12 18:02:18.162238 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrCeZnN2CRos_GBqX0lgAAAdA"] [Sun Jul 12 18:02:18.164178 2026] [security2:error] [pid 940777:tid 941039] [client 65.21.113.206:47770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZsLTI5MDQ5LWZsd3JzLTE1ODctbHdy.cgi"] [unique_id "alQrCZihQxksrpCflyE-9gAAAP8"] [Sun Jul 12 18:02:18.169960 2026] [security2:error] [pid 941081:tid 941265] [client 168.100.149.39:34026] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33280/bargainor/2307_psychoreflex.jsp"] [unique_id "alQrCuZnN2CRos_GBqX0rgAAAb4"] [Sun Jul 12 18:02:18.344907 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:18.345575 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:18.628805 2026] [security2:error] [pid 940777:tid 940796] [remote 194.164.192.228:48186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.192.164.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hotbarter.com"] [uri "/wp-login.php"] [unique_id "alQrCpihQxksrpCflyE_BQAA0Qo"] [Sun Jul 12 18:02:18.642376 2026] [security2:error] [pid 941081:tid 941276] [client 197.48.221.253:49710] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrCuZnN2CRos_GBqX0uQAAAck"] [Sun Jul 12 18:02:18.642597 2026] [security2:error] [pid 941081:tid 941276] [client 197.48.221.253:49710] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrCuZnN2CRos_GBqX0uQAAAck"] [Sun Jul 12 18:02:19.083062 2026] [security2:error] [pid 941081:tid 941221] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBuZnN2CRos_GBqX0NwAAAZI"] [Sun Jul 12 18:02:19.089759 2026] [security2:error] [pid 940777:tid 941032] [client 74.244.119.215:21467] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrC5ihQxksrpCflyE_DQAAAPg"] [Sun Jul 12 18:02:19.090156 2026] [security2:error] [pid 940777:tid 941032] [client 74.244.119.215:21467] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrC5ihQxksrpCflyE_DQAAAPg"] [Sun Jul 12 18:02:19.164258 2026] [security2:error] [pid 940777:tid 941030] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-ywAAAPY"] [Sun Jul 12 18:02:19.182278 2026] [security2:error] [pid 940777:tid 941043] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-yQAAAQM"], referer: http://67.222.38.115/_ingest/pipeline [Sun Jul 12 18:02:19.187340 2026] [security2:error] [pid 940777:tid 940976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-ygAAAMA"], referer: http://67.222.38.115/_license [Sun Jul 12 18:02:19.197112 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-0AAAAKI"] [Sun Jul 12 18:02:19.205416 2026] [security2:error] [pid 940777:tid 940958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-zQAAAK4"], referer: http://67.222.38.115/_ilm/policy [Sun Jul 12 18:02:19.206682 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:19.207186 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:19.236841 2026] [security2:error] [pid 940777:tid 941040] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrBpihQxksrpCflyE-zAAAAQA"], referer: http://67.222.38.115/_ignition/share-report [Sun Jul 12 18:02:19.734883 2026] [security2:error] [pid 941081:tid 941268] [client 74.7.244.18:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "themillennialshandbook.com"] [uri "/index.php"] [unique_id "alQrCuZnN2CRos_GBqX0ugAAAcE"] [Sun Jul 12 18:02:19.736722 2026] [security2:error] [pid 940777:tid 940983] [client 74.7.244.18:45480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQrCpihQxksrpCflyE_BgAAxyw"] [Sun Jul 12 18:02:19.982528 2026] [authz_core:error] [pid 940777:tid 941012] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:19.983097 2026] [authz_core:error] [pid 940777:tid 941012] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:20.106451 2026] [security2:error] [pid 941081:tid 941329] [client 74.7.230.16:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "youareadventuresome.zoeybluesky.com"] [uri "/index.php"] [unique_id "alQrCuZnN2CRos_GBqX0uAAAAf4"] [Sun Jul 12 18:02:20.108380 2026] [security2:error] [pid 941081:tid 941341] [client 74.7.230.16:53738] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "youareadventuresome.zoeybluesky.com"] [uri "/robots.txt"] [unique_id "alQrCuZnN2CRos_GBqX0twACCmE"] [Sun Jul 12 18:02:20.171763 2026] [security2:error] [pid 941081:tid 941320] [client 168.100.149.117:29824] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33345/bargainor/2307_mailable.jsp"] [unique_id "alQrDOZnN2CRos_GBqX00QAAAfU"] [Sun Jul 12 18:02:20.444245 2026] [security2:error] [pid 940777:tid 940973] [client 65.21.113.206:38618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZtLTM2NDQxLWZtazNxLTg1NDgtbWsz.cgi"] [unique_id "alQrDJihQxksrpCflyE_JwAAAL0"] [Sun Jul 12 18:02:20.501989 2026] [security2:error] [pid 940777:tid 940915] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7ZihQxksrpCflyE_DwAApn8"] [Sun Jul 12 18:02:20.570299 2026] [core:error] [pid 941081:tid 941166] (13)Permission denied: [remote 43.172.195.57:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/events/list/page/2/?eventDisplay=past&tribe-bar-date=2025-01-08 [Sun Jul 12 18:02:20.595541 2026] [core:error] [pid 940777:tid 940812] (13)Permission denied: [remote 43.173.180.162:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/events/list/page/2/?eventDisplay=past&tribe-bar-date=2025-01-08 [Sun Jul 12 18:02:20.834246 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:20.834766 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:20.866007 2026] [security2:error] [pid 940777:tid 940931] [client 45.192.137.162:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrDJihQxksrpCflyE_JAAAAJM"] [Sun Jul 12 18:02:21.123090 2026] [security2:error] [pid 940777:tid 940897] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7ZihQxksrpCflyE_EAAApm0"], referer: http://67.222.38.115/_next/static/development/_ssgManifest.js [Sun Jul 12 18:02:21.177807 2026] [security2:error] [pid 940777:tid 940892] [remote 192.250.229.40:35844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.229.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "musteba.com"] [uri "/wp-login.php"] [unique_id "alQrDZihQxksrpCflyE_MQAA82g"] [Sun Jul 12 18:02:21.471480 2026] [security2:error] [pid 941081:tid 941259] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrDOZnN2CRos_GBqX04QAAAbg"] [Sun Jul 12 18:02:21.471555 2026] [security2:error] [pid 941081:tid 941259] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrDOZnN2CRos_GBqX04QAAAbg"] [Sun Jul 12 18:02:21.474331 2026] [security2:error] [pid 941081:tid 941299] [client 65.21.113.206:47782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZtLTM2NDQxLWZtazNxLTg1NDgtbWsz.cgi"] [unique_id "alQrDOZnN2CRos_GBqX04AAAAeA"] [Sun Jul 12 18:02:21.517039 2026] [security2:error] [pid 941081:tid 941225] [client 94.187.171.125:56636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrDeZnN2CRos_GBqX08wAAAZY"] [Sun Jul 12 18:02:21.517342 2026] [security2:error] [pid 941081:tid 941225] [client 94.187.171.125:56636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrDeZnN2CRos_GBqX08wAAAZY"] [Sun Jul 12 18:02:21.582295 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:21.582827 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:21.613133 2026] [security2:error] [pid 941081:tid 941343] [client 57.141.18.110:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrDeZnN2CRos_GBqX06gAAAgw"] [Sun Jul 12 18:02:22.095863 2026] [security2:error] [pid 940777:tid 940915] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq7pihQxksrpCflyE_KAAApn8"] [Sun Jul 12 18:02:22.149826 2026] [security2:error] [pid 941081:tid 941277] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrDeZnN2CRos_GBqX05wAAAco"] [Sun Jul 12 18:02:22.214716 2026] [security2:error] [pid 940777:tid 940952] [client 168.100.149.104:55616] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33410/bargainor/2307_epidemiology.jsp"] [unique_id "alQrDpihQxksrpCflyE_SQAAAKg"] [Sun Jul 12 18:02:22.284513 2026] [fcgid:warn] [pid 941081:tid 941308] (70014)End of file found: [client 194.61.40.41:57551] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:22.354376 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:22.355006 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:22.569695 2026] [security2:error] [pid 941081:tid 941328] [client 5.107.59.168:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrDuZnN2CRos_GBqX09wAAAf0"] [Sun Jul 12 18:02:22.896359 2026] [security2:error] [pid 940777:tid 941005] [client 161.118.238.173:64363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.xyb.mhd.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQrDpihQxksrpCflyE_YAAAAN0"] [Sun Jul 12 18:02:23.098061 2026] [security2:error] [pid 940777:tid 940997] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrDpihQxksrpCflyE_QwAAANU"] [Sun Jul 12 18:02:23.177526 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:23.178140 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:23.188014 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrDpihQxksrpCflyE_RwAAAPg"], referer: http://67.222.38.115/_snapshot/ [Sun Jul 12 18:02:23.261127 2026] [security2:error] [pid 941081:tid 941327] [client 161.118.238.173:64518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.xyb.mhd.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQrD-ZnN2CRos_GBqX1FgAAAfw"] [Sun Jul 12 18:02:23.966475 2026] [authz_core:error] [pid 941081:tid 941251] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:23.967008 2026] [authz_core:error] [pid 941081:tid 941251] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:24.099860 2026] [authz_core:error] [pid 941081:tid 941290] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/error_log, referer: binance.com [Sun Jul 12 18:02:24.116099 2026] [security2:error] [pid 940777:tid 940986] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrD5ihQxksrpCflyE_ZwAAAMo"] [Sun Jul 12 18:02:24.167424 2026] [security2:error] [pid 940777:tid 940966] [client 168.100.149.86:39178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33475/bargainor/2307_secque.jsp"] [unique_id "alQrEJihQxksrpCflyE_gQAAALY"] [Sun Jul 12 18:02:24.310072 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq8pihQxksrpCflyE_aAAApm0"], referer: http://67.222.38.115/_ssgManifest.js [Sun Jul 12 18:02:24.794024 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:24.794562 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:24.953788 2026] [fcgid:warn] [pid 940777:tid 940988] (70014)End of file found: [client 194.61.40.28:45783] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:25.621001 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:25.621560 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:25.868160 2026] [security2:error] [pid 941081:tid 941219] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZtLTM2NDQxLWZtazNxLTk2NTAtbWsz.cgi"] [unique_id "alQrEeZnN2CRos_GBqX1TgAAAZA"] [Sun Jul 12 18:02:26.156989 2026] [security2:error] [pid 940777:tid 940915] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq9JihQxksrpCflyE_fAAApn8"] [Sun Jul 12 18:02:26.163881 2026] [security2:error] [pid 940777:tid 940954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrEJihQxksrpCflyE_gAAAAKo"], referer: http://67.222.38.115/_stats [Sun Jul 12 18:02:26.239194 2026] [security2:error] [pid 941081:tid 941257] [client 168.100.149.146:21382] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33540/bargainor/2307_dislevelment.jsp"] [unique_id "alQrEuZnN2CRos_GBqX1YwAAAbY"] [Sun Jul 12 18:02:26.327940 2026] [security2:error] [pid 941081:tid 941276] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrEOZnN2CRos_GBqX1KgAAAck"] [Sun Jul 12 18:02:26.350496 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:26.351021 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:26.396060 2026] [security2:error] [pid 940777:tid 941000] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrEJihQxksrpCflyE_iAAAANg"], referer: http://67.222.38.115/_status [Sun Jul 12 18:02:26.518894 2026] [security2:error] [pid 941081:tid 941233] [client 57.141.18.2:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrEeZnN2CRos_GBqX1VAAAAZ4"] [Sun Jul 12 18:02:26.903046 2026] [security2:error] [pid 941081:tid 941343] [client 24.203.79.110:54059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrEuZnN2CRos_GBqX1cwAAAgw"] [Sun Jul 12 18:02:26.903388 2026] [security2:error] [pid 941081:tid 941343] [client 24.203.79.110:54059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrEuZnN2CRos_GBqX1cwAAAgw"] [Sun Jul 12 18:02:27.091249 2026] [security2:error] [pid 941081:tid 941344] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrEuZnN2CRos_GBqX1aQAAAg0"] [Sun Jul 12 18:02:27.091329 2026] [security2:error] [pid 941081:tid 941344] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrEuZnN2CRos_GBqX1aQAAAg0"] [Sun Jul 12 18:02:27.092372 2026] [security2:error] [pid 941081:tid 941263] [client 65.21.113.206:50894] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZtLTM2NDQxLWZtazNxLTk2NTAtbWsz.cgi"] [unique_id "alQrEuZnN2CRos_GBqX1ZAAAAbw"] [Sun Jul 12 18:02:27.160006 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:27.160518 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:27.483365 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrEpihQxksrpCflyE_rwAAAPg"] [Sun Jul 12 18:02:27.534544 2026] [security2:error] [pid 941081:tid 941280] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrEuZnN2CRos_GBqX1bAAAAc0"], referer: http://67.222.38.115/_status/diagnostics/local [Sun Jul 12 18:02:27.992709 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:27.993397 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:28.099996 2026] [fcgid:warn] [pid 941081:tid 941324] (70014)End of file found: [client 194.61.40.26:26203] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:28.162836 2026] [security2:error] [pid 941081:tid 941297] [client 45.233.112.248:51566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.112.233.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQrFOZnN2CRos_GBqX1mgAAAd4"] [Sun Jul 12 18:02:28.163150 2026] [security2:error] [pid 941081:tid 941297] [client 45.233.112.248:51566] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "fitlifewithvatsa.com"] [uri "/xmlrpc.php"] [unique_id "alQrFOZnN2CRos_GBqX1mgAAAd4"] [Sun Jul 12 18:02:28.222086 2026] [security2:error] [pid 941081:tid 941222] [client 168.100.149.100:17948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33605/bargainor/2307_limnoria.jsp"] [unique_id "alQrFOZnN2CRos_GBqX1nQAAAZM"] [Sun Jul 12 18:02:28.749890 2026] [authz_core:error] [pid 941081:tid 941316] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:28.750379 2026] [authz_core:error] [pid 941081:tid 941316] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:29.069023 2026] [security2:error] [pid 941081:tid 941288] [client 197.48.221.253:50308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrFeZnN2CRos_GBqX1qgAAAdU"] [Sun Jul 12 18:02:29.069306 2026] [security2:error] [pid 941081:tid 941288] [client 197.48.221.253:50308] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrFeZnN2CRos_GBqX1qgAAAdU"] [Sun Jul 12 18:02:29.439788 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:55770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrFZihQxksrpCflyE_3gAAALA"] [Sun Jul 12 18:02:29.454462 2026] [security2:error] [pid 940777:tid 940981] [client 47.128.111.187:35730] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gboxcargo.com"] [uri "/robots.txt"] [unique_id "alQrFZihQxksrpCflyE_3wAAAMU"] [Sun Jul 12 18:02:29.520271 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:29.520968 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:29.562258 2026] [security2:error] [pid 941081:tid 941226] [client 74.244.119.215:34745] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrFeZnN2CRos_GBqX1ugAAAZc"] [Sun Jul 12 18:02:29.562579 2026] [security2:error] [pid 941081:tid 941226] [client 74.244.119.215:34745] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrFeZnN2CRos_GBqX1ugAAAZc"] [Sun Jul 12 18:02:29.939485 2026] [security2:error] [pid 941081:tid 941289] [client 65.21.113.206:50910] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrFeZnN2CRos_GBqX1vwAAAdY"] [Sun Jul 12 18:02:30.081466 2026] [security2:error] [pid 941081:tid 941239] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrE-ZnN2CRos_GBqX1gAAAAaQ"], referer: http://67.222.38.115/_status/nodes [Sun Jul 12 18:02:30.105083 2026] [security2:error] [pid 941081:tid 941279] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ZyLzIxMDMxL2ZyLzMwNzkvcnRq.asp"] [unique_id "alQrFuZnN2CRos_GBqX1wQAAAcw"] [Sun Jul 12 18:02:30.121716 2026] [security2:error] [pid 941081:tid 941240] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrE-ZnN2CRos_GBqX1fgAAAaU"] [Sun Jul 12 18:02:30.175156 2026] [security2:error] [pid 941081:tid 941250] [client 179.29.217.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrFeZnN2CRos_GBqX1vQAAAa8"] [Sun Jul 12 18:02:30.195779 2026] [security2:error] [pid 940777:tid 941002] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrE5ihQxksrpCflyE_yQAAANo"] [Sun Jul 12 18:02:30.221310 2026] [security2:error] [pid 940777:tid 941006] [client 168.100.149.248:16196] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33670/bargainor/2307_milksopism.jsp"] [unique_id "alQrFpihQxksrpCflyE_9QAAAN4"] [Sun Jul 12 18:02:30.244703 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrE5ihQxksrpCflyE_ygAAAJw"] [Sun Jul 12 18:02:30.282810 2026] [security2:error] [pid 941081:tid 941268] [client 65.21.113.206:50910] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrFuZnN2CRos_GBqX1ywAAAcE"] [Sun Jul 12 18:02:30.293617 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:30.294159 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:30.539047 2026] [security2:error] [pid 941081:tid 941309] [client 20.244.27.100:54615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/abilities-api.php"] [unique_id "alQrFuZnN2CRos_GBqX10QAAAeo"], referer: binance.com [Sun Jul 12 18:02:30.767861 2026] [fcgid:warn] [pid 941081:tid 941307] (70014)End of file found: [client 194.61.40.28:48539] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:31.043487 2026] [security2:error] [pid 941081:tid 941296] [client 208.111.117.42:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQrE-ZnN2CRos_GBqX1igAAAd0"] [Sun Jul 12 18:02:31.117151 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:31.117775 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:31.299285 2026] [security2:error] [pid 941081:tid 941223] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrFuZnN2CRos_GBqX1yQAAAZQ"] [Sun Jul 12 18:02:31.364125 2026] [security2:error] [pid 941081:tid 941332] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrFuZnN2CRos_GBqX12wAAAgE"] [Sun Jul 12 18:02:31.364196 2026] [security2:error] [pid 941081:tid 941332] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrFuZnN2CRos_GBqX12wAAAgE"] [Sun Jul 12 18:02:31.367537 2026] [security2:error] [pid 941081:tid 941341] [client 65.21.113.206:50922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ZyLzIxMDMxL2ZyLzMwNzkvcnRq.asp"] [unique_id "alQrFuZnN2CRos_GBqX11wAAAgo"] [Sun Jul 12 18:02:31.399806 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQq-ZihQxksrpCflyE_9wAApno"] [Sun Jul 12 18:02:31.550879 2026] [security2:error] [pid 941081:tid 941301] [client 168.100.149.227:17140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33735/bargainor/2307_capnoides.jsp"] [unique_id "alQrF-ZnN2CRos_GBqX16gAAAeI"] [Sun Jul 12 18:02:31.892924 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:31.893392 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:32.131433 2026] [security2:error] [pid 941081:tid 941246] [client 94.187.171.125:57122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrGOZnN2CRos_GBqX19wAAAas"] [Sun Jul 12 18:02:32.131692 2026] [security2:error] [pid 941081:tid 941246] [client 94.187.171.125:57122] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrGOZnN2CRos_GBqX19wAAAas"] [Sun Jul 12 18:02:32.313751 2026] [security2:error] [pid 941081:tid 941335] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrF-ZnN2CRos_GBqX14wAAAgQ"] [Sun Jul 12 18:02:32.389941 2026] [security2:error] [pid 941081:tid 941263] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrF-ZnN2CRos_GBqX15wAAAbw"] [Sun Jul 12 18:02:32.646296 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:32.646837 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:32.973523 2026] [security2:error] [pid 941081:tid 941311] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2d0MDc3cF8zNDgwL2d0LzE3NTc3L3Q=.html"] [unique_id "alQrGOZnN2CRos_GBqX2DQAAAew"] [Sun Jul 12 18:02:33.126406 2026] [security2:error] [pid 941081:tid 941328] [client 113.196.56.150:55067] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "ambassadors.nke.rvq.mybluehost.me"] [uri "/"] [unique_id "alQrGeZnN2CRos_GBqX2DgAAAf0"] [Sun Jul 12 18:02:33.389522 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:33.390050 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:33.537580 2026] [security2:error] [pid 941081:tid 941333] [client 168.100.149.178:47292] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33800/bargainor/2307_deft.jsp"] [unique_id "alQrGeZnN2CRos_GBqX2IAAAAgI"] [Sun Jul 12 18:02:33.629372 2026] [security2:error] [pid 940777:tid 940954] [client 172.59.2.12:14749] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.2.59.172.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dancetrenz.com"] [uri "/xmlrpc.php"] [unique_id "alQrGZihQxksrpCflyFAHwAAAKo"] [Sun Jul 12 18:02:33.629810 2026] [security2:error] [pid 940777:tid 940954] [client 172.59.2.12:14749] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dancetrenz.com"] [uri "/xmlrpc.php"] [unique_id "alQrGZihQxksrpCflyFAHwAAAKo"] [Sun Jul 12 18:02:34.036425 2026] [security2:error] [pid 941081:tid 941343] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrGeZnN2CRos_GBqX2HQAAAgw"] [Sun Jul 12 18:02:34.036475 2026] [security2:error] [pid 941081:tid 941343] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrGeZnN2CRos_GBqX2HQAAAgw"] [Sun Jul 12 18:02:34.038821 2026] [security2:error] [pid 941081:tid 941313] [client 65.21.113.206:44430] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2d0MDc3cF8zNDgwL2d0LzE3NTc3L3Q=.html"] [unique_id "alQrGeZnN2CRos_GBqX2GgAAAe4"] [Sun Jul 12 18:02:34.190803 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:34.191318 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:34.240782 2026] [security2:error] [pid 940777:tid 941016] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGJihQxksrpCflyFAEgAAAOg"] [Sun Jul 12 18:02:34.322311 2026] [security2:error] [pid 941081:tid 941256] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGOZnN2CRos_GBqX1_QAAAbU"], referer: http://67.222.38.115/_xpack/security [Sun Jul 12 18:02:34.504103 2026] [fcgid:warn] [pid 941081:tid 941251] (70014)End of file found: [client 194.61.40.48:30205] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:34.978096 2026] [authz_core:error] [pid 941081:tid 941264] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:34.978578 2026] [authz_core:error] [pid 941081:tid 941264] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:35.097009 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGJihQxksrpCflyFAFAAAAIg"] [Sun Jul 12 18:02:35.143168 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGJihQxksrpCflyFAEwAAAKQ"], referer: http://67.222.38.115/_xpack [Sun Jul 12 18:02:35.185221 2026] [security2:error] [pid 941081:tid 941312] [client 208.111.117.42:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQrF-ZnN2CRos_GBqX17wAAAe0"] [Sun Jul 12 18:02:35.430589 2026] [security2:error] [pid 941081:tid 941234] [client 185.191.171.18:10794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/event/newcomer-drop-in-class/2027-10-12/"] [unique_id "alQrG-ZnN2CRos_GBqX2egAAAZ8"] [Sun Jul 12 18:02:35.430860 2026] [security2:error] [pid 941081:tid 941234] [client 185.191.171.18:10794] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "coloradodancesport.com"] [uri "/event/newcomer-drop-in-class/2027-10-12/"] [unique_id "alQrG-ZnN2CRos_GBqX2egAAAZ8"] [Sun Jul 12 18:02:35.546387 2026] [security2:error] [pid 941081:tid 941290] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2cQAB11I"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:35.559182 2026] [security2:error] [pid 941081:tid 941274] [client 45.205.1.223:43286] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQrG-ZnN2CRos_GBqX2ewAAAcc"] [Sun Jul 12 18:02:35.567832 2026] [security2:error] [pid 941081:tid 941290] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2cAAB10M"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:35.741299 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:35.741846 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:36.001121 2026] [security2:error] [pid 941081:tid 941325] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2gQAB-k8"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:36.028734 2026] [security2:error] [pid 940777:tid 941009] [client 20.244.27.100:53601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/abilities.php"] [unique_id "alQrHJihQxksrpCflyFANgAAAOE"], referer: binance.com [Sun Jul 12 18:02:36.056854 2026] [security2:error] [pid 941081:tid 941325] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2hAAB-lU"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:36.169747 2026] [security2:error] [pid 941081:tid 941302] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2awAAAeM"] [Sun Jul 12 18:02:36.201372 2026] [security2:error] [pid 941081:tid 941279] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrG-ZnN2CRos_GBqX2bgAAAcw"], referer: http://67.222.38.115/-/readiness [Sun Jul 12 18:02:36.470471 2026] [security2:error] [pid 941081:tid 941251] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2kAABsE0"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:36.505386 2026] [security2:error] [pid 941081:tid 941251] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2kQABsF4"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:36.513442 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:36.514187 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:36.701544 2026] [security2:error] [pid 941081:tid 941300] [client 45.205.1.223:43288] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQrHOZnN2CRos_GBqX2ogAAAeE"] [Sun Jul 12 18:02:37.045014 2026] [security2:error] [pid 941081:tid 941322] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2pQAB92M"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:37.054042 2026] [security2:error] [pid 941081:tid 941322] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2pAAB9zw"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:37.237423 2026] [security2:error] [pid 941081:tid 941284] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2lgAAAdE"] [Sun Jul 12 18:02:37.261424 2026] [security2:error] [pid 941081:tid 941219] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2doLzMzMjk1L2doLzEwOTMvaGRv.asp"] [unique_id "alQrHeZnN2CRos_GBqX2vAAAAZA"] [Sun Jul 12 18:02:37.295259 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrHOZnN2CRos_GBqX2mQAAAaI"], referer: http://67.222.38.115/-/ready [Sun Jul 12 18:02:37.295870 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:37.296382 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:37.470729 2026] [security2:error] [pid 941081:tid 941220] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2sgABkWs"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:37.491059 2026] [security2:error] [pid 941081:tid 941220] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2sQABkWU"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:37.507415 2026] [security2:error] [pid 940777:tid 941033] [client 24.203.79.110:54556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrHZihQxksrpCflyFASAAAAPk"] [Sun Jul 12 18:02:37.512983 2026] [security2:error] [pid 940777:tid 941033] [client 24.203.79.110:54556] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrHZihQxksrpCflyFASAAAAPk"] [Sun Jul 12 18:02:37.847921 2026] [security2:error] [pid 941081:tid 941328] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2xQAB_XM"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:37.913508 2026] [security2:error] [pid 940777:tid 940989] [client 2a03:2880:f800:9:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQrHZihQxksrpCflyFAUQAAzV4"] [Sun Jul 12 18:02:38.031175 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:38.031694 2026] [authz_core:error] [pid 940777:tid 941030] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:38.171395 2026] [security2:error] [pid 940777:tid 940981] [client 168.100.149.237:38376] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33930/bargainor/2307_delphian.jsp"] [unique_id "alQrHpihQxksrpCflyFAVwAAAMU"] [Sun Jul 12 18:02:38.253817 2026] [security2:error] [pid 941081:tid 941259] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX20AABuFY"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:38.290297 2026] [security2:error] [pid 941081:tid 941341] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2vQAAAgo"] [Sun Jul 12 18:02:38.325977 2026] [security2:error] [pid 941081:tid 941310] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2vwAAAes"], referer: http://67.222.38.115/-/whoami [Sun Jul 12 18:02:38.376323 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2ywAAAeM"] [Sun Jul 12 18:02:38.376381 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrHeZnN2CRos_GBqX2ywAAAeM"] [Sun Jul 12 18:02:38.378201 2026] [security2:error] [pid 940777:tid 940942] [client 65.21.113.206:44438] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2doLzMzMjk1L2doLzEwOTMvaGRv.asp"] [unique_id "alQrHZihQxksrpCflyFATAAAAJ4"] [Sun Jul 12 18:02:38.396315 2026] [security2:error] [pid 940777:tid 941031] [client 178.176.78.86:17201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.78.176.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "singularstudiosnj.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQrHpihQxksrpCflyFAZQAAAPc"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:02:38.470534 2026] [fcgid:warn] [pid 940777:tid 940929] (70014)End of file found: [client 194.61.40.9:27417] mod_fcgid: can't get data from http client [Sun Jul 12 18:02:38.677880 2026] [security2:error] [pid 941081:tid 941329] [client 98.97.42.140:8929] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "microfishing.com"] [uri "/index.php"] [unique_id "alQrHuZnN2CRos_GBqX22gAB_m0"], referer: https://microfishing.com/2017/10/19/northwest-microfishing/ [Sun Jul 12 18:02:38.837971 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:38.838445 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:38.908356 2026] [security2:error] [pid 940777:tid 940892] [remote 45.132.115.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQrHpihQxksrpCflyFAcAAA1mg"] [Sun Jul 12 18:02:39.516564 2026] [security2:error] [pid 940777:tid 940964] [client 197.48.221.253:50905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrH5ihQxksrpCflyFAewAAALQ"] [Sun Jul 12 18:02:39.516839 2026] [security2:error] [pid 940777:tid 940964] [client 197.48.221.253:50905] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrH5ihQxksrpCflyFAewAAALQ"] [Sun Jul 12 18:02:39.574056 2026] [authz_core:error] [pid 940777:tid 941003] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:39.574639 2026] [authz_core:error] [pid 940777:tid 941003] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:39.662551 2026] [security2:error] [pid 941081:tid 941220] [client 67.222.60.87:12460] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQrH-ZnN2CRos_GBqX2_gAAAZE"] [Sun Jul 12 18:02:39.662630 2026] [security2:error] [pid 941081:tid 941220] [client 67.222.60.87:12460] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQrH-ZnN2CRos_GBqX2_gAAAZE"] [Sun Jul 12 18:02:40.090126 2026] [security2:error] [pid 941081:tid 941256] [client 74.244.119.215:30369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrIOZnN2CRos_GBqX3DQAAAbU"] [Sun Jul 12 18:02:40.090531 2026] [security2:error] [pid 941081:tid 941256] [client 74.244.119.215:30369] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrIOZnN2CRos_GBqX3DQAAAbU"] [Sun Jul 12 18:02:40.158214 2026] [security2:error] [pid 941081:tid 941243] [client 168.100.149.153:60344] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33995/bargainor/2307_anisodactyli.jsp"] [unique_id "alQrIOZnN2CRos_GBqX3DwAAAag"] [Sun Jul 12 18:02:40.264104 2026] [security2:error] [pid 940777:tid 940939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrHpihQxksrpCflyFAYAAAAJs"] [Sun Jul 12 18:02:40.300426 2026] [security2:error] [pid 941081:tid 941294] [client 41.251.164.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "elleholmes.pub"] [uri "/index.php"] [unique_id "alQrEuZnN2CRos_GBqX1WwAAAds"] [Sun Jul 12 18:02:40.461210 2026] [authz_core:error] [pid 941081:tid 941292] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:40.461737 2026] [authz_core:error] [pid 941081:tid 941292] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:40.902402 2026] [security2:error] [pid 941081:tid 941261] [client 168.100.149.126:50746] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33865/bargainor/2307_did.jsp"] [unique_id "alQrIOZnN2CRos_GBqX3KQAAAbo"] [Sun Jul 12 18:02:40.952447 2026] [security2:error] [pid 941081:tid 941258] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2doLzMzMjk1L2doLzQxMjIvaGRv.asp"] [unique_id "alQrIOZnN2CRos_GBqX3KwAAAbc"] [Sun Jul 12 18:02:41.329439 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:41.330180 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:41.610804 2026] [security2:error] [pid 941081:tid 941301] [client 20.244.27.100:54626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/ai-client.php"] [unique_id "alQrIeZnN2CRos_GBqX3SgAAAeI"], referer: binance.com [Sun Jul 12 18:02:41.745698 2026] [security2:error] [pid 940777:tid 940978] [client 64.233.172.163:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "dentonwelch.com"] [uri "/index.php"] [unique_id "alQrHpihQxksrpCflyFAaQAAAMI"] [Sun Jul 12 18:02:42.023841 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrIeZnN2CRos_GBqX3QwAAAZ4"] [Sun Jul 12 18:02:42.023901 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrIeZnN2CRos_GBqX3QwAAAZ4"] [Sun Jul 12 18:02:42.024834 2026] [security2:error] [pid 941081:tid 941270] [client 65.21.113.206:44444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2doLzMzMjk1L2doLzQxMjIvaGRv.asp"] [unique_id "alQrIeZnN2CRos_GBqX3QQAAAcM"] [Sun Jul 12 18:02:42.158866 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:42.159349 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:42.224873 2026] [security2:error] [pid 940777:tid 941024] [client 168.100.149.241:44584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34060/bargainor/2307_birefraction.jsp"] [unique_id "alQrIpihQxksrpCflyFApgAAAPA"] [Sun Jul 12 18:02:42.708839 2026] [security2:error] [pid 940777:tid 940790] [remote 110.249.202.28:53234] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/products-nw-230-uav-hfe.html"] [unique_id "alQrIpihQxksrpCflyFAsQAArwQ"] [Sun Jul 12 18:02:42.822261 2026] [security2:error] [pid 941081:tid 941343] [client 94.187.171.125:57611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrIuZnN2CRos_GBqX3awAAAgw"] [Sun Jul 12 18:02:42.822486 2026] [security2:error] [pid 941081:tid 941343] [client 94.187.171.125:57611] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrIuZnN2CRos_GBqX3awAAAgw"] [Sun Jul 12 18:02:42.882401 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:42.882959 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:43.061796 2026] [security2:error] [pid 941081:tid 941340] [client 57.141.18.25:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "madrasmediamarketing.com"] [uri "/index.php"] [unique_id "alQrIuZnN2CRos_GBqX3ZgAAAgk"] [Sun Jul 12 18:02:43.649843 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:43.650314 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:44.223534 2026] [security2:error] [pid 941081:tid 941235] [client 168.100.149.81:30104] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34125/bargainor/2307_mediator.jsp"] [unique_id "alQrJOZnN2CRos_GBqX3kgAAAaA"] [Sun Jul 12 18:02:44.347384 2026] [security2:error] [pid 941081:tid 941328] [client 204.48.28.167:33678] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3lQAAAf0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.356072 2026] [security2:error] [pid 940777:tid 940926] [client 167.99.236.143:51532] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJJihQxksrpCflyFA0gAAAI4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.428805 2026] [security2:error] [pid 941081:tid 941227] [client 147.182.178.89:48950] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3mAAAAZg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.456057 2026] [security2:error] [pid 940777:tid 941035] [client 192.241.155.180:47414] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJJihQxksrpCflyFA1AAAAPs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.468853 2026] [security2:error] [pid 941081:tid 941272] [client 147.182.178.89:48966] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3ngAAAcU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.480842 2026] [security2:error] [pid 940777:tid 940931] [client 105.76.183.145:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQrIpihQxksrpCflyFAtgAAAJM"] [Sun Jul 12 18:02:44.494981 2026] [security2:error] [pid 941081:tid 941337] [client 147.182.178.89:48946] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3nQAAAgY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.502483 2026] [security2:error] [pid 941081:tid 941270] [client 159.223.145.87:43192] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3nAAAAcM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.504163 2026] [security2:error] [pid 941081:tid 941256] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2doZ2J3LzQ5OC9naC8zMTM2OS9o"] [unique_id "alQrJOZnN2CRos_GBqX3oQAAAbU"] [Sun Jul 12 18:02:44.505889 2026] [security2:error] [pid 941081:tid 941222] [client 192.241.155.180:47406] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3mwAAAZM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.521480 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:44.522052 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:44.530062 2026] [security2:error] [pid 941081:tid 941237] [client 198.199.74.182:54064] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3oAAAAaI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.610957 2026] [security2:error] [pid 941081:tid 941290] [client 167.99.236.143:51540] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3ogAAAdc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:44.639191 2026] [security2:error] [pid 941081:tid 941314] [client 192.241.155.180:47424] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJOZnN2CRos_GBqX3owAAAe8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:45.355901 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:45.356406 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:45.549585 2026] [security2:error] [pid 941081:tid 941297] [client 168.100.149.95:28582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34190/bargainor/2307_gurian.jsp"] [unique_id "alQrJeZnN2CRos_GBqX3ygAAAd4"] [Sun Jul 12 18:02:45.628455 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrJZihQxksrpCflyFA2AAAAOc"] [Sun Jul 12 18:02:45.628534 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrJZihQxksrpCflyFA2AAAAOc"] [Sun Jul 12 18:02:45.629992 2026] [security2:error] [pid 941081:tid 941264] [client 65.21.113.206:54734] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2doZ2J3LzQ5OC9naC8zMTM2OS9o"] [unique_id "alQrJeZnN2CRos_GBqX3qwAAAb0"] [Sun Jul 12 18:02:46.129969 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:46.130609 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:46.199473 2026] [security2:error] [pid 941081:tid 941279] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJOZnN2CRos_GBqX3igAAAcw"] [Sun Jul 12 18:02:46.207929 2026] [security2:error] [pid 940777:tid 940881] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd#foo/development"] [unique_id "alQrDpihQxksrpCflyFA7wAApl0"] [Sun Jul 12 18:02:46.212557 2026] [security2:error] [pid 940777:tid 940881] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "../etc/"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd#foo/development"] [unique_id "alQrDpihQxksrpCflyFA8AAApl0"], referer: http://67.222.38.115/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development [Sun Jul 12 18:02:46.603152 2026] [security2:error] [pid 941081:tid 941304] [client 20.244.27.100:59820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/block-bindings.php"] [unique_id "alQrJuZnN2CRos_GBqX33AAAAeU"], referer: binance.com [Sun Jul 12 18:02:46.689254 2026] [security2:error] [pid 940777:tid 940995] [client 14.245.181.153:54909] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJpihQxksrpCflyFBAgAAANM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:46.761502 2026] [security2:error] [pid 941081:tid 941314] [client 41.250.53.28:51986] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJuZnN2CRos_GBqX33QAAAe8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:46.782097 2026] [security2:error] [pid 940777:tid 941014] [client 102.159.212.167:39338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJpihQxksrpCflyFBBAAAAOY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:46.892039 2026] [security2:error] [pid 940777:tid 940936] [client 186.189.89.100:15838] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJpihQxksrpCflyFBCwAAAJg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:46.919280 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:46.919794 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:46.977701 2026] [security2:error] [pid 940777:tid 940922] [client 39.62.109.12:58936] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJpihQxksrpCflyFBDAAAAIo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:47.080607 2026] [security2:error] [pid 941081:tid 941336] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtMzE5Mi0xbm0=.cgi"] [unique_id "alQrJ-ZnN2CRos_GBqX35QAAAgU"] [Sun Jul 12 18:02:47.380690 2026] [security2:error] [pid 940777:tid 940928] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smartrvinspect.com"] [uri "/wp-admin/install.php"] [unique_id "alQrJ5ihQxksrpCflyFBEwAAAJA"] [Sun Jul 12 18:02:47.440153 2026] [security2:error] [pid 941081:tid 941331] [client 169.224.83.2:26616] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJ-ZnN2CRos_GBqX35wAAAgA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:47.652248 2026] [security2:error] [pid 941081:tid 941226] [client 187.63.210.132:5816] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJ-ZnN2CRos_GBqX37gAAAZc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:47.686275 2026] [authz_core:error] [pid 941081:tid 941345] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:47.687030 2026] [authz_core:error] [pid 941081:tid 941345] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:47.708482 2026] [security2:error] [pid 941081:tid 941250] [client 131.221.54.177:7670] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrJ-ZnN2CRos_GBqX38QAAAa8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:47.839303 2026] [security2:error] [pid 941081:tid 941289] [client 146.174.183.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrJ-ZnN2CRos_GBqX36gAAAdY"] [Sun Jul 12 18:02:47.878403 2026] [security2:error] [pid 941081:tid 941282] [client 103.225.244.18:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrJ-ZnN2CRos_GBqX35gAAAc8"] [Sun Jul 12 18:02:47.925927 2026] [security2:error] [pid 941081:tid 941267] [client 2a06:98c0:3600::103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "codingfiend.com"] [uri "/website_705ea3b3/wp-admin/install.php"] [unique_id "alQrJ-ZnN2CRos_GBqX3-gABwDI"] [Sun Jul 12 18:02:48.089751 2026] [security2:error] [pid 941081:tid 941274] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJOZnN2CRos_GBqX3jwAAAcc"], referer: http://67.222.38.115/..;/examples/jsp/index.html [Sun Jul 12 18:02:48.121975 2026] [security2:error] [pid 941081:tid 941318] [client 24.203.79.110:55055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrKOZnN2CRos_GBqX4AAAAAfM"] [Sun Jul 12 18:02:48.126319 2026] [security2:error] [pid 941081:tid 941318] [client 24.203.79.110:55055] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrKOZnN2CRos_GBqX4AAAAAfM"] [Sun Jul 12 18:02:48.235098 2026] [security2:error] [pid 940777:tid 941004] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrJ5ihQxksrpCflyFBFgAAANw"] [Sun Jul 12 18:02:48.235165 2026] [security2:error] [pid 940777:tid 941004] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrJ5ihQxksrpCflyFBFgAAANw"] [Sun Jul 12 18:02:48.235865 2026] [security2:error] [pid 941081:tid 941332] [client 65.21.113.206:54740] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtMzE5Mi0xbm0=.cgi"] [unique_id "alQrJ-ZnN2CRos_GBqX37QAAAgE"] [Sun Jul 12 18:02:48.257814 2026] [security2:error] [pid 941081:tid 941301] [client 168.100.149.68:39756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34255/bargainor/2307_monkey.jsp"] [unique_id "alQrKOZnN2CRos_GBqX4AQAAAeI"] [Sun Jul 12 18:02:48.523194 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:48.523789 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:49.296612 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:49.297143 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:49.484730 2026] [security2:error] [pid 941081:tid 941260] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtNDU2OC0xbm0=.cgi"] [unique_id "alQrKeZnN2CRos_GBqX4HAAAAbk"] [Sun Jul 12 18:02:49.535652 2026] [security2:error] [pid 941081:tid 941345] [client 168.100.149.26:46460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34320/bargainor/2307_impeccance.jsp"] [unique_id "alQrKeZnN2CRos_GBqX4HQAAAg4"] [Sun Jul 12 18:02:50.013366 2026] [security2:error] [pid 941081:tid 941220] [client 197.48.221.253:51623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrKuZnN2CRos_GBqX4MQAAAZE"] [Sun Jul 12 18:02:50.013653 2026] [security2:error] [pid 941081:tid 941220] [client 197.48.221.253:51623] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrKuZnN2CRos_GBqX4MQAAAZE"] [Sun Jul 12 18:02:50.124259 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:50.125062 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:50.151327 2026] [security2:error] [pid 941081:tid 941263] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3ugAAAbw"] [Sun Jul 12 18:02:50.198223 2026] [security2:error] [pid 941081:tid 941303] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3vQAAAeQ"] [Sun Jul 12 18:02:50.311456 2026] [security2:error] [pid 940777:tid 940789] [remote 68.178.160.25:43472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.160.178.68.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQrKpihQxksrpCflyFBNwAAjwM"] [Sun Jul 12 18:02:50.326860 2026] [security2:error] [pid 941081:tid 941226] [client 190.100.255.63:41734] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrKuZnN2CRos_GBqX4NgAAAZc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:50.571897 2026] [security2:error] [pid 941081:tid 941253] [client 109.224.242.82:35322] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQrKuZnN2CRos_GBqX4OgAAAbI"], referer: https://www.portables-batterie.fr/acer/Acer-AS4820T-portable-batterie.htm [Sun Jul 12 18:02:50.594176 2026] [security2:error] [pid 941081:tid 941242] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrKeZnN2CRos_GBqX4MAAAAac"] [Sun Jul 12 18:02:50.594574 2026] [security2:error] [pid 941081:tid 941242] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrKeZnN2CRos_GBqX4MAAAAac"] [Sun Jul 12 18:02:50.595315 2026] [security2:error] [pid 941081:tid 941252] [client 65.21.113.206:54756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtNDU2OC0xbm0=.cgi"] [unique_id "alQrKeZnN2CRos_GBqX4LQAAAbE"] [Sun Jul 12 18:02:50.612689 2026] [security2:error] [pid 941081:tid 941302] [client 74.244.119.215:47959] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrKuZnN2CRos_GBqX4OwAAAeM"] [Sun Jul 12 18:02:50.613011 2026] [security2:error] [pid 941081:tid 941302] [client 74.244.119.215:47959] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrKuZnN2CRos_GBqX4OwAAAeM"] [Sun Jul 12 18:02:50.759589 2026] [security2:error] [pid 941081:tid 941286] [client 212.81.54.77:35580] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrKuZnN2CRos_GBqX4PwAAAdM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:02:50.994498 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:50.995024 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:51.112051 2026] [security2:error] [pid 941081:tid 941293] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3vAAAAdo"], referer: http://67.222.38.115/..;/examples/servlets/index.html [Sun Jul 12 18:02:51.166391 2026] [security2:error] [pid 941081:tid 941254] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3uwAAAbM"], referer: http://67.222.38.115/..;/manager/html [Sun Jul 12 18:02:51.174467 2026] [security2:error] [pid 940777:tid 941028] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJpihQxksrpCflyFA-AAAAPQ"] [Sun Jul 12 18:02:51.183937 2026] [security2:error] [pid 941081:tid 941265] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3vgAAAb4"], referer: http://67.222.38.115/..;/examples/websocket/index.xhtml [Sun Jul 12 18:02:51.219462 2026] [security2:error] [pid 941081:tid 941258] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrJeZnN2CRos_GBqX3vwAAAbc"] [Sun Jul 12 18:02:51.231182 2026] [security2:error] [pid 940777:tid 940814] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/etc/passwd"] [unique_id "alQrEJihQxksrpCflyFBPgAAphw"] [Sun Jul 12 18:02:51.236899 2026] [security2:error] [pid 940777:tid 940814] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/etc/passwd"] [unique_id "alQrEJihQxksrpCflyFBPwAAphw"], referer: http://67.222.38.115/etc/passwd [Sun Jul 12 18:02:51.547632 2026] [security2:error] [pid 941081:tid 941306] [client 168.100.149.232:60162] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34385/bargainor/2307_gunz.jsp"] [unique_id "alQrK-ZnN2CRos_GBqX4XAAAAec"] [Sun Jul 12 18:02:51.689780 2026] [security2:error] [pid 941081:tid 941305] [client 178.176.78.86:14227] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQrK-ZnN2CRos_GBqX4XwAAAeY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:02:51.824513 2026] [authz_core:error] [pid 941081:tid 941303] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:51.825119 2026] [authz_core:error] [pid 941081:tid 941303] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:52.255968 2026] [security2:error] [pid 941081:tid 941228] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtNzc1Mi0xbm0=.cgi"] [unique_id "alQrLOZnN2CRos_GBqX4awAAAZk"] [Sun Jul 12 18:02:52.438260 2026] [security2:error] [pid 940777:tid 940954] [client 20.244.27.100:53680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/block-editor.php"] [unique_id "alQrLJihQxksrpCflyFBWgAAAKo"], referer: binance.com [Sun Jul 12 18:02:52.625576 2026] [authz_core:error] [pid 940777:tid 940949] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:52.626250 2026] [authz_core:error] [pid 940777:tid 940949] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:53.275269 2026] [security2:error] [pid 941081:tid 941305] [client 178.176.78.86:14227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQrK-ZnN2CRos_GBqX4XwAAAeY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:02:53.275428 2026] [security2:error] [pid 941081:tid 941305] [client 178.176.78.86:14227] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQrK-ZnN2CRos_GBqX4XwAAAeY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:02:53.404142 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrLOZnN2CRos_GBqX4ewAAAag"] [Sun Jul 12 18:02:53.404215 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrLOZnN2CRos_GBqX4ewAAAag"] [Sun Jul 12 18:02:53.405787 2026] [security2:error] [pid 940777:tid 940967] [client 65.21.113.206:38486] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2gxLTg1MjUtaDFubXQtNzc1Mi0xbm0=.cgi"] [unique_id "alQrLJihQxksrpCflyFBXQAAALc"] [Sun Jul 12 18:02:53.456763 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:53.457278 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:53.517897 2026] [security2:error] [pid 941081:tid 941262] [client 94.187.171.125:58094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrLeZnN2CRos_GBqX4igAAAbs"] [Sun Jul 12 18:02:53.518107 2026] [security2:error] [pid 941081:tid 941262] [client 94.187.171.125:58094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrLeZnN2CRos_GBqX4igAAAbs"] [Sun Jul 12 18:02:54.073866 2026] [security2:error] [pid 941081:tid 941299] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrK-ZnN2CRos_GBqX4TgAAAeA"], referer: http://67.222.38.115/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd [Sun Jul 12 18:02:54.186692 2026] [security2:error] [pid 941081:tid 941264] [client 168.100.149.16:19410] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34450/bargainor/2307_monadically.jsp"] [unique_id "alQrLuZnN2CRos_GBqX4lAAAAb0"] [Sun Jul 12 18:02:54.276889 2026] [security2:error] [pid 941081:tid 941234] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrK-ZnN2CRos_GBqX4VAAAAZ8"] [Sun Jul 12 18:02:54.281067 2026] [security2:error] [pid 941081:tid 941222] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrK-ZnN2CRos_GBqX4UgAAAZM"], referer: http://67.222.38.115/var/www/html/index.html [Sun Jul 12 18:02:54.302040 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:54.302780 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:54.325300 2026] [security2:error] [pid 940777:tid 940922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrK5ihQxksrpCflyFBRAAAAIo"], referer: http://67.222.38.115/.appveyor.yml [Sun Jul 12 18:02:54.643503 2026] [security2:error] [pid 941081:tid 941135] [remote 34.173.239.49:11936] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQrKuZnN2CRos_GBqX4MgAB9C8"] [Sun Jul 12 18:02:54.714351 2026] [security2:error] [pid 940777:tid 940957] [client 64.89.163.25:52974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.163.89.64.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQrLpihQxksrpCflyFBfgAAAK0"] [Sun Jul 12 18:02:54.728773 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hfNjYxNS9oemMvMjg3NTdfemM=.htm"] [unique_id "alQrLuZnN2CRos_GBqX4oQAAAeM"] [Sun Jul 12 18:02:55.083444 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:55.083989 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:55.610642 2026] [security2:error] [pid 941081:tid 941221] [client 57.141.18.102:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrL-ZnN2CRos_GBqX4qQAAAZI"] [Sun Jul 12 18:02:55.934223 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:55.935141 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:55.948544 2026] [security2:error] [pid 941081:tid 941333] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrL-ZnN2CRos_GBqX4qwAAAgI"] [Sun Jul 12 18:02:55.948617 2026] [security2:error] [pid 941081:tid 941333] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrL-ZnN2CRos_GBqX4qwAAAgI"] [Sun Jul 12 18:02:55.950267 2026] [security2:error] [pid 940777:tid 941038] [client 65.21.113.206:38494] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hfNjYxNS9oemMvMjg3NTdfemM=.htm"] [unique_id "alQrL5ihQxksrpCflyFBlwAAAP4"] [Sun Jul 12 18:02:56.146617 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrLpihQxksrpCflyFBdAAAALQ"] [Sun Jul 12 18:02:56.264819 2026] [security2:error] [pid 941081:tid 941314] [client 168.100.149.153:34582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34515/bargainor/2307_enhalo.jsp"] [unique_id "alQrMOZnN2CRos_GBqX4wQAAAe8"] [Sun Jul 12 18:02:56.300888 2026] [security2:error] [pid 941081:tid 941285] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrLuZnN2CRos_GBqX4mwAAAdI"] [Sun Jul 12 18:02:56.443910 2026] [security2:error] [pid 940777:tid 940933] [client 128.14.216.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "notesformykids.com"] [uri "/index.php"] [unique_id "alQrMJihQxksrpCflyFBvQAAAJU"], referer: https://www.reddit.com/r/explainlikeimfive [Sun Jul 12 18:02:56.737368 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:56.737891 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:56.823397 2026] [security2:error] [pid 940777:tid 940953] [client 128.14.216.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "notesformykids.com"] [uri "/index.php"] [unique_id "alQrMJihQxksrpCflyFBxwAAAKk"], referer: https://www.reddit.com/r/explainlikeimfive [Sun Jul 12 18:02:57.262258 2026] [security2:error] [pid 940777:tid 940959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrMJihQxksrpCflyFBvgAAAK8"] [Sun Jul 12 18:02:57.539439 2026] [security2:error] [pid 940777:tid 940962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrMJihQxksrpCflyFBwgAAALI"] [Sun Jul 12 18:02:57.619746 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:57.620247 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:57.707145 2026] [security2:error] [pid 941081:tid 941317] [client 109.11.200.17:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrMeZnN2CRos_GBqX4zgAAAfI"] [Sun Jul 12 18:02:57.738319 2026] [security2:error] [pid 941081:tid 941343] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hidjh2LTMyNDAvaGItODA0MS9idjh2"] [unique_id "alQrMeZnN2CRos_GBqX43QAAAgw"] [Sun Jul 12 18:02:57.812446 2026] [security2:error] [pid 940777:tid 940982] [client 66.249.93.128:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.shopnanjala.com"] [uri "/index.php"] [unique_id "alQrLpihQxksrpCflyFBjQAAAMY"] [Sun Jul 12 18:02:57.843848 2026] [security2:error] [pid 940777:tid 940976] [client 66.249.93.129:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.shopnanjala.com"] [uri "/index.php"] [unique_id "alQrLpihQxksrpCflyFBjgAAAMA"] [Sun Jul 12 18:02:58.237532 2026] [security2:error] [pid 941081:tid 941310] [client 168.100.149.239:52636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34580/bargainor/2307_metalogical.jsp"] [unique_id "alQrMuZnN2CRos_GBqX47AAAAes"] [Sun Jul 12 18:02:58.429242 2026] [security2:error] [pid 941081:tid 941324] [client 23.236.55.230:37984] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQrMeZnN2CRos_GBqX44AAB-Vo"] [Sun Jul 12 18:02:58.449180 2026] [security2:error] [pid 940777:tid 941022] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrMZihQxksrpCflyFB1QAAAO4"], referer: http://67.222.38.115/.babelrc [Sun Jul 12 18:02:58.543464 2026] [authz_core:error] [pid 940777:tid 940978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:58.544253 2026] [authz_core:error] [pid 940777:tid 940978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:58.710228 2026] [security2:error] [pid 940777:tid 941002] [client 24.203.79.110:55580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrMpihQxksrpCflyFB6gAAANo"] [Sun Jul 12 18:02:58.710522 2026] [security2:error] [pid 940777:tid 941002] [client 24.203.79.110:55580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrMpihQxksrpCflyFB6gAAANo"] [Sun Jul 12 18:02:59.049873 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrMuZnN2CRos_GBqX47QAAAdA"] [Sun Jul 12 18:02:59.049960 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrMuZnN2CRos_GBqX47QAAAdA"] [Sun Jul 12 18:02:59.052077 2026] [security2:error] [pid 940777:tid 940997] [client 65.21.113.206:38496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hidjh2LTMyNDAvaGItODA0MS9idjh2"] [unique_id "alQrMpihQxksrpCflyFB3QAAANU"] [Sun Jul 12 18:02:59.183200 2026] [security2:error] [pid 941081:tid 941261] [client 23.236.55.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQrMuZnN2CRos_GBqX4_gAAAbo"] [Sun Jul 12 18:02:59.361067 2026] [security2:error] [pid 941081:tid 941232] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrMeZnN2CRos_GBqX41wAAAZ0"] [Sun Jul 12 18:02:59.406802 2026] [authz_core:error] [pid 941081:tid 941290] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:02:59.407468 2026] [authz_core:error] [pid 941081:tid 941290] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:02:59.567837 2026] [security2:error] [pid 941081:tid 941208] [remote 192.250.227.28:55580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 28.227.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQrM-ZnN2CRos_GBqX5FAABr3c"] [Sun Jul 12 18:02:59.571846 2026] [security2:error] [pid 941081:tid 941307] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrMuZnN2CRos_GBqX4-wAAAeg"] [Sun Jul 12 18:02:59.588074 2026] [security2:error] [pid 941081:tid 941328] [client 168.100.149.55:34000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34645/bargainor/2307_psychoreflex.jsp"] [unique_id "alQrM-ZnN2CRos_GBqX5FgAAAf0"] [Sun Jul 12 18:02:59.615880 2026] [security2:error] [pid 940777:tid 941026] [client 20.244.27.100:53389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/block-template-utils.php"] [unique_id "alQrM5ihQxksrpCflyFB9gAAAPI"], referer: binance.com [Sun Jul 12 18:03:00.221882 2026] [authz_core:error] [pid 940777:tid 941039] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:00.222793 2026] [authz_core:error] [pid 940777:tid 941039] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:00.515253 2026] [security2:error] [pid 940777:tid 940974] [client 197.48.221.253:52335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrNJihQxksrpCflyFB_gAAAL4"] [Sun Jul 12 18:03:00.515535 2026] [security2:error] [pid 940777:tid 940974] [client 197.48.221.253:52335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrNJihQxksrpCflyFB_gAAAL4"] [Sun Jul 12 18:03:01.112652 2026] [authz_core:error] [pid 941081:tid 941283] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:01.113364 2026] [authz_core:error] [pid 941081:tid 941283] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:01.162452 2026] [security2:error] [pid 941081:tid 941244] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrM-ZnN2CRos_GBqX5EgAAAak"] [Sun Jul 12 18:03:01.218359 2026] [security2:error] [pid 941081:tid 941261] [client 34.74.242.206:1694] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mesmericmedia.com"] [uri "/robots.txt"] [unique_id "alQrNeZnN2CRos_GBqX5OAAAAbo"] [Sun Jul 12 18:03:01.218587 2026] [security2:error] [pid 941081:tid 941261] [client 34.74.242.206:1694] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mesmericmedia.com"] [uri "/robots.txt"] [unique_id "alQrNeZnN2CRos_GBqX5OAAAAbo"] [Sun Jul 12 18:03:01.225875 2026] [security2:error] [pid 941081:tid 941301] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hidjh2LTg0NTMvaGItODA0MS9idjh2"] [unique_id "alQrNeZnN2CRos_GBqX5OQAAAeI"] [Sun Jul 12 18:03:01.290534 2026] [security2:error] [pid 941081:tid 941321] [client 74.244.119.215:60901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrNeZnN2CRos_GBqX5PAAAAfY"] [Sun Jul 12 18:03:01.290858 2026] [security2:error] [pid 941081:tid 941321] [client 74.244.119.215:60901] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrNeZnN2CRos_GBqX5PAAAAfY"] [Sun Jul 12 18:03:01.345343 2026] [security2:error] [pid 940777:tid 940938] [client 34.74.242.206:1681] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mesmericmedia.com"] [uri "/"] [unique_id "alQrNZihQxksrpCflyFCDQAAAJo"] [Sun Jul 12 18:03:01.345594 2026] [security2:error] [pid 940777:tid 940938] [client 34.74.242.206:1681] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mesmericmedia.com"] [uri "/"] [unique_id "alQrNZihQxksrpCflyFCDQAAAJo"] [Sun Jul 12 18:03:01.346190 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrF5ihQxksrpCflyFB9AAApjE"], referer: http://67.222.38.115/.composer-auth.json [Sun Jul 12 18:03:01.566219 2026] [security2:error] [pid 940777:tid 940976] [client 168.100.149.224:27730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34710/bargainor/2307_mailable.jsp"] [unique_id "alQrNZihQxksrpCflyFCEAAAAMA"] [Sun Jul 12 18:03:02.019648 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:02.020365 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:02.115280 2026] [security2:error] [pid 941081:tid 941318] [client 46.105.48.30:25027] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "learningindia.in"] [uri "/robots.txt"] [unique_id "alQrNuZnN2CRos_GBqX5WwAAAfM"] [Sun Jul 12 18:03:02.115600 2026] [security2:error] [pid 941081:tid 941318] [client 46.105.48.30:25027] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "learningindia.in"] [uri "/robots.txt"] [unique_id "alQrNuZnN2CRos_GBqX5WwAAAfM"] [Sun Jul 12 18:03:02.349586 2026] [security2:error] [pid 941081:tid 941284] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrNeZnN2CRos_GBqX5SQAAAdE"] [Sun Jul 12 18:03:02.349695 2026] [security2:error] [pid 941081:tid 941284] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrNeZnN2CRos_GBqX5SQAAAdE"] [Sun Jul 12 18:03:02.386400 2026] [security2:error] [pid 941081:tid 941317] [client 65.21.113.206:38500] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hidjh2LTg0NTMvaGItODA0MS9idjh2"] [unique_id "alQrNeZnN2CRos_GBqX5SAAAAfI"] [Sun Jul 12 18:03:02.876431 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:02.876979 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:03.560493 2026] [security2:error] [pid 941081:tid 941342] [client 168.100.149.92:43808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34775/bargainor/2307_epidemiology.jsp"] [unique_id "alQrN-ZnN2CRos_GBqX5fAAAAgs"] [Sun Jul 12 18:03:03.660952 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:03.661433 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:04.085207 2026] [security2:error] [pid 941081:tid 941272] [client 128.14.216.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "notesformykids.com"] [uri "/index.php"] [unique_id "alQrN-ZnN2CRos_GBqX5hgAAAcU"], referer: https://www.instagram.com [Sun Jul 12 18:03:04.165184 2026] [security2:error] [pid 940777:tid 941032] [client 94.187.171.125:58589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrOJihQxksrpCflyFCQAAAAPg"] [Sun Jul 12 18:03:04.165460 2026] [security2:error] [pid 940777:tid 941032] [client 94.187.171.125:58589] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrOJihQxksrpCflyFCQAAAAPg"] [Sun Jul 12 18:03:04.165977 2026] [security2:error] [pid 940777:tid 940814] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGJihQxksrpCflyFCBgAAphw"] [Sun Jul 12 18:03:04.213611 2026] [security2:error] [pid 941081:tid 941238] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrNeZnN2CRos_GBqX5NgAAAaM"], referer: http://67.222.38.115/.config/filezilla/filezilla.xml [Sun Jul 12 18:03:04.218578 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrNeZnN2CRos_GBqX5NwAAAZE"] [Sun Jul 12 18:03:04.299177 2026] [security2:error] [pid 941081:tid 941252] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrNeZnN2CRos_GBqX5QgAAAbE"], referer: http://67.222.38.115/.config/filezilla/recentservers.xml [Sun Jul 12 18:03:04.482422 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:04.482923 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:04.520907 2026] [security2:error] [pid 940777:tid 941043] [client 20.244.27.100:53615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/block-template.php"] [unique_id "alQrOJihQxksrpCflyFCTgAAAQM"], referer: binance.com [Sun Jul 12 18:03:04.704760 2026] [security2:error] [pid 941081:tid 941262] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hnZG15LzQ0NjgvaGcvMzg0NTMvZw=="] [unique_id "alQrOOZnN2CRos_GBqX5nQAAAbs"] [Sun Jul 12 18:03:05.216331 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:05.216929 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:05.700362 2026] [security2:error] [pid 940777:tid 941018] [client 34.56.168.230:33792] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQrOZihQxksrpCflyFCVAAA6h8"] [Sun Jul 12 18:03:05.752423 2026] [security2:error] [pid 940777:tid 940963] [client 35.153.86.200:61164] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "sheckman.com"] [uri "/robots.txt"] [unique_id "alQrOZihQxksrpCflyFCYwAAALM"] [Sun Jul 12 18:03:05.830476 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrOZihQxksrpCflyFCVQAAAIw"] [Sun Jul 12 18:03:05.830535 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrOZihQxksrpCflyFCVQAAAIw"] [Sun Jul 12 18:03:05.834572 2026] [security2:error] [pid 941081:tid 941249] [client 65.21.113.206:40848] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hnZG15LzQ0NjgvaGcvMzg0NTMvZw=="] [unique_id "alQrOeZnN2CRos_GBqX5pgAAAa4"] [Sun Jul 12 18:03:05.898400 2026] [security2:error] [pid 941081:tid 941254] [client 5.163.83.101:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrOeZnN2CRos_GBqX5qQAAAbM"] [Sun Jul 12 18:03:05.990395 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:05.991074 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:05.994069 2026] [security2:error] [pid 941081:tid 941115] [remote 41.76.213.235:50580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 235.213.76.41.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hhh.sarahjoyyoga.com"] [uri "/wp-login.php"] [unique_id "alQrOeZnN2CRos_GBqX5xQABwBs"] [Sun Jul 12 18:03:06.106212 2026] [security2:error] [pid 940777:tid 940873] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGpihQxksrpCflyFCQgAAplU"] [Sun Jul 12 18:03:06.112163 2026] [security2:error] [pid 940777:tid 940979] [client 173.199.122.135:53111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.122.199.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "stage1music.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQrOpihQxksrpCflyFCbwAAAMM"] [Sun Jul 12 18:03:06.147650 2026] [security2:error] [pid 940777:tid 940835] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrGpihQxksrpCflyFCQwAApjE"], referer: http://67.222.38.115/.dbeaver/credentials-config.json [Sun Jul 12 18:03:06.205617 2026] [security2:error] [pid 940777:tid 940933] [client 168.100.149.39:39708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34840/bargainor/2307_secque.jsp"] [unique_id "alQrOpihQxksrpCflyFCdAAAAJU"] [Sun Jul 12 18:03:06.351963 2026] [security2:error] [pid 941081:tid 941338] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQrOeZnN2CRos_GBqX5twAAAgc"] [Sun Jul 12 18:03:06.720072 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:06.720556 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:07.320109 2026] [security2:error] [pid 941081:tid 941265] [client 57.141.18.94:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrOuZnN2CRos_GBqX51wAAAb4"] [Sun Jul 12 18:03:07.374434 2026] [security2:error] [pid 940777:tid 940977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrOpihQxksrpCflyFCcgAAAME"] [Sun Jul 12 18:03:07.487214 2026] [security2:error] [pid 940777:tid 941044] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrOpihQxksrpCflyFCcwAAAQQ"], referer: http://67.222.38.115/.drone.yml [Sun Jul 12 18:03:07.562772 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:07.563410 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:07.938521 2026] [security2:error] [pid 941081:tid 941237] [client 74.7.230.43:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "huakionline.com"] [uri "/robots.txt"] [unique_id "alQrO-ZnN2CRos_GBqX6AAAAAaI"] [Sun Jul 12 18:03:07.939214 2026] [security2:error] [pid 941081:tid 941326] [client 74.7.230.43:54770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "huakionline.com"] [uri "/robots.txt"] [unique_id "alQrO-ZnN2CRos_GBqX5_QAAAfs"] [Sun Jul 12 18:03:08.202764 2026] [security2:error] [pid 941081:tid 941308] [client 168.100.149.193:23662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34905/bargainor/2307_dislevelment.jsp"] [unique_id "alQrPOZnN2CRos_GBqX6CQAAAek"] [Sun Jul 12 18:03:08.212999 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hnZG15LzUzNTgvaGcvMzg0NTMvZw=="] [unique_id "alQrPOZnN2CRos_GBqX6CgAAAas"] [Sun Jul 12 18:03:08.300826 2026] [security2:error] [pid 941081:tid 941325] [client 69.171.230.45:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ampollacerebral.com"] [uri "/index.php"] [unique_id "alQrKeZnN2CRos_GBqX4JQAAAfo"] [Sun Jul 12 18:03:08.303843 2026] [security2:error] [pid 940777:tid 940920] [client 69.171.230.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ampollacerebral.com"] [uri "/index.php"] [unique_id "alQrKJihQxksrpCflyFBIwAAAIg"] [Sun Jul 12 18:03:08.310430 2026] [security2:error] [pid 940777:tid 940951] [client 69.171.230.23:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ampollacerebral.com"] [uri "/index.php"] [unique_id "alQrKJihQxksrpCflyFBKAAAAKc"] [Sun Jul 12 18:03:08.393215 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:08.393916 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:08.431638 2026] [security2:error] [pid 941081:tid 941113] [remote 57.141.18.52:44254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/MOl09B_iDgp.lWez"] [unique_id "alQrPOZnN2CRos_GBqX6HwABmRk"] [Sun Jul 12 18:03:09.136900 2026] [security2:error] [pid 941081:tid 941320] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrO-ZnN2CRos_GBqX57gAAAfU"] [Sun Jul 12 18:03:09.138392 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrO5ihQxksrpCflyFChwAAALg"] [Sun Jul 12 18:03:09.140731 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:09.141222 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:09.193036 2026] [security2:error] [pid 940777:tid 940935] [client 69.171.230.4:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ampollacerebral.com"] [uri "/index.php"] [unique_id "alQrJpihQxksrpCflyFBCQAAAJc"] [Sun Jul 12 18:03:09.304199 2026] [security2:error] [pid 940777:tid 940985] [client 24.203.79.110:56103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrPZihQxksrpCflyFCpgAAAMk"] [Sun Jul 12 18:03:09.311509 2026] [security2:error] [pid 940777:tid 940985] [client 24.203.79.110:56103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrPZihQxksrpCflyFCpgAAAMk"] [Sun Jul 12 18:03:09.328684 2026] [security2:error] [pid 941081:tid 941319] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrPOZnN2CRos_GBqX6JgAAAfQ"] [Sun Jul 12 18:03:09.328742 2026] [security2:error] [pid 940777:tid 940978] [client 65.21.113.206:40858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hnZG15LzUzNTgvaGcvMzg0NTMvZw=="] [unique_id "alQrPJihQxksrpCflyFCmAAAAMI"] [Sun Jul 12 18:03:09.328751 2026] [security2:error] [pid 941081:tid 941319] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrPOZnN2CRos_GBqX6JgAAAfQ"] [Sun Jul 12 18:03:09.521382 2026] [security2:error] [pid 940777:tid 940891] [remote 103.82.20.130:36756] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrPZihQxksrpCflyFCqgAAkWc"] [Sun Jul 12 18:03:09.550943 2026] [security2:error] [pid 941081:tid 941234] [client 168.100.149.118:25466] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34970/bargainor/2307_limnoria.jsp"] [unique_id "alQrPeZnN2CRos_GBqX6PQAAAZ8"] [Sun Jul 12 18:03:09.968782 2026] [authz_core:error] [pid 940777:tid 940933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:09.969295 2026] [authz_core:error] [pid 940777:tid 940933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:10.017782 2026] [security2:error] [pid 941081:tid 941323] [client 34.63.117.220:1632] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrPeZnN2CRos_GBqX6PAAB-E8"] [Sun Jul 12 18:03:10.316363 2026] [security2:error] [pid 940777:tid 940941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPZihQxksrpCflyFCpAAAAJ0"] [Sun Jul 12 18:03:10.320506 2026] [security2:error] [pid 940777:tid 940835] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.env.bak"] [unique_id "alQrIpihQxksrpCflyFCsgAApjE"] [Sun Jul 12 18:03:10.411872 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPZihQxksrpCflyFCpQAAAPM"], referer: http://67.222.38.115/.editorconfig [Sun Jul 12 18:03:10.757681 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:10.758155 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:10.917877 2026] [security2:error] [pid 941081:tid 941300] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hwLTI3OTg1LWhwaTRjLTE4MjctcGk0.cgi"] [unique_id "alQrPuZnN2CRos_GBqX6eQAAAeE"] [Sun Jul 12 18:03:10.947789 2026] [security2:error] [pid 940777:tid 940953] [client 197.48.221.253:52923] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrPpihQxksrpCflyFCvQAAAKk"] [Sun Jul 12 18:03:10.948017 2026] [security2:error] [pid 940777:tid 940953] [client 197.48.221.253:52923] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrPpihQxksrpCflyFCvQAAAKk"] [Sun Jul 12 18:03:11.036316 2026] [security2:error] [pid 941081:tid 941266] [client 20.244.27.100:59658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-avif-info.php"] [unique_id "alQrP-ZnN2CRos_GBqX6fQAAAb8"], referer: binance.com [Sun Jul 12 18:03:11.334977 2026] [security2:error] [pid 941081:tid 941090] [remote 103.82.20.130:44172] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrP-ZnN2CRos_GBqX6iAABrQI"] [Sun Jul 12 18:03:11.401068 2026] [security2:error] [pid 940777:tid 941035] [client 128.14.216.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "notesformykids.com"] [uri "/index.php"] [unique_id "alQrP5ihQxksrpCflyFCvwAAAPs"], referer: https://www.healthline.com [Sun Jul 12 18:03:11.555056 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:11.555746 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:11.565760 2026] [security2:error] [pid 940777:tid 940982] [client 74.244.119.215:50499] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrP5ihQxksrpCflyFCyQAAAMY"] [Sun Jul 12 18:03:11.566071 2026] [security2:error] [pid 940777:tid 940982] [client 74.244.119.215:50499] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrP5ihQxksrpCflyFCyQAAAMY"] [Sun Jul 12 18:03:12.018139 2026] [security2:error] [pid 941081:tid 941275] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrP-ZnN2CRos_GBqX6jwAAAcg"] [Sun Jul 12 18:03:12.018225 2026] [security2:error] [pid 941081:tid 941275] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrP-ZnN2CRos_GBqX6jwAAAcg"] [Sun Jul 12 18:03:12.023435 2026] [security2:error] [pid 941081:tid 941305] [client 65.21.113.206:40860] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hwLTI3OTg1LWhwaTRjLTE4MjctcGk0.cgi"] [unique_id "alQrP-ZnN2CRos_GBqX6jgAAAeY"] [Sun Jul 12 18:03:12.053057 2026] [security2:error] [pid 940777:tid 940988] [client 50.16.216.166:39962] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "sheckman.com"] [uri "/"] [unique_id "alQrQJihQxksrpCflyFC0AAAAMw"] [Sun Jul 12 18:03:12.238975 2026] [security2:error] [pid 940777:tid 941025] [client 35.77.156.228:48161] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "67.20.110.78"] [uri "/"] [unique_id "alQrQJihQxksrpCflyFC2QAAAPE"] [Sun Jul 12 18:03:12.243775 2026] [security2:error] [pid 940777:tid 941001] [client 66.132.172.98:43138] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "main.sumikrishnan.com"] [uri "/index.php"] [unique_id "alQrQJihQxksrpCflyFCzwAAANk"] [Sun Jul 12 18:03:12.243856 2026] [security2:error] [pid 940777:tid 941001] [client 66.132.172.98:43138] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "main.sumikrishnan.com"] [uri "/index.php"] [unique_id "alQrQJihQxksrpCflyFCzwAAANk"] [Sun Jul 12 18:03:12.252972 2026] [security2:error] [pid 940777:tid 940940] [client 168.100.149.235:36028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35035/bargainor/2307_milksopism.jsp"] [unique_id "alQrQJihQxksrpCflyFC2wAAAJw"] [Sun Jul 12 18:03:12.424003 2026] [authz_core:error] [pid 940777:tid 940983] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:12.424489 2026] [authz_core:error] [pid 940777:tid 940983] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:12.540124 2026] [security2:error] [pid 940777:tid 940991] [client 216.73.216.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQrP5ihQxksrpCflyFCygAAAM8"], referer: http://learningindia.in/frro-guide [Sun Jul 12 18:03:13.109510 2026] [security2:error] [pid 940777:tid 940989] [client 54.236.1.53:8837] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "thecuttingedgemallorca.com"] [uri "/index.php"] [unique_id "alQrP5ihQxksrpCflyFCxwAAAM0"] [Sun Jul 12 18:03:13.124791 2026] [lsapi:warn] [pid 941081:tid 941320] [client 185.196.220.132:4811] [host 69.195.122.236] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:03:13.130345 2026] [security2:error] [pid 941081:tid 941320] [client 185.196.220.132:4811] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "69.195.122.236"] [uri "/index.php"] [unique_id "alQrQOZnN2CRos_GBqX6vwAAAfU"] [Sun Jul 12 18:03:13.193379 2026] [security2:error] [pid 941081:tid 941223] [client 185.196.220.132:51024] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.195.122.236"] [uri "/index.php"] [unique_id "alQrQOZnN2CRos_GBqX6vgAAAZQ"] [Sun Jul 12 18:03:13.220597 2026] [security2:error] [pid 941081:tid 941324] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPuZnN2CRos_GBqX6XgAAAfk"] [Sun Jul 12 18:03:13.231525 2026] [security2:error] [pid 940777:tid 940936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPpihQxksrpCflyFCtwAAAJg"], referer: http://67.222.38.115/.env.config [Sun Jul 12 18:03:13.234766 2026] [security2:error] [pid 940777:tid 940990] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPpihQxksrpCflyFCuAAAAM4"], referer: http://67.222.38.115/.env.dev [Sun Jul 12 18:03:13.235589 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:13.236098 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:13.504030 2026] [security2:error] [pid 941081:tid 941245] [client 185.196.220.132:4811] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.195.122.236"] [uri "/index.php"] [unique_id "alQrQeZnN2CRos_GBqX6ygAAAao"], referer: https://69.195.122.236:443/RDWeb/Pages/ [Sun Jul 12 18:03:13.578045 2026] [security2:error] [pid 941081:tid 941226] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2hzLzQzOTA3L2hzLzcyMzAvc3Zn.asp"] [unique_id "alQrQeZnN2CRos_GBqX60gAAAZc"] [Sun Jul 12 18:03:13.957533 2026] [authz_core:error] [pid 941081:tid 941236] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:13.958032 2026] [authz_core:error] [pid 941081:tid 941236] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:14.063748 2026] [security2:error] [pid 941081:tid 941326] [client 34.56.168.230:49088] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrQeZnN2CRos_GBqX60QAB-wg"] [Sun Jul 12 18:03:14.153072 2026] [security2:error] [pid 941081:tid 941345] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrPuZnN2CRos_GBqX6ZgAAAg4"] [Sun Jul 12 18:03:14.215168 2026] [security2:error] [pid 940777:tid 940931] [client 168.100.149.56:51274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35100/bargainor/2307_capnoides.jsp"] [unique_id "alQrQpihQxksrpCflyFC-gAAAJM"] [Sun Jul 12 18:03:14.537101 2026] [security2:error] [pid 941081:tid 941313] [client 34.56.168.230:49088] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrQuZnN2CRos_GBqX63gAB7h8"] [Sun Jul 12 18:03:14.595530 2026] [security2:error] [pid 941081:tid 941323] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrQuZnN2CRos_GBqX63QAAAfg"] [Sun Jul 12 18:03:14.595599 2026] [security2:error] [pid 941081:tid 941323] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrQuZnN2CRos_GBqX63QAAAfg"] [Sun Jul 12 18:03:14.598373 2026] [security2:error] [pid 941081:tid 941256] [client 65.21.113.206:49976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2hzLzQzOTA3L2hzLzcyMzAvc3Zn.asp"] [unique_id "alQrQuZnN2CRos_GBqX62wAAAbU"] [Sun Jul 12 18:03:14.719637 2026] [authz_core:error] [pid 940777:tid 940962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:14.720183 2026] [authz_core:error] [pid 940777:tid 940962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:14.887827 2026] [security2:error] [pid 940777:tid 940944] [client 94.187.171.125:59073] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrQpihQxksrpCflyFDAQAAAKA"] [Sun Jul 12 18:03:14.888100 2026] [security2:error] [pid 940777:tid 940944] [client 94.187.171.125:59073] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrQpihQxksrpCflyFDAQAAAKA"] [Sun Jul 12 18:03:15.351869 2026] [security2:error] [pid 940777:tid 941004] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrQZihQxksrpCflyFC5QAAANw"], referer: http://67.222.38.115/.env.development.local [Sun Jul 12 18:03:15.476450 2026] [authz_core:error] [pid 941081:tid 941229] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:15.476949 2026] [authz_core:error] [pid 941081:tid 941229] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:15.548221 2026] [security2:error] [pid 940777:tid 940829] [remote 47.128.96.215:33242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "ordifatir.tj"] [uri "/en/news/"] [unique_id "alQrQ5ihQxksrpCflyFDBwAA2Ss"] [Sun Jul 12 18:03:15.571049 2026] [security2:error] [pid 941081:tid 941219] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrQ-ZnN2CRos_GBqX67AAAAZA"] [Sun Jul 12 18:03:16.133005 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrQpihQxksrpCflyFC-QAAAPk"] [Sun Jul 12 18:03:16.215365 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:16.216002 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:16.240308 2026] [security2:error] [pid 941081:tid 941245] [client 168.100.149.156:44900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35165/bargainor/2307_deft.jsp"] [unique_id "alQrROZnN2CRos_GBqX7DgAAAao"] [Sun Jul 12 18:03:16.392021 2026] [security2:error] [pid 941081:tid 941314] [client 207.180.11.185:31828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.11.180.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQrROZnN2CRos_GBqX7EwAAAe8"], referer: https://www.cidclan.net/ [Sun Jul 12 18:03:16.583218 2026] [security2:error] [pid 941081:tid 941335] [client 20.244.27.100:56284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-bindings-registry.php"] [unique_id "alQrROZnN2CRos_GBqX7GAAAAgQ"], referer: binance.com [Sun Jul 12 18:03:16.659962 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:55762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2kxLTQ5NDEtaTFudHQtODQ3MS0xbnQ=.cgi"] [unique_id "alQrROZnN2CRos_GBqX7HAAAAZ4"] [Sun Jul 12 18:03:17.038336 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:17.038871 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:17.446538 2026] [security2:error] [pid 941081:tid 941342] [client 43.173.179.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrROZnN2CRos_GBqX7DwACC0E"] [Sun Jul 12 18:03:17.613130 2026] [security2:error] [pid 940777:tid 940963] [client 43.172.197.215:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrRJihQxksrpCflyFDEwAAsz4"] [Sun Jul 12 18:03:17.845902 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:17.846438 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:17.883211 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrRZihQxksrpCflyFDGwAAAMU"] [Sun Jul 12 18:03:17.883264 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrRZihQxksrpCflyFDGwAAAMU"] [Sun Jul 12 18:03:17.884766 2026] [security2:error] [pid 940777:tid 940978] [client 65.21.113.206:49986] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2kxLTQ5NDEtaTFudHQtODQ3MS0xbnQ=.cgi"] [unique_id "alQrRZihQxksrpCflyFDGQAAAMI"] [Sun Jul 12 18:03:17.918555 2026] [security2:error] [pid 940777:tid 940856] [remote 103.82.20.130:43298] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrRZihQxksrpCflyFDJQAA_0U"] [Sun Jul 12 18:03:17.948328 2026] [security2:error] [pid 940777:tid 940929] [client 20.63.87.152:8229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/.dj/index.php"] [unique_id "alQrRZihQxksrpCflyFDJgAAAJE"] [Sun Jul 12 18:03:18.135711 2026] [security2:error] [pid 941081:tid 941334] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrQ-ZnN2CRos_GBqX69QAAAgM"], referer: http://67.222.38.115/.env.live [Sun Jul 12 18:03:18.266638 2026] [security2:error] [pid 941081:tid 941223] [client 168.100.149.141:17670] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35230/bargainor/2307_did.jsp"] [unique_id "alQrRuZnN2CRos_GBqX7NwAAAZQ"] [Sun Jul 12 18:03:18.363454 2026] [security2:error] [pid 941081:tid 941344] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrROZnN2CRos_GBqX7CwAAAg0"] [Sun Jul 12 18:03:18.374798 2026] [security2:error] [pid 940777:tid 941018] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrRJihQxksrpCflyFDDgAAAOo"], referer: http://67.222.38.115/.env.local [Sun Jul 12 18:03:18.386260 2026] [security2:error] [pid 940777:tid 940838] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.env.old"] [unique_id "alQrKpihQxksrpCflyFDKgAApjQ"] [Sun Jul 12 18:03:18.392301 2026] [security2:error] [pid 940777:tid 940838] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.env.old"] [unique_id "alQrK5ihQxksrpCflyFDKwAApjQ"], referer: http://67.222.38.115/.env.old [Sun Jul 12 18:03:18.494549 2026] [security2:error] [pid 941081:tid 941244] [client 20.63.87.152:23308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/.trash7206/index.php"] [unique_id "alQrRuZnN2CRos_GBqX7RQAAAak"] [Sun Jul 12 18:03:18.527785 2026] [security2:error] [pid 941081:tid 941294] [client 191.6.37.26:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrReZnN2CRos_GBqX7MAAAAds"] [Sun Jul 12 18:03:18.668135 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:18.668758 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:18.835082 2026] [security2:error] [pid 941081:tid 941269] [client 47.121.27.225:49126] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQrRuZnN2CRos_GBqX7SAAAAcI"] [Sun Jul 12 18:03:18.982138 2026] [security2:error] [pid 941081:tid 941222] [client 20.63.87.152:30440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQrRuZnN2CRos_GBqX7TwAAAZM"] [Sun Jul 12 18:03:19.082080 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrRJihQxksrpCflyFDDQAAAKQ"] [Sun Jul 12 18:03:19.360457 2026] [security2:error] [pid 941081:tid 941275] [client 20.63.87.152:15259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/.well-known/logs233/index.php"] [unique_id "alQrR-ZnN2CRos_GBqX7WgAAAcg"] [Sun Jul 12 18:03:19.471411 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:19.471960 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:19.785356 2026] [security2:error] [pid 941081:tid 941312] [client 20.63.87.152:35759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/.well-known/wp-cron.php"] [unique_id "alQrR-ZnN2CRos_GBqX7XwAAAe0"] [Sun Jul 12 18:03:19.831728 2026] [security2:error] [pid 941081:tid 941170] [remote 216.73.216.109:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQrR-ZnN2CRos_GBqX7YAAB8lE"] [Sun Jul 12 18:03:19.841197 2026] [security2:error] [pid 941081:tid 941259] [client 24.203.79.110:56609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrR-ZnN2CRos_GBqX7YQAAAbg"] [Sun Jul 12 18:03:19.848932 2026] [security2:error] [pid 941081:tid 941259] [client 24.203.79.110:56609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrR-ZnN2CRos_GBqX7YQAAAbg"] [Sun Jul 12 18:03:19.865566 2026] [security2:error] [pid 941081:tid 941159] [remote 103.82.20.130:51092] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrR-ZnN2CRos_GBqX7YgABwUc"] [Sun Jul 12 18:03:19.985419 2026] [security2:error] [pid 941081:tid 941300] [client 64.176.198.37:51607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "madrasmediamarketing.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQrR-ZnN2CRos_GBqX7ZgAAAeE"] [Sun Jul 12 18:03:20.034641 2026] [security2:error] [pid 941081:tid 941249] [client 20.63.87.152:25641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/0.kb-v3.php"] [unique_id "alQrSOZnN2CRos_GBqX7ZwAAAa4"] [Sun Jul 12 18:03:20.193311 2026] [security2:error] [pid 941081:tid 941272] [client 8.234.37.247:46330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQrQeZnN2CRos_GBqX61AABxRQ"], referer: http://www.eagledownstudios.com/old/ [Sun Jul 12 18:03:20.254321 2026] [security2:error] [pid 940777:tid 941043] [client 168.100.149.36:59932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35295/bargainor/2307_delphian.jsp"] [unique_id "alQrSJihQxksrpCflyFDSAAAAQM"] [Sun Jul 12 18:03:20.293595 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:20.308359 2026] [security2:error] [pid 940777:tid 940960] [client 20.63.87.152:39326] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/0.php"] [unique_id "alQrSJihQxksrpCflyFDSwAAALA"] [Sun Jul 12 18:03:20.403253 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:20.698526 2026] [security2:error] [pid 940777:tid 941001] [client 149.28.225.231:58543] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQrSJihQxksrpCflyFDTQAAANk"] [Sun Jul 12 18:03:20.729931 2026] [security2:error] [pid 941081:tid 941288] [client 20.63.87.152:7155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/002.php"] [unique_id "alQrSOZnN2CRos_GBqX7ewAAAdU"] [Sun Jul 12 18:03:20.958462 2026] [security2:error] [pid 941081:tid 941310] [client 20.63.87.152:38649] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/01.php"] [unique_id "alQrSOZnN2CRos_GBqX7gAAAAes"] [Sun Jul 12 18:03:21.190534 2026] [security2:error] [pid 941081:tid 941313] [client 20.63.87.152:38617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/0x.php"] [unique_id "alQrSeZnN2CRos_GBqX7hAAAAe4"] [Sun Jul 12 18:03:21.206893 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:21.207534 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:21.289409 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrRpihQxksrpCflyFDMQAAAPM"], referer: http://67.222.38.115/.env.prod [Sun Jul 12 18:03:21.312864 2026] [security2:error] [pid 941081:tid 941264] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrRuZnN2CRos_GBqX7QAAAAb0"] [Sun Jul 12 18:03:21.424108 2026] [security2:error] [pid 940777:tid 940992] [client 197.48.221.253:53533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrSZihQxksrpCflyFDZwAAANA"] [Sun Jul 12 18:03:21.424367 2026] [security2:error] [pid 940777:tid 940992] [client 197.48.221.253:53533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrSZihQxksrpCflyFDZwAAANA"] [Sun Jul 12 18:03:21.455803 2026] [security2:error] [pid 940777:tid 940961] [client 20.63.87.152:41556] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.annsbestfriend.net"] [uri "/1.php"] [unique_id "alQrSZihQxksrpCflyFDaQAAALE"] [Sun Jul 12 18:03:21.456180 2026] [security2:error] [pid 940777:tid 940961] [client 20.63.87.152:41556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/1.php"] [unique_id "alQrSZihQxksrpCflyFDaQAAALE"] [Sun Jul 12 18:03:21.566581 2026] [security2:error] [pid 940777:tid 940994] [client 168.100.149.40:20978] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35360/bargainor/2307_anisodactyli.jsp"] [unique_id "alQrSZihQxksrpCflyFDbQAAANI"] [Sun Jul 12 18:03:21.918964 2026] [security2:error] [pid 941081:tid 941218] [client 20.63.87.152:23355] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/100.php"] [unique_id "alQrSeZnN2CRos_GBqX7ogAAAY8"] [Sun Jul 12 18:03:22.009762 2026] [security2:error] [pid 941081:tid 941292] [client 20.244.27.100:52302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-bindings-source.php"] [unique_id "alQrSuZnN2CRos_GBqX7pAAAAdk"], referer: binance.com [Sun Jul 12 18:03:22.050689 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:22.051185 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:22.091774 2026] [security2:error] [pid 941081:tid 941328] [client 8.234.37.247:46330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQrSeZnN2CRos_GBqX7jwAB_Rk"], referer: http://www.eagledownstudios.com/backup/ [Sun Jul 12 18:03:22.100724 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrRpihQxksrpCflyFDMAAAAL4"] [Sun Jul 12 18:03:22.132336 2026] [security2:error] [pid 941081:tid 941307] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2lfMzEyL2lwZi8yNjU3M19wZg==.htm"] [unique_id "alQrSuZnN2CRos_GBqX7qAAAAeg"] [Sun Jul 12 18:03:22.132565 2026] [security2:error] [pid 941081:tid 941284] [client 74.244.119.215:63763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrSuZnN2CRos_GBqX7pwAAAdE"] [Sun Jul 12 18:03:22.132909 2026] [security2:error] [pid 941081:tid 941284] [client 74.244.119.215:63763] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrSuZnN2CRos_GBqX7pwAAAdE"] [Sun Jul 12 18:03:22.159721 2026] [security2:error] [pid 941081:tid 941291] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrR-ZnN2CRos_GBqX7UgAAAdg"] [Sun Jul 12 18:03:22.340658 2026] [security2:error] [pid 941081:tid 941339] [client 20.63.87.152:23316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/122.php"] [unique_id "alQrSuZnN2CRos_GBqX7sQAAAgg"] [Sun Jul 12 18:03:22.506796 2026] [security2:error] [pid 940777:tid 940982] [client 50.87.253.215:55120] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2024/12/download.jpg"] [unique_id "alQrSpihQxksrpCflyFDhQAAAMY"] [Sun Jul 12 18:03:22.561847 2026] [security2:error] [pid 940777:tid 940921] [client 20.63.87.152:30974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/123.php"] [unique_id "alQrSpihQxksrpCflyFDhgAAAIk"] [Sun Jul 12 18:03:22.590861 2026] [security2:error] [pid 941081:tid 941326] [client 8.234.37.247:46330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQrSuZnN2CRos_GBqX7rQAB-1A"], referer: http://www.eagledownstudios.com/wp/ [Sun Jul 12 18:03:22.645160 2026] [security2:error] [pid 941081:tid 941267] [client 66.249.64.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrSeZnN2CRos_GBqX7lgAAAcA"] [Sun Jul 12 18:03:22.840508 2026] [security2:error] [pid 941081:tid 941286] [client 20.63.87.152:30917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/13.php"] [unique_id "alQrSuZnN2CRos_GBqX7uQAAAdM"] [Sun Jul 12 18:03:22.882871 2026] [authz_core:error] [pid 941081:tid 941251] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:22.883356 2026] [authz_core:error] [pid 941081:tid 941251] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:23.093175 2026] [security2:error] [pid 941081:tid 941269] [client 20.63.87.152:30435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/133.php"] [unique_id "alQrS-ZnN2CRos_GBqX7wwAAAcI"] [Sun Jul 12 18:03:23.268418 2026] [security2:error] [pid 940777:tid 940928] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrSpihQxksrpCflyFDigAAAJA"] [Sun Jul 12 18:03:23.268478 2026] [security2:error] [pid 940777:tid 940928] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrSpihQxksrpCflyFDigAAAJA"] [Sun Jul 12 18:03:23.272380 2026] [security2:error] [pid 940777:tid 941013] [client 65.21.113.206:57424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2lfMzEyL2lwZi8yNjU3M19wZg==.htm"] [unique_id "alQrSpihQxksrpCflyFDiAAAAOU"] [Sun Jul 12 18:03:23.309406 2026] [security2:error] [pid 941081:tid 941242] [client 8.234.37.247:46330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQrSuZnN2CRos_GBqX7tgABpy8"], referer: http://www.eagledownstudios.com/new/ [Sun Jul 12 18:03:23.341209 2026] [security2:error] [pid 941081:tid 941238] [client 51.68.111.245:27441] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "losangeles-moving-company.com"] [uri "/robots.txt"] [unique_id "alQrS-ZnN2CRos_GBqX7xgAAAaM"] [Sun Jul 12 18:03:23.341421 2026] [security2:error] [pid 941081:tid 941238] [client 51.68.111.245:27441] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "losangeles-moving-company.com"] [uri "/robots.txt"] [unique_id "alQrS-ZnN2CRos_GBqX7xgAAAaM"] [Sun Jul 12 18:03:23.421864 2026] [security2:error] [pid 941081:tid 941313] [client 20.63.87.152:25655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/155.php"] [unique_id "alQrS-ZnN2CRos_GBqX7ygAAAe4"] [Sun Jul 12 18:03:23.561598 2026] [security2:error] [pid 940777:tid 940922] [client 74.7.230.46:42364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cpanel.inverlochcpa.com"] [uri "/___proxy_subdomain_cpanel/robots.txt"] [unique_id "alQrS5ihQxksrpCflyFDmwAAAIo"] [Sun Jul 12 18:03:23.645594 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:23.646144 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:23.718887 2026] [security2:error] [pid 941081:tid 941277] [client 20.63.87.152:25662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/177.php"] [unique_id "alQrS-ZnN2CRos_GBqX7zAAAAco"] [Sun Jul 12 18:03:24.012373 2026] [security2:error] [pid 941081:tid 941323] [client 20.63.87.152:25628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/1index.php"] [unique_id "alQrTOZnN2CRos_GBqX7zwAAAfg"] [Sun Jul 12 18:03:24.281494 2026] [security2:error] [pid 940777:tid 940990] [client 168.100.149.245:42890] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35425/bargainor/2307_birefraction.jsp"] [unique_id "alQrTJihQxksrpCflyFDoAAAAM4"] [Sun Jul 12 18:03:24.318183 2026] [security2:error] [pid 941081:tid 941262] [client 8.234.37.247:46330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQrS-ZnN2CRos_GBqX7zQABu3I"], referer: http://www.eagledownstudios.com/wordpress/ [Sun Jul 12 18:03:24.328931 2026] [security2:error] [pid 941081:tid 941229] [client 20.63.87.152:15586] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/2.php"] [unique_id "alQrTOZnN2CRos_GBqX71gAAAZo"] [Sun Jul 12 18:03:24.405389 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:24.406010 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:24.739892 2026] [security2:error] [pid 940777:tid 941012] [client 20.63.87.152:8244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/222.php"] [unique_id "alQrTJihQxksrpCflyFDqwAAAOQ"] [Sun Jul 12 18:03:25.078204 2026] [security2:error] [pid 941081:tid 941265] [client 120.240.178.201:49281] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "birdgenoscape.org"] [uri "/index.php"] [unique_id "alQrSuZnN2CRos_GBqX7tAAAAb4"] [Sun Jul 12 18:03:25.094286 2026] [security2:error] [pid 941081:tid 941221] [client 20.63.87.152:41540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/2p.update.php"] [unique_id "alQrTeZnN2CRos_GBqX75QAAAZI"] [Sun Jul 12 18:03:25.189263 2026] [authz_core:error] [pid 940777:tid 941015] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:25.189910 2026] [authz_core:error] [pid 940777:tid 941015] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:25.347838 2026] [security2:error] [pid 941081:tid 941196] [remote 216.73.216.109:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQrTeZnN2CRos_GBqX76QAB8Gs"] [Sun Jul 12 18:03:25.455966 2026] [security2:error] [pid 940777:tid 941017] [client 20.63.87.152:30465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/3.php"] [unique_id "alQrTZihQxksrpCflyFDtAAAAOk"] [Sun Jul 12 18:03:25.467174 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2lmLzIzMTg3L2lmLzE0OTMvZmJu.asp"] [unique_id "alQrTeZnN2CRos_GBqX76wAAAas"] [Sun Jul 12 18:03:25.469046 2026] [security2:error] [pid 940777:tid 941030] [client 94.187.171.125:59684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrTZihQxksrpCflyFDtQAAAPY"] [Sun Jul 12 18:03:25.469291 2026] [security2:error] [pid 940777:tid 941030] [client 94.187.171.125:59684] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrTZihQxksrpCflyFDtQAAAPY"] [Sun Jul 12 18:03:25.475996 2026] [security2:error] [pid 940777:tid 940938] [client 85.87.161.238:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "monreaghulsterscotscentre.com"] [uri "/index.php"] [unique_id "alQrSpihQxksrpCflyFDhAAAAJo"] [Sun Jul 12 18:03:25.616160 2026] [security2:error] [pid 940777:tid 940864] [remote 216.73.216.33:62667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index32.xml"] [unique_id "alQrTZihQxksrpCflyFDtgAA7k0"] [Sun Jul 12 18:03:25.714540 2026] [security2:error] [pid 940777:tid 940970] [client 20.63.87.152:25611] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQrTZihQxksrpCflyFDtwAAALo"] [Sun Jul 12 18:03:25.913846 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:25.914352 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:26.015738 2026] [security2:error] [pid 941081:tid 941338] [client 20.63.87.152:8213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/403.php"] [unique_id "alQrTuZnN2CRos_GBqX79gAAAgc"] [Sun Jul 12 18:03:26.252501 2026] [security2:error] [pid 941081:tid 941232] [client 168.100.149.178:43442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35490/bargainor/2307_mediator.jsp"] [unique_id "alQrTuZnN2CRos_GBqX7-gAAAZ0"] [Sun Jul 12 18:03:26.424452 2026] [security2:error] [pid 941081:tid 941271] [client 20.63.87.152:15587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.annsbestfriend.net"] [uri "/404.php"] [unique_id "alQrTuZnN2CRos_GBqX8AAAAAcQ"] [Sun Jul 12 18:03:26.577482 2026] [security2:error] [pid 941081:tid 941311] [client 45.186.69.94:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrTuZnN2CRos_GBqX79wAAAew"] [Sun Jul 12 18:03:26.618136 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrTZihQxksrpCflyFDvAAAAP0"] [Sun Jul 12 18:03:26.618199 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrTZihQxksrpCflyFDvAAAAP0"] [Sun Jul 12 18:03:26.619819 2026] [security2:error] [pid 941081:tid 941286] [client 65.21.113.206:57428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2lmLzIzMTg3L2lmLzE0OTMvZmJu.asp"] [unique_id "alQrTeZnN2CRos_GBqX79QAAAdM"] [Sun Jul 12 18:03:26.718419 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:26.718927 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:26.868308 2026] [security2:error] [pid 941081:tid 941329] [client 20.244.27.100:60103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-editor-context.php"] [unique_id "alQrTuZnN2CRos_GBqX8BgAAAf4"], referer: binance.com [Sun Jul 12 18:03:27.491685 2026] [authz_core:error] [pid 940777:tid 941025] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:27.492188 2026] [authz_core:error] [pid 940777:tid 941025] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:28.092099 2026] [security2:error] [pid 940777:tid 940983] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSZihQxksrpCflyFDYQAAAMc"] [Sun Jul 12 18:03:28.101049 2026] [security2:error] [pid 941081:tid 941267] [client 216.244.66.195:58648] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "schneidersdairypgh.com"] [uri "/m/home"] [unique_id "alQrUOZnN2CRos_GBqX8JgAAAcA"] [Sun Jul 12 18:03:28.101304 2026] [security2:error] [pid 941081:tid 941267] [client 216.244.66.195:58648] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "schneidersdairypgh.com"] [uri "/m/home"] [unique_id "alQrUOZnN2CRos_GBqX8JgAAAcA"] [Sun Jul 12 18:03:28.104463 2026] [security2:error] [pid 941081:tid 941243] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSeZnN2CRos_GBqX7jAAAAag"], referer: http://67.222.38.115/.env.save [Sun Jul 12 18:03:28.123640 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSZihQxksrpCflyFDXQAAAM8"], referer: http://67.222.38.115/.env.prod.local [Sun Jul 12 18:03:28.130162 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSeZnN2CRos_GBqX7iAAAAZE"], referer: http://67.222.38.115/.env.production [Sun Jul 12 18:03:28.157754 2026] [security2:error] [pid 940777:tid 941041] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSZihQxksrpCflyFDXwAAAQE"], referer: http://67.222.38.115/.env.production.local [Sun Jul 12 18:03:28.165938 2026] [security2:error] [pid 941081:tid 941089] [remote 140.206.236.79:54324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.236.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.acedev.net"] [uri "/forumdisplay.php"] [unique_id "alQrUOZnN2CRos_GBqX8KwABmQE"] [Sun Jul 12 18:03:28.190065 2026] [security2:error] [pid 941081:tid 941305] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSeZnN2CRos_GBqX7igAAAeY"] [Sun Jul 12 18:03:28.204762 2026] [security2:error] [pid 941081:tid 941343] [client 168.100.149.223:20960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35555/bargainor/2307_gurian.jsp"] [unique_id "alQrUOZnN2CRos_GBqX8LAAAAgw"] [Sun Jul 12 18:03:28.204999 2026] [security2:error] [pid 941081:tid 941283] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSuZnN2CRos_GBqX7qQAAAdA"], referer: http://67.222.38.115/.env.staging [Sun Jul 12 18:03:28.219387 2026] [security2:error] [pid 941081:tid 941260] [client 184.154.76.56:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrT-ZnN2CRos_GBqX8HAAAAbk"] [Sun Jul 12 18:03:28.220734 2026] [security2:error] [pid 941081:tid 941259] [client 184.154.76.56:60870] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQrT-ZnN2CRos_GBqX8GgAAAbg"] [Sun Jul 12 18:03:28.220890 2026] [security2:error] [pid 941081:tid 941260] [client 184.154.76.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrT-ZnN2CRos_GBqX8HAAAAbk"] [Sun Jul 12 18:03:28.277742 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:28.278223 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:28.298902 2026] [security2:error] [pid 941081:tid 941285] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrSuZnN2CRos_GBqX7rgAAAdI"] [Sun Jul 12 18:03:29.022451 2026] [authz_core:error] [pid 941081:tid 941257] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:29.022972 2026] [authz_core:error] [pid 941081:tid 941257] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:29.649384 2026] [security2:error] [pid 941081:tid 941197] [remote 202.46.62.41:21106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 41.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/featured_products.php"] [unique_id "alQrUeZnN2CRos_GBqX8VwABxmw"] [Sun Jul 12 18:03:29.736291 2026] [security2:error] [pid 941081:tid 941231] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4LzE4NTUvamYvNDM0MDkvZg=="] [unique_id "alQrUeZnN2CRos_GBqX8WgAAAZw"] [Sun Jul 12 18:03:29.755711 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:29.756500 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:29.760998 2026] [security2:error] [pid 941081:tid 941274] [client 161.118.238.173:50115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.searchhomelongisland.com"] [uri "/wp-login.php"] [unique_id "alQrUeZnN2CRos_GBqX8XAAAAcc"], referer: https://wordpress.org/ [Sun Jul 12 18:03:29.813857 2026] [security2:error] [pid 941081:tid 941130] [remote 140.206.236.79:54336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.236.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQrUeZnN2CRos_GBqX8XgABwCo"], referer: https://www.cidclan.acedev.net/ [Sun Jul 12 18:03:29.835509 2026] [security2:error] [pid 941081:tid 941240] [client 57.141.18.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrUeZnN2CRos_GBqX8VAAAAaU"] [Sun Jul 12 18:03:29.899544 2026] [security2:error] [pid 941081:tid 941305] [client 216.75.132.102:48402] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "www.stephenspublishing.com"] [uri "/images/225CS-1.jpg"] [unique_id "alQrUeZnN2CRos_GBqX8ZAAAAeY"] [Sun Jul 12 18:03:30.092696 2026] [security2:error] [pid 941081:tid 941194] [remote 140.206.236.79:54336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.236.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQrUuZnN2CRos_GBqX8aAAB-Wk"], referer: https://www.cidclan.net/discord/gamer/gamer.php [Sun Jul 12 18:03:30.139378 2026] [security2:error] [pid 941081:tid 941250] [client 161.118.238.173:50285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.searchhomelongisland.com"] [uri "/wp-login.php"] [unique_id "alQrUuZnN2CRos_GBqX8agAAAa8"], referer: https://www.google.com/search?q=wordpress [Sun Jul 12 18:03:30.145198 2026] [security2:error] [pid 941081:tid 941253] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrUOZnN2CRos_GBqX8LwAAAbI"] [Sun Jul 12 18:03:30.155017 2026] [security2:error] [pid 941081:tid 941256] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrUOZnN2CRos_GBqX8MQAAAbU"] [Sun Jul 12 18:03:30.231390 2026] [security2:error] [pid 941081:tid 941313] [client 168.100.149.193:42044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35620/bargainor/2307_monkey.jsp"] [unique_id "alQrUuZnN2CRos_GBqX8bwAAAe4"] [Sun Jul 12 18:03:30.274594 2026] [security2:error] [pid 940777:tid 940822] [remote 216.73.216.33:62667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index29.xml"] [unique_id "alQrUpihQxksrpCflyFD2wAAwCQ"] [Sun Jul 12 18:03:30.473976 2026] [security2:error] [pid 941081:tid 941288] [client 24.203.79.110:57108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrUuZnN2CRos_GBqX8eQAAAdU"] [Sun Jul 12 18:03:30.474286 2026] [security2:error] [pid 941081:tid 941288] [client 24.203.79.110:57108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrUuZnN2CRos_GBqX8eQAAAdU"] [Sun Jul 12 18:03:30.509265 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:30.509853 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:30.749591 2026] [security2:error] [pid 941081:tid 941271] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrUuZnN2CRos_GBqX8cQAAAcQ"] [Sun Jul 12 18:03:30.749653 2026] [security2:error] [pid 941081:tid 941271] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrUuZnN2CRos_GBqX8cQAAAcQ"] [Sun Jul 12 18:03:30.752152 2026] [security2:error] [pid 941081:tid 941237] [client 65.21.113.206:57442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4LzE4NTUvamYvNDM0MDkvZg=="] [unique_id "alQrUuZnN2CRos_GBqX8bQAAAaI"] [Sun Jul 12 18:03:31.238697 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:31.239187 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:31.305954 2026] [security2:error] [pid 941081:tid 941232] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrUuZnN2CRos_GBqX8bAAAAZ0"] [Sun Jul 12 18:03:31.346261 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrN5ihQxksrpCflyFD2gAApnQ"] [Sun Jul 12 18:03:31.781335 2026] [security2:error] [pid 941081:tid 941123] [remote 47.86.33.52:5890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.33.86.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "chehaby.com"] [uri "/wp-login.php"] [unique_id "alQrU-ZnN2CRos_GBqX8lgABySM"] [Sun Jul 12 18:03:31.984157 2026] [security2:error] [pid 941081:tid 941243] [client 197.48.221.253:54138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrU-ZnN2CRos_GBqX8ngAAAag"] [Sun Jul 12 18:03:31.984364 2026] [security2:error] [pid 941081:tid 941243] [client 197.48.221.253:54138] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrU-ZnN2CRos_GBqX8ngAAAag"] [Sun Jul 12 18:03:32.057087 2026] [authz_core:error] [pid 941081:tid 941303] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:32.057570 2026] [authz_core:error] [pid 941081:tid 941303] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:32.250588 2026] [security2:error] [pid 941081:tid 941250] [client 168.100.149.5:41154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35685/bargainor/2307_impeccance.jsp"] [unique_id "alQrVOZnN2CRos_GBqX8pQAAAa8"] [Sun Jul 12 18:03:32.372235 2026] [security2:error] [pid 940777:tid 940949] [client 20.244.27.100:54558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-metadata-registry.php"] [unique_id "alQrVJihQxksrpCflyFD7wAAAKU"], referer: binance.com [Sun Jul 12 18:03:32.593499 2026] [security2:error] [pid 941081:tid 941220] [client 74.244.119.215:44101] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrVOZnN2CRos_GBqX8rwAAAZE"] [Sun Jul 12 18:03:32.593784 2026] [security2:error] [pid 941081:tid 941220] [client 74.244.119.215:44101] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrVOZnN2CRos_GBqX8rwAAAZE"] [Sun Jul 12 18:03:32.799403 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:32.800139 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:32.983319 2026] [security2:error] [pid 941081:tid 941225] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4LzgxNDEvamYvNDM0MDkvZg=="] [unique_id "alQrVOZnN2CRos_GBqX8vQAAAZY"] [Sun Jul 12 18:03:33.087689 2026] [security2:error] [pid 941081:tid 941293] [client 143.14.6.83:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQrU-ZnN2CRos_GBqX8mgAAAdo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:03:33.549543 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:33.550074 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:33.575082 2026] [security2:error] [pid 941081:tid 941255] [client 168.100.149.60:15182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35750/bargainor/2307_gunz.jsp"] [unique_id "alQrVeZnN2CRos_GBqX8yAAAAbQ"] [Sun Jul 12 18:03:33.710904 2026] [security2:error] [pid 941081:tid 941239] [client 86.254.60.196:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrVeZnN2CRos_GBqX8wQAAAaQ"] [Sun Jul 12 18:03:33.918193 2026] [security2:error] [pid 940777:tid 941036] [client 202.46.62.4:64798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 4.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/featured_products.php"] [unique_id "alQrVZihQxksrpCflyFD9gAAAPw"] [Sun Jul 12 18:03:34.039980 2026] [security2:error] [pid 941081:tid 941292] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrVeZnN2CRos_GBqX8xgAAAdk"] [Sun Jul 12 18:03:34.040037 2026] [security2:error] [pid 941081:tid 941292] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrVeZnN2CRos_GBqX8xgAAAdk"] [Sun Jul 12 18:03:34.041409 2026] [security2:error] [pid 941081:tid 941232] [client 65.21.113.206:49502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4LzgxNDEvamYvNDM0MDkvZg=="] [unique_id "alQrVeZnN2CRos_GBqX8xQAAAZ0"] [Sun Jul 12 18:03:34.071186 2026] [security2:error] [pid 940777:tid 940851] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrOJihQxksrpCflyFD5QAApkA"] [Sun Jul 12 18:03:34.109975 2026] [security2:error] [pid 940777:tid 940861] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrN5ihQxksrpCflyFD5AAApko"], referer: http://67.222.38.115/.eslintrc.json [Sun Jul 12 18:03:34.178616 2026] [security2:error] [pid 940777:tid 940806] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrN5ihQxksrpCflyFD4wAAphQ"], referer: http://67.222.38.115/.eslintrc.js [Sun Jul 12 18:03:34.240710 2026] [security2:error] [pid 941081:tid 941307] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrU-ZnN2CRos_GBqX8kQAAAeg"] [Sun Jul 12 18:03:34.343023 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:34.343725 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:35.158834 2026] [authz_core:error] [pid 941081:tid 941339] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:35.159324 2026] [authz_core:error] [pid 941081:tid 941339] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:35.195822 2026] [security2:error] [pid 941081:tid 941284] [client 57.141.18.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQrVOZnN2CRos_GBqX8qwAAAdE"] [Sun Jul 12 18:03:35.464776 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrVpihQxksrpCflyFEAQAAAIg"], referer: http://67.222.38.115/.firebaserc [Sun Jul 12 18:03:35.474695 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrVuZnN2CRos_GBqX86AAAAec"], referer: http://67.222.38.115/.ftpconfig [Sun Jul 12 18:03:35.589744 2026] [security2:error] [pid 941081:tid 941240] [client 168.100.149.175:64870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35815/bargainor/2307_monadically.jsp"] [unique_id "alQrV-ZnN2CRos_GBqX9AQAAAaU"] [Sun Jul 12 18:03:35.856322 2026] [security2:error] [pid 940777:tid 941010] [client 57.141.18.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQrVpihQxksrpCflyFEAgAAAOI"] [Sun Jul 12 18:03:35.947354 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:35.948110 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:36.122327 2026] [security2:error] [pid 941081:tid 941321] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4Lzk3MzQvamYvNDM0MDkvZg=="] [unique_id "alQrWOZnN2CRos_GBqX9FQAAAfY"] [Sun Jul 12 18:03:36.181191 2026] [security2:error] [pid 941081:tid 941267] [client 94.187.171.125:60333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrWOZnN2CRos_GBqX9FwAAAcA"] [Sun Jul 12 18:03:36.181481 2026] [security2:error] [pid 941081:tid 941267] [client 94.187.171.125:60333] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrWOZnN2CRos_GBqX9FwAAAcA"] [Sun Jul 12 18:03:36.455031 2026] [security2:error] [pid 940777:tid 940826] [remote 216.73.216.33:42918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index8.xml"] [unique_id "alQrWJihQxksrpCflyFEKAAA3ig"] [Sun Jul 12 18:03:36.800771 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:36.801242 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:37.097508 2026] [security2:error] [pid 941081:tid 941307] [client 138.122.120.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQrV-ZnN2CRos_GBqX9EQAAAeg"], referer: https://mackinstyle.com/ [Sun Jul 12 18:03:37.198735 2026] [security2:error] [pid 941081:tid 941338] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrWOZnN2CRos_GBqX9IAAAAgc"] [Sun Jul 12 18:03:37.198808 2026] [security2:error] [pid 941081:tid 941338] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrWOZnN2CRos_GBqX9IAAAAgc"] [Sun Jul 12 18:03:37.200368 2026] [security2:error] [pid 940777:tid 940951] [client 65.21.113.206:49510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2pmZ3M4Lzk3MzQvamYvNDM0MDkvZg=="] [unique_id "alQrWJihQxksrpCflyFEKgAAAKc"] [Sun Jul 12 18:03:37.222006 2026] [security2:error] [pid 940777:tid 940923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrV5ihQxksrpCflyFEHAAAAIs"], referer: http://67.222.38.115/.git/HEAD [Sun Jul 12 18:03:37.225566 2026] [security2:error] [pid 940777:tid 940959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrV5ihQxksrpCflyFEGgAAAK8"] [Sun Jul 12 18:03:37.588927 2026] [security2:error] [pid 941081:tid 941234] [client 168.100.149.174:43216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35880/bargainor/2307_enhalo.jsp"] [unique_id "alQrWeZnN2CRos_GBqX9LgAAAZ8"] [Sun Jul 12 18:03:37.599421 2026] [authz_core:error] [pid 941081:tid 941230] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:37.600002 2026] [authz_core:error] [pid 941081:tid 941230] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:38.360915 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:38.361399 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:38.366285 2026] [security2:error] [pid 940777:tid 940904] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrO5ihQxksrpCflyFELAAApnQ"] [Sun Jul 12 18:03:38.377027 2026] [security2:error] [pid 940777:tid 940989] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrWZihQxksrpCflyFELwAAAM0"], referer: http://67.222.38.115/.github/workflows/ [Sun Jul 12 18:03:38.468207 2026] [security2:error] [pid 941081:tid 941334] [client 184.154.76.56:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9QgAAAgM"] [Sun Jul 12 18:03:38.468279 2026] [security2:error] [pid 941081:tid 941334] [client 184.154.76.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9QgAAAgM"] [Sun Jul 12 18:03:38.469400 2026] [security2:error] [pid 941081:tid 941290] [client 184.154.76.56:43936] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/wp-content/plugins/revslider/release_log.txt"] [unique_id "alQrWuZnN2CRos_GBqX9QAAAAdc"] [Sun Jul 12 18:03:38.761243 2026] [security2:error] [pid 941081:tid 941270] [client 184.154.76.56:43948] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "www.whatworld.com"] [uri "/wp-content/plugins/contact-form-7/readme.txt"] [unique_id "alQrWuZnN2CRos_GBqX9TgAAAcM"] [Sun Jul 12 18:03:38.761487 2026] [security2:error] [pid 941081:tid 941270] [client 184.154.76.56:43948] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.whatworld.com"] [uri "/wp-content/plugins/contact-form-7/readme.txt"] [unique_id "alQrWuZnN2CRos_GBqX9TgAAAcM"] [Sun Jul 12 18:03:39.163021 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:39.163519 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:39.177863 2026] [security2:error] [pid 941081:tid 941225] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2s0LzQwNTQ3L2s0LzIyMzkvNDFo.asp"] [unique_id "alQrW-ZnN2CRos_GBqX9XwAAAZY"] [Sun Jul 12 18:03:39.200160 2026] [security2:error] [pid 941081:tid 941263] [client 184.154.76.56:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9WQAAAbw"] [Sun Jul 12 18:03:39.200240 2026] [security2:error] [pid 941081:tid 941263] [client 184.154.76.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9WQAAAbw"] [Sun Jul 12 18:03:39.201231 2026] [security2:error] [pid 941081:tid 941220] [client 184.154.76.56:43960] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.whatworld.com"] [uri "/wp-content/plugins/js_composer/changes.txt"] [unique_id "alQrWuZnN2CRos_GBqX9VQAAAZE"] [Sun Jul 12 18:03:39.304551 2026] [security2:error] [pid 941081:tid 941320] [client 74.7.175.155:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "timewisemom.com"] [uri "/robots.txt"] [unique_id "alQrW-ZnN2CRos_GBqX9YQAAAfU"] [Sun Jul 12 18:03:39.520415 2026] [security2:error] [pid 941081:tid 941246] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9SAAAAas"], referer: http://67.222.38.115/.github/workflows/build.yml [Sun Jul 12 18:03:39.569802 2026] [security2:error] [pid 941081:tid 941245] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrWuZnN2CRos_GBqX9SQAAAao"] [Sun Jul 12 18:03:39.974674 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:39.975166 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:40.260142 2026] [security2:error] [pid 941081:tid 941339] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrW-ZnN2CRos_GBqX9bwAAAgg"] [Sun Jul 12 18:03:40.260200 2026] [security2:error] [pid 941081:tid 941339] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrW-ZnN2CRos_GBqX9bwAAAgg"] [Sun Jul 12 18:03:40.261615 2026] [security2:error] [pid 941081:tid 941257] [client 65.21.113.206:49512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2s0LzQwNTQ3L2s0LzIyMzkvNDFo.asp"] [unique_id "alQrW-ZnN2CRos_GBqX9bQAAAbY"] [Sun Jul 12 18:03:40.267141 2026] [security2:error] [pid 941081:tid 941298] [client 168.100.149.113:49772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35945/bargainor/2307_metalogical.jsp"] [unique_id "alQrXOZnN2CRos_GBqX9egAAAd8"] [Sun Jul 12 18:03:40.698497 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:40.699002 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:40.922033 2026] [security2:error] [pid 941081:tid 941259] [client 188.166.99.91:59786] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQrXOZnN2CRos_GBqX9iwAAAbg"] [Sun Jul 12 18:03:41.089568 2026] [security2:error] [pid 941081:tid 941331] [client 24.203.79.110:57828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrXeZnN2CRos_GBqX9lgAAAgA"] [Sun Jul 12 18:03:41.089883 2026] [security2:error] [pid 941081:tid 941331] [client 24.203.79.110:57828] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrXeZnN2CRos_GBqX9lgAAAgA"] [Sun Jul 12 18:03:41.143769 2026] [rewrite:error] [pid 941081:tid 941219] [client 57.141.18.120:0] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:03:41.309721 2026] [security2:error] [pid 940777:tid 940857] [remote 216.73.216.33:42918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index33.xml"] [unique_id "alQrXZihQxksrpCflyFEYQAAk0Y"] [Sun Jul 12 18:03:41.462678 2026] [authz_core:error] [pid 940777:tid 940921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:41.463187 2026] [authz_core:error] [pid 940777:tid 940921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:41.581806 2026] [security2:error] [pid 941081:tid 941332] [client 168.100.149.39:15410] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36010/bargainor/2307_psychoreflex.jsp"] [unique_id "alQrXeZnN2CRos_GBqX9pQAAAgE"] [Sun Jul 12 18:03:41.831576 2026] [security2:error] [pid 940777:tid 941005] [client 180.102.110.176:57418] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/products-nw-88-uav-hfe.html"] [unique_id "alQrXZihQxksrpCflyFEZwAAAN0"] [Sun Jul 12 18:03:41.831794 2026] [security2:error] [pid 940777:tid 941005] [client 180.102.110.176:57418] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/products-nw-88-uav-hfe.html"] [unique_id "alQrXZihQxksrpCflyFEZwAAAN0"] [Sun Jul 12 18:03:42.067542 2026] [security2:error] [pid 941081:tid 941262] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2s0LzQwNTQ3L2s0LzUwNTgvNDFo.asp"] [unique_id "alQrXuZnN2CRos_GBqX9rAAAAbs"] [Sun Jul 12 18:03:42.169999 2026] [security2:error] [pid 941081:tid 941234] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW-ZnN2CRos_GBqX9ZgAAAZ8"] [Sun Jul 12 18:03:42.196554 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW5ihQxksrpCflyFEUAAAAL4"], referer: http://67.222.38.115/.github/workflows/ci.yml [Sun Jul 12 18:03:42.200817 2026] [security2:error] [pid 940777:tid 940925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW5ihQxksrpCflyFETwAAAI0"] [Sun Jul 12 18:03:42.219464 2026] [authz_core:error] [pid 940777:tid 940942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:42.220062 2026] [authz_core:error] [pid 940777:tid 940942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:42.255791 2026] [security2:error] [pid 941081:tid 941335] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW-ZnN2CRos_GBqX9aAAAAgQ"], referer: http://67.222.38.115/.github/workflows/coverage.yml [Sun Jul 12 18:03:42.500920 2026] [security2:error] [pid 941081:tid 941328] [client 197.48.221.253:54773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrXuZnN2CRos_GBqX9vQAAAf0"] [Sun Jul 12 18:03:42.501132 2026] [security2:error] [pid 941081:tid 941328] [client 197.48.221.253:54773] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrXuZnN2CRos_GBqX9vQAAAf0"] [Sun Jul 12 18:03:43.005115 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:43.005610 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:43.117228 2026] [security2:error] [pid 940777:tid 940969] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrXpihQxksrpCflyFEcwAAALk"] [Sun Jul 12 18:03:43.117298 2026] [security2:error] [pid 940777:tid 940969] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrXpihQxksrpCflyFEcwAAALk"] [Sun Jul 12 18:03:43.118635 2026] [security2:error] [pid 941081:tid 941284] [client 65.21.113.206:49526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2s0LzQwNTQ3L2s0LzUwNTgvNDFo.asp"] [unique_id "alQrXuZnN2CRos_GBqX9wQAAAdE"] [Sun Jul 12 18:03:43.132919 2026] [security2:error] [pid 940777:tid 940927] [client 20.244.27.100:53773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-parser-block.php"] [unique_id "alQrX5ihQxksrpCflyFEeQAAAI8"], referer: binance.com [Sun Jul 12 18:03:43.276134 2026] [security2:error] [pid 941081:tid 941224] [client 74.244.119.215:19171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrX-ZnN2CRos_GBqX9zgAAAZU"] [Sun Jul 12 18:03:43.276370 2026] [security2:error] [pid 941081:tid 941224] [client 74.244.119.215:19171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrX-ZnN2CRos_GBqX9zgAAAZU"] [Sun Jul 12 18:03:43.421088 2026] [security2:error] [pid 940777:tid 940996] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrXpihQxksrpCflyFEbgAAANQ"] [Sun Jul 12 18:03:43.560369 2026] [security2:error] [pid 941081:tid 941240] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrXuZnN2CRos_GBqX9twAAAaU"], referer: http://67.222.38.115/.github/workflows/pr.yml [Sun Jul 12 18:03:43.818471 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:43.819007 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:44.225252 2026] [security2:error] [pid 940777:tid 940958] [client 168.100.149.98:61074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36075/bargainor/2307_mailable.jsp"] [unique_id "alQrYJihQxksrpCflyFEiQAAAK4"] [Sun Jul 12 18:03:44.379088 2026] [security2:error] [pid 941081:tid 941291] [client 155.117.163.56:15734] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrYOZnN2CRos_GBqX93QAAAdg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:03:44.469922 2026] [security2:error] [pid 941081:tid 941275] [client 43.166.130.123:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.stephenspublishing.com"] [uri "/product_info.php"] [unique_id "alQrYOZnN2CRos_GBqX94QAAAcg"] [Sun Jul 12 18:03:44.567252 2026] [security2:error] [pid 940777:tid 940970] [client 57.141.18.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQrXpihQxksrpCflyFEcgAAALo"] [Sun Jul 12 18:03:44.660860 2026] [authz_core:error] [pid 940777:tid 940961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:44.661502 2026] [authz_core:error] [pid 940777:tid 940961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:44.843020 2026] [security2:error] [pid 941081:tid 941329] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2stNDk4L2swMi8zMTM0OS0wMjJn"] [unique_id "alQrYOZnN2CRos_GBqX95QAAAf4"] [Sun Jul 12 18:03:45.083471 2026] [security2:error] [pid 940777:tid 941008] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrX5ihQxksrpCflyFEfQAAAOA"] [Sun Jul 12 18:03:45.180584 2026] [security2:error] [pid 941081:tid 941299] [client 43.166.130.123:54776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.130.166.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/shopping_cart.php"] [unique_id "alQrYeZnN2CRos_GBqX97AAAAeA"], referer: https://www.stephenspublishing.com/face-cover-covid19-protection-stock-p-1124.html?action=add_product&osCsid=cjmkqcgjua551mbqekkdn8dff4 [Sun Jul 12 18:03:45.186837 2026] [security2:error] [pid 941081:tid 941252] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrX-ZnN2CRos_GBqX91QAAAbE"] [Sun Jul 12 18:03:45.394684 2026] [security2:error] [pid 940777:tid 940922] [client 197.146.222.48:46764] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQrYZihQxksrpCflyFEmQAAAIo"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-V530-14IKB-portable-batterie.htm [Sun Jul 12 18:03:45.451636 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:45.452135 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:45.890789 2026] [security2:error] [pid 941081:tid 941230] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrYeZnN2CRos_GBqX99gAAAZs"] [Sun Jul 12 18:03:45.890859 2026] [security2:error] [pid 941081:tid 941230] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrYeZnN2CRos_GBqX99gAAAZs"] [Sun Jul 12 18:03:45.892180 2026] [security2:error] [pid 941081:tid 941306] [client 65.21.113.206:43246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2stNDk4L2swMi8zMTM0OS0wMjJn"] [unique_id "alQrYeZnN2CRos_GBqX98wAAAec"] [Sun Jul 12 18:03:46.215693 2026] [security2:error] [pid 941081:tid 941311] [client 168.100.149.102:38950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36140/bargainor/2307_epidemiology.jsp"] [unique_id "alQrYuZnN2CRos_GBqX-CwAAAew"] [Sun Jul 12 18:03:46.238298 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:46.238831 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:46.262354 2026] [security2:error] [pid 941081:tid 941283] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrYeZnN2CRos_GBqX96wAAAdA"] [Sun Jul 12 18:03:46.331312 2026] [security2:error] [pid 941081:tid 941222] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrYeZnN2CRos_GBqX97gAAAZM"] [Sun Jul 12 18:03:46.894523 2026] [security2:error] [pid 941081:tid 941259] [client 94.187.171.125:60855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrYuZnN2CRos_GBqX-IgAAAbg"] [Sun Jul 12 18:03:46.894831 2026] [security2:error] [pid 941081:tid 941259] [client 94.187.171.125:60855] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrYuZnN2CRos_GBqX-IgAAAbg"] [Sun Jul 12 18:03:46.985058 2026] [authz_core:error] [pid 941081:tid 941263] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:46.985538 2026] [authz_core:error] [pid 941081:tid 941263] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:46.994590 2026] [security2:error] [pid 940777:tid 940989] [client 116.179.32.179:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "westoaksfellowship.org"] [uri "/index.php"] [unique_id "alQrYJihQxksrpCflyFEkAAAAM0"] [Sun Jul 12 18:03:47.297861 2026] [security2:error] [pid 940777:tid 941029] [client 76.90.178.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrYpihQxksrpCflyFEpAAAAPU"] [Sun Jul 12 18:03:47.400647 2026] [security2:error] [pid 940777:tid 940946] [client 57.141.18.112:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrYpihQxksrpCflyFEqgAAAKI"] [Sun Jul 12 18:03:47.435574 2026] [security2:error] [pid 941081:tid 941237] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzE2OTMvdmI1.asp"] [unique_id "alQrY-ZnN2CRos_GBqX-MAAAAaI"] [Sun Jul 12 18:03:47.489583 2026] [security2:error] [pid 941081:tid 941240] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrYuZnN2CRos_GBqX-DgAAAaU"], referer: http://67.222.38.115/.gitignore [Sun Jul 12 18:03:47.502946 2026] [security2:error] [pid 941081:tid 941276] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrYuZnN2CRos_GBqX-DQAAAck"] [Sun Jul 12 18:03:47.773052 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:47.773543 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:48.315657 2026] [security2:error] [pid 940777:tid 940970] [client 168.100.149.186:43266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36205/bargainor/2307_secque.jsp"] [unique_id "alQrZJihQxksrpCflyFEywAAALo"] [Sun Jul 12 18:03:48.492270 2026] [security2:error] [pid 940777:tid 941036] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrY5ihQxksrpCflyFExgAAAPw"] [Sun Jul 12 18:03:48.492322 2026] [security2:error] [pid 940777:tid 941036] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrY5ihQxksrpCflyFExgAAAPw"] [Sun Jul 12 18:03:48.493765 2026] [security2:error] [pid 940777:tid 941041] [client 65.21.113.206:43262] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzE2OTMvdmI1.asp"] [unique_id "alQrY5ihQxksrpCflyFEwgAAAQE"] [Sun Jul 12 18:03:48.592240 2026] [authz_core:error] [pid 941081:tid 941288] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:48.614788 2026] [authz_core:error] [pid 941081:tid 941288] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:48.802516 2026] [security2:error] [pid 941081:tid 941248] [client 20.244.27.100:60352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-parser-frame.php"] [unique_id "alQrZOZnN2CRos_GBqX-SwAAAa0"], referer: binance.com [Sun Jul 12 18:03:49.409326 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:49.409846 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:49.601256 2026] [security2:error] [pid 941081:tid 941321] [client 168.100.149.77:41716] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36270/bargainor/2307_dislevelment.jsp"] [unique_id "alQrZeZnN2CRos_GBqX-WgAAAfY"] [Sun Jul 12 18:03:49.682279 2026] [security2:error] [pid 941081:tid 941259] [client 70.50.206.102:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrZeZnN2CRos_GBqX-VQAAAbg"] [Sun Jul 12 18:03:49.925515 2026] [authz_core:error] [pid 940777:tid 941044] [client 3.151.194.164:35945] AH01630: client denied by server configuration: /home1/politiz5/public_html/cobd/php.ini, referer: http://cobdesigns-com-au.skyobrien.com/ [Sun Jul 12 18:03:50.025383 2026] [security2:error] [pid 941081:tid 941264] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzU0ODcvdmI1.asp"] [unique_id "alQrZuZnN2CRos_GBqX-ZQAAAb0"] [Sun Jul 12 18:03:50.245206 2026] [authz_core:error] [pid 940777:tid 941017] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:50.245814 2026] [authz_core:error] [pid 940777:tid 941017] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:50.253754 2026] [security2:error] [pid 940777:tid 941023] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrY5ihQxksrpCflyFEvAAAAO8"], referer: http://67.222.38.115/.gitlab-ci.yml [Sun Jul 12 18:03:50.257041 2026] [security2:error] [pid 940777:tid 940949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrY5ihQxksrpCflyFEuwAAAKU"] [Sun Jul 12 18:03:50.282799 2026] [security2:error] [pid 941081:tid 941266] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrY-ZnN2CRos_GBqX-NQAAAb8"] [Sun Jul 12 18:03:50.293261 2026] [autoindex:error] [pid 940777:tid 940986] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:03:50.313910 2026] [authz_core:error] [pid 940777:tid 940921] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/mymmdesi/public_html/.htpasswd [Sun Jul 12 18:03:50.330779 2026] [security2:error] [pid 940777:tid 940952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrY5ihQxksrpCflyFEugAAAKg"] [Sun Jul 12 18:03:51.113593 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:51.114170 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:51.120567 2026] [security2:error] [pid 940777:tid 940968] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrZpihQxksrpCflyFFAwAAALg"] [Sun Jul 12 18:03:51.122199 2026] [security2:error] [pid 941081:tid 941299] [client 65.21.113.206:43268] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzU0ODcvdmI1.asp"] [unique_id "alQrZuZnN2CRos_GBqX-cwAAAeA"] [Sun Jul 12 18:03:51.122209 2026] [security2:error] [pid 940777:tid 940968] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrZpihQxksrpCflyFFAwAAALg"] [Sun Jul 12 18:03:51.252132 2026] [cgid:error] [pid 941081:tid 941207] [remote 45.71.163.210:39270] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/shappe/404.shtml [Sun Jul 12 18:03:51.412231 2026] [security2:error] [pid 941081:tid 941337] [client 146.70.194.236:43204] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "redsautorehab.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQrZ-ZnN2CRos_GBqX-igAAAgY"] [Sun Jul 12 18:03:51.711707 2026] [security2:error] [pid 940777:tid 940957] [client 31.128.191.138:58780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 138.191.128.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQrZ5ihQxksrpCflyFFHgAAAK0"] [Sun Jul 12 18:03:51.712005 2026] [security2:error] [pid 940777:tid 940957] [client 31.128.191.138:58780] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQrZ5ihQxksrpCflyFFHgAAAK0"] [Sun Jul 12 18:03:51.751409 2026] [security2:error] [pid 940777:tid 940976] [client 24.203.79.110:58514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrZ5ihQxksrpCflyFFHwAAAMA"] [Sun Jul 12 18:03:51.751709 2026] [security2:error] [pid 940777:tid 940976] [client 24.203.79.110:58514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrZ5ihQxksrpCflyFFHwAAAMA"] [Sun Jul 12 18:03:51.951175 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:51.951722 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:52.083555 2026] [security2:error] [pid 940777:tid 940929] [client 41.116.138.238:25084] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQrZ5ihQxksrpCflyFFJAAAAJE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:03:52.227547 2026] [security2:error] [pid 940777:tid 940989] [client 168.100.149.113:26106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36335/bargainor/2307_limnoria.jsp"] [unique_id "alQraJihQxksrpCflyFFKAAAAM0"] [Sun Jul 12 18:03:52.381610 2026] [security2:error] [pid 941081:tid 941255] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzUyNzUvdmI1.asp"] [unique_id "alQraOZnN2CRos_GBqX-rgAAAbQ"] [Sun Jul 12 18:03:52.462631 2026] [security2:error] [pid 941081:tid 941123] [remote 216.73.216.109:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQraOZnN2CRos_GBqX-sQABsyM"] [Sun Jul 12 18:03:52.736870 2026] [autoindex:error] [pid 940777:tid 940927] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/css/colors/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:03:52.775765 2026] [authz_core:error] [pid 940777:tid 940952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:52.776340 2026] [authz_core:error] [pid 940777:tid 940952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:52.899726 2026] [security2:error] [pid 940777:tid 940986] [client 197.48.221.253:55380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQraJihQxksrpCflyFFPAAAAMo"] [Sun Jul 12 18:03:52.900007 2026] [security2:error] [pid 940777:tid 940986] [client 197.48.221.253:55380] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQraJihQxksrpCflyFFPAAAAMo"] [Sun Jul 12 18:03:52.975331 2026] [security2:error] [pid 941081:tid 941112] [remote 216.73.216.109:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQraOZnN2CRos_GBqX-vwABwxg"] [Sun Jul 12 18:03:53.493402 2026] [security2:error] [pid 941081:tid 941120] [remote 216.73.216.109:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQraeZnN2CRos_GBqX-0wACDCA"] [Sun Jul 12 18:03:53.584170 2026] [security2:error] [pid 941081:tid 941324] [client 74.244.119.215:64320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQraeZnN2CRos_GBqX-1gAAAfk"] [Sun Jul 12 18:03:53.584416 2026] [security2:error] [pid 941081:tid 941324] [client 74.244.119.215:64320] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQraeZnN2CRos_GBqX-1gAAAfk"] [Sun Jul 12 18:03:53.640312 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:53.651289 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:53.711873 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQraJihQxksrpCflyFFOwAAAMs"] [Sun Jul 12 18:03:53.711933 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQraJihQxksrpCflyFFOwAAAMs"] [Sun Jul 12 18:03:53.714140 2026] [security2:error] [pid 941081:tid 941325] [client 65.21.113.206:37758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2t2LzI3NDk5L2t2LzUyNzUvdmI1.asp"] [unique_id "alQraOZnN2CRos_GBqX-uwAAAfo"] [Sun Jul 12 18:03:54.088007 2026] [security2:error] [pid 941081:tid 941223] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrZuZnN2CRos_GBqX-bQAAAZQ"] [Sun Jul 12 18:03:54.155921 2026] [security2:error] [pid 941081:tid 941273] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrZuZnN2CRos_GBqX-bwAAAcY"], referer: http://67.222.38.115/.idea [Sun Jul 12 18:03:54.164911 2026] [security2:error] [pid 941081:tid 941226] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrZuZnN2CRos_GBqX-bgAAAZc"], referer: http://67.222.38.115/.idea/dataSources.xml [Sun Jul 12 18:03:54.191354 2026] [security2:error] [pid 941081:tid 941295] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrZuZnN2CRos_GBqX-cQAAAdw"] [Sun Jul 12 18:03:54.291261 2026] [security2:error] [pid 940777:tid 940918] [client 168.100.149.186:20606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36400/bargainor/2307_milksopism.jsp"] [unique_id "alQrapihQxksrpCflyFFUgAAAIY"] [Sun Jul 12 18:03:54.526317 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:54.526998 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:54.932801 2026] [security2:error] [pid 940777:tid 940838] [remote 47.128.115.142:50914] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mbitschoolstore.com"] [uri "/product/mbit-tan-hooded-sweathshirt/"] [unique_id "alQrapihQxksrpCflyFFZAAA5DQ"] [Sun Jul 12 18:03:54.959538 2026] [fcgid:warn] [pid 940777:tid 941024] (70014)End of file found: [client 93.174.93.12:60000] mod_fcgid: can't get data from http client [Sun Jul 12 18:03:54.984831 2026] [autoindex:error] [pid 940777:tid 940999] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:03:55.190012 2026] [security2:error] [pid 940777:tid 940921] [client 20.244.27.100:52700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-processor.php"] [unique_id "alQra5ihQxksrpCflyFFagAAAIk"], referer: binance.com [Sun Jul 12 18:03:55.365252 2026] [proxy:error] [pid 941081:tid 941298] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:03:55.365563 2026] [proxy_http:error] [pid 941081:tid 941298] [client 3.151.194.164:60698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:03:55.369220 2026] [proxy:error] [pid 941081:tid 941298] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:03:55.369487 2026] [proxy_http:error] [pid 941081:tid 941298] [client 3.151.194.164:60698] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:03:55.381072 2026] [security2:error] [pid 941081:tid 941270] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2tfMjI4NzFfazdjdi83XzI0NThfY3Y4.html"] [unique_id "alQra-ZnN2CRos_GBqX-9QAAAcM"] [Sun Jul 12 18:03:55.440010 2026] [authz_core:error] [pid 940777:tid 940956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:55.440839 2026] [authz_core:error] [pid 940777:tid 940956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:55.447778 2026] [security2:error] [pid 941081:tid 941300] [client 34.56.168.230:34048] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrauZnN2CRos_GBqX-6QAB4Tc"] [Sun Jul 12 18:03:55.564125 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrauZnN2CRos_GBqX-5QAAAec"], referer: http://67.222.38.115/.idea/misc.xml [Sun Jul 12 18:03:55.598502 2026] [security2:error] [pid 940777:tid 940946] [client 168.100.149.154:32008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36465/bargainor/2307_capnoides.jsp"] [unique_id "alQra5ihQxksrpCflyFFcwAAAKI"] [Sun Jul 12 18:03:56.049653 2026] [security2:error] [pid 941081:tid 941258] [client 34.56.168.230:34048] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQra-ZnN2CRos_GBqX-9wABtyw"] [Sun Jul 12 18:03:56.093191 2026] [security2:error] [pid 940777:tid 941039] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrapihQxksrpCflyFFUAAAAP8"] [Sun Jul 12 18:03:56.111774 2026] [security2:error] [pid 941081:tid 941344] [client 146.70.194.236:6675] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQra-ZnN2CRos_GBqX--QAAAg0"] [Sun Jul 12 18:03:56.148850 2026] [security2:error] [pid 941081:tid 941315] [client 31.173.87.209:29778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQraeZnN2CRos_GBqX-2wAAAfA"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:03:56.149012 2026] [security2:error] [pid 941081:tid 941315] [client 31.173.87.209:29778] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQraeZnN2CRos_GBqX-2wAAAfA"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:03:56.384570 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:56.385097 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:56.592469 2026] [security2:error] [pid 940777:tid 940994] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFfAAAANI"] [Sun Jul 12 18:03:56.592527 2026] [security2:error] [pid 940777:tid 940994] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFfAAAANI"] [Sun Jul 12 18:03:56.593118 2026] [security2:error] [pid 941081:tid 941313] [client 65.21.113.206:37772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2tfMjI4NzFfazdjdi83XzI0NThfY3Y4.html"] [unique_id "alQra-ZnN2CRos_GBqX_AwAAAe4"] [Sun Jul 12 18:03:57.105483 2026] [security2:error] [pid 941081:tid 941309] [client 146.70.194.236:43218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrbOZnN2CRos_GBqX_EgAAAeo"] [Sun Jul 12 18:03:57.138714 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:57.139331 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:57.191492 2026] [security2:error] [pid 940777:tid 940981] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrbJihQxksrpCflyFFiQAAAMU"] [Sun Jul 12 18:03:57.657220 2026] [security2:error] [pid 941081:tid 941234] [client 94.187.171.125:61343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrbeZnN2CRos_GBqX_KgAAAZ8"] [Sun Jul 12 18:03:57.657506 2026] [security2:error] [pid 941081:tid 941234] [client 94.187.171.125:61343] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrbeZnN2CRos_GBqX_KgAAAZ8"] [Sun Jul 12 18:03:57.978292 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:57.979021 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:58.132137 2026] [security2:error] [pid 940777:tid 940952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFdQAAAKg"] [Sun Jul 12 18:03:58.203495 2026] [security2:error] [pid 940777:tid 940997] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFdgAAANU"], referer: http://67.222.38.115/.idea/deployment.xml [Sun Jul 12 18:03:58.218878 2026] [security2:error] [pid 940777:tid 940959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFdAAAAK8"] [Sun Jul 12 18:03:58.234017 2026] [security2:error] [pid 940777:tid 940930] [client 146.70.194.236:26423] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrbZihQxksrpCflyFFlgAAAJI"] [Sun Jul 12 18:03:58.273325 2026] [security2:error] [pid 941081:tid 941281] [client 168.100.149.224:33274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36530/bargainor/2307_deft.jsp"] [unique_id "alQrbuZnN2CRos_GBqX_QAAAAc4"] [Sun Jul 12 18:03:58.375833 2026] [security2:error] [pid 940777:tid 941011] [client 91.126.170.212:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrbZihQxksrpCflyFFmQAAAOM"] [Sun Jul 12 18:03:58.413873 2026] [autoindex:error] [pid 940777:tid 941029] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:03:58.450640 2026] [security2:error] [pid 940777:tid 940970] [client 34.186.224.150:42512] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQra5ihQxksrpCflyFFfQAAuiE"], referer: http://www.fitlifewithvatsa.com/wordpress/ [Sun Jul 12 18:03:58.600303 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2tfMjI4NzFfazdjdi83XzY1MTdfY3Y4.html"] [unique_id "alQrbuZnN2CRos_GBqX_RgAAAdo"] [Sun Jul 12 18:03:58.779689 2026] [security2:error] [pid 941081:tid 941232] [client 31.173.85.166:2233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 166.85.173.31.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQrbuZnN2CRos_GBqX_SgAAAZ0"], referer: https://mackinstyle.com/2015/02/04/write-for-sparkles-secrets/ [Sun Jul 12 18:03:58.783006 2026] [security2:error] [pid 940777:tid 941026] [client 34.186.224.150:42514] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrbpihQxksrpCflyFFpwAA8gQ"], referer: https://www.fitlifewithvatsa.com/wordpress/ [Sun Jul 12 18:03:58.793112 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:58.798225 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:58.954848 2026] [security2:error] [pid 940777:tid 941007] [client 34.56.168.230:44800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrbpihQxksrpCflyFFpQAA32I"] [Sun Jul 12 18:03:59.191708 2026] [security2:error] [pid 940777:tid 940927] [client 146.70.194.236:43228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrbpihQxksrpCflyFFqwAAAI8"] [Sun Jul 12 18:03:59.262358 2026] [security2:error] [pid 941081:tid 941224] [client 31.173.87.209:19582] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-admin/admin.php"] [unique_id "alQrbuZnN2CRos_GBqX_SQAAAZU"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:03:59.493940 2026] [security2:error] [pid 941081:tid 941278] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrbuZnN2CRos_GBqX_PgAAAcs"], referer: http://67.222.38.115/.idea/workspace.xml [Sun Jul 12 18:03:59.543262 2026] [security2:error] [pid 941081:tid 941289] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrbuZnN2CRos_GBqX_PQAAAdY"] [Sun Jul 12 18:03:59.584713 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:03:59.585435 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:03:59.661660 2026] [security2:error] [pid 940777:tid 941025] [client 34.56.168.230:44800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrbpihQxksrpCflyFFrgAA8VM"] [Sun Jul 12 18:03:59.687823 2026] [security2:error] [pid 941081:tid 941254] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrb-ZnN2CRos_GBqX_UwAAAbM"] [Sun Jul 12 18:03:59.687889 2026] [security2:error] [pid 941081:tid 941254] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrb-ZnN2CRos_GBqX_UwAAAbM"] [Sun Jul 12 18:03:59.690431 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:37778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2tfMjI4NzFfazdjdi83XzY1MTdfY3Y4.html"] [unique_id "alQrb5ihQxksrpCflyFFrwAAANE"] [Sun Jul 12 18:04:00.158562 2026] [security2:error] [pid 941081:tid 941344] [client 20.244.27.100:62460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "alQrcOZnN2CRos_GBqX_ZgAAAg0"], referer: binance.com [Sun Jul 12 18:04:00.201998 2026] [security2:error] [pid 940777:tid 941036] [client 146.70.194.236:43636] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrb5ihQxksrpCflyFFwAAAAPw"] [Sun Jul 12 18:04:00.231133 2026] [security2:error] [pid 941081:tid 941299] [client 168.100.149.139:60758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36595/bargainor/2307_did.jsp"] [unique_id "alQrcOZnN2CRos_GBqX_awAAAeA"] [Sun Jul 12 18:04:00.420648 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:00.421334 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:00.796797 2026] [security2:error] [pid 940777:tid 940971] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrcJihQxksrpCflyFFyQAAALs"] [Sun Jul 12 18:04:01.127893 2026] [security2:error] [pid 940777:tid 941012] [client 146.70.194.236:43652] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrcJihQxksrpCflyFF1wAAAOQ"] [Sun Jul 12 18:04:01.232548 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:01.233125 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:01.236017 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrUpihQxksrpCflyFFuQAApkE"] [Sun Jul 12 18:04:01.248166 2026] [security2:error] [pid 940777:tid 940841] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrUpihQxksrpCflyFFugAApjY"], referer: http://67.222.38.115/.infisical.json [Sun Jul 12 18:04:01.973310 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:01.973826 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:02.064068 2026] [security2:error] [pid 941081:tid 941332] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2tfNTQ1NC9rOGwvNDIyMjVfOGw=.htm"] [unique_id "alQrcuZnN2CRos_GBqX_sQAAAgE"] [Sun Jul 12 18:04:02.191807 2026] [autoindex:error] [pid 940777:tid 941000] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/maint/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:02.230227 2026] [security2:error] [pid 941081:tid 941326] [client 165.232.160.250:53641] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQrcuZnN2CRos_GBqX_swAAAfs"] [Sun Jul 12 18:04:02.251090 2026] [security2:error] [pid 941081:tid 941325] [client 168.100.149.214:52518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36660/bargainor/2307_delphian.jsp"] [unique_id "alQrcuZnN2CRos_GBqX_tAAAAfo"] [Sun Jul 12 18:04:02.351845 2026] [security2:error] [pid 941081:tid 941315] [client 24.203.79.110:59022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrcuZnN2CRos_GBqX_uAAAAfA"] [Sun Jul 12 18:04:02.357844 2026] [security2:error] [pid 941081:tid 941315] [client 24.203.79.110:59022] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrcuZnN2CRos_GBqX_uAAAAfA"] [Sun Jul 12 18:04:02.412154 2026] [security2:error] [pid 941081:tid 941245] [client 34.56.168.230:48272] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrceZnN2CRos_GBqX_rwABqmE"] [Sun Jul 12 18:04:02.451335 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrceZnN2CRos_GBqX_ngAAAaI"], referer: http://67.222.38.115/.minikube/ [Sun Jul 12 18:04:02.520137 2026] [security2:error] [pid 941081:tid 941298] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrceZnN2CRos_GBqX_nQAAAd8"] [Sun Jul 12 18:04:02.735303 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:02.735813 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:02.879833 2026] [security2:error] [pid 941081:tid 941277] [client 34.56.168.230:48272] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrcuZnN2CRos_GBqX_uQABymg"] [Sun Jul 12 18:04:03.138648 2026] [security2:error] [pid 941081:tid 941228] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrcuZnN2CRos_GBqX_vQAAAZk"] [Sun Jul 12 18:04:03.138716 2026] [security2:error] [pid 941081:tid 941228] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrcuZnN2CRos_GBqX_vQAAAZk"] [Sun Jul 12 18:04:03.141848 2026] [security2:error] [pid 940777:tid 940967] [client 65.21.113.206:37790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2tfNTQ1NC9rOGwvNDIyMjVfOGw=.htm"] [unique_id "alQrcpihQxksrpCflyFF8wAAALc"] [Sun Jul 12 18:04:03.260367 2026] [security2:error] [pid 941081:tid 941244] [client 165.232.160.250:53746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.160.232.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.charterschoolofexcellence.org"] [uri "/xmlrpc.php"] [unique_id "alQrc-ZnN2CRos_GBqX_xAAAAak"] [Sun Jul 12 18:04:03.275653 2026] [security2:error] [pid 940777:tid 940938] [client 52.167.144.192:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQrcpihQxksrpCflyFF-QAAAJo"] [Sun Jul 12 18:04:03.439701 2026] [security2:error] [pid 940777:tid 940973] [client 197.48.221.253:55973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrc5ihQxksrpCflyFGBQAAAL0"] [Sun Jul 12 18:04:03.439925 2026] [security2:error] [pid 940777:tid 940973] [client 197.48.221.253:55973] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrc5ihQxksrpCflyFGBQAAAL0"] [Sun Jul 12 18:04:03.550960 2026] [authz_core:error] [pid 941081:tid 941294] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:03.551646 2026] [authz_core:error] [pid 941081:tid 941294] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:03.706618 2026] [security2:error] [pid 941081:tid 941336] [client 146.70.194.236:43656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrc-ZnN2CRos_GBqX_zgAAAgU"] [Sun Jul 12 18:04:03.778480 2026] [security2:error] [pid 941081:tid 941226] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrc-ZnN2CRos_GBqX_ywAAAZc"] [Sun Jul 12 18:04:04.130132 2026] [security2:error] [pid 940777:tid 940962] [client 74.244.119.215:57124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrdJihQxksrpCflyFGCgAAALI"] [Sun Jul 12 18:04:04.130363 2026] [security2:error] [pid 940777:tid 940962] [client 74.244.119.215:57124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrdJihQxksrpCflyFGCgAAALI"] [Sun Jul 12 18:04:04.141467 2026] [security2:error] [pid 941081:tid 941336] [client 165.232.160.250:53884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQrdOZnN2CRos_GBqX_6AAAAgU"] [Sun Jul 12 18:04:04.214582 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrVpihQxksrpCflyFF8gAApkE"], referer: http://67.222.38.115/.mongorc.js [Sun Jul 12 18:04:04.237640 2026] [security2:error] [pid 940777:tid 941004] [client 23.236.55.230:38144] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "upperpottsgrovejournal.com"] [uri "/index.php"] [unique_id "alQrc5ihQxksrpCflyFGBwAA3GA"] [Sun Jul 12 18:04:04.276986 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrcpihQxksrpCflyFF8AAAAL4"] [Sun Jul 12 18:04:04.288870 2026] [security2:error] [pid 940777:tid 941034] [client 168.100.149.115:16562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36725/bargainor/2307_anisodactyli.jsp"] [unique_id "alQrdJihQxksrpCflyFGFQAAAPo"] [Sun Jul 12 18:04:04.356044 2026] [security2:error] [pid 940777:tid 940925] [client 57.141.18.16:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrc5ihQxksrpCflyFGCAAAAI0"] [Sun Jul 12 18:04:04.447732 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:04.448238 2026] [authz_core:error] [pid 940777:tid 941037] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:04.624949 2026] [security2:error] [pid 940777:tid 941005] [client 146.70.194.236:43660] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrdJihQxksrpCflyFGFwAAAN0"] [Sun Jul 12 18:04:04.751815 2026] [security2:error] [pid 941081:tid 941263] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2ttLTEyNTI5LWttcTIyLTQ1MjEtbXEy.cgi"] [unique_id "alQrdOZnN2CRos_GBqX_9QAAAbw"] [Sun Jul 12 18:04:04.763197 2026] [security2:error] [pid 940777:tid 941012] [client 34.186.224.150:42512] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdJihQxksrpCflyFGIgAA5HI"], referer: http://www.fitlifewithvatsa.com/blog/ [Sun Jul 12 18:04:04.978323 2026] [security2:error] [pid 940777:tid 940992] [client 34.186.224.150:38800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdJihQxksrpCflyFGKwAA0BA"], referer: https://www.fitlifewithvatsa.com/blog/ [Sun Jul 12 18:04:04.987875 2026] [security2:error] [pid 941081:tid 941222] [client 165.232.160.250:54020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQrdOZnN2CRos_GBqX_-QAAAZM"] [Sun Jul 12 18:04:05.089992 2026] [security2:error] [pid 940777:tid 941020] [client 34.60.131.171:33856] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrdJihQxksrpCflyFGIAAA7Gc"] [Sun Jul 12 18:04:05.239731 2026] [security2:error] [pid 940777:tid 940982] [client 34.186.224.150:42512] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdZihQxksrpCflyFGMAAAxms"], referer: http://www.fitlifewithvatsa.com/backup/ [Sun Jul 12 18:04:05.267480 2026] [authz_core:error] [pid 940777:tid 941017] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:05.268229 2026] [authz_core:error] [pid 940777:tid 941017] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:05.273326 2026] [security2:error] [pid 941081:tid 941321] [client 20.244.27.100:51832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-block-templates-registry.php"] [unique_id "alQrdeZnN2CRos_GBqUABAAAAfY"], referer: binance.com [Sun Jul 12 18:04:05.351068 2026] [security2:error] [pid 940777:tid 940959] [client 23.236.55.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "upperpottsgrovejournal.com"] [uri "/index.php"] [unique_id "alQrdJihQxksrpCflyFGHgAAAK8"] [Sun Jul 12 18:04:05.358358 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrWJihQxksrpCflyFGDQAApkE"] [Sun Jul 12 18:04:05.398893 2026] [security2:error] [pid 940777:tid 940949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrdJihQxksrpCflyFGGAAAAKU"] [Sun Jul 12 18:04:05.522243 2026] [security2:error] [pid 940777:tid 940939] [client 34.186.224.150:38800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdZihQxksrpCflyFGNQAAmyM"], referer: https://www.fitlifewithvatsa.com/backup/ [Sun Jul 12 18:04:05.588450 2026] [security2:error] [pid 940777:tid 940806] [remote 34.60.131.171:33856] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrdZihQxksrpCflyFGMgAAuRQ"] [Sun Jul 12 18:04:05.723317 2026] [security2:error] [pid 941081:tid 941329] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUAAwAAAf4"] [Sun Jul 12 18:04:05.723401 2026] [security2:error] [pid 941081:tid 941329] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUAAwAAAf4"] [Sun Jul 12 18:04:05.724796 2026] [security2:error] [pid 941081:tid 941224] [client 65.21.113.206:59076] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2ttLTEyNTI5LWttcTIyLTQ1MjEtbXEy.cgi"] [unique_id "alQrdeZnN2CRos_GBqUAAQAAAZU"] [Sun Jul 12 18:04:05.727380 2026] [security2:error] [pid 941081:tid 941322] [client 66.132.224.233:28280] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "70.40.196.118"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUADwAAAfc"] [Sun Jul 12 18:04:05.859126 2026] [security2:error] [pid 940777:tid 940961] [client 165.232.160.250:54123] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQrdZihQxksrpCflyFGTAAAALE"] [Sun Jul 12 18:04:05.910231 2026] [security2:error] [pid 941081:tid 941206] [remote 57.141.18.40:55756] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/kA0DR3RFViRrpBsAPwGS"] [unique_id "alQrdeZnN2CRos_GBqUAHQAB6nU"] [Sun Jul 12 18:04:06.091087 2026] [authz_core:error] [pid 941081:tid 941229] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:06.091806 2026] [authz_core:error] [pid 941081:tid 941229] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:06.243416 2026] [security2:error] [pid 940777:tid 940976] [client 168.100.149.169:34028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36790/bargainor/2307_birefraction.jsp"] [unique_id "alQrdpihQxksrpCflyFGWwAAAMA"] [Sun Jul 12 18:04:06.438792 2026] [security2:error] [pid 940777:tid 940919] [client 34.186.224.150:42512] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdpihQxksrpCflyFGWgAAhxk"], referer: http://www.fitlifewithvatsa.com/wp/ [Sun Jul 12 18:04:06.572908 2026] [security2:error] [pid 940777:tid 940974] [client 146.70.194.236:27026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrdpihQxksrpCflyFGWQAAAL4"] [Sun Jul 12 18:04:06.647932 2026] [security2:error] [pid 940777:tid 940970] [client 34.186.224.150:38800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdpihQxksrpCflyFGXgAAuis"], referer: https://www.fitlifewithvatsa.com/wp/ [Sun Jul 12 18:04:06.649830 2026] [security2:error] [pid 940777:tid 940978] [client 34.60.131.171:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrdpihQxksrpCflyFGWAAAAMI"] [Sun Jul 12 18:04:06.673368 2026] [security2:error] [pid 940777:tid 941011] [client 165.232.160.250:54262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQrdpihQxksrpCflyFGYAAAAOM"] [Sun Jul 12 18:04:06.904590 2026] [security2:error] [pid 940777:tid 941026] [client 34.186.224.150:42512] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdpihQxksrpCflyFGZAAA8gc"], referer: http://www.fitlifewithvatsa.com/new/ [Sun Jul 12 18:04:06.936955 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:06.937705 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:07.146759 2026] [security2:error] [pid 940777:tid 940944] [client 34.186.224.150:38800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQrdpihQxksrpCflyFGZgAAoFA"], referer: https://www.fitlifewithvatsa.com/new/ [Sun Jul 12 18:04:07.200004 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2txb3pmYl8zMTIva3EvMjY1MzcvcQ==.html"] [unique_id "alQrd-ZnN2CRos_GBqUAPwAAAdA"] [Sun Jul 12 18:04:07.454703 2026] [autoindex:error] [pid 940777:tid 941027] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/js/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:07.461805 2026] [security2:error] [pid 940777:tid 940960] [client 146.70.194.236:43676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrd5ihQxksrpCflyFGbAAAALA"] [Sun Jul 12 18:04:07.489897 2026] [security2:error] [pid 941081:tid 941235] [client 165.232.160.250:54361] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQrd-ZnN2CRos_GBqUARgAAAaA"] [Sun Jul 12 18:04:07.598859 2026] [security2:error] [pid 940777:tid 940956] [client 47.128.24.70:10766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "singularstudiosnj.com"] [uri "/robots.txt"] [unique_id "alQrd5ihQxksrpCflyFGeAAAAKw"] [Sun Jul 12 18:04:07.726785 2026] [authz_core:error] [pid 941081:tid 941341] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:07.727257 2026] [authz_core:error] [pid 941081:tid 941341] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:08.132765 2026] [security2:error] [pid 941081:tid 941325] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrd-ZnN2CRos_GBqUATwAAAfo"] [Sun Jul 12 18:04:08.132871 2026] [security2:error] [pid 941081:tid 941325] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrd-ZnN2CRos_GBqUATwAAAfo"] [Sun Jul 12 18:04:08.135029 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:59088] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2txb3pmYl8zMTIva3EvMjY1MzcvcQ==.html"] [unique_id "alQrd-ZnN2CRos_GBqUATQAAAgQ"] [Sun Jul 12 18:04:08.159188 2026] [security2:error] [pid 941081:tid 941273] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUACQAAAcY"], referer: http://67.222.38.115/.netrc [Sun Jul 12 18:04:08.163976 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUACAAAAZE"] [Sun Jul 12 18:04:08.267396 2026] [security2:error] [pid 940777:tid 940936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrdZihQxksrpCflyFGQwAAAJg"], referer: http://67.222.38.115/.msmtprc [Sun Jul 12 18:04:08.278329 2026] [security2:error] [pid 941081:tid 941245] [client 94.187.171.125:61836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQreOZnN2CRos_GBqUAXQAAAao"] [Sun Jul 12 18:04:08.278638 2026] [security2:error] [pid 941081:tid 941245] [client 94.187.171.125:61836] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQreOZnN2CRos_GBqUAXQAAAao"] [Sun Jul 12 18:04:08.297911 2026] [security2:error] [pid 941081:tid 941339] [client 146.70.194.236:43686] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQreOZnN2CRos_GBqUAVgAAAgg"] [Sun Jul 12 18:04:08.301731 2026] [security2:error] [pid 941081:tid 941304] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrdeZnN2CRos_GBqUACgAAAeU"] [Sun Jul 12 18:04:08.317214 2026] [security2:error] [pid 941081:tid 941219] [client 168.100.149.42:26106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36855/bargainor/2307_mediator.jsp"] [unique_id "alQreOZnN2CRos_GBqUAXgAAAZA"] [Sun Jul 12 18:04:08.321872 2026] [security2:error] [pid 941081:tid 941227] [client 165.232.160.250:54483] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQreOZnN2CRos_GBqUAYAAAAZg"] [Sun Jul 12 18:04:08.369188 2026] [security2:error] [pid 941081:tid 941279] [client 34.56.168.230:37088] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrd-ZnN2CRos_GBqUAVAABzHY"] [Sun Jul 12 18:04:08.502552 2026] [security2:error] [pid 941081:tid 941218] [client 178.176.78.86:17492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.78.176.178.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQreOZnN2CRos_GBqUAZwAAAY8"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:04:08.559981 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:08.560480 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:08.635576 2026] [core:error] [pid 941081:tid 941281] [client 45.67.85.190:36980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:08.635620 2026] [core:error] [pid 941081:tid 941281] [client 45.67.85.190:36980] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:08.809270 2026] [security2:error] [pid 940777:tid 940929] [client 45.42.12.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQreJihQxksrpCflyFGjAAAAJE"] [Sun Jul 12 18:04:08.817101 2026] [security2:error] [pid 941081:tid 941221] [client 34.56.168.230:37088] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQreOZnN2CRos_GBqUAbAABkhE"] [Sun Jul 12 18:04:09.120760 2026] [security2:error] [pid 940777:tid 940976] [client 165.232.160.250:54600] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQreZihQxksrpCflyFGkgAAAMA"] [Sun Jul 12 18:04:09.200342 2026] [security2:error] [pid 941081:tid 941275] [client 146.70.194.236:43696] ModSecurity: Warning. Operator GE matched 2 at IP:dos_burst_counter. [file "/etc/httpd/modsecurity.d/03_asl_dos.conf"] [line "99"] [id "350114"] [rev "1"] [msg "Atomicorp.com WAF Rules: Potential Denial of Service (DoS) Attack from - # of Request Bursts: 2"] [severity "ERROR"] [tag "no_ar"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQreOZnN2CRos_GBqUAdQAAAcg"] [Sun Jul 12 18:04:09.200480 2026] [security2:error] [pid 941081:tid 941275] [client 146.70.194.236:43696] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQreOZnN2CRos_GBqUAdQAAAcg"] [Sun Jul 12 18:04:09.371025 2026] [security2:error] [pid 941081:tid 941247] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2wyeWU2LzU0NTQvbDIvNDIyNjEvMg=="] [unique_id "alQreeZnN2CRos_GBqUAfAAAAaw"] [Sun Jul 12 18:04:09.393257 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:09.393976 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:09.458784 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW5ihQxksrpCflyFGgwAApkE"] [Sun Jul 12 18:04:09.496246 2026] [security2:error] [pid 940777:tid 940800] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrW5ihQxksrpCflyFGiAAApg4"], referer: http://67.222.38.115/.next/routes-manifest.json [Sun Jul 12 18:04:09.564389 2026] [security2:error] [pid 940777:tid 941014] [client 20.244.27.100:50143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-classic-to-block-menu-converter.php"] [unique_id "alQreZihQxksrpCflyFGpgAAAOY"], referer: binance.com [Sun Jul 12 18:04:09.803437 2026] [security2:error] [pid 940777:tid 941010] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQreZihQxksrpCflyFGngAAAOI"] [Sun Jul 12 18:04:09.983447 2026] [security2:error] [pid 941081:tid 941330] [client 165.232.160.250:54733] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQreeZnN2CRos_GBqUAkwAAAf8"] [Sun Jul 12 18:04:10.057263 2026] [security2:error] [pid 941081:tid 941290] [client 146.70.194.236:6059] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQreeZnN2CRos_GBqUAiwAAAdc"] [Sun Jul 12 18:04:10.083162 2026] [security2:error] [pid 941081:tid 941110] [remote 57.141.18.98:23620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 98.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/7t3apwIbS98tXY-7s_.lWez"] [unique_id "alQreuZnN2CRos_GBqUAnAABwBY"] [Sun Jul 12 18:04:10.283403 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:10.284070 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:10.292574 2026] [security2:error] [pid 941081:tid 941258] [client 168.100.149.223:19336] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36920/bargainor/2307_gurian.jsp"] [unique_id "alQreuZnN2CRos_GBqUAngAAAbc"] [Sun Jul 12 18:04:10.405301 2026] [security2:error] [pid 940777:tid 940938] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQreZihQxksrpCflyFGrgAAAJo"] [Sun Jul 12 18:04:10.405404 2026] [security2:error] [pid 940777:tid 940938] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQreZihQxksrpCflyFGrgAAAJo"] [Sun Jul 12 18:04:10.406278 2026] [security2:error] [pid 941081:tid 941265] [client 65.21.113.206:59104] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2wyeWU2LzU0NTQvbDIvNDIyNjEvMg=="] [unique_id "alQreeZnN2CRos_GBqUAjgAAAb4"] [Sun Jul 12 18:04:10.522133 2026] [security2:error] [pid 941081:tid 941288] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQreeZnN2CRos_GBqUAfwAAAdU"] [Sun Jul 12 18:04:10.832947 2026] [security2:error] [pid 941081:tid 941310] [client 165.232.160.250:54862] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQreuZnN2CRos_GBqUArQAAAes"] [Sun Jul 12 18:04:10.872870 2026] [security2:error] [pid 941081:tid 941298] [client 146.70.194.236:33006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQreuZnN2CRos_GBqUAqQAAAd8"] [Sun Jul 12 18:04:10.967850 2026] [security2:error] [pid 940777:tid 941030] [client 67.222.60.87:35406] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQrepihQxksrpCflyFGugAAAPY"] [Sun Jul 12 18:04:10.967906 2026] [security2:error] [pid 940777:tid 941030] [client 67.222.60.87:35406] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQrepihQxksrpCflyFGugAAAPY"] [Sun Jul 12 18:04:11.079618 2026] [access_compat:error] [pid 941081:tid 941141] [remote 74.7.175.174:50210] AH01797: client denied by server configuration: /home1/lazylad3/public_html/girlwithabarbell/index.php [Sun Jul 12 18:04:11.084895 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:11.085392 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:11.090089 2026] [security2:error] [pid 941081:tid 941250] [client 74.7.175.174:50210] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "403"] [hostname "girlwithabarbell.lazyladylifter.com"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUAsAABrzU"] [Sun Jul 12 18:04:11.144501 2026] [security2:error] [pid 941081:tid 941327] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQreeZnN2CRos_GBqUAggAAAfw"], referer: http://67.222.38.115/.node-version [Sun Jul 12 18:04:11.150772 2026] [access_compat:error] [pid 941081:tid 941117] [remote 74.7.230.33:54050] AH01797: client denied by server configuration: /home1/lazylad3/public_html/girlwithabarbell/index.php [Sun Jul 12 18:04:11.157141 2026] [security2:error] [pid 941081:tid 941117] [remote 74.7.230.33:54050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "403"] [hostname "girlwithabarbell.com"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUAtwAB1h0"] [Sun Jul 12 18:04:11.201047 2026] [core:error] [pid 941081:tid 941311] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:11.201093 2026] [core:error] [pid 941081:tid 941311] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:11.441468 2026] [security2:error] [pid 940777:tid 940948] [client 74.7.244.63:53088] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "almacenes.gboxcargo.com"] [uri "/index.php"] [unique_id "alQrdZihQxksrpCflyFGLQAApEY"] [Sun Jul 12 18:04:11.480194 2026] [security2:error] [pid 941081:tid 941309] [client 2a03:2880:f800:17:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQre-ZnN2CRos_GBqUAwgAB6j0"] [Sun Jul 12 18:04:11.531356 2026] [security2:error] [pid 941081:tid 941339] [client 66.132.224.233:28286] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "70.40.196.118"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUAwAAAAgg"] [Sun Jul 12 18:04:11.582563 2026] [security2:error] [pid 941081:tid 941243] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQreuZnN2CRos_GBqUAoQAAAag"], referer: http://67.222.38.115/.pgpass [Sun Jul 12 18:04:11.609069 2026] [security2:error] [pid 940777:tid 940963] [client 168.100.149.93:35822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36985/bargainor/2307_monkey.jsp"] [unique_id "alQre5ihQxksrpCflyFGxAAAALM"] [Sun Jul 12 18:04:11.644891 2026] [security2:error] [pid 941081:tid 941275] [client 165.232.160.250:54976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQre-ZnN2CRos_GBqUAzwAAAcg"] [Sun Jul 12 18:04:11.739872 2026] [security2:error] [pid 941081:tid 941271] [client 146.70.194.236:10609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQre-ZnN2CRos_GBqUAxgAAAcQ"] [Sun Jul 12 18:04:11.823268 2026] [security2:error] [pid 941081:tid 941319] [client 34.56.168.230:44672] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUAwwAB9Ag"] [Sun Jul 12 18:04:11.871346 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:11.871903 2026] [authz_core:error] [pid 941081:tid 941254] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:12.063608 2026] [autoindex:error] [pid 940777:tid 940988] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/js/widgets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:12.191599 2026] [security2:error] [pid 941081:tid 941336] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUAvQAAAgU"] [Sun Jul 12 18:04:12.214529 2026] [security2:error] [pid 941081:tid 941286] [client 34.56.168.230:44672] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUA1wAB0zE"] [Sun Jul 12 18:04:12.462811 2026] [security2:error] [pid 940777:tid 940934] [client 165.232.160.250:55098] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "www.charterschoolofexcellence.org"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "alQrfJihQxksrpCflyFG1wAAAJY"] [Sun Jul 12 18:04:12.705842 2026] [security2:error] [pid 940777:tid 941005] [client 146.70.194.236:33034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrfJihQxksrpCflyFG1AAAAN0"] [Sun Jul 12 18:04:12.742954 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:12.743602 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:12.950651 2026] [security2:error] [pid 941081:tid 941270] [client 24.203.79.110:59522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrfOZnN2CRos_GBqUA9QAAAcM"] [Sun Jul 12 18:04:12.955569 2026] [security2:error] [pid 941081:tid 941270] [client 24.203.79.110:59522] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrfOZnN2CRos_GBqUA9QAAAcM"] [Sun Jul 12 18:04:13.114520 2026] [security2:error] [pid 940777:tid 940924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQre5ihQxksrpCflyFGxQAAAIw"] [Sun Jul 12 18:04:13.224263 2026] [security2:error] [pid 941081:tid 941291] [client 34.56.168.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrfOZnN2CRos_GBqUA9AAAAdg"] [Sun Jul 12 18:04:13.319947 2026] [security2:error] [pid 940777:tid 940961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrfJihQxksrpCflyFG0QAAALE"] [Sun Jul 12 18:04:13.419030 2026] [security2:error] [pid 941081:tid 941295] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2xfMzM3MDdfbGl3cS9pXzM3Njdfd3Fp.html"] [unique_id "alQrfeZnN2CRos_GBqUBBgAAAdw"] [Sun Jul 12 18:04:13.562908 2026] [security2:error] [pid 940777:tid 940978] [client 20.210.108.71:53684] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQrfZihQxksrpCflyFG6AAAAMI"], referer: binance.com [Sun Jul 12 18:04:13.564864 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:13.565400 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:13.600960 2026] [security2:error] [pid 941081:tid 941224] [client 168.100.149.238:45530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37050/bargainor/2307_impeccance.jsp"] [unique_id "alQrfeZnN2CRos_GBqUBCwAAAZU"] [Sun Jul 12 18:04:13.639848 2026] [security2:error] [pid 941081:tid 941268] [client 146.70.194.236:57083] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrfeZnN2CRos_GBqUBAwAAAcE"] [Sun Jul 12 18:04:13.917722 2026] [security2:error] [pid 940777:tid 941039] [client 197.48.221.253:56560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrfZihQxksrpCflyFG8gAAAP8"] [Sun Jul 12 18:04:13.918101 2026] [security2:error] [pid 940777:tid 941039] [client 197.48.221.253:56560] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrfZihQxksrpCflyFG8gAAAP8"] [Sun Jul 12 18:04:14.060500 2026] [lsapi:warn] [pid 941081:tid 941319] [client 192.0.102.146:45936] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:04:14.238620 2026] [security2:error] [pid 940777:tid 940981] [client 144.31.35.252:44594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.35.31.144.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQrfpihQxksrpCflyFHAAAAAMU"], referer: https://www.cidclan.net/ [Sun Jul 12 18:04:14.261439 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrX5ihQxksrpCflyFG5AAApkE"], referer: http://67.222.38.115/.prettierrc.json [Sun Jul 12 18:04:14.420041 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:14.420762 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:14.439053 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrfZihQxksrpCflyFG9AAAAK0"] [Sun Jul 12 18:04:14.439110 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrfZihQxksrpCflyFG9AAAAK0"] [Sun Jul 12 18:04:14.440879 2026] [security2:error] [pid 941081:tid 941249] [client 65.21.113.206:56164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2xfMzM3MDdfbGl3cS9pXzM3Njdfd3Fp.html"] [unique_id "alQrfeZnN2CRos_GBqUBFwAAAa4"] [Sun Jul 12 18:04:14.491479 2026] [security2:error] [pid 940777:tid 940800] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrX5ihQxksrpCflyFG6wAApg4"] [Sun Jul 12 18:04:14.592297 2026] [security2:error] [pid 940777:tid 940937] [client 146.70.194.236:33042] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrfpihQxksrpCflyFHAgAAAJk"] [Sun Jul 12 18:04:14.640389 2026] [autoindex:error] [pid 940777:tid 940996] [client 62.171.158.190:55277] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-admin/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:14.665723 2026] [security2:error] [pid 940777:tid 940963] [client 74.244.119.215:54782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrfpihQxksrpCflyFHCQAAALM"] [Sun Jul 12 18:04:14.666080 2026] [security2:error] [pid 940777:tid 940963] [client 74.244.119.215:54782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrfpihQxksrpCflyFHCQAAALM"] [Sun Jul 12 18:04:14.818894 2026] [security2:error] [pid 940777:tid 940930] [client 34.60.131.171:42784] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrfpihQxksrpCflyFHBAAAkg8"] [Sun Jul 12 18:04:15.218471 2026] [security2:error] [pid 941081:tid 941158] [remote 102.134.101.35:45132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.101.134.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQrf-ZnN2CRos_GBqUBPwACA0Y"] [Sun Jul 12 18:04:15.290869 2026] [security2:error] [pid 940777:tid 940845] [remote 34.60.131.171:42784] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrfpihQxksrpCflyFHCwAAlTo"] [Sun Jul 12 18:04:15.315069 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:15.315764 2026] [authz_core:error] [pid 941081:tid 941252] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:15.441904 2026] [security2:error] [pid 941081:tid 941286] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrfuZnN2CRos_GBqUBHQAAAdM"] [Sun Jul 12 18:04:15.552343 2026] [security2:error] [pid 941081:tid 941342] [client 146.70.194.236:33058] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrf-ZnN2CRos_GBqUBPAAAAgs"] [Sun Jul 12 18:04:15.603985 2026] [security2:error] [pid 940777:tid 940931] [client 168.100.149.104:28992] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37115/bargainor/2307_gunz.jsp"] [unique_id "alQrf5ihQxksrpCflyFHIAAAAJM"] [Sun Jul 12 18:04:15.722263 2026] [security2:error] [pid 940777:tid 940927] [client 113.180.123.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrf5ihQxksrpCflyFHDAAAAI8"] [Sun Jul 12 18:04:15.753767 2026] [security2:error] [pid 941081:tid 941267] [client 20.244.27.100:56905] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-connector-registry.php"] [unique_id "alQrf-ZnN2CRos_GBqUBSQAAAcA"], referer: binance.com [Sun Jul 12 18:04:15.876056 2026] [security2:error] [pid 941081:tid 941253] [client 43.172.196.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrfuZnN2CRos_GBqUBIAABskc"] [Sun Jul 12 18:04:16.217333 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:16.218036 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:16.237192 2026] [security2:error] [pid 941081:tid 941218] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrfuZnN2CRos_GBqUBHwAAAY8"], referer: http://67.222.38.115/.pulumi/stacks/ [Sun Jul 12 18:04:16.371380 2026] [security2:error] [pid 940777:tid 941017] [client 34.60.131.171:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrf5ihQxksrpCflyFHMgAAAOk"] [Sun Jul 12 18:04:16.430376 2026] [security2:error] [pid 941081:tid 941318] [client 146.70.194.236:4769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrgOZnN2CRos_GBqUBTwAAAfM"] [Sun Jul 12 18:04:16.517828 2026] [security2:error] [pid 941081:tid 941258] [client 31.173.85.166:14338] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQrfuZnN2CRos_GBqUBHAAAAbc"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:04:16.517964 2026] [security2:error] [pid 941081:tid 941258] [client 31.173.85.166:14338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQrfuZnN2CRos_GBqUBHAAAAbc"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:04:16.672243 2026] [security2:error] [pid 941081:tid 941226] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2xfNTg1My9sN3gvMjQ5MjFfN3g=.htm"] [unique_id "alQrgOZnN2CRos_GBqUBXQAAAZc"] [Sun Jul 12 18:04:17.057214 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:17.057836 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:17.163410 2026] [security2:error] [pid 940777:tid 940971] [client 105.74.203.133:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrgJihQxksrpCflyFHQwAAALs"] [Sun Jul 12 18:04:17.375119 2026] [security2:error] [pid 940777:tid 940966] [client 146.70.194.236:33078] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrgZihQxksrpCflyFHSwAAALY"] [Sun Jul 12 18:04:17.381580 2026] [security2:error] [pid 941081:tid 941270] [client 41.141.108.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrgOZnN2CRos_GBqUBXwAAAcM"] [Sun Jul 12 18:04:17.631404 2026] [core:error] [pid 940777:tid 940944] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:17.631447 2026] [core:error] [pid 940777:tid 940944] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:17.644377 2026] [security2:error] [pid 940777:tid 940934] [client 34.173.239.49:42320] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrgZihQxksrpCflyFHUAAAllM"] [Sun Jul 12 18:04:17.765400 2026] [security2:error] [pid 941081:tid 941256] [client 65.21.113.206:56176] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2xfNTg1My9sN3gvMjQ5MjFfN3g=.htm"] [unique_id "alQrgeZnN2CRos_GBqUBcQAAAbU"] [Sun Jul 12 18:04:17.765608 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrgeZnN2CRos_GBqUBdQAAAgQ"] [Sun Jul 12 18:04:17.765645 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrgeZnN2CRos_GBqUBdQAAAgQ"] [Sun Jul 12 18:04:17.935173 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:17.935923 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:17.977149 2026] [security2:error] [pid 940777:tid 941031] [client 34.173.239.49:42320] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrgZihQxksrpCflyFHWAAA9xw"] [Sun Jul 12 18:04:18.033339 2026] [security2:error] [pid 941081:tid 941288] [client 45.67.85.190:42770] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.brujobites.com"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "alQrguZnN2CRos_GBqUBjwAAAdU"] [Sun Jul 12 18:04:18.045308 2026] [security2:error] [pid 940777:tid 941033] [client 45.67.85.190:42718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.brujobites.com"] [uri "/___proxy_subdomain_webmail/backend/.env"] [unique_id "alQrgpihQxksrpCflyFHWwAAAPk"] [Sun Jul 12 18:04:18.059166 2026] [security2:error] [pid 941081:tid 941333] [client 45.67.85.190:42730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.brujobites.com"] [uri "/___proxy_subdomain_webmail/api/.env"] [unique_id "alQrguZnN2CRos_GBqUBlQAAAgI"] [Sun Jul 12 18:04:18.065949 2026] [core:error] [pid 941081:tid 941298] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.065991 2026] [core:error] [pid 941081:tid 941298] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.068708 2026] [core:error] [pid 941081:tid 941262] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.068766 2026] [core:error] [pid 941081:tid 941262] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.090017 2026] [core:error] [pid 940777:tid 940958] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.090081 2026] [core:error] [pid 940777:tid 940958] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.093901 2026] [core:error] [pid 941081:tid 941258] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.093944 2026] [core:error] [pid 941081:tid 941258] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.094046 2026] [security2:error] [pid 940777:tid 940995] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrf5ihQxksrpCflyFHHgAAANM"] [Sun Jul 12 18:04:18.098107 2026] [core:error] [pid 941081:tid 941296] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.098348 2026] [core:error] [pid 941081:tid 941296] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.109978 2026] [core:error] [pid 940777:tid 941021] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.110030 2026] [core:error] [pid 940777:tid 941021] [client 45.67.85.190:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:04:18.242945 2026] [security2:error] [pid 941081:tid 941239] [client 168.100.149.19:38928] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37180/bargainor/2307_monadically.jsp"] [unique_id "alQrguZnN2CRos_GBqUBpQAAAaQ"] [Sun Jul 12 18:04:18.267261 2026] [security2:error] [pid 941081:tid 941238] [client 146.70.194.236:33084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrgeZnN2CRos_GBqUBjAAAAaM"] [Sun Jul 12 18:04:18.268412 2026] [security2:error] [pid 941081:tid 941290] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrf-ZnN2CRos_GBqUBRQAAAdc"], referer: http://67.222.38.115/.python-version [Sun Jul 12 18:04:18.280465 2026] [security2:error] [pid 940777:tid 940993] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrf5ihQxksrpCflyFHHwAAANE"] [Sun Jul 12 18:04:18.745751 2026] [authz_core:error] [pid 941081:tid 941220] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:18.746243 2026] [authz_core:error] [pid 941081:tid 941220] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:18.852003 2026] [security2:error] [pid 941081:tid 941264] [client 34.173.239.49:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQrguZnN2CRos_GBqUBuwAAAb0"] [Sun Jul 12 18:04:18.909212 2026] [security2:error] [pid 941081:tid 941155] [remote 113.160.142.119:38970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.142.160.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ccnss-org.johndmurray.org"] [uri "/wp-login.php"] [unique_id "alQrguZnN2CRos_GBqUBywABoUM"] [Sun Jul 12 18:04:18.938852 2026] [security2:error] [pid 941081:tid 941269] [client 94.187.171.125:62331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrguZnN2CRos_GBqUBzQAAAcI"] [Sun Jul 12 18:04:18.939072 2026] [security2:error] [pid 941081:tid 941269] [client 94.187.171.125:62331] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrguZnN2CRos_GBqUBzQAAAcI"] [Sun Jul 12 18:04:19.153581 2026] [security2:error] [pid 941081:tid 941270] [client 146.70.194.236:33090] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrguZnN2CRos_GBqUByQAAAcM"] [Sun Jul 12 18:04:19.467493 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:46842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/.wp-config.php.swp"] [unique_id "alQrg5ihQxksrpCflyFHdgAAAKI"] [Sun Jul 12 18:04:19.559518 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:19.560309 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:19.603368 2026] [security2:error] [pid 941081:tid 941239] [client 168.100.149.154:23174] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37245/bargainor/2307_enhalo.jsp"] [unique_id "alQrg-ZnN2CRos_GBqUB4gAAAaQ"] [Sun Jul 12 18:04:19.754923 2026] [security2:error] [pid 941081:tid 941311] [client 216.73.216.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQrg-ZnN2CRos_GBqUB1wAAAew"] [Sun Jul 12 18:04:19.841638 2026] [security2:error] [pid 941081:tid 941287] [client 139.190.146.109:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.shopnanjala.com"] [uri "/index.php"] [unique_id "alQrgeZnN2CRos_GBqUBiQAAAdQ"] [Sun Jul 12 18:04:19.985227 2026] [security2:error] [pid 940777:tid 940997] [client 146.70.194.236:34292] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrg5ihQxksrpCflyFHegAAANU"] [Sun Jul 12 18:04:20.052490 2026] [security2:error] [pid 941081:tid 941221] [client 51.68.111.245:32937] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.prestone.com.ph"] [uri "/robots.txt"] [unique_id "alQrhOZnN2CRos_GBqUB7AAAAZI"] [Sun Jul 12 18:04:20.052804 2026] [security2:error] [pid 941081:tid 941221] [client 51.68.111.245:32937] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.prestone.com.ph"] [uri "/robots.txt"] [unique_id "alQrhOZnN2CRos_GBqUB7AAAAZI"] [Sun Jul 12 18:04:20.165045 2026] [security2:error] [pid 940777:tid 940787] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.ssh/id_rsa"] [unique_id "alQrZ5ihQxksrpCflyFHfgAApgE"] [Sun Jul 12 18:04:20.168271 2026] [security2:error] [pid 941081:tid 941272] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrguZnN2CRos_GBqUBqwAAAcU"] [Sun Jul 12 18:04:20.172843 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrgpihQxksrpCflyFHagAAAMk"] [Sun Jul 12 18:04:20.386932 2026] [core:error] [pid 941081:tid 941175] (13)Permission denied: [remote 43.172.194.202:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/page/3/?eventDate=2023-03-11&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:04:20.393507 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:20.394027 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:20.399524 2026] [core:error] [pid 941081:tid 941206] (13)Permission denied: [remote 43.173.176.200:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/page/3/?eventDate=2023-03-11&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:04:20.571781 2026] [security2:error] [pid 941081:tid 941294] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2xfNzQxL2x4Yy8zNjg0OV94Yw==.htm"] [unique_id "alQrhOZnN2CRos_GBqUCBQAAAds"] [Sun Jul 12 18:04:20.840986 2026] [security2:error] [pid 940777:tid 941037] [client 146.70.194.236:34304] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrhJihQxksrpCflyFHigAAAP0"] [Sun Jul 12 18:04:21.246178 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:21.246696 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:21.579577 2026] [security2:error] [pid 941081:tid 941091] [remote 216.73.216.33:55034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index7.xml"] [unique_id "alQrheZnN2CRos_GBqUCHwAB-QM"] [Sun Jul 12 18:04:21.606795 2026] [security2:error] [pid 941081:tid 941304] [client 168.100.149.152:16896] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37310/bargainor/2307_metalogical.jsp"] [unique_id "alQrheZnN2CRos_GBqUCIAAAAeU"] [Sun Jul 12 18:04:21.612101 2026] [security2:error] [pid 940777:tid 940996] [client 31.173.85.166:19415] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-admin/admin.php"] [unique_id "alQrhZihQxksrpCflyFHkQAAANQ"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:04:21.665032 2026] [security2:error] [pid 940777:tid 940974] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrhZihQxksrpCflyFHjwAAAL4"] [Sun Jul 12 18:04:21.665107 2026] [security2:error] [pid 940777:tid 940974] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrhZihQxksrpCflyFHjwAAAL4"] [Sun Jul 12 18:04:21.666357 2026] [security2:error] [pid 940777:tid 940966] [client 65.21.113.206:56178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2xfNzQxL2x4Yy8zNjg0OV94Yw==.htm"] [unique_id "alQrhZihQxksrpCflyFHjQAAALY"] [Sun Jul 12 18:04:21.678182 2026] [authz_core:error] [pid 941081:tid 941269] [client 20.210.108.71:56546] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-admin/includes/error_log, referer: binance.com [Sun Jul 12 18:04:21.762021 2026] [security2:error] [pid 941081:tid 941334] [client 146.70.194.236:34316] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrheZnN2CRos_GBqUCHQAAAgM"] [Sun Jul 12 18:04:22.044704 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:22.045167 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:22.241782 2026] [security2:error] [pid 941081:tid 941301] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhOZnN2CRos_GBqUB9wAAAeI"], referer: http://67.222.38.115/.ssh/id_rsa.pub [Sun Jul 12 18:04:22.248179 2026] [security2:error] [pid 941081:tid 941254] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhOZnN2CRos_GBqUB9AAAAbM"], referer: http://67.222.38.115/.ssh/known_hosts [Sun Jul 12 18:04:22.273121 2026] [security2:error] [pid 941081:tid 941292] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhOZnN2CRos_GBqUB9gAAAdk"] [Sun Jul 12 18:04:22.277514 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.ssh/known_hosts.old"] [unique_id "alQraZihQxksrpCflyFHmAAApkE"], referer: http://67.222.38.115/.ssh/known_hosts.old [Sun Jul 12 18:04:22.280921 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/.ssh/known_hosts.old"] [unique_id "alQraZihQxksrpCflyFHmQAApkE"] [Sun Jul 12 18:04:22.359451 2026] [security2:error] [pid 941081:tid 941223] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhOZnN2CRos_GBqUB-gAAAZQ"] [Sun Jul 12 18:04:22.470162 2026] [security2:error] [pid 941081:tid 941261] [client 114.119.153.114:35455] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "hangar34liverpool.co.uk"] [uri "/event/the-kings-voice-starring-gordon-hendricks-as-elvis/"] [unique_id "alQrhuZnN2CRos_GBqUCPAAAAbo"], referer: https://www.gordon-hendricks.com/event [Sun Jul 12 18:04:22.609262 2026] [security2:error] [pid 941081:tid 941339] [client 146.70.194.236:34322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrhuZnN2CRos_GBqUCNwAAAgg"] [Sun Jul 12 18:04:22.816771 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:22.817248 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:23.477651 2026] [security2:error] [pid 941081:tid 941258] [client 146.70.194.236:34334] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrh-ZnN2CRos_GBqUCTgAAAbc"] [Sun Jul 12 18:04:23.563782 2026] [security2:error] [pid 940777:tid 941032] [client 24.203.79.110:60018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrh5ihQxksrpCflyFHrwAAAPg"] [Sun Jul 12 18:04:23.564129 2026] [security2:error] [pid 940777:tid 941032] [client 24.203.79.110:60018] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrh5ihQxksrpCflyFHrwAAAPg"] [Sun Jul 12 18:04:23.584393 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:23.584912 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:23.669612 2026] [security2:error] [pid 941081:tid 941204] [remote 47.128.38.207:30782] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.dryougrfx.com"] [uri "/music.html"] [unique_id "alQrh-ZnN2CRos_GBqUCYAAB43M"] [Sun Jul 12 18:04:24.290466 2026] [security2:error] [pid 941081:tid 941316] [client 168.100.149.180:39102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37375/bargainor/2307_psychoreflex.jsp"] [unique_id "alQriOZnN2CRos_GBqUCcgAAAfE"] [Sun Jul 12 18:04:24.305949 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhpihQxksrpCflyFHoQAAALg"] [Sun Jul 12 18:04:24.310828 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhuZnN2CRos_GBqUCNgAAAds"] [Sun Jul 12 18:04:24.359169 2026] [security2:error] [pid 941081:tid 941260] [client 146.70.194.236:34342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQriOZnN2CRos_GBqUCYQAAAbk"] [Sun Jul 12 18:04:24.386094 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:24.386603 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:24.460941 2026] [security2:error] [pid 941081:tid 941301] [client 197.48.221.253:57157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQriOZnN2CRos_GBqUCdwAAAeI"] [Sun Jul 12 18:04:24.461246 2026] [security2:error] [pid 941081:tid 941301] [client 197.48.221.253:57157] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQriOZnN2CRos_GBqUCdwAAAeI"] [Sun Jul 12 18:04:24.781182 2026] [security2:error] [pid 941081:tid 941122] [remote 161.248.188.172:59380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.188.248.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "themarkberman.com"] [uri "/wp-login.php"] [unique_id "alQriOZnN2CRos_GBqUCfQABvSI"] [Sun Jul 12 18:04:25.073982 2026] [security2:error] [pid 940777:tid 940927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhpihQxksrpCflyFHoAAAAI8"] [Sun Jul 12 18:04:25.078269 2026] [security2:error] [pid 941081:tid 941266] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y2xfODk5L2w3eC8yNDkyMV83eA==.htm"] [unique_id "alQrieZnN2CRos_GBqUCigAAAb8"] [Sun Jul 12 18:04:25.111402 2026] [security2:error] [pid 941081:tid 941309] [client 20.244.27.100:63507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-dependencies.php"] [unique_id "alQrieZnN2CRos_GBqUCiwAAAeo"], referer: binance.com [Sun Jul 12 18:04:25.120742 2026] [security2:error] [pid 940777:tid 940956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrhpihQxksrpCflyFHpQAAAKw"], referer: http://67.222.38.115/.supabase/ [Sun Jul 12 18:04:25.209090 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:25.209760 2026] [authz_core:error] [pid 941081:tid 941324] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:25.290610 2026] [security2:error] [pid 941081:tid 941338] [client 146.70.194.236:34350] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQriOZnN2CRos_GBqUCfwAAAgc"] [Sun Jul 12 18:04:25.295491 2026] [security2:error] [pid 940777:tid 941023] [client 74.244.119.215:26171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQriZihQxksrpCflyFHwgAAAO8"] [Sun Jul 12 18:04:25.295716 2026] [security2:error] [pid 940777:tid 941023] [client 74.244.119.215:26171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQriZihQxksrpCflyFHwgAAAO8"] [Sun Jul 12 18:04:26.004842 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:26.005332 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:26.104220 2026] [security2:error] [pid 941081:tid 941236] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQriOZnN2CRos_GBqUCdgAAAaE"] [Sun Jul 12 18:04:26.140197 2026] [security2:error] [pid 941081:tid 941226] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrieZnN2CRos_GBqUCjQAAAZc"] [Sun Jul 12 18:04:26.156025 2026] [security2:error] [pid 941081:tid 941228] [client 146.70.194.236:34360] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrieZnN2CRos_GBqUCpgAAAZk"] [Sun Jul 12 18:04:26.251169 2026] [security2:error] [pid 940777:tid 941028] [client 168.100.149.38:19544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37440/bargainor/2307_mailable.jsp"] [unique_id "alQripihQxksrpCflyFH1AAAAPQ"] [Sun Jul 12 18:04:26.269087 2026] [security2:error] [pid 940777:tid 940935] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQriZihQxksrpCflyFHwwAAAJc"] [Sun Jul 12 18:04:26.269157 2026] [security2:error] [pid 940777:tid 940935] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQriZihQxksrpCflyFHwwAAAJc"] [Sun Jul 12 18:04:26.270609 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:45092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y2xfODk5L2w3eC8yNDkyMV83eA==.htm"] [unique_id "alQrieZnN2CRos_GBqUCmwAAAas"] [Sun Jul 12 18:04:26.347067 2026] [security2:error] [pid 940777:tid 940922] [client 104.234.19.68:53801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.19.234.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQripihQxksrpCflyFH1QAAAIo"] [Sun Jul 12 18:04:26.544151 2026] [security2:error] [pid 941081:tid 941143] [remote 161.248.188.172:36690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.188.248.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.redwolfaudio.com"] [uri "/wp-login.php"] [unique_id "alQriuZnN2CRos_GBqUCtgABuDc"] [Sun Jul 12 18:04:26.770126 2026] [security2:error] [pid 941081:tid 941242] [client 186.50.74.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQriuZnN2CRos_GBqUCswAAAac"] [Sun Jul 12 18:04:26.840067 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:26.840579 2026] [authz_core:error] [pid 941081:tid 941266] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:27.030218 2026] [security2:error] [pid 940777:tid 940983] [client 146.70.194.236:34374] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQripihQxksrpCflyFH2wAAAMc"] [Sun Jul 12 18:04:27.099346 2026] [security2:error] [pid 941081:tid 941284] [client 57.141.18.2:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQriuZnN2CRos_GBqUCvAAAAdE"] [Sun Jul 12 18:04:27.302469 2026] [security2:error] [pid 941081:tid 941107] [remote 34.153.19.39:36286] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.kahonuamomona.org"] [uri "/index.php"] [unique_id "alQre-ZnN2CRos_GBqUA0gABpRM"], referer: http://www.kahonuamomona.org/blog/ [Sun Jul 12 18:04:27.613407 2026] [security2:error] [pid 940777:tid 941025] [client 168.100.149.221:31464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37505/bargainor/2307_epidemiology.jsp"] [unique_id "alQri5ihQxksrpCflyFH7AAAAPE"] [Sun Jul 12 18:04:27.631206 2026] [authz_core:error] [pid 940777:tid 940979] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:27.631747 2026] [authz_core:error] [pid 940777:tid 940979] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:27.916943 2026] [security2:error] [pid 941081:tid 941327] [client 146.70.194.236:52253] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQri-ZnN2CRos_GBqUC0QAAAfw"] [Sun Jul 12 18:04:28.151094 2026] [security2:error] [pid 941081:tid 941250] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQriuZnN2CRos_GBqUCqwAAAa8"] [Sun Jul 12 18:04:28.163691 2026] [security2:error] [pid 941081:tid 941134] [remote 152.42.137.70:25502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.137.42.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sammorell.com"] [uri "/wp-login.php"] [unique_id "alQrjOZnN2CRos_GBqUC3QABqS4"] [Sun Jul 12 18:04:28.199175 2026] [security2:error] [pid 940777:tid 940996] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQripihQxksrpCflyFHzAAAANQ"], referer: http://67.222.38.115/.terraform.rc [Sun Jul 12 18:04:28.322132 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQripihQxksrpCflyFHzwAAAOY"], referer: http://67.222.38.115/.terraform.lock.hcl [Sun Jul 12 18:04:28.438712 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:28.439203 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:28.445861 2026] [security2:error] [pid 941081:tid 941227] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQriuZnN2CRos_GBqUCrgAAAZg"], referer: http://67.222.38.115/.terraform/terraform.tfstate [Sun Jul 12 18:04:28.746011 2026] [security2:error] [pid 940777:tid 940918] [client 151.243.11.245:53788] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "nke.rvq.mybluehost.me"] [uri "/400.shtml"] [unique_id "alQrjJihQxksrpCflyFH-AAAAIY"] [Sun Jul 12 18:04:28.747586 2026] [security2:error] [pid 940777:tid 941038] [client 112.86.225.238:59198] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/products-nw-44-uav-hfe.html"] [unique_id "alQrjJihQxksrpCflyFH-QAAAP4"] [Sun Jul 12 18:04:28.747871 2026] [security2:error] [pid 940777:tid 941038] [client 112.86.225.238:59198] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/products-nw-44-uav-hfe.html"] [unique_id "alQrjJihQxksrpCflyFH-QAAAP4"] [Sun Jul 12 18:04:28.775016 2026] [security2:error] [pid 940777:tid 940932] [client 146.70.194.236:34390] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrjJihQxksrpCflyFH9QAAAJQ"] [Sun Jul 12 18:04:28.966378 2026] [security2:error] [pid 941081:tid 941127] [remote 103.82.20.130:49426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.20.82.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rapports-minoritaires.net"] [uri "/wp-login.php"] [unique_id "alQrjOZnN2CRos_GBqUC-QACDic"] [Sun Jul 12 18:04:29.086587 2026] [security2:error] [pid 941081:tid 941258] [client 65.21.113.206:39608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3AyODd3LTMwNTgvcDItNDQ0MTMvMjg3dw=="] [unique_id "alQrjeZnN2CRos_GBqUC-gAAAbc"] [Sun Jul 12 18:04:29.258598 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:29.259255 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:29.629294 2026] [security2:error] [pid 940777:tid 940998] [client 94.187.171.125:62829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrjZihQxksrpCflyFIBwAAANY"] [Sun Jul 12 18:04:29.629510 2026] [security2:error] [pid 940777:tid 940998] [client 94.187.171.125:62829] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrjZihQxksrpCflyFIBwAAANY"] [Sun Jul 12 18:04:29.711047 2026] [security2:error] [pid 940777:tid 940992] [client 146.70.194.236:39016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrjZihQxksrpCflyFIAAAAANA"] [Sun Jul 12 18:04:30.046606 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:30.047158 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:30.067056 2026] [security2:error] [pid 940777:tid 941000] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrjZihQxksrpCflyFIBgAAANg"] [Sun Jul 12 18:04:30.067137 2026] [security2:error] [pid 940777:tid 941000] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrjZihQxksrpCflyFIBgAAANg"] [Sun Jul 12 18:04:30.070420 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:45104] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3AyODd3LTMwNTgvcDItNDQ0MTMvMjg3dw=="] [unique_id "alQrjZihQxksrpCflyFIBQAAAP0"] [Sun Jul 12 18:04:30.112200 2026] [security2:error] [pid 941081:tid 941246] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjOZnN2CRos_GBqUC7AAAAas"] [Sun Jul 12 18:04:30.215195 2026] [security2:error] [pid 941081:tid 941285] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjOZnN2CRos_GBqUC9AAAAdI"] [Sun Jul 12 18:04:30.307698 2026] [security2:error] [pid 940777:tid 940942] [client 168.100.149.214:56532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37570/bargainor/2307_secque.jsp"] [unique_id "alQrjpihQxksrpCflyFIHQAAAJ4"] [Sun Jul 12 18:04:30.587437 2026] [security2:error] [pid 941081:tid 941254] [client 146.70.194.236:39020] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrjuZnN2CRos_GBqUDHAAAAbM"] [Sun Jul 12 18:04:30.833757 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:30.834258 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:31.471201 2026] [security2:error] [pid 941081:tid 941325] [client 146.70.194.236:39030] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrj-ZnN2CRos_GBqUDKAAAAfo"] [Sun Jul 12 18:04:31.601564 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:31.602359 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:32.231295 2026] [security2:error] [pid 941081:tid 941230] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjuZnN2CRos_GBqUDGQAAAZs"], referer: http://67.222.38.115/.tool-versions [Sun Jul 12 18:04:32.278596 2026] [security2:error] [pid 941081:tid 941249] [client 168.100.149.36:30362] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37635/bargainor/2307_dislevelment.jsp"] [unique_id "alQrkOZnN2CRos_GBqUDQgAAAa4"] [Sun Jul 12 18:04:32.358112 2026] [security2:error] [pid 941081:tid 941270] [client 146.70.194.236:39038] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrkOZnN2CRos_GBqUDPQAAAcM"] [Sun Jul 12 18:04:32.401222 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:32.401784 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:33.100154 2026] [security2:error] [pid 941081:tid 941247] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjuZnN2CRos_GBqUDGAAAAaw"], referer: http://67.222.38.115/.travis.yml [Sun Jul 12 18:04:33.122563 2026] [security2:error] [pid 940777:tid 940962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjpihQxksrpCflyFIGgAAALI"], referer: http://67.222.38.115/.vault-token [Sun Jul 12 18:04:33.157855 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:33.158397 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:33.189700 2026] [security2:error] [pid 940777:tid 940959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrjpihQxksrpCflyFIFgAAAK8"] [Sun Jul 12 18:04:33.265562 2026] [security2:error] [pid 941081:tid 941235] [client 146.70.194.236:39052] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrkOZnN2CRos_GBqUDTgAAAaA"] [Sun Jul 12 18:04:33.614154 2026] [security2:error] [pid 941081:tid 941320] [client 168.100.149.150:29382] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37700/bargainor/2307_limnoria.jsp"] [unique_id "alQrkeZnN2CRos_GBqUDZQAAAfU"] [Sun Jul 12 18:04:33.759855 2026] [security2:error] [pid 941081:tid 941239] [client 47.128.118.61:63340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "undameta.com"] [uri "/robots.txt"] [unique_id "alQrkeZnN2CRos_GBqUDbAAAAaQ"] [Sun Jul 12 18:04:33.766658 2026] [security2:error] [pid 941081:tid 941248] [client 65.21.113.206:40918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrkeZnN2CRos_GBqUDbQAAAa0"] [Sun Jul 12 18:04:33.915405 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:33.915930 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:34.050494 2026] [security2:error] [pid 940777:tid 940989] [client 20.244.27.100:60655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "alQrkpihQxksrpCflyFIRAAAAM0"], referer: binance.com [Sun Jul 12 18:04:34.147681 2026] [security2:error] [pid 941081:tid 941297] [client 146.70.194.236:39064] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrkeZnN2CRos_GBqUDbgAAAd4"] [Sun Jul 12 18:04:34.236127 2026] [authz_core:error] [pid 940777:tid 940932] [client 20.210.108.71:56397] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-admin/includes/error_log, referer: binance.com [Sun Jul 12 18:04:34.279135 2026] [security2:error] [pid 941081:tid 941283] [client 24.203.79.110:60521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrkuZnN2CRos_GBqUDdAAAAdA"] [Sun Jul 12 18:04:34.279428 2026] [security2:error] [pid 941081:tid 941283] [client 24.203.79.110:60521] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrkuZnN2CRos_GBqUDdAAAAdA"] [Sun Jul 12 18:04:34.289713 2026] [security2:error] [pid 940777:tid 940987] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrkpihQxksrpCflyFITQAAAMs"] [Sun Jul 12 18:04:34.292265 2026] [security2:error] [pid 940777:tid 941012] [client 65.21.113.206:58908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrkpihQxksrpCflyFISgAAAOQ"] [Sun Jul 12 18:04:34.399234 2026] [security2:error] [pid 940777:tid 941021] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrkZihQxksrpCflyFIOAAAAO0"] [Sun Jul 12 18:04:34.411202 2026] [security2:error] [pid 941081:tid 941337] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrkeZnN2CRos_GBqUDWAAAAgY"] [Sun Jul 12 18:04:34.617191 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3AyODd3LTk3L3AyLTQ0NDEzLzI4N3c="] [unique_id "alQrkuZnN2CRos_GBqUDgQAAAas"] [Sun Jul 12 18:04:34.702851 2026] [authz_core:error] [pid 941081:tid 941310] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:34.703325 2026] [authz_core:error] [pid 941081:tid 941310] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:34.794404 2026] [security2:error] [pid 940777:tid 940978] [client 65.21.113.206:58908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQrkpihQxksrpCflyFIXgAAAMI"] [Sun Jul 12 18:04:34.865998 2026] [security2:error] [pid 941081:tid 941307] [client 197.48.221.253:57750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrkuZnN2CRos_GBqUDhQAAAeg"] [Sun Jul 12 18:04:34.866223 2026] [security2:error] [pid 941081:tid 941307] [client 197.48.221.253:57750] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrkuZnN2CRos_GBqUDhQAAAeg"] [Sun Jul 12 18:04:35.006013 2026] [security2:error] [pid 941081:tid 941221] [client 146.70.194.236:18414] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrkuZnN2CRos_GBqUDhAAAAZI"] [Sun Jul 12 18:04:35.517159 2026] [authz_core:error] [pid 941081:tid 941227] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:35.517685 2026] [authz_core:error] [pid 941081:tid 941227] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:35.700935 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrk5ihQxksrpCflyFIaAAAAO4"] [Sun Jul 12 18:04:35.701007 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrk5ihQxksrpCflyFIaAAAAO4"] [Sun Jul 12 18:04:35.709125 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:58922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3AyODd3LTk3L3AyLTQ0NDEzLzI4N3c="] [unique_id "alQrk5ihQxksrpCflyFIYwAAALA"] [Sun Jul 12 18:04:35.831649 2026] [security2:error] [pid 941081:tid 941323] [client 170.239.114.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrk-ZnN2CRos_GBqUDigAAAfg"] [Sun Jul 12 18:04:35.899245 2026] [security2:error] [pid 940777:tid 941017] [client 146.70.194.236:39084] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrk5ihQxksrpCflyFIbgAAAOk"] [Sun Jul 12 18:04:35.974085 2026] [autoindex:error] [pid 941081:tid 941266] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:36.211882 2026] [security2:error] [pid 941081:tid 941263] [client 74.244.119.215:48061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrlOZnN2CRos_GBqUDowAAAbw"] [Sun Jul 12 18:04:36.212203 2026] [security2:error] [pid 941081:tid 941263] [client 74.244.119.215:48061] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrlOZnN2CRos_GBqUDowAAAbw"] [Sun Jul 12 18:04:36.321202 2026] [security2:error] [pid 940777:tid 940991] [client 168.100.149.147:15514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37765/bargainor/2307_milksopism.jsp"] [unique_id "alQrlJihQxksrpCflyFIfgAAAM8"] [Sun Jul 12 18:04:36.351212 2026] [authz_core:error] [pid 940777:tid 940962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:36.351763 2026] [authz_core:error] [pid 940777:tid 940962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:36.800932 2026] [security2:error] [pid 940777:tid 940959] [client 146.70.194.236:39094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrlJihQxksrpCflyFIgQAAAK8"] [Sun Jul 12 18:04:37.121443 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrd5ihQxksrpCflyFITwAApgA"] [Sun Jul 12 18:04:37.133050 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQreJihQxksrpCflyFIUQAApgc"] [Sun Jul 12 18:04:37.135468 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:37.136370 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:37.150647 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrd5ihQxksrpCflyFIUAAApgs"], referer: http://67.222.38.115/.vscode/settings.json [Sun Jul 12 18:04:37.340492 2026] [security2:error] [pid 940777:tid 941000] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrkpihQxksrpCflyFIVgAAANg"], referer: http://67.222.38.115/.vscode/ [Sun Jul 12 18:04:37.390151 2026] [security2:error] [pid 941081:tid 941265] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3AzM2xsZF85OTY2L3AzLzIxNzQ5LzM=.html"] [unique_id "alQrleZnN2CRos_GBqUDuQAAAb4"] [Sun Jul 12 18:04:37.632161 2026] [security2:error] [pid 940777:tid 941037] [client 168.100.149.127:39896] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37830/bargainor/2307_capnoides.jsp"] [unique_id "alQrlZihQxksrpCflyFIlgAAAP0"] [Sun Jul 12 18:04:37.707720 2026] [security2:error] [pid 940777:tid 941003] [client 146.70.194.236:39102] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrlZihQxksrpCflyFIkgAAANs"] [Sun Jul 12 18:04:37.960071 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:37.961021 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:38.116418 2026] [autoindex:error] [pid 941081:tid 941239] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/Text/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:38.308130 2026] [security2:error] [pid 940777:tid 940935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrlZihQxksrpCflyFIjgAAAJc"] [Sun Jul 12 18:04:38.434449 2026] [security2:error] [pid 941081:tid 941235] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrleZnN2CRos_GBqUD0gAAAaA"] [Sun Jul 12 18:04:38.434503 2026] [security2:error] [pid 941081:tid 941235] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrleZnN2CRos_GBqUD0gAAAaA"] [Sun Jul 12 18:04:38.437094 2026] [security2:error] [pid 940777:tid 940969] [client 65.21.113.206:58928] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3AzM2xsZF85OTY2L3AzLzIxNzQ5LzM=.html"] [unique_id "alQrlZihQxksrpCflyFImQAAALk"] [Sun Jul 12 18:04:38.475522 2026] [security2:error] [pid 940777:tid 940970] [client 57.141.18.109:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrlpihQxksrpCflyFInwAAALo"] [Sun Jul 12 18:04:38.577462 2026] [security2:error] [pid 941081:tid 941256] [client 146.70.194.236:39116] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrluZnN2CRos_GBqUD4AAAAbU"] [Sun Jul 12 18:04:38.628694 2026] [security2:error] [pid 941081:tid 941307] [client 157.230.94.175:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQrleZnN2CRos_GBqUDuwAAAeg"], referer: https://mackinstyle.com/ [Sun Jul 12 18:04:38.767137 2026] [authz_core:error] [pid 940777:tid 940984] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:38.767621 2026] [authz_core:error] [pid 940777:tid 940984] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:39.174361 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQreZihQxksrpCflyFIkAAApgE"] [Sun Jul 12 18:04:39.307065 2026] [security2:error] [pid 941081:tid 941243] [client 105.157.34.140:48022] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQrl-ZnN2CRos_GBqUD8QAAAag"], referer: https://google.com, https://www.portables-batterie.fr/acer/AS10B3E-portable-batterie.htm [Sun Jul 12 18:04:39.463092 2026] [security2:error] [pid 940777:tid 940976] [client 146.70.194.236:41562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrl5ihQxksrpCflyFItgAAAMA"] [Sun Jul 12 18:04:39.524473 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:39.525012 2026] [authz_core:error] [pid 941081:tid 941265] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:39.914230 2026] [security2:error] [pid 940777:tid 940999] [client 185.238.231.156:48449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.231.238.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQrl5ihQxksrpCflyFIwQAAANc"] [Sun Jul 12 18:04:39.989913 2026] [security2:error] [pid 941081:tid 941303] [client 40.223.123.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQrl-ZnN2CRos_GBqUD-AAAAeQ"] [Sun Jul 12 18:04:40.239986 2026] [autoindex:error] [pid 941081:tid 941257] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/Text/Diff/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:40.294040 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrfZihQxksrpCflyFIpwAApi8"] [Sun Jul 12 18:04:40.318399 2026] [security2:error] [pid 941081:tid 941223] [client 168.100.149.45:25362] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37895/bargainor/2307_deft.jsp"] [unique_id "alQrmOZnN2CRos_GBqUEHAAAAZQ"] [Sun Jul 12 18:04:40.319737 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:40.320287 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:40.373843 2026] [security2:error] [pid 940777:tid 941043] [client 94.187.171.125:63318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrmJihQxksrpCflyFI1gAAAQM"] [Sun Jul 12 18:04:40.374198 2026] [security2:error] [pid 941081:tid 941304] [client 146.70.194.236:41576] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrmOZnN2CRos_GBqUEBAAAAeU"] [Sun Jul 12 18:04:40.376841 2026] [security2:error] [pid 940777:tid 941043] [client 94.187.171.125:63318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrmJihQxksrpCflyFI1gAAAQM"] [Sun Jul 12 18:04:40.428917 2026] [security2:error] [pid 940777:tid 940949] [client 172.226.175.83:45277] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFIxwAApRM"] [Sun Jul 12 18:04:40.458744 2026] [security2:error] [pid 940777:tid 941000] [client 116.179.37.10:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.miniya.jp"] [uri "/404.php"] [unique_id "alQrmJihQxksrpCflyFI0QAA2E8"], referer: https://www.miniya.jp/stysty.css [Sun Jul 12 18:04:40.601535 2026] [security2:error] [pid 941081:tid 941218] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3BibGVuLzQ0MjcvcGIvNzczNy9i"] [unique_id "alQrmOZnN2CRos_GBqUEIwAAAY8"] [Sun Jul 12 18:04:40.736397 2026] [security2:error] [pid 940777:tid 940882] [remote 172.226.175.83:45277] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFI2gAAi14"] [Sun Jul 12 18:04:41.041700 2026] [security2:error] [pid 940777:tid 940983] [client 172.226.175.83:45277] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFI4gAAxzk"] [Sun Jul 12 18:04:41.116894 2026] [security2:error] [pid 940777:tid 940909] [remote 164.132.57.252:40160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 252.57.132.164.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hilariouslyflawed.zoeybluesky.com"] [uri "/wp-login.php"] [unique_id "alQrmZihQxksrpCflyFI5gAA2Xk"] [Sun Jul 12 18:04:41.139545 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:41.140240 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:41.169067 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrlpihQxksrpCflyFIrAAAAPg"] [Sun Jul 12 18:04:41.210584 2026] [security2:error] [pid 940777:tid 940965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrlpihQxksrpCflyFIrQAAALU"] [Sun Jul 12 18:04:41.313018 2026] [security2:error] [pid 940777:tid 940948] [client 172.226.175.83:45277] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQrmZihQxksrpCflyFI6gAApA0"] [Sun Jul 12 18:04:41.325150 2026] [security2:error] [pid 941081:tid 941256] [client 146.70.194.236:32701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrmOZnN2CRos_GBqUEMQAAAbU"] [Sun Jul 12 18:04:41.628319 2026] [security2:error] [pid 941081:tid 941333] [client 168.100.149.160:49970] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37960/bargainor/2307_did.jsp"] [unique_id "alQrmeZnN2CRos_GBqUEOwAAAgI"] [Sun Jul 12 18:04:41.666801 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrmZihQxksrpCflyFI6QAAAMU"] [Sun Jul 12 18:04:41.666854 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrmZihQxksrpCflyFI6QAAAMU"] [Sun Jul 12 18:04:41.668956 2026] [security2:error] [pid 940777:tid 940975] [client 65.21.113.206:58938] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3BibGVuLzQ0MjcvcGIvNzczNy9i"] [unique_id "alQrmZihQxksrpCflyFI5wAAAL8"] [Sun Jul 12 18:04:41.936963 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:41.937448 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:42.212989 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrf5ihQxksrpCflyFItwAApgE"] [Sun Jul 12 18:04:42.244315 2026] [security2:error] [pid 941081:tid 941220] [client 146.70.194.236:41596] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrmeZnN2CRos_GBqUEQwAAAZE"] [Sun Jul 12 18:04:42.508154 2026] [security2:error] [pid 941081:tid 941219] [client 57.141.18.55:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQrmOZnN2CRos_GBqUELgAAAZA"] [Sun Jul 12 18:04:42.524429 2026] [security2:error] [pid 940777:tid 940962] [client 20.244.27.100:63885] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-exception.php"] [unique_id "alQrmpihQxksrpCflyFI_QAAALI"], referer: binance.com [Sun Jul 12 18:04:42.731639 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:42.732125 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:42.739838 2026] [security2:error] [pid 941081:tid 941312] [client 190.45.72.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQrmeZnN2CRos_GBqUEPQAAAe0"], referer: https://mackinstyle.com/ [Sun Jul 12 18:04:42.942344 2026] [autoindex:error] [pid 941081:tid 941344] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:43.080035 2026] [security2:error] [pid 941081:tid 941293] [client 146.70.194.236:30107] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrmuZnN2CRos_GBqUEXAAAAdo"] [Sun Jul 12 18:04:43.424804 2026] [security2:error] [pid 941081:tid 941309] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3BnLTI0MzczLXBnMWpsLTI1Mi1nMWo=.cgi"] [unique_id "alQrm-ZnN2CRos_GBqUEYwAAAeo"] [Sun Jul 12 18:04:43.479659 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:43.480174 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:43.893028 2026] [security2:error] [pid 941081:tid 941281] [client 146.70.194.236:41066] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrm-ZnN2CRos_GBqUEZwAAAc4"] [Sun Jul 12 18:04:44.049770 2026] [security2:error] [pid 940777:tid 940946] [client 156.199.135.50:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "eatthedistrict.com"] [uri "/index.php"] [unique_id "alQrm5ihQxksrpCflyFJFgAAAKI"], referer: https://eatthedistrict.com [Sun Jul 12 18:04:44.110369 2026] [security2:error] [pid 940777:tid 940970] [client 34.140.126.150:34400] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "69.195.69.210"] [uri "/"] [unique_id "alQrnJihQxksrpCflyFJGgAAALo"] [Sun Jul 12 18:04:44.158426 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrgJihQxksrpCflyFIygAApks"] [Sun Jul 12 18:04:44.296984 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:44.297700 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:44.298436 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrmOZnN2CRos_GBqUEHwAAAds"] [Sun Jul 12 18:04:44.298520 2026] [security2:error] [pid 940777:tid 940990] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFI0wAAAM4"] [Sun Jul 12 18:04:44.309183 2026] [security2:error] [pid 940777:tid 940953] [client 168.100.149.172:50636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38025/bargainor/2307_delphian.jsp"] [unique_id "alQrnJihQxksrpCflyFJIQAAAKk"] [Sun Jul 12 18:04:44.516017 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrm5ihQxksrpCflyFJFAAAAK0"] [Sun Jul 12 18:04:44.516089 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrm5ihQxksrpCflyFJFAAAAK0"] [Sun Jul 12 18:04:44.517638 2026] [security2:error] [pid 941081:tid 941340] [client 65.21.113.206:44068] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3BnLTI0MzczLXBnMWpsLTI1Mi1nMWo=.cgi"] [unique_id "alQrm-ZnN2CRos_GBqUEawAAAgk"] [Sun Jul 12 18:04:44.728353 2026] [security2:error] [pid 940777:tid 940978] [client 146.70.194.236:39457] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrnJihQxksrpCflyFJJAAAAMI"] [Sun Jul 12 18:04:44.926946 2026] [autoindex:error] [pid 940777:tid 940937] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/css/dist/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:44.971091 2026] [security2:error] [pid 941081:tid 941234] [client 24.203.79.110:61026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrnOZnN2CRos_GBqUEjQAAAZ8"] [Sun Jul 12 18:04:44.977385 2026] [security2:error] [pid 941081:tid 941234] [client 24.203.79.110:61026] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrnOZnN2CRos_GBqUEjQAAAZ8"] [Sun Jul 12 18:04:45.097517 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:45.098137 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:45.102878 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFIzwAAALQ"] [Sun Jul 12 18:04:45.133086 2026] [security2:error] [pid 940777:tid 941005] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrmJihQxksrpCflyFI1AAAAN0"] [Sun Jul 12 18:04:45.468157 2026] [security2:error] [pid 941081:tid 941334] [client 197.48.221.253:58352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrneZnN2CRos_GBqUEoAAAAgM"] [Sun Jul 12 18:04:45.468401 2026] [security2:error] [pid 941081:tid 941334] [client 197.48.221.253:58352] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrneZnN2CRos_GBqUEoAAAAgM"] [Sun Jul 12 18:04:45.514595 2026] [fcgid:warn] [pid 940777:tid 941000] (70014)End of file found: [client 199.45.155.82:55408] mod_fcgid: can't get data from http client [Sun Jul 12 18:04:45.545007 2026] [security2:error] [pid 940777:tid 940924] [client 146.70.194.236:41620] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrnZihQxksrpCflyFJOAAAAIw"] [Sun Jul 12 18:04:45.867467 2026] [authz_core:error] [pid 941081:tid 941247] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:45.867975 2026] [authz_core:error] [pid 941081:tid 941247] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:46.233888 2026] [security2:error] [pid 940777:tid 940929] [client 88.163.251.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrnZihQxksrpCflyFJRQAAAJE"] [Sun Jul 12 18:04:46.264744 2026] [security2:error] [pid 941081:tid 941287] [client 168.100.149.237:31690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38090/bargainor/2307_anisodactyli.jsp"] [unique_id "alQrnuZnN2CRos_GBqUEswAAAdQ"] [Sun Jul 12 18:04:46.405854 2026] [security2:error] [pid 941081:tid 941288] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3F5cW96Lzg5MTkvcXkvMzM4ODkveQ=="] [unique_id "alQrnuZnN2CRos_GBqUEtQAAAdU"] [Sun Jul 12 18:04:46.409908 2026] [security2:error] [pid 941081:tid 941289] [client 146.70.194.236:41632] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrnuZnN2CRos_GBqUErgAAAdY"] [Sun Jul 12 18:04:46.510315 2026] [autoindex:error] [pid 941081:tid 941345] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/fonts/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:46.645141 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:46.645642 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:46.697260 2026] [security2:error] [pid 940777:tid 940970] [client 74.244.119.215:45350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrnpihQxksrpCflyFJUwAAALo"] [Sun Jul 12 18:04:46.697467 2026] [security2:error] [pid 940777:tid 940970] [client 74.244.119.215:45350] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrnpihQxksrpCflyFJUwAAALo"] [Sun Jul 12 18:04:47.152469 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrgZihQxksrpCflyFJIAAApjQ"] [Sun Jul 12 18:04:47.153568 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrnJihQxksrpCflyFJIgAAAL8"] [Sun Jul 12 18:04:47.156224 2026] [security2:error] [pid 940777:tid 940795] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/.wp-config.php.swp"] [unique_id "alQrg5ihQxksrpCflyFJWwAApgk"] [Sun Jul 12 18:04:47.190686 2026] [security2:error] [pid 940777:tid 940932] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrnZihQxksrpCflyFJMgAAAJQ"] [Sun Jul 12 18:04:47.211647 2026] [security2:error] [pid 941081:tid 941253] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrneZnN2CRos_GBqUElgAAAbI"] [Sun Jul 12 18:04:47.301143 2026] [security2:error] [pid 941081:tid 941265] [client 146.70.194.236:16304] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrnuZnN2CRos_GBqUExQAAAb4"] [Sun Jul 12 18:04:47.390526 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrnpihQxksrpCflyFJVQAAALA"] [Sun Jul 12 18:04:47.390585 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrnpihQxksrpCflyFJVQAAALA"] [Sun Jul 12 18:04:47.391509 2026] [security2:error] [pid 941081:tid 941258] [client 65.21.113.206:44078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3F5cW96Lzg5MTkvcXkvMzM4ODkveQ=="] [unique_id "alQrnuZnN2CRos_GBqUExAAAAbc"] [Sun Jul 12 18:04:47.399449 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:47.399965 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:48.129908 2026] [security2:error] [pid 941081:tid 941298] [client 146.70.194.236:41650] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQrn-ZnN2CRos_GBqUE9AAAAd8"] [Sun Jul 12 18:04:48.210771 2026] [authz_core:error] [pid 941081:tid 941345] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:48.211295 2026] [authz_core:error] [pid 941081:tid 941345] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:48.252816 2026] [security2:error] [pid 940777:tid 940926] [client 168.100.149.91:31538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38155/bargainor/2307_birefraction.jsp"] [unique_id "alQroJihQxksrpCflyFJbQAAAI4"] [Sun Jul 12 18:04:48.567502 2026] [autoindex:error] [pid 940777:tid 940968] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/ID3/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:48.922179 2026] [authz_core:error] [pid 941081:tid 941313] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:48.922707 2026] [authz_core:error] [pid 941081:tid 941313] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:49.032204 2026] [security2:error] [pid 941081:tid 941265] [client 74.7.241.153:47980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.clanwood.us"] [uri "/robots.txt"] [unique_id "alQroeZnN2CRos_GBqUFCwAAAb4"] [Sun Jul 12 18:04:49.041686 2026] [security2:error] [pid 941081:tid 941260] [client 146.70.194.236:41654] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQroOZnN2CRos_GBqUFBwAAAbk"] [Sun Jul 12 18:04:49.127408 2026] [security2:error] [pid 941081:tid 941339] [client 78.142.18.40:51221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "softwaresermon.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQroeZnN2CRos_GBqUFEQAAAgg"] [Sun Jul 12 18:04:49.201973 2026] [security2:error] [pid 940777:tid 940923] [client 74.7.241.153:42384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.clanwood.us"] [uri "/robots.txt"] [unique_id "alQroZihQxksrpCflyFJfgAAixY"], referer: http://www.clanwood.us/robots.txt [Sun Jul 12 18:04:49.211128 2026] [security2:error] [pid 940777:tid 941010] [client 20.244.27.100:52179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-http.php"] [unique_id "alQroZihQxksrpCflyFJfwAAAOI"], referer: binance.com [Sun Jul 12 18:04:49.279026 2026] [security2:error] [pid 941081:tid 941316] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3FfMTc2MDdfcTFtaS8xXzM0ODBfbWky.html"] [unique_id "alQroeZnN2CRos_GBqUFFQAAAfE"] [Sun Jul 12 18:04:49.524036 2026] [security2:error] [pid 941081:tid 941327] [client 78.142.18.40:51818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "softwaresermon.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQroeZnN2CRos_GBqUFGQAAAfw"] [Sun Jul 12 18:04:49.697213 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:49.697797 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:49.889398 2026] [security2:error] [pid 940777:tid 940936] [client 146.70.194.236:53412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQroZihQxksrpCflyFJgwAAAJg"] [Sun Jul 12 18:04:49.927166 2026] [security2:error] [pid 941081:tid 941330] [client 78.142.18.40:52253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "softwaresermon.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQroeZnN2CRos_GBqUFKAAAAf8"] [Sun Jul 12 18:04:50.102127 2026] [security2:error] [pid 941081:tid 941290] [client 74.7.241.153:42390] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "clanwood.us"] [uri "/w_api/Handler.php"] [unique_id "alQroeZnN2CRos_GBqUFGAAB138"], referer: https://www.clanwood.us/robots.txt [Sun Jul 12 18:04:50.234259 2026] [security2:error] [pid 940777:tid 940938] [client 74.7.241.145:54624] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "clanwood.us"] [uri "/robots.txt"] [unique_id "alQropihQxksrpCflyFJhgAAAJo"] [Sun Jul 12 18:04:50.286444 2026] [security2:error] [pid 940777:tid 941023] [client 168.100.149.146:42182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38220/bargainor/2307_mediator.jsp"] [unique_id "alQropihQxksrpCflyFJigAAAO8"] [Sun Jul 12 18:04:50.292030 2026] [security2:error] [pid 941081:tid 941220] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQroeZnN2CRos_GBqUFJAAAAZE"] [Sun Jul 12 18:04:50.292119 2026] [security2:error] [pid 941081:tid 941220] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQroeZnN2CRos_GBqUFJAAAAZE"] [Sun Jul 12 18:04:50.295777 2026] [security2:error] [pid 940777:tid 940940] [client 65.21.113.206:44082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3FfMTc2MDdfcTFtaS8xXzM0ODBfbWky.html"] [unique_id "alQroZihQxksrpCflyFJhAAAAJw"] [Sun Jul 12 18:04:50.323474 2026] [security2:error] [pid 940777:tid 941016] [client 78.142.18.40:53477] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "softwaresermon.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQropihQxksrpCflyFJiwAAAOg"] [Sun Jul 12 18:04:50.451406 2026] [authz_core:error] [pid 940777:tid 940946] [client 3.151.194.164:59607] AH01630: client denied by server configuration: /home1/politiz5/public_html/cobd/php.ini [Sun Jul 12 18:04:50.507991 2026] [authz_core:error] [pid 941081:tid 941234] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:50.508471 2026] [authz_core:error] [pid 941081:tid 941234] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:50.644280 2026] [security2:error] [pid 940777:tid 940929] [client 74.7.241.145:51404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "clanwood.us"] [uri "/w_api/Handler.php"] [unique_id "alQropihQxksrpCflyFJjgAAkWU"], referer: http://clanwood.us/robots.txt [Sun Jul 12 18:04:50.733835 2026] [security2:error] [pid 940777:tid 940943] [client 113.174.15.116:34465] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQropihQxksrpCflyFJkgAAAJ8"], referer: https://www.portables-batterie.fr/lenovo/Lenovo-V130-15IGM(81HN00E0GE)-portable-batterie.htm [Sun Jul 12 18:04:50.736117 2026] [security2:error] [pid 940777:tid 940983] [client 146.70.194.236:53420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQropihQxksrpCflyFJkAAAAMc"] [Sun Jul 12 18:04:50.785080 2026] [autoindex:error] [pid 940777:tid 941019] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/sitemaps/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:51.113229 2026] [security2:error] [pid 941081:tid 941300] [client 94.187.171.125:63823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQro-ZnN2CRos_GBqUFQgAAAeE"] [Sun Jul 12 18:04:51.113540 2026] [security2:error] [pid 941081:tid 941300] [client 94.187.171.125:63823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQro-ZnN2CRos_GBqUFQgAAAeE"] [Sun Jul 12 18:04:51.280156 2026] [security2:error] [pid 941081:tid 941265] [client 197.148.73.134:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrouZnN2CRos_GBqUFPAAAAb4"] [Sun Jul 12 18:04:51.325734 2026] [authz_core:error] [pid 941081:tid 941281] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:51.326215 2026] [authz_core:error] [pid 941081:tid 941281] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:51.550591 2026] [security2:error] [pid 941081:tid 941278] [client 146.70.194.236:53428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "redsautorehab.com"] [uri "/xmlrpc.php"] [unique_id "alQro-ZnN2CRos_GBqUFRwAAAcs"] [Sun Jul 12 18:04:51.605359 2026] [security2:error] [pid 941081:tid 941271] [client 187.74.114.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "sinfully-desilicious.com"] [uri "/index.php"] [unique_id "alQrnuZnN2CRos_GBqUEvQAAAcQ"] [Sun Jul 12 18:04:52.094348 2026] [security2:error] [pid 940777:tid 940838] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrgpihQxksrpCflyFJVgAApjQ"] [Sun Jul 12 18:04:52.103821 2026] [authz_core:error] [pid 941081:tid 941235] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:52.104352 2026] [authz_core:error] [pid 941081:tid 941235] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:52.118777 2026] [security2:error] [pid 940777:tid 940922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn5ihQxksrpCflyFJYwAAAIo"], referer: http://67.222.38.115/@debug [Sun Jul 12 18:04:52.131011 2026] [security2:error] [pid 941081:tid 941228] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn-ZnN2CRos_GBqUE0QAAAZk"] [Sun Jul 12 18:04:52.149368 2026] [security2:error] [pid 940777:tid 940979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn5ihQxksrpCflyFJXwAAAMM"] [Sun Jul 12 18:04:52.166995 2026] [security2:error] [pid 941081:tid 941275] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn-ZnN2CRos_GBqUE0AAAAcg"] [Sun Jul 12 18:04:52.239388 2026] [security2:error] [pid 940777:tid 941030] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn5ihQxksrpCflyFJYAAAAPY"] [Sun Jul 12 18:04:52.253867 2026] [security2:error] [pid 941081:tid 941329] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn-ZnN2CRos_GBqUE0gAAAf4"] [Sun Jul 12 18:04:52.289487 2026] [security2:error] [pid 940777:tid 941038] [client 168.100.149.84:28464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38285/bargainor/2307_gurian.jsp"] [unique_id "alQrpJihQxksrpCflyFJnwAAAP4"] [Sun Jul 12 18:04:52.328865 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrn5ihQxksrpCflyFJZAAAAOY"], referer: http://67.222.38.115/@documentation [Sun Jul 12 18:04:52.818518 2026] [security2:error] [pid 941081:tid 941225] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3FvLzE1OTkxL3FvLzY4MTYvb2Rj.asp"] [unique_id "alQrpOZnN2CRos_GBqUFcwAAAZY"] [Sun Jul 12 18:04:52.906300 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:52.906813 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:53.126547 2026] [security2:error] [pid 941081:tid 941295] [client 127.0.0.1:30360] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQrpOZnN2CRos_GBqUFcAAAAdw"] [Sun Jul 12 18:04:53.126742 2026] [security2:error] [pid 941081:tid 941309] [client 74.7.175.177:54816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.gulf52.com"] [uri "/robots.txt"] [unique_id "alQrpOZnN2CRos_GBqUFbwAAAeo"] [Sun Jul 12 18:04:53.403430 2026] [security2:error] [pid 941081:tid 941250] [client 127.0.0.1:30376] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQrpeZnN2CRos_GBqUFfQAAAa8"], referer: http://autodiscover.gulf52.com/robots.txt [Sun Jul 12 18:04:53.403593 2026] [security2:error] [pid 940777:tid 940993] [client 127.0.0.1:30368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.gulf52.com"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQrpZihQxksrpCflyFJrgAAANE"], referer: http://autodiscover.gulf52.com/robots.txt [Sun Jul 12 18:04:53.403872 2026] [security2:error] [pid 940777:tid 941026] [client 74.7.175.177:33576] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.gulf52.com"] [uri "/autodiscover/autodiscover.xml"] [unique_id "alQrpZihQxksrpCflyFJrQAA8nE"], referer: http://autodiscover.gulf52.com/robots.txt [Sun Jul 12 18:04:53.535291 2026] [proxy:error] [pid 940777:tid 941040] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:04:53.535422 2026] [proxy_http:error] [pid 940777:tid 941040] [client 3.151.194.164:39497] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:04:53.539129 2026] [proxy:error] [pid 940777:tid 941040] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:04:53.539296 2026] [proxy_http:error] [pid 940777:tid 941040] [client 3.151.194.164:39497] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:04:53.677540 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:53.678072 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:53.699211 2026] [security2:error] [pid 941081:tid 941298] [client 69.195.70.191:37074] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/wp-cron.php"] [unique_id "alQrpeZnN2CRos_GBqUFiwAAAd8"] [Sun Jul 12 18:04:53.708758 2026] [security2:error] [pid 941081:tid 941282] [client 45.205.1.223:53358] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQro-ZnN2CRos_GBqUFQAAAAc8"] [Sun Jul 12 18:04:53.708821 2026] [security2:error] [pid 941081:tid 941282] [client 45.205.1.223:53358] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQro-ZnN2CRos_GBqUFQAAAAc8"] [Sun Jul 12 18:04:53.931179 2026] [security2:error] [pid 940777:tid 940949] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrpZihQxksrpCflyFJsgAAAKU"] [Sun Jul 12 18:04:53.931233 2026] [security2:error] [pid 940777:tid 940949] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrpZihQxksrpCflyFJsgAAAKU"] [Sun Jul 12 18:04:53.932465 2026] [security2:error] [pid 940777:tid 940944] [client 65.21.113.206:56038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3FvLzE1OTkxL3FvLzY4MTYvb2Rj.asp"] [unique_id "alQrpZihQxksrpCflyFJsAAAAKA"] [Sun Jul 12 18:04:54.079401 2026] [autoindex:error] [pid 941081:tid 941284] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:54.150052 2026] [security2:error] [pid 941081:tid 941311] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrpOZnN2CRos_GBqUFZwAAAew"] [Sun Jul 12 18:04:54.150958 2026] [security2:error] [pid 940777:tid 940820] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/1.sql"] [unique_id "alQriJihQxksrpCflyFJwQAApiI"] [Sun Jul 12 18:04:54.154702 2026] [security2:error] [pid 940777:tid 940881] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/1.sql"] [unique_id "alQriJihQxksrpCflyFJwwAApl0"], referer: http://67.222.38.115/1.sql [Sun Jul 12 18:04:54.186724 2026] [security2:error] [pid 941081:tid 941342] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrpOZnN2CRos_GBqUFYAAAAgs"], referer: http://67.222.38.115/+CSCOT+/oem [Sun Jul 12 18:04:54.241927 2026] [security2:error] [pid 940777:tid 940807] [remote 136.144.42.233:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 233.42.144.136.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "campfiresessions.com"] [uri "/wp-login.php"] [unique_id "alQrppihQxksrpCflyFJywAA5RU"] [Sun Jul 12 18:04:54.253269 2026] [security2:error] [pid 941081:tid 941286] [client 45.189.147.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrpeZnN2CRos_GBqUFigAAAdM"] [Sun Jul 12 18:04:54.273947 2026] [security2:error] [pid 940777:tid 940973] [client 168.100.149.67:50998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38350/bargainor/2307_monkey.jsp"] [unique_id "alQrppihQxksrpCflyFJzQAAAL0"] [Sun Jul 12 18:04:54.455733 2026] [authz_core:error] [pid 940777:tid 940928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:54.456226 2026] [authz_core:error] [pid 940777:tid 940928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:55.272490 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:55.273160 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:55.496284 2026] [security2:error] [pid 941081:tid 941223] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3FzcTYzLzcwODcvcXMvODcxNy9z"] [unique_id "alQrp-ZnN2CRos_GBqUFrgAAAZQ"] [Sun Jul 12 18:04:55.618469 2026] [security2:error] [pid 940777:tid 940985] [client 24.203.79.110:61527] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrp5ihQxksrpCflyFJ7wAAAMk"] [Sun Jul 12 18:04:55.618725 2026] [security2:error] [pid 940777:tid 940985] [client 24.203.79.110:61527] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrp5ihQxksrpCflyFJ7wAAAMk"] [Sun Jul 12 18:04:55.902122 2026] [security2:error] [pid 941081:tid 941309] [client 197.48.221.253:58913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrp-ZnN2CRos_GBqUFugAAAeo"] [Sun Jul 12 18:04:55.902337 2026] [security2:error] [pid 941081:tid 941309] [client 197.48.221.253:58913] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrp-ZnN2CRos_GBqUFugAAAeo"] [Sun Jul 12 18:04:55.920828 2026] [security2:error] [pid 940777:tid 940987] [client 20.244.27.100:49787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-icons-registry.php"] [unique_id "alQrp5ihQxksrpCflyFJ8wAAAMs"], referer: binance.com [Sun Jul 12 18:04:56.069868 2026] [autoindex:error] [pid 941081:tid 941236] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/IXR/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:56.109648 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:56.110284 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:56.201822 2026] [security2:error] [pid 941081:tid 941228] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrpuZnN2CRos_GBqUFlQAAAZk"], referer: http://67.222.38.115/1password.env [Sun Jul 12 18:04:56.224095 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrppihQxksrpCflyFJyQAAAKI"] [Sun Jul 12 18:04:56.262295 2026] [security2:error] [pid 940777:tid 941000] [client 112.86.225.93:58792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.turnweb.org"] [uri "/about/"] [unique_id "alQrqJihQxksrpCflyFJ-AAAANg"] [Sun Jul 12 18:04:56.262494 2026] [security2:error] [pid 940777:tid 941000] [client 112.86.225.93:58792] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.turnweb.org"] [uri "/about/"] [unique_id "alQrqJihQxksrpCflyFJ-AAAANg"] [Sun Jul 12 18:04:56.269428 2026] [security2:error] [pid 941081:tid 941342] [client 168.100.149.107:58042] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38415/bargainor/2307_impeccance.jsp"] [unique_id "alQrqOZnN2CRos_GBqUFyAAAAgs"] [Sun Jul 12 18:04:56.321470 2026] [security2:error] [pid 941081:tid 941274] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrpuZnN2CRos_GBqUFmAAAAcc"] [Sun Jul 12 18:04:56.350457 2026] [security2:error] [pid 941081:tid 941243] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrpuZnN2CRos_GBqUFlgAAAag"], referer: http://67.222.38.115/a/accounts/self [Sun Jul 12 18:04:56.597999 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrqJihQxksrpCflyFJ9AAAAI8"] [Sun Jul 12 18:04:56.598050 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrqJihQxksrpCflyFJ9AAAAI8"] [Sun Jul 12 18:04:56.602947 2026] [security2:error] [pid 941081:tid 941312] [client 65.21.113.206:56054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3FzcTYzLzcwODcvcXMvODcxNy9z"] [unique_id "alQrp-ZnN2CRos_GBqUFvwAAAe0"] [Sun Jul 12 18:04:56.916935 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:56.917420 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:56.988803 2026] [security2:error] [pid 941081:tid 941316] [client 45.205.1.223:53392] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrqOZnN2CRos_GBqUF3AAAAfE"] [Sun Jul 12 18:04:56.988865 2026] [security2:error] [pid 941081:tid 941316] [client 45.205.1.223:53392] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrqOZnN2CRos_GBqUF3AAAAfE"] [Sun Jul 12 18:04:57.247926 2026] [security2:error] [pid 941081:tid 941304] [client 74.244.119.215:58794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrqeZnN2CRos_GBqUF4gAAAeU"] [Sun Jul 12 18:04:57.248134 2026] [security2:error] [pid 941081:tid 941304] [client 74.244.119.215:58794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrqeZnN2CRos_GBqUF4gAAAeU"] [Sun Jul 12 18:04:57.514794 2026] [security2:error] [pid 941081:tid 941302] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrqOZnN2CRos_GBqUFzQAAAeM"], referer: http://67.222.38.115/actuator/auditevents [Sun Jul 12 18:04:57.549549 2026] [security2:error] [pid 941081:tid 941233] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrqOZnN2CRos_GBqUFygAAAZ4"] [Sun Jul 12 18:04:57.630014 2026] [autoindex:error] [pid 941081:tid 941236] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/images/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:04:57.732719 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:57.733189 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:58.063920 2026] [security2:error] [pid 940777:tid 940981] [client 62.171.167.118:37018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrqpihQxksrpCflyFKFAAAAMU"] [Sun Jul 12 18:04:58.280305 2026] [security2:error] [pid 940777:tid 941020] [client 168.100.149.215:48794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38480/bargainor/2307_gunz.jsp"] [unique_id "alQrqpihQxksrpCflyFKGwAAAOw"] [Sun Jul 12 18:04:58.385509 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:40498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrquZnN2CRos_GBqUF-AAAAZE"] [Sun Jul 12 18:04:58.487188 2026] [security2:error] [pid 941081:tid 941307] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3FzcTYzLzk3MzEvcXMvODcxNy9z"] [unique_id "alQrquZnN2CRos_GBqUF-wAAAeg"] [Sun Jul 12 18:04:58.535036 2026] [security2:error] [pid 941081:tid 941337] [client 176.108.187.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrquZnN2CRos_GBqUF8AAAAgY"] [Sun Jul 12 18:04:58.549935 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:58.550403 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:58.572698 2026] [security2:error] [pid 941081:tid 941239] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrqeZnN2CRos_GBqUF5AAAAaQ"], referer: http://67.222.38.115/actuator/env [Sun Jul 12 18:04:59.131168 2026] [security2:error] [pid 940777:tid 940918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrqZihQxksrpCflyFKCAAAAIY"] [Sun Jul 12 18:04:59.297463 2026] [authz_core:error] [pid 940777:tid 940967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:04:59.298002 2026] [authz_core:error] [pid 940777:tid 940967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:04:59.576837 2026] [security2:error] [pid 941081:tid 941242] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrquZnN2CRos_GBqUF_gAAAac"] [Sun Jul 12 18:04:59.576909 2026] [security2:error] [pid 941081:tid 941242] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrquZnN2CRos_GBqUF_gAAAac"] [Sun Jul 12 18:04:59.578142 2026] [security2:error] [pid 940777:tid 940971] [client 65.21.113.206:56064] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3FzcTYzLzk3MzEvcXMvODcxNy9z"] [unique_id "alQrqpihQxksrpCflyFKLQAAALs"] [Sun Jul 12 18:04:59.627091 2026] [autoindex:error] [pid 940777:tid 941002] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/PHPMailer/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:00.077831 2026] [security2:error] [pid 941081:tid 941325] [client 45.205.1.223:53460] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrq-ZnN2CRos_GBqUGDQAAAfo"] [Sun Jul 12 18:05:00.077894 2026] [security2:error] [pid 941081:tid 941325] [client 45.205.1.223:53460] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrq-ZnN2CRos_GBqUGDQAAAfo"] [Sun Jul 12 18:05:00.091840 2026] [security2:error] [pid 940777:tid 940934] [client 62.171.167.118:37008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrrJihQxksrpCflyFKPgAAAJY"] [Sun Jul 12 18:05:00.103459 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrqpihQxksrpCflyFKJAAAALQ"] [Sun Jul 12 18:05:00.113709 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:00.114193 2026] [authz_core:error] [pid 941081:tid 941327] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:00.269803 2026] [security2:error] [pid 941081:tid 941333] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrq-ZnN2CRos_GBqUGBAAAAgI"], referer: http://67.222.38.115/actuator/flyway [Sun Jul 12 18:05:00.317053 2026] [security2:error] [pid 941081:tid 941341] [client 168.100.149.235:18188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38545/bargainor/2307_monadically.jsp"] [unique_id "alQrrOZnN2CRos_GBqUGHQAAAgo"] [Sun Jul 12 18:05:00.821236 2026] [security2:error] [pid 941081:tid 941330] [client 62.171.167.118:37028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrrOZnN2CRos_GBqUGKQAAAf8"] [Sun Jul 12 18:05:00.878317 2026] [authz_core:error] [pid 941081:tid 941262] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:00.878830 2026] [authz_core:error] [pid 941081:tid 941262] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:01.103909 2026] [security2:error] [pid 941081:tid 941326] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrrOZnN2CRos_GBqUGGAAAAfs"] [Sun Jul 12 18:05:01.316158 2026] [security2:error] [pid 940777:tid 941023] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrrJihQxksrpCflyFKQgAAAO8"] [Sun Jul 12 18:05:01.383952 2026] [security2:error] [pid 941081:tid 941250] [client 57.141.18.41:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQrrOZnN2CRos_GBqUGFgAAAa8"] [Sun Jul 12 18:05:01.678223 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:01.678901 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:01.882133 2026] [security2:error] [pid 941081:tid 941280] [client 94.187.171.125:64317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrreZnN2CRos_GBqUGQgAAAc0"] [Sun Jul 12 18:05:01.882376 2026] [security2:error] [pid 941081:tid 941280] [client 94.187.171.125:64317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrreZnN2CRos_GBqUGQgAAAc0"] [Sun Jul 12 18:05:02.082955 2026] [security2:error] [pid 941081:tid 941307] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrreZnN2CRos_GBqUGMgAAAeg"], referer: http://67.222.38.115/actuator/jolokia [Sun Jul 12 18:05:02.302379 2026] [security2:error] [pid 940777:tid 940954] [client 50.87.253.215:13466] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "bzq.src.mybluehost.me"] [uri "/website_01c61f0f/wp-cron.php"] [unique_id "alQrrpihQxksrpCflyFKVAAAAKo"] [Sun Jul 12 18:05:02.325898 2026] [security2:error] [pid 940777:tid 940931] [client 168.100.149.102:58930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38610/bargainor/2307_enhalo.jsp"] [unique_id "alQrrpihQxksrpCflyFKVgAAAJM"] [Sun Jul 12 18:05:02.328886 2026] [security2:error] [pid 941081:tid 941340] [client 65.21.113.206:40930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3I1dDN1NF85ODg3L3I1LzM0OTMvNQ==.html"] [unique_id "alQrruZnN2CRos_GBqUGTAAAAgk"] [Sun Jul 12 18:05:02.372914 2026] [security2:error] [pid 941081:tid 941335] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrreZnN2CRos_GBqUGNwAAAag"] [Sun Jul 12 18:05:02.609218 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:02.609886 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:02.636367 2026] [security2:error] [pid 940777:tid 940801] [remote 195.250.29.165:47816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.29.250.195.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "airqmanuals.com"] [uri "/wp-login.php"] [unique_id "alQrrpihQxksrpCflyFKXwAAhQ8"] [Sun Jul 12 18:05:02.897607 2026] [security2:error] [pid 940777:tid 941017] [client 45.205.1.223:53472] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFKXgAAAOk"] [Sun Jul 12 18:05:02.897689 2026] [security2:error] [pid 940777:tid 941017] [client 45.205.1.223:53472] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFKXgAAAOk"] [Sun Jul 12 18:05:02.989595 2026] [autoindex:error] [pid 941081:tid 941294] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/pomo/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:03.025013 2026] [core:error] [pid 941081:tid 941289] [client 47.84.107.61:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.025017 2026] [core:error] [pid 941081:tid 941237] [client 47.84.107.61:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.025061 2026] [core:error] [pid 941081:tid 941289] [client 47.84.107.61:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.025094 2026] [core:error] [pid 941081:tid 941237] [client 47.84.107.61:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.058704 2026] [security2:error] [pid 940777:tid 940977] [client 20.244.27.100:59595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-navigation-fallback.php"] [unique_id "alQrr5ihQxksrpCflyFKawAAAME"], referer: binance.com [Sun Jul 12 18:05:03.233603 2026] [core:error] [pid 940777:tid 940946] [client 47.236.182.27:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.233686 2026] [core:error] [pid 940777:tid 940946] [client 47.236.182.27:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.241983 2026] [core:error] [pid 940777:tid 940955] [client 47.236.182.27:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.242119 2026] [core:error] [pid 940777:tid 940955] [client 47.236.182.27:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:05:03.258975 2026] [security2:error] [pid 941081:tid 941261] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrruZnN2CRos_GBqUGRgAAAbo"] [Sun Jul 12 18:05:03.479548 2026] [authz_core:error] [pid 940777:tid 940923] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:03.480315 2026] [authz_core:error] [pid 940777:tid 940923] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:03.549890 2026] [security2:error] [pid 941081:tid 941341] [client 161.123.168.105:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQrruZnN2CRos_GBqUGWwAAAgo"] [Sun Jul 12 18:05:03.563731 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFKXAAAAM8"], referer: http://67.222.38.115/actuator/loggers [Sun Jul 12 18:05:03.566587 2026] [security2:error] [pid 940777:tid 940962] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFKaQAAALI"] [Sun Jul 12 18:05:03.566658 2026] [security2:error] [pid 940777:tid 940962] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFKaQAAALI"] [Sun Jul 12 18:05:03.572291 2026] [security2:error] [pid 941081:tid 941320] [client 65.21.113.206:37430] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3I1dDN1NF85ODg3L3I1LzM0OTMvNQ==.html"] [unique_id "alQrruZnN2CRos_GBqUGVgAAAfU"] [Sun Jul 12 18:05:04.235185 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:04.235725 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:04.316005 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrr5ihQxksrpCflyFKfQAAAPA"] [Sun Jul 12 18:05:04.359610 2026] [security2:error] [pid 941081:tid 941280] [client 168.100.149.173:16490] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38675/bargainor/2307_metalogical.jsp"] [unique_id "alQrsOZnN2CRos_GBqUGfgAAAc0"] [Sun Jul 12 18:05:04.522371 2026] [security2:error] [pid 940777:tid 940943] [client 83.98.81.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrr5ihQxksrpCflyFKigAAAJ8"] [Sun Jul 12 18:05:04.574703 2026] [security2:error] [pid 941081:tid 941240] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrr-ZnN2CRos_GBqUGcwAAAaU"], referer: http://67.222.38.115/actuator/mappings [Sun Jul 12 18:05:04.969933 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:37038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/index.php"] [unique_id "alQrsJihQxksrpCflyFKmwAAAOY"] [Sun Jul 12 18:05:04.978220 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:04.978717 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:05.330737 2026] [security2:error] [pid 941081:tid 941336] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrsOZnN2CRos_GBqUGfQAAAgU"] [Sun Jul 12 18:05:05.414000 2026] [security2:error] [pid 941081:tid 941226] [client 66.249.66.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "randw.ie"] [uri "/index.php"] [unique_id "alQrsOZnN2CRos_GBqUGkgAAAZc"] [Sun Jul 12 18:05:05.709175 2026] [authz_core:error] [pid 941081:tid 941239] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:05.709677 2026] [authz_core:error] [pid 941081:tid 941239] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:06.184037 2026] [security2:error] [pid 941081:tid 941253] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrsOZnN2CRos_GBqUGiQAAAbI"], referer: http://67.222.38.115/actuator/metrics [Sun Jul 12 18:05:06.254861 2026] [security2:error] [pid 941081:tid 941223] [client 24.203.79.110:62025] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrsuZnN2CRos_GBqUGuQAAAZQ"] [Sun Jul 12 18:05:06.255100 2026] [security2:error] [pid 941081:tid 941223] [client 24.203.79.110:62025] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrsuZnN2CRos_GBqUGuQAAAZQ"] [Sun Jul 12 18:05:06.316547 2026] [security2:error] [pid 941081:tid 941322] [client 168.100.149.99:59302] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38740/bargainor/2307_psychoreflex.jsp"] [unique_id "alQrsuZnN2CRos_GBqUGvQAAAfc"] [Sun Jul 12 18:05:06.422950 2026] [security2:error] [pid 941081:tid 941344] [client 197.48.221.253:59481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrsuZnN2CRos_GBqUGwQAAAg0"] [Sun Jul 12 18:05:06.423138 2026] [security2:error] [pid 941081:tid 941344] [client 197.48.221.253:59481] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrsuZnN2CRos_GBqUGwQAAAg0"] [Sun Jul 12 18:05:06.476487 2026] [authz_core:error] [pid 941081:tid 941260] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:06.477004 2026] [authz_core:error] [pid 941081:tid 941260] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:07.057406 2026] [security2:error] [pid 941081:tid 941247] [client 57.141.18.117:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQrsuZnN2CRos_GBqUGxgAAAaw"] [Sun Jul 12 18:05:07.240296 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:07.240829 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:07.314739 2026] [security2:error] [pid 941081:tid 941282] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrseZnN2CRos_GBqUGnwAAAc8"], referer: http://67.222.38.115/actuator/prometheus [Sun Jul 12 18:05:07.320890 2026] [security2:error] [pid 941081:tid 941327] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrseZnN2CRos_GBqUGoAAAAfw"] [Sun Jul 12 18:05:07.461972 2026] [cgid:error] [pid 941081:tid 941300] [client 202.46.62.35:12198] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/smoke-detector-date-battery-change-stickers-stock-p-563.html?osCsid=oev932ravbcbpenojn9gn4a863 [Sun Jul 12 18:05:07.823932 2026] [security2:error] [pid 940777:tid 941010] [client 74.244.119.215:21882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrs5ihQxksrpCflyFK1wAAAOI"] [Sun Jul 12 18:05:07.824194 2026] [security2:error] [pid 940777:tid 941010] [client 74.244.119.215:21882] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrs5ihQxksrpCflyFK1wAAAOI"] [Sun Jul 12 18:05:08.001012 2026] [security2:error] [pid 941081:tid 941122] [remote 57.141.18.40:55222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/5jApK2sfXCw"] [unique_id "alQrs-ZnN2CRos_GBqUG3wAB8CI"] [Sun Jul 12 18:05:08.032543 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:08.033169 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:08.095935 2026] [security2:error] [pid 941081:tid 941246] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrseZnN2CRos_GBqUGoQAAAas"] [Sun Jul 12 18:05:08.275878 2026] [security2:error] [pid 940777:tid 941019] [client 23.98.142.191:59503] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.cecweb.org"] [uri "/index.php"] [unique_id "alQrtJihQxksrpCflyFK4AAA63A"] [Sun Jul 12 18:05:08.336178 2026] [security2:error] [pid 940777:tid 940925] [client 168.100.149.143:22798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38805/bargainor/2307_mailable.jsp"] [unique_id "alQrtJihQxksrpCflyFK4QAAAI0"] [Sun Jul 12 18:05:08.733221 2026] [security2:error] [pid 941081:tid 941228] [client 102.215.189.82:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQrtOZnN2CRos_GBqUG6QAAAZk"] [Sun Jul 12 18:05:08.857157 2026] [authz_core:error] [pid 941081:tid 941238] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:08.857834 2026] [authz_core:error] [pid 941081:tid 941238] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:09.155702 2026] [security2:error] [pid 941081:tid 941338] [client 20.63.87.152:25213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/.dj/index.php"] [unique_id "alQrteZnN2CRos_GBqUHAgAAAgc"] [Sun Jul 12 18:05:09.190956 2026] [security2:error] [pid 941081:tid 941227] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrsuZnN2CRos_GBqUGtgAAAZg"], referer: http://67.222.38.115/actuator/scheduledtasks [Sun Jul 12 18:05:09.510559 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItNDI1NC9ydDEvMzI1LXQxcHM="] [unique_id "alQrteZnN2CRos_GBqUHJAAAAgs"] [Sun Jul 12 18:05:09.572301 2026] [security2:error] [pid 940777:tid 941042] [client 203.148.84.6:55184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.84.148.203.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "darbot.com"] [uri "/xmlrpc.php"] [unique_id "alQrtZihQxksrpCflyFK-AAAAQI"] [Sun Jul 12 18:05:09.572655 2026] [security2:error] [pid 940777:tid 941042] [client 203.148.84.6:55184] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "darbot.com"] [uri "/xmlrpc.php"] [unique_id "alQrtZihQxksrpCflyFK-AAAAQI"] [Sun Jul 12 18:05:09.615886 2026] [security2:error] [pid 941081:tid 941332] [client 20.63.87.152:2864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/.trash7206/index.php"] [unique_id "alQrteZnN2CRos_GBqUHJgAAAgE"] [Sun Jul 12 18:05:09.623211 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:09.623756 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:09.879341 2026] [autoindex:error] [pid 941081:tid 941219] [client 20.63.87.152:25078] AH01276: Cannot serve directory /var/www/html/.well-known/: No matching DirectoryIndex (index.cgi,index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:10.003180 2026] [security2:error] [pid 941081:tid 941320] [client 20.63.87.152:25078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQrtuZnN2CRos_GBqUHQQAAAfU"] [Sun Jul 12 18:05:10.350413 2026] [security2:error] [pid 941081:tid 941234] [client 20.63.87.152:24415] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/.well-known/logs233/index.php"] [unique_id "alQrtuZnN2CRos_GBqUHUgAAAZ8"] [Sun Jul 12 18:05:10.366770 2026] [security2:error] [pid 941081:tid 941253] [client 168.100.149.99:59314] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38870/bargainor/2307_epidemiology.jsp"] [unique_id "alQrtuZnN2CRos_GBqUHUwAAAbI"] [Sun Jul 12 18:05:10.489116 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:10.489848 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:10.580597 2026] [autoindex:error] [pid 941081:tid 941296] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/js/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:10.609835 2026] [security2:error] [pid 940777:tid 940955] [client 20.63.87.152:33516] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/.well-known/wp-cron.php"] [unique_id "alQrtpihQxksrpCflyFLBwAAAKs"] [Sun Jul 12 18:05:10.637766 2026] [security2:error] [pid 941081:tid 941345] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrtuZnN2CRos_GBqUHRAAAAg4"] [Sun Jul 12 18:05:10.675523 2026] [security2:error] [pid 941081:tid 941345] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrtuZnN2CRos_GBqUHRAAAAg4"] [Sun Jul 12 18:05:10.647507 2026] [security2:error] [pid 941081:tid 941304] [client 65.21.113.206:37444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItNDI1NC9ydDEvMzI1LXQxcHM="] [unique_id "alQrtuZnN2CRos_GBqUHQgAAAeU"] [Sun Jul 12 18:05:10.827881 2026] [security2:error] [pid 941081:tid 941243] [client 20.63.87.152:33274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/0.kb-v3.php"] [unique_id "alQrtuZnN2CRos_GBqUHXwAAAag"] [Sun Jul 12 18:05:11.045107 2026] [security2:error] [pid 941081:tid 941303] [client 20.63.87.152:26632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/0.php"] [unique_id "alQrt-ZnN2CRos_GBqUHZwAAAeQ"] [Sun Jul 12 18:05:11.304436 2026] [security2:error] [pid 940777:tid 940953] [client 20.63.87.152:33220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/002.php"] [unique_id "alQrt5ihQxksrpCflyFLDQAAAKk"] [Sun Jul 12 18:05:11.336096 2026] [authz_core:error] [pid 941081:tid 941276] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:11.336587 2026] [authz_core:error] [pid 941081:tid 941276] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:11.510367 2026] [security2:error] [pid 940777:tid 941039] [client 20.63.87.152:25176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/01.php"] [unique_id "alQrt5ihQxksrpCflyFLEQAAAP8"] [Sun Jul 12 18:05:11.553969 2026] [security2:error] [pid 941081:tid 941227] [client 38.159.191.33:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrtuZnN2CRos_GBqUHYwAAAZg"] [Sun Jul 12 18:05:11.579602 2026] [security2:error] [pid 941081:tid 941306] [client 20.244.27.100:51572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-phpmailer.php"] [unique_id "alQrt-ZnN2CRos_GBqUHeQAAAec"], referer: binance.com [Sun Jul 12 18:05:11.625710 2026] [ssl:error] [pid 941081:tid 941318] [client 66.132.195.58:40686] AH02032: Hostname box2216.bluehost.com (default host as no SNI was provided) and hostname mail.faso.la provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:05:11.638967 2026] [security2:error] [pid 941081:tid 941244] [client 168.100.149.67:34552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38935/bargainor/2307_secque.jsp"] [unique_id "alQrt-ZnN2CRos_GBqUHewAAAak"] [Sun Jul 12 18:05:11.766078 2026] [security2:error] [pid 941081:tid 941343] [client 20.63.87.152:25214] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/0x.php"] [unique_id "alQrt-ZnN2CRos_GBqUHfwAAAgw"] [Sun Jul 12 18:05:12.049531 2026] [security2:error] [pid 940777:tid 940949] [client 102.206.157.232:60571] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.157.206.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danastasiak.com"] [uri "/xmlrpc.php"] [unique_id "alQrt5ihQxksrpCflyFLGgAAAKU"] [Sun Jul 12 18:05:12.049938 2026] [security2:error] [pid 940777:tid 940949] [client 102.206.157.232:60571] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "danastasiak.com"] [uri "/xmlrpc.php"] [unique_id "alQrt5ihQxksrpCflyFLGgAAAKU"] [Sun Jul 12 18:05:12.129965 2026] [security2:error] [pid 940777:tid 940921] [client 57.141.18.55:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQrt5ihQxksrpCflyFLFQAAAIk"] [Sun Jul 12 18:05:12.147396 2026] [security2:error] [pid 941081:tid 941290] [client 20.63.87.152:8180] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.thedressblues.org"] [uri "/1.php"] [unique_id "alQruOZnN2CRos_GBqUHiQAAAdc"] [Sun Jul 12 18:05:12.147874 2026] [security2:error] [pid 941081:tid 941290] [client 20.63.87.152:8180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/1.php"] [unique_id "alQruOZnN2CRos_GBqUHiQAAAdc"] [Sun Jul 12 18:05:12.228548 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:12.229225 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:12.436109 2026] [security2:error] [pid 941081:tid 941229] [client 20.63.87.152:5059] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/100.php"] [unique_id "alQruOZnN2CRos_GBqUHkQAAAZo"] [Sun Jul 12 18:05:12.625084 2026] [security2:error] [pid 940777:tid 940978] [client 94.187.171.125:64809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQruJihQxksrpCflyFLHwAAAMI"] [Sun Jul 12 18:05:12.625416 2026] [security2:error] [pid 940777:tid 940978] [client 94.187.171.125:64809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQruJihQxksrpCflyFLHwAAAMI"] [Sun Jul 12 18:05:12.833866 2026] [security2:error] [pid 940777:tid 940990] [client 20.63.87.152:25064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/122.php"] [unique_id "alQruJihQxksrpCflyFLJAAAAM4"] [Sun Jul 12 18:05:12.965102 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:12.965577 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:13.092037 2026] [security2:error] [pid 941081:tid 941281] [client 20.63.87.152:25071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/123.php"] [unique_id "alQrueZnN2CRos_GBqUHoQAAAc4"] [Sun Jul 12 18:05:13.104108 2026] [security2:error] [pid 940777:tid 940923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs5ihQxksrpCflyFKxgAAAIs"], referer: http://67.222.38.115/actuator/threaddump [Sun Jul 12 18:05:13.104845 2026] [security2:error] [pid 940777:tid 941030] [client 20.210.108.71:58603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-login.php"] [unique_id "alQruJihQxksrpCflyFLJQAAAPY"], referer: binance.com [Sun Jul 12 18:05:13.199293 2026] [security2:error] [pid 940777:tid 940945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs5ihQxksrpCflyFKxwAAAKE"], referer: http://67.222.38.115/actuator/sessions [Sun Jul 12 18:05:13.211145 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs-ZnN2CRos_GBqUG0wAAAaI"] [Sun Jul 12 18:05:13.240547 2026] [autoindex:error] [pid 940777:tid 940960] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/js/codemirror/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:13.322531 2026] [security2:error] [pid 941081:tid 941221] [client 20.63.87.152:5097] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/13.php"] [unique_id "alQrueZnN2CRos_GBqUHpwAAAZI"] [Sun Jul 12 18:05:13.513470 2026] [security2:error] [pid 941081:tid 941256] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItNTMzOC9ydDEvMzI1LXQxcHM="] [unique_id "alQrueZnN2CRos_GBqUHqQAAAbU"] [Sun Jul 12 18:05:13.723539 2026] [security2:error] [pid 940777:tid 941002] [client 20.63.87.152:25209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/133.php"] [unique_id "alQruZihQxksrpCflyFLMQAAANo"] [Sun Jul 12 18:05:13.729124 2026] [authz_core:error] [pid 940777:tid 940946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:13.729595 2026] [authz_core:error] [pid 940777:tid 940946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:13.996407 2026] [security2:error] [pid 941081:tid 941321] [client 20.63.87.152:25163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/155.php"] [unique_id "alQrueZnN2CRos_GBqUHtQAAAfY"] [Sun Jul 12 18:05:14.121217 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs5ihQxksrpCflyFKyAAAAJ4"], referer: http://67.222.38.115/actuator/shutdown [Sun Jul 12 18:05:14.125965 2026] [security2:error] [pid 940777:tid 940986] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs5ihQxksrpCflyFKyQAAAMo"] [Sun Jul 12 18:05:14.143989 2026] [security2:error] [pid 941081:tid 941250] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrtOZnN2CRos_GBqUG4gAAAa8"] [Sun Jul 12 18:05:14.179064 2026] [security2:error] [pid 940777:tid 941003] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrs5ihQxksrpCflyFKygAAANs"] [Sun Jul 12 18:05:14.192791 2026] [security2:error] [pid 941081:tid 941265] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrteZnN2CRos_GBqUHBAAAAb4"], referer: http://67.222.38.115/actuator/trace [Sun Jul 12 18:05:14.211976 2026] [security2:error] [pid 940777:tid 941011] [client 20.63.87.152:26666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/177.php"] [unique_id "alQrupihQxksrpCflyFLNwAAAOM"] [Sun Jul 12 18:05:14.293732 2026] [security2:error] [pid 941081:tid 941316] [client 168.100.149.227:25690] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39000/bargainor/2307_dislevelment.jsp"] [unique_id "alQruuZnN2CRos_GBqUHxgAAAfE"] [Sun Jul 12 18:05:14.508935 2026] [security2:error] [pid 941081:tid 941323] [client 20.63.87.152:31375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/1index.php"] [unique_id "alQruuZnN2CRos_GBqUHzgAAAfg"] [Sun Jul 12 18:05:14.533214 2026] [security2:error] [pid 941081:tid 941320] [client 102.206.157.232:60595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.157.206.102.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danastasiak.net"] [uri "/xmlrpc.php"] [unique_id "alQruuZnN2CRos_GBqUHzwAAAfU"] [Sun Jul 12 18:05:14.533435 2026] [security2:error] [pid 941081:tid 941320] [client 102.206.157.232:60595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "danastasiak.net"] [uri "/xmlrpc.php"] [unique_id "alQruuZnN2CRos_GBqUHzwAAAfU"] [Sun Jul 12 18:05:14.534988 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:14.535465 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:14.607156 2026] [security2:error] [pid 941081:tid 941322] [client 169.224.57.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQruuZnN2CRos_GBqUHuwAAAfc"] [Sun Jul 12 18:05:14.644247 2026] [security2:error] [pid 941081:tid 941287] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQruuZnN2CRos_GBqUHtgAAAdQ"] [Sun Jul 12 18:05:14.644314 2026] [security2:error] [pid 941081:tid 941287] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQruuZnN2CRos_GBqUHtgAAAdQ"] [Sun Jul 12 18:05:14.646418 2026] [security2:error] [pid 941081:tid 941283] [client 65.21.113.206:42370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItNTMzOC9ydDEvMzI1LXQxcHM="] [unique_id "alQrueZnN2CRos_GBqUHtAAAAdA"] [Sun Jul 12 18:05:14.715658 2026] [security2:error] [pid 941081:tid 941294] [client 70.40.223.75:45288] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wwcufm.com"] [uri "/stage01/index.php"] [unique_id "alQruuZnN2CRos_GBqUHzQAAAds"] [Sun Jul 12 18:05:14.769586 2026] [security2:error] [pid 940777:tid 940997] [client 20.63.87.152:5106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/2.php"] [unique_id "alQrupihQxksrpCflyFLOwAAANU"] [Sun Jul 12 18:05:15.073964 2026] [security2:error] [pid 941081:tid 941237] [client 20.63.87.152:5095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/222.php"] [unique_id "alQru-ZnN2CRos_GBqUH2AAAAaI"] [Sun Jul 12 18:05:15.307832 2026] [security2:error] [pid 941081:tid 941340] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQruuZnN2CRos_GBqUHwAAAAgk"] [Sun Jul 12 18:05:15.314312 2026] [security2:error] [pid 941081:tid 941301] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQruuZnN2CRos_GBqUHwgAAAeI"], referer: http://67.222.38.115/actuators/env [Sun Jul 12 18:05:15.342025 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:15.342494 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:15.390557 2026] [security2:error] [pid 941081:tid 941226] [client 20.63.87.152:25047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/2p.update.php"] [unique_id "alQru-ZnN2CRos_GBqUH4gAAAZc"] [Sun Jul 12 18:05:15.650638 2026] [security2:error] [pid 940777:tid 940979] [client 20.63.87.152:19898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/3.php"] [unique_id "alQru5ihQxksrpCflyFLTwAAAMM"] [Sun Jul 12 18:05:15.837974 2026] [autoindex:error] [pid 940777:tid 940948] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/js/plupload/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:15.948148 2026] [security2:error] [pid 941081:tid 941225] [client 20.63.87.152:14164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQru-ZnN2CRos_GBqUH8wAAAZY"] [Sun Jul 12 18:05:16.095457 2026] [authz_core:error] [pid 940777:tid 940995] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:16.095990 2026] [authz_core:error] [pid 940777:tid 940995] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:16.221571 2026] [security2:error] [pid 941081:tid 941303] [client 20.63.87.152:5115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/403.php"] [unique_id "alQrvOZnN2CRos_GBqUH_gAAAeQ"] [Sun Jul 12 18:05:16.280973 2026] [security2:error] [pid 940777:tid 940917] [client 168.100.149.20:61978] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39065/bargainor/2307_limnoria.jsp"] [unique_id "alQrvJihQxksrpCflyFLWwAAAIU"] [Sun Jul 12 18:05:16.387721 2026] [security2:error] [pid 940777:tid 940982] [client 190.100.163.121:47860] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQrvJihQxksrpCflyFLXgAAAMY"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-ThinkPad-E50-portable-batterie.htm [Sun Jul 12 18:05:16.566994 2026] [security2:error] [pid 941081:tid 941309] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItNTQzNi9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrvOZnN2CRos_GBqUIBQAAAeo"] [Sun Jul 12 18:05:16.603220 2026] [security2:error] [pid 941081:tid 941274] [client 20.63.87.152:25060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.thedressblues.org"] [uri "/404.php"] [unique_id "alQrvOZnN2CRos_GBqUIBgAAAcc"] [Sun Jul 12 18:05:16.845030 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:16.845527 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:16.899325 2026] [security2:error] [pid 941081:tid 941270] [client 197.48.221.253:60091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrvOZnN2CRos_GBqUIDQAAAcM"] [Sun Jul 12 18:05:16.899635 2026] [security2:error] [pid 941081:tid 941270] [client 197.48.221.253:60091] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrvOZnN2CRos_GBqUIDQAAAcM"] [Sun Jul 12 18:05:16.933356 2026] [security2:error] [pid 941081:tid 941241] [client 24.203.79.110:62529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrvOZnN2CRos_GBqUIDgAAAaY"] [Sun Jul 12 18:05:16.938551 2026] [security2:error] [pid 941081:tid 941241] [client 24.203.79.110:62529] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrvOZnN2CRos_GBqUIDgAAAaY"] [Sun Jul 12 18:05:17.125527 2026] [security2:error] [pid 940777:tid 940967] [client 47.128.19.209:56114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.hhworld.net"] [uri "/robots.txt"] [unique_id "alQrvZihQxksrpCflyFLawAAALc"] [Sun Jul 12 18:05:17.262925 2026] [security2:error] [pid 941081:tid 941293] [client 43.172.194.249:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQrvOZnN2CRos_GBqUH9wAB2gY"] [Sun Jul 12 18:05:17.316267 2026] [security2:error] [pid 940777:tid 940956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQru5ihQxksrpCflyFLSwAAAKw"] [Sun Jul 12 18:05:17.590730 2026] [autoindex:error] [pid 940777:tid 941040] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-includes/widgets/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:17.641254 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:17.641800 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:17.660603 2026] [security2:error] [pid 940777:tid 941021] [client 168.100.149.215:50836] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39130/bargainor/2307_milksopism.jsp"] [unique_id "alQrvZihQxksrpCflyFLhQAAAO0"] [Sun Jul 12 18:05:17.701483 2026] [security2:error] [pid 941081:tid 941336] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrveZnN2CRos_GBqUIFAAAAgU"] [Sun Jul 12 18:05:17.701534 2026] [security2:error] [pid 941081:tid 941336] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrveZnN2CRos_GBqUIFAAAAgU"] [Sun Jul 12 18:05:17.702851 2026] [security2:error] [pid 940777:tid 940985] [client 65.21.113.206:42384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItNTQzNi9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrvZihQxksrpCflyFLaAAAAMk"] [Sun Jul 12 18:05:17.863928 2026] [security2:error] [pid 941081:tid 941299] [client 20.244.27.100:53729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-plugin-dependencies.php"] [unique_id "alQrveZnN2CRos_GBqUILgAAAeA"], referer: binance.com [Sun Jul 12 18:05:18.122218 2026] [security2:error] [pid 940777:tid 940981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQru5ihQxksrpCflyFLTQAAAMU"] [Sun Jul 12 18:05:18.122292 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQru5ihQxksrpCflyFLTAAAAN8"] [Sun Jul 12 18:05:18.211415 2026] [security2:error] [pid 941081:tid 941327] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQru-ZnN2CRos_GBqUH4QAAAfA"], referer: http://67.222.38.115/actuators/health [Sun Jul 12 18:05:18.284059 2026] [security2:error] [pid 940777:tid 941039] [client 113.169.34.67:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQrvpihQxksrpCflyFLiAAAAP8"] [Sun Jul 12 18:05:18.311267 2026] [security2:error] [pid 941081:tid 941250] [client 74.244.119.215:19368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrvuZnN2CRos_GBqUIQgAAAa8"] [Sun Jul 12 18:05:18.317875 2026] [security2:error] [pid 941081:tid 941250] [client 74.244.119.215:19368] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQrvuZnN2CRos_GBqUIQgAAAa8"] [Sun Jul 12 18:05:18.421736 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:18.422220 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:18.430320 2026] [security2:error] [pid 940777:tid 941042] [client 82.39.212.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.gvr.cyu.mybluehost.me"] [uri "/website_42f78ff2/index.php"] [unique_id "alQrvJihQxksrpCflyFLYwAAAQI"] [Sun Jul 12 18:05:18.479066 2026] [security2:error] [pid 940777:tid 940993] [client 82.39.212.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.gvr.cyu.mybluehost.me"] [uri "/website_42f78ff2/index.php"] [unique_id "alQrvJihQxksrpCflyFLWgAAANE"] [Sun Jul 12 18:05:19.158706 2026] [authz_core:error] [pid 941081:tid 941295] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:19.159226 2026] [authz_core:error] [pid 941081:tid 941295] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:19.653259 2026] [security2:error] [pid 941081:tid 941262] [client 168.100.149.177:17182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39195/bargainor/2307_capnoides.jsp"] [unique_id "alQrv-ZnN2CRos_GBqUIcAAAAbs"] [Sun Jul 12 18:05:20.005344 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:20.005936 2026] [authz_core:error] [pid 940777:tid 940937] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:20.188951 2026] [security2:error] [pid 940777:tid 940976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvpihQxksrpCflyFLjQAAAMA"] [Sun Jul 12 18:05:20.209745 2026] [security2:error] [pid 940777:tid 940962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvZihQxksrpCflyFLgAAAALI"] [Sun Jul 12 18:05:20.229389 2026] [security2:error] [pid 940777:tid 940793] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrqpihQxksrpCflyFLvAAApgc"] [Sun Jul 12 18:05:20.230809 2026] [security2:error] [pid 940777:tid 940793] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrq5ihQxksrpCflyFLvQAApgc"] [Sun Jul 12 18:05:20.232130 2026] [security2:error] [pid 940777:tid 940793] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrrJihQxksrpCflyFLvgAApgc"] [Sun Jul 12 18:05:20.233483 2026] [security2:error] [pid 940777:tid 940793] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/admin/api.php"] [unique_id "alQrrJihQxksrpCflyFLvwAApgc"] [Sun Jul 12 18:05:20.538550 2026] [security2:error] [pid 941081:tid 941270] [client 74.89.150.189:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrv-ZnN2CRos_GBqUIegAAAcM"] [Sun Jul 12 18:05:20.787504 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItNjIzNy9ydDEvMzI1LXQxcHM="] [unique_id "alQrwOZnN2CRos_GBqUIoAAAAdc"] [Sun Jul 12 18:05:20.872055 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:20.905490 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:21.415082 2026] [security2:error] [pid 941081:tid 941343] [client 41.68.253.97:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIogAAAgw"] [Sun Jul 12 18:05:21.473076 2026] [security2:error] [pid 940777:tid 940974] [client 66.249.70.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.bateria-portatiles.es"] [uri "/404.php"] [unique_id "alQrwZihQxksrpCflyFL4wAAvmg"] [Sun Jul 12 18:05:21.699439 2026] [security2:error] [pid 941081:tid 941279] [client 52.167.144.196:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQrweZnN2CRos_GBqUIrQAAAcw"] [Sun Jul 12 18:05:21.702237 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:21.702754 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:21.957341 2026] [security2:error] [pid 940777:tid 941014] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrwZihQxksrpCflyFL4gAAAOY"] [Sun Jul 12 18:05:21.957405 2026] [security2:error] [pid 940777:tid 941014] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrwZihQxksrpCflyFL4gAAAOY"] [Sun Jul 12 18:05:21.958306 2026] [security2:error] [pid 940777:tid 941020] [client 65.21.113.206:42396] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItNjIzNy9ydDEvMzI1LXQxcHM="] [unique_id "alQrwZihQxksrpCflyFL3wAAAOw"] [Sun Jul 12 18:05:22.077931 2026] [security2:error] [pid 940777:tid 941041] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvpihQxksrpCflyFLlAAAAQE"], referer: http://67.222.38.115/admin [Sun Jul 12 18:05:22.082793 2026] [security2:error] [pid 941081:tid 941318] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvuZnN2CRos_GBqUIOwAAAfM"], referer: http://67.222.38.115/admin/ [Sun Jul 12 18:05:22.097137 2026] [security2:error] [pid 940777:tid 940951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvZihQxksrpCflyFLfQAAAKc"], referer: http://67.222.38.115/admin [Sun Jul 12 18:05:22.199950 2026] [security2:error] [pid 941081:tid 941274] [client 66.132.172.142:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQrweZnN2CRos_GBqUIvQAAAcc"] [Sun Jul 12 18:05:22.260945 2026] [security2:error] [pid 941081:tid 941154] [remote 192.249.127.213:56538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 213.127.249.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQrwuZnN2CRos_GBqUIyAAB1EI"] [Sun Jul 12 18:05:22.278246 2026] [security2:error] [pid 940777:tid 940938] [client 168.100.149.226:59572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39260/bargainor/2307_deft.jsp"] [unique_id "alQrwpihQxksrpCflyFL9QAAAJo"] [Sun Jul 12 18:05:22.516155 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:22.516741 2026] [authz_core:error] [pid 940777:tid 941000] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:22.761759 2026] [security2:error] [pid 941081:tid 941263] [client 114.119.155.252:20221] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.geekideas.net"] [uri "/geeksideas/"] [unique_id "alQrwuZnN2CRos_GBqUI3AAAAbw"], referer: https://www.geekideas.net/ [Sun Jul 12 18:05:23.145932 2026] [security2:error] [pid 941081:tid 941266] [client 20.244.27.100:51562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-script-modules.php"] [unique_id "alQrw-ZnN2CRos_GBqUI5AAAAb8"], referer: binance.com [Sun Jul 12 18:05:23.182173 2026] [security2:error] [pid 941081:tid 941313] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItNzg1NS9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrw-ZnN2CRos_GBqUI6AAAAe4"] [Sun Jul 12 18:05:23.275305 2026] [security2:error] [pid 940777:tid 941031] [client 94.187.171.125:65292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrw5ihQxksrpCflyFMCgAAAPc"] [Sun Jul 12 18:05:23.275645 2026] [security2:error] [pid 940777:tid 941031] [client 94.187.171.125:65292] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrw5ihQxksrpCflyFMCgAAAPc"] [Sun Jul 12 18:05:23.314082 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:23.314574 2026] [authz_core:error] [pid 940777:tid 941010] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:23.720129 2026] [security2:error] [pid 941081:tid 941229] [client 123.21.84.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lcmha.org"] [uri "/index.php"] [unique_id "alQru-ZnN2CRos_GBqUH9AAAAZo"] [Sun Jul 12 18:05:24.163480 2026] [security2:error] [pid 940777:tid 940962] [client 20.210.108.71:64365] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-login.php"] [unique_id "alQrxJihQxksrpCflyFMJwAAALI"], referer: binance.com [Sun Jul 12 18:05:24.194288 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:24.194969 2026] [authz_core:error] [pid 941081:tid 941282] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:24.282718 2026] [security2:error] [pid 940777:tid 941026] [client 168.100.149.9:15192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39325/bargainor/2307_did.jsp"] [unique_id "alQrxJihQxksrpCflyFMKAAAAPI"] [Sun Jul 12 18:05:24.497990 2026] [security2:error] [pid 940777:tid 941028] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrw5ihQxksrpCflyFMGwAAAPQ"] [Sun Jul 12 18:05:24.498058 2026] [security2:error] [pid 940777:tid 941028] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrw5ihQxksrpCflyFMGwAAAPQ"] [Sun Jul 12 18:05:24.499005 2026] [security2:error] [pid 940777:tid 941007] [client 65.21.113.206:59784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItNzg1NS9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrw5ihQxksrpCflyFMGQAAAN8"] [Sun Jul 12 18:05:24.959653 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:24.960187 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:25.005785 2026] [security2:error] [pid 941081:tid 941303] [client 125.167.21.72:61512] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQrwOZnN2CRos_GBqUIggAAAeQ"] [Sun Jul 12 18:05:25.658279 2026] [security2:error] [pid 941081:tid 941238] [client 168.100.149.118:35666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39390/bargainor/2307_delphian.jsp"] [unique_id "alQrxeZnN2CRos_GBqUJDAAAAaM"] [Sun Jul 12 18:05:25.795935 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:25.796515 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:26.277877 2026] [security2:error] [pid 940777:tid 940790] [remote 141.94.161.61:33264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.161.94.141.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thepinkbridge.com"] [uri "/wp-login.php"] [unique_id "alQrxpihQxksrpCflyFMNwAA0QQ"] [Sun Jul 12 18:05:26.520375 2026] [security2:error] [pid 940777:tid 940979] [client 74.7.175.143:42754] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "401"] [hostname "webdisk.playmatchgame.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQrxpihQxksrpCflyFMOQAAAMM"] [Sun Jul 12 18:05:26.590922 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:26.591400 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:26.684552 2026] [security2:error] [pid 940777:tid 940961] [client 62.171.158.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQrwpihQxksrpCflyFL_AAAALE"] [Sun Jul 12 18:05:27.128831 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvZihQxksrpCflyFLfAAAAKI"] [Sun Jul 12 18:05:27.321099 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:27.321587 2026] [authz_core:error] [pid 941081:tid 941317] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:27.325311 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ItOTYzMC9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrx-ZnN2CRos_GBqUJMwAAAeM"] [Sun Jul 12 18:05:27.341950 2026] [security2:error] [pid 941081:tid 941218] [client 197.48.221.253:60685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrx-ZnN2CRos_GBqUJNAAAAY8"] [Sun Jul 12 18:05:27.342272 2026] [security2:error] [pid 941081:tid 941218] [client 197.48.221.253:60685] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQrx-ZnN2CRos_GBqUJNAAAAY8"] [Sun Jul 12 18:05:27.531414 2026] [security2:error] [pid 940777:tid 940960] [client 62.171.167.118:55576] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/adminer.php"] [unique_id "alQrx5ihQxksrpCflyFMQAAAALA"] [Sun Jul 12 18:05:27.630253 2026] [security2:error] [pid 941081:tid 941299] [client 24.203.79.110:63023] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrx-ZnN2CRos_GBqUJOAAAAeA"] [Sun Jul 12 18:05:27.630544 2026] [security2:error] [pid 941081:tid 941299] [client 24.203.79.110:63023] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQrx-ZnN2CRos_GBqUJOAAAAeA"] [Sun Jul 12 18:05:27.654310 2026] [security2:error] [pid 941081:tid 941260] [client 168.100.149.55:48004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39455/bargainor/2307_anisodactyli.jsp"] [unique_id "alQrx-ZnN2CRos_GBqUJOQAAAbk"] [Sun Jul 12 18:05:27.932787 2026] [security2:error] [pid 941081:tid 941216] [remote 103.82.20.130:41066] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrx-ZnN2CRos_GBqUJQwACA38"] [Sun Jul 12 18:05:28.104169 2026] [security2:error] [pid 940777:tid 941016] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvZihQxksrpCflyFLfwAAAOg"], referer: http://67.222.38.115/admin-console/ [Sun Jul 12 18:05:28.105457 2026] [authz_core:error] [pid 941081:tid 941262] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:28.106180 2026] [authz_core:error] [pid 941081:tid 941262] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:28.474333 2026] [security2:error] [pid 941081:tid 941338] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrx-ZnN2CRos_GBqUJPAAAAgc"] [Sun Jul 12 18:05:28.474385 2026] [security2:error] [pid 941081:tid 941338] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrx-ZnN2CRos_GBqUJPAAAAgc"] [Sun Jul 12 18:05:28.475412 2026] [security2:error] [pid 941081:tid 941223] [client 65.21.113.206:59792] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ItOTYzMC9ybzAvMzQ0NTctbzBxaw=="] [unique_id "alQrx-ZnN2CRos_GBqUJOgAAAZQ"] [Sun Jul 12 18:05:28.578135 2026] [security2:error] [pid 941081:tid 941292] [client 109.149.11.90:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrx-ZnN2CRos_GBqUJSAAAAdk"] [Sun Jul 12 18:05:28.819286 2026] [security2:error] [pid 941081:tid 941284] [client 74.244.119.215:38823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQryOZnN2CRos_GBqUJWgAAAdE"] [Sun Jul 12 18:05:28.825716 2026] [security2:error] [pid 941081:tid 941284] [client 74.244.119.215:38823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQryOZnN2CRos_GBqUJWgAAAdE"] [Sun Jul 12 18:05:28.894130 2026] [authz_core:error] [pid 940777:tid 941028] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:28.894620 2026] [authz_core:error] [pid 940777:tid 941028] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:29.062400 2026] [security2:error] [pid 940777:tid 940926] [client 170.239.71.43:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "elleholmes.pub"] [uri "/index.php"] [unique_id "alQrwZihQxksrpCflyFL3QAAAI4"] [Sun Jul 12 18:05:29.700782 2026] [authz_core:error] [pid 941081:tid 941325] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:29.701312 2026] [authz_core:error] [pid 941081:tid 941325] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:30.085462 2026] [security2:error] [pid 940777:tid 940874] [remote 103.82.20.130:49126] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrypihQxksrpCflyFMWQAA_VY"] [Sun Jul 12 18:05:30.093088 2026] [security2:error] [pid 940777:tid 940933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrvZihQxksrpCflyFLfgAAAJU"], referer: http://67.222.38.115/adfs/ls/ [Sun Jul 12 18:05:30.209302 2026] [security2:error] [pid 941081:tid 941312] [client 125.167.21.72:62125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQryeZnN2CRos_GBqUJcwAAAe0"] [Sun Jul 12 18:05:30.340445 2026] [security2:error] [pid 941081:tid 941250] [client 168.100.149.236:16206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39520/bargainor/2307_birefraction.jsp"] [unique_id "alQryuZnN2CRos_GBqUJgAAAAa8"] [Sun Jul 12 18:05:30.492177 2026] [core:error] [pid 941081:tid 941223] [client 138.197.39.208:43210] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:05:30.558490 2026] [authz_core:error] [pid 941081:tid 941311] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:30.559200 2026] [authz_core:error] [pid 941081:tid 941311] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:31.140177 2026] [security2:error] [pid 941081:tid 941246] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIiwAAAas"] [Sun Jul 12 18:05:31.182285 2026] [security2:error] [pid 940777:tid 941036] [client 20.244.27.100:55921] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-scripts.php"] [unique_id "alQry5ihQxksrpCflyFMYwAAAPw"], referer: binance.com [Sun Jul 12 18:05:31.300120 2026] [security2:error] [pid 941081:tid 941284] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3JjNGpuel83NzE3L3JjLzEyMTQ1L2M=.html"] [unique_id "alQry-ZnN2CRos_GBqUJiwAAAdE"] [Sun Jul 12 18:05:31.390364 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:31.390967 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:31.462592 2026] [security2:error] [pid 940777:tid 941005] [client 14.252.120.89:54461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 89.120.252.14.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQry5ihQxksrpCflyFMawAAAN0"] [Sun Jul 12 18:05:31.462911 2026] [security2:error] [pid 940777:tid 941005] [client 14.252.120.89:54461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQry5ihQxksrpCflyFMawAAAN0"] [Sun Jul 12 18:05:32.263843 2026] [authz_core:error] [pid 941081:tid 941315] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:32.264329 2026] [authz_core:error] [pid 941081:tid 941315] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:32.302898 2026] [security2:error] [pid 941081:tid 941343] [client 168.100.149.51:50978] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39585/bargainor/2307_mediator.jsp"] [unique_id "alQrzOZnN2CRos_GBqUJpAAAAgw"] [Sun Jul 12 18:05:32.367024 2026] [security2:error] [pid 941081:tid 941290] [client 62.171.158.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQryOZnN2CRos_GBqUJSwAAAdc"] [Sun Jul 12 18:05:32.511381 2026] [security2:error] [pid 941081:tid 941251] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQry-ZnN2CRos_GBqUJmAAAAbA"] [Sun Jul 12 18:05:32.511439 2026] [security2:error] [pid 941081:tid 941251] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQry-ZnN2CRos_GBqUJmAAAAbA"] [Sun Jul 12 18:05:32.513467 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:59800] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3JjNGpuel83NzE3L3JjLzEyMTQ1L2M=.html"] [unique_id "alQry-ZnN2CRos_GBqUJlAAAAeM"] [Sun Jul 12 18:05:33.104961 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:33.105651 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:33.371155 2026] [security2:error] [pid 940777:tid 940804] [remote 57.141.18.84:34638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/QB7nok/"] [unique_id "alQrzZihQxksrpCflyFMhAAAnxI"] [Sun Jul 12 18:05:33.654554 2026] [security2:error] [pid 941081:tid 941228] [client 168.100.149.239:39124] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39650/bargainor/2307_gurian.jsp"] [unique_id "alQrzeZnN2CRos_GBqUJxgAAAZk"] [Sun Jul 12 18:05:33.974604 2026] [security2:error] [pid 941081:tid 941095] [remote 103.82.20.130:37274] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrzeZnN2CRos_GBqUJzQAB8Qc"] [Sun Jul 12 18:05:33.991952 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:33.992695 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:34.031241 2026] [security2:error] [pid 941081:tid 941298] [client 94.187.171.125:49401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrzuZnN2CRos_GBqUJzgAAAd8"] [Sun Jul 12 18:05:34.031518 2026] [security2:error] [pid 941081:tid 941298] [client 94.187.171.125:49401] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQrzuZnN2CRos_GBqUJzgAAAd8"] [Sun Jul 12 18:05:34.127133 2026] [security2:error] [pid 941081:tid 941317] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIkgAAAco"], referer: http://67.222.38.115/admin/api-tokens [Sun Jul 12 18:05:34.174008 2026] [security2:error] [pid 941081:tid 941320] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3JkNXNiLTgyMzcvcmQtMTQwNjEvZDVzYg=="] [unique_id "alQrzuZnN2CRos_GBqUJ0QAAAfU"] [Sun Jul 12 18:05:34.665707 2026] [core:error] [pid 941081:tid 941295] [client 47.253.5.130:49506] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:05:34.911806 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:34.912748 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:35.184168 2026] [autoindex:error] [pid 941081:tid 941312] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-content/uploads/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:35.364297 2026] [security2:error] [pid 941081:tid 941323] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrzuZnN2CRos_GBqUJ2gAAAfg"] [Sun Jul 12 18:05:35.364373 2026] [security2:error] [pid 941081:tid 941323] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQrzuZnN2CRos_GBqUJ2gAAAfg"] [Sun Jul 12 18:05:35.366852 2026] [security2:error] [pid 940777:tid 940929] [client 65.21.113.206:48656] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3JkNXNiLTgyMzcvcmQtMTQwNjEvZDVzYg=="] [unique_id "alQrzpihQxksrpCflyFMlwAAAJE"] [Sun Jul 12 18:05:35.524950 2026] [proxy:error] [pid 940777:tid 940972] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:05:35.525264 2026] [proxy_http:error] [pid 940777:tid 940972] [client 74.7.241.134:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:05:35.529798 2026] [proxy:error] [pid 940777:tid 940972] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:05:35.530034 2026] [proxy_http:error] [pid 940777:tid 940972] [client 74.7.241.134:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:05:35.530372 2026] [security2:error] [pid 940777:tid 940972] [client 74.7.241.134:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.openspectruminc.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQrz5ihQxksrpCflyFMrgAAALw"] [Sun Jul 12 18:05:35.667090 2026] [proxy:error] [pid 941081:tid 941283] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:05:35.667243 2026] [proxy_http:error] [pid 941081:tid 941283] [client 74.7.241.134:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:05:35.669252 2026] [proxy:error] [pid 941081:tid 941283] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:05:35.669415 2026] [proxy_http:error] [pid 941081:tid 941283] [client 74.7.241.134:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:05:35.669648 2026] [security2:error] [pid 941081:tid 941283] [client 74.7.241.134:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.openspectruminc.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQrz-ZnN2CRos_GBqUJ8gAAAdA"] [Sun Jul 12 18:05:35.734772 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:35.735256 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:35.848766 2026] [security2:error] [pid 941081:tid 941148] [remote 103.82.20.130:44702] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQrz-ZnN2CRos_GBqUJ9gAB7jw"] [Sun Jul 12 18:05:36.114005 2026] [security2:error] [pid 940777:tid 940793] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrrZihQxksrpCflyFLwAAApgc"], referer: http://67.222.38.115/admin/api/2024-01/graphql.json [Sun Jul 12 18:05:36.119120 2026] [security2:error] [pid 940777:tid 940837] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrrpihQxksrpCflyFL6QAApjM"] [Sun Jul 12 18:05:36.145781 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwJihQxksrpCflyFLyAAAAMk"] [Sun Jul 12 18:05:36.146130 2026] [security2:error] [pid 940777:tid 940999] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwJihQxksrpCflyFLxgAAANc"] [Sun Jul 12 18:05:36.152274 2026] [security2:error] [pid 941081:tid 941264] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIkQAAAb0"] [Sun Jul 12 18:05:36.294607 2026] [security2:error] [pid 941081:tid 941260] [client 168.100.149.38:16742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39715/bargainor/2307_monkey.jsp"] [unique_id "alQr0OZnN2CRos_GBqUKAAAAAbk"] [Sun Jul 12 18:05:36.482018 2026] [security2:error] [pid 941081:tid 941316] [client 177.204.20.239:65134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 239.20.204.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQr0OZnN2CRos_GBqUKBAAAAfE"] [Sun Jul 12 18:05:36.482260 2026] [security2:error] [pid 941081:tid 941316] [client 177.204.20.239:65134] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "danielbcaldwell.com"] [uri "/xmlrpc.php"] [unique_id "alQr0OZnN2CRos_GBqUKBAAAAfE"] [Sun Jul 12 18:05:36.509954 2026] [authz_core:error] [pid 941081:tid 941322] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:36.510447 2026] [authz_core:error] [pid 941081:tid 941322] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:36.584327 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3JkNXNiLTk3NDkvcmQtMTQwNjEvZDVzYg=="] [unique_id "alQr0OZnN2CRos_GBqUKDQAAAeM"] [Sun Jul 12 18:05:37.073112 2026] [security2:error] [pid 940777:tid 940934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwpihQxksrpCflyFL7wAAAJY"] [Sun Jul 12 18:05:37.141327 2026] [security2:error] [pid 940777:tid 941021] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwJihQxksrpCflyFLxQAAAO0"] [Sun Jul 12 18:05:37.142471 2026] [security2:error] [pid 941081:tid 941257] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIhgAAAbY"], referer: http://67.222.38.115/admin/.htpasswd [Sun Jul 12 18:05:37.340053 2026] [authz_core:error] [pid 940777:tid 941002] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:37.340783 2026] [authz_core:error] [pid 940777:tid 941002] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:37.749532 2026] [security2:error] [pid 941081:tid 941236] [client 20.244.27.100:57838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-speculation-rules.php"] [unique_id "alQr0eZnN2CRos_GBqUKJAAAAaE"], referer: binance.com [Sun Jul 12 18:05:37.770245 2026] [security2:error] [pid 941081:tid 941276] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr0eZnN2CRos_GBqUKGwAAAck"] [Sun Jul 12 18:05:37.770298 2026] [security2:error] [pid 941081:tid 941276] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr0eZnN2CRos_GBqUKGwAAAck"] [Sun Jul 12 18:05:37.771641 2026] [security2:error] [pid 940777:tid 941024] [client 65.21.113.206:48668] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3JkNXNiLTk3NDkvcmQtMTQwNjEvZDVzYg=="] [unique_id "alQr0ZihQxksrpCflyFMwAAAAPA"] [Sun Jul 12 18:05:37.800993 2026] [security2:error] [pid 940777:tid 940928] [client 197.48.221.253:61270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr0ZihQxksrpCflyFMygAAAJA"] [Sun Jul 12 18:05:37.801241 2026] [security2:error] [pid 940777:tid 940928] [client 197.48.221.253:61270] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr0ZihQxksrpCflyFMygAAAJA"] [Sun Jul 12 18:05:38.071536 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwJihQxksrpCflyFLxwAAALg"], referer: http://67.222.38.115/admin//phpmyadmin/ [Sun Jul 12 18:05:38.082729 2026] [autoindex:error] [pid 941081:tid 941218] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/wp-content/upgrade/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:38.085647 2026] [security2:error] [pid 941081:tid 941345] [client 196.229.157.93:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr0eZnN2CRos_GBqUKIwAAAg4"] [Sun Jul 12 18:05:38.133349 2026] [security2:error] [pid 941081:tid 941280] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwuZnN2CRos_GBqUIxQAAAc0"] [Sun Jul 12 18:05:38.151499 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:38.151994 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:38.179687 2026] [security2:error] [pid 941081:tid 941321] [client 5.161.61.238:51392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQr0uZnN2CRos_GBqUKMQAAAfY"], referer: https://nwuav.com [Sun Jul 12 18:05:38.188518 2026] [security2:error] [pid 941081:tid 941269] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrwOZnN2CRos_GBqUIlgAAAcI"], referer: http://67.222.38.115/admin/alter [Sun Jul 12 18:05:38.297612 2026] [security2:error] [pid 940777:tid 941014] [client 168.100.149.120:22006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39780/bargainor/2307_impeccance.jsp"] [unique_id "alQr0pihQxksrpCflyFM0QAAAOY"] [Sun Jul 12 18:05:38.309469 2026] [security2:error] [pid 941081:tid 941277] [client 24.203.79.110:63526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr0uZnN2CRos_GBqUKMwAAAco"] [Sun Jul 12 18:05:38.309822 2026] [security2:error] [pid 941081:tid 941277] [client 24.203.79.110:63526] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr0uZnN2CRos_GBqUKMwAAAco"] [Sun Jul 12 18:05:38.686468 2026] [security2:error] [pid 940777:tid 940990] [client 216.244.66.248:37052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.pc-denchi.com"] [uri "/hp-ac-adapter/0957-2120.html"] [unique_id "alQr0pihQxksrpCflyFM1wAAAM4"] [Sun Jul 12 18:05:38.686759 2026] [security2:error] [pid 940777:tid 940990] [client 216.244.66.248:37052] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.pc-denchi.com"] [uri "/hp-ac-adapter/0957-2120.html"] [unique_id "alQr0pihQxksrpCflyFM1wAAAM4"] [Sun Jul 12 18:05:38.931723 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:38.932215 2026] [authz_core:error] [pid 941081:tid 941330] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:39.205525 2026] [security2:error] [pid 940777:tid 940898] [remote 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrtJihQxksrpCflyFMywAApm4"] [Sun Jul 12 18:05:39.253578 2026] [security2:error] [pid 941081:tid 941251] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3JvLzExNjc5L3JvLzE2ODIvb2E0.asp"] [unique_id "alQr0-ZnN2CRos_GBqUKTwAAAbA"] [Sun Jul 12 18:05:39.323292 2026] [security2:error] [pid 941081:tid 941315] [client 74.244.119.215:50746] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr0-ZnN2CRos_GBqUKUwAAAfA"] [Sun Jul 12 18:05:39.323641 2026] [security2:error] [pid 941081:tid 941315] [client 74.244.119.215:50746] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr0-ZnN2CRos_GBqUKUwAAAfA"] [Sun Jul 12 18:05:39.334798 2026] [security2:error] [pid 940777:tid 940988] [client 74.7.244.35:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "whatintherv.com"] [uri "/robots.txt"] [unique_id "alQr05ihQxksrpCflyFM5gAAAMw"] [Sun Jul 12 18:05:39.336483 2026] [security2:error] [pid 941081:tid 941274] [client 74.7.244.35:52116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "whatintherv.com"] [uri "/robots.txt"] [unique_id "alQr0-ZnN2CRos_GBqUKVAAAAcc"] [Sun Jul 12 18:05:39.508299 2026] [security2:error] [pid 941081:tid 941219] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr0uZnN2CRos_GBqUKMgAAAZA"] [Sun Jul 12 18:05:39.670357 2026] [security2:error] [pid 941081:tid 941343] [client 168.100.149.12:47730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39845/bargainor/2307_gunz.jsp"] [unique_id "alQr0-ZnN2CRos_GBqUKYAAAAgw"] [Sun Jul 12 18:05:39.756378 2026] [security2:error] [pid 941081:tid 941276] [client 74.7.244.35:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "codingfiend.com"] [uri "/website_879839fc/robots.txt"] [unique_id "alQr0-ZnN2CRos_GBqUKZAAAAck"], referer: http://whatintherv.com/robots.txt [Sun Jul 12 18:05:39.758275 2026] [security2:error] [pid 940777:tid 941012] [client 74.7.244.35:39538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "codingfiend.com"] [uri "/website_879839fc/robots.txt"] [unique_id "alQr05ihQxksrpCflyFM7AAA5Gc"], referer: http://whatintherv.com/robots.txt [Sun Jul 12 18:05:39.771013 2026] [authz_core:error] [pid 941081:tid 941240] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:39.771488 2026] [authz_core:error] [pid 941081:tid 941240] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:40.288966 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr0-ZnN2CRos_GBqUKZQAAAdo"] [Sun Jul 12 18:05:40.289114 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr0-ZnN2CRos_GBqUKZQAAAdo"] [Sun Jul 12 18:05:40.290217 2026] [security2:error] [pid 941081:tid 941314] [client 65.21.113.206:48676] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3JvLzExNjc5L3JvLzE2ODIvb2E0.asp"] [unique_id "alQr0-ZnN2CRos_GBqUKYwAAAe8"] [Sun Jul 12 18:05:40.328032 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr0-ZnN2CRos_GBqUKTgAAAds"], referer: http://67.222.38.115/admin/routes [Sun Jul 12 18:05:40.648274 2026] [authz_core:error] [pid 940777:tid 940943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:40.648787 2026] [authz_core:error] [pid 940777:tid 940943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:40.744147 2026] [security2:error] [pid 940777:tid 940985] [client 125.167.21.72:62516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQr1JihQxksrpCflyFM9QAAAMk"] [Sun Jul 12 18:05:41.099311 2026] [security2:error] [pid 941081:tid 941323] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr0-ZnN2CRos_GBqUKWgAAAfg"] [Sun Jul 12 18:05:41.284247 2026] [security2:error] [pid 941081:tid 941263] [client 62.171.167.118:43446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/apc.php"] [unique_id "alQr1eZnN2CRos_GBqUKhwAAAbw"] [Sun Jul 12 18:05:41.390978 2026] [security2:error] [pid 940777:tid 940974] [client 127.0.0.1:18294] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQr1ZihQxksrpCflyFNAQAAAL4"] [Sun Jul 12 18:05:41.391452 2026] [security2:error] [pid 940777:tid 941036] [client 74.7.228.11:54914] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.gnsai.com"] [uri "/robots.txt"] [unique_id "alQr1ZihQxksrpCflyFNAAAAAPw"] [Sun Jul 12 18:05:41.445796 2026] [authz_core:error] [pid 940777:tid 940961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:41.446481 2026] [authz_core:error] [pid 940777:tid 940961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:41.451859 2026] [security2:error] [pid 941081:tid 941242] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1OZnN2CRos_GBqUKbAAAAac"], referer: http://67.222.38.115/admin/schema [Sun Jul 12 18:05:41.725613 2026] [security2:error] [pid 941081:tid 941335] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3JvLzExNjc5L3JvLzc5NDAvb2E0.asp"] [unique_id "alQr1eZnN2CRos_GBqUKnAAAAgQ"] [Sun Jul 12 18:05:42.064202 2026] [security2:error] [pid 941081:tid 941294] [client 104.156.225.167:57159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vanessadeharo.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQr1uZnN2CRos_GBqUKpAAAAds"] [Sun Jul 12 18:05:42.124916 2026] [security2:error] [pid 940777:tid 941013] [client 62.171.167.118:43442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/api_jsonrpc.php"] [unique_id "alQr1pihQxksrpCflyFNEwAAAOU"] [Sun Jul 12 18:05:42.145125 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1ZihQxksrpCflyFNBAAAAMI"] [Sun Jul 12 18:05:42.249579 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:42.250093 2026] [authz_core:error] [pid 941081:tid 941267] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:42.383446 2026] [security2:error] [pid 941081:tid 941288] [client 168.100.149.47:57204] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39910/bargainor/2307_monadically.jsp"] [unique_id "alQr1uZnN2CRos_GBqUKsQAAAdU"] [Sun Jul 12 18:05:42.502213 2026] [security2:error] [pid 941081:tid 941153] [remote 103.82.20.130:42090] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQr1uZnN2CRos_GBqUKtwAB6UE"] [Sun Jul 12 18:05:42.511293 2026] [security2:error] [pid 941081:tid 941258] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1eZnN2CRos_GBqUKkAAAAbc"], referer: http://67.222.38.115/admin/shutdown [Sun Jul 12 18:05:42.807120 2026] [security2:error] [pid 941081:tid 941264] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr1uZnN2CRos_GBqUKrQAAAb0"] [Sun Jul 12 18:05:42.807189 2026] [security2:error] [pid 941081:tid 941264] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr1uZnN2CRos_GBqUKrQAAAb0"] [Sun Jul 12 18:05:42.808477 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:48684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3JvLzExNjc5L3JvLzc5NDAvb2E0.asp"] [unique_id "alQr1uZnN2CRos_GBqUKqgAAAdo"] [Sun Jul 12 18:05:43.010159 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:43.010732 2026] [authz_core:error] [pid 940777:tid 940972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:43.187982 2026] [security2:error] [pid 941081:tid 941260] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1uZnN2CRos_GBqUKqAAAAbk"] [Sun Jul 12 18:05:43.391958 2026] [security2:error] [pid 941081:tid 941222] [client 20.244.27.100:57478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-styles.php"] [unique_id "alQr1-ZnN2CRos_GBqUKxAAAAZM"], referer: binance.com [Sun Jul 12 18:05:43.521839 2026] [security2:error] [pid 940777:tid 940939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1pihQxksrpCflyFNHQAAAJs"] [Sun Jul 12 18:05:43.781173 2026] [authz_core:error] [pid 940777:tid 941038] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:43.781680 2026] [authz_core:error] [pid 940777:tid 941038] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:43.972729 2026] [security2:error] [pid 941081:tid 941250] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3Jwd2lyYl83MzI2L3JwLzE4MzMzL3A=.html"] [unique_id "alQr1-ZnN2CRos_GBqUK0QAAAa8"] [Sun Jul 12 18:05:44.196538 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQrupihQxksrpCflyFNJgAApj8"], referer: http://67.222.38.115/admin/topics.jsp [Sun Jul 12 18:05:44.360474 2026] [security2:error] [pid 941081:tid 941298] [client 168.100.149.152:60068] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39975/bargainor/2307_enhalo.jsp"] [unique_id "alQr2OZnN2CRos_GBqUK2AAAAd8"] [Sun Jul 12 18:05:44.537589 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:44.538097 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:44.645421 2026] [security2:error] [pid 941081:tid 941253] [client 94.187.171.125:49895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr2OZnN2CRos_GBqUK3wAAAbI"] [Sun Jul 12 18:05:44.645742 2026] [security2:error] [pid 941081:tid 941253] [client 94.187.171.125:49895] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr2OZnN2CRos_GBqUK3wAAAbI"] [Sun Jul 12 18:05:44.776195 2026] [security2:error] [pid 941081:tid 941119] [remote 103.82.20.130:48972] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQr2OZnN2CRos_GBqUK5gAB2x8"] [Sun Jul 12 18:05:44.899077 2026] [security2:error] [pid 940777:tid 940991] [client 200.2.163.135:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQr2JihQxksrpCflyFNOAAAAM8"] [Sun Jul 12 18:05:44.913468 2026] [security2:error] [pid 941081:tid 941228] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr2OZnN2CRos_GBqUK3gAAAZk"] [Sun Jul 12 18:05:44.913518 2026] [security2:error] [pid 941081:tid 941228] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr2OZnN2CRos_GBqUK3gAAAZk"] [Sun Jul 12 18:05:44.914458 2026] [security2:error] [pid 940777:tid 941016] [client 65.21.113.206:51632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3Jwd2lyYl83MzI2L3JwLzE4MzMzL3A=.html"] [unique_id "alQr2JihQxksrpCflyFNOgAAAOg"] [Sun Jul 12 18:05:45.311053 2026] [security2:error] [pid 940777:tid 940950] [client 62.171.167.118:58156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQru5ihQxksrpCflyFNJwAApm4"] [Sun Jul 12 18:05:45.342251 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:45.345868 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:45.822504 2026] [security2:error] [pid 941081:tid 941274] [client 43.130.15.147:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqULAwAAAcc"] [Sun Jul 12 18:05:46.183271 2026] [authz_core:error] [pid 940777:tid 941019] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:46.184073 2026] [authz_core:error] [pid 940777:tid 941019] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:46.294609 2026] [security2:error] [pid 940777:tid 941037] [client 168.100.149.218:20672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40040/bargainor/2307_metalogical.jsp"] [unique_id "alQr2pihQxksrpCflyFNTQAAAP0"] [Sun Jul 12 18:05:46.413180 2026] [autoindex:error] [pid 941081:tid 941279] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:05:46.444166 2026] [security2:error] [pid 941081:tid 941331] [client 52.167.144.64:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.redwolfaudio.com"] [uri "/index.php"] [unique_id "alQr1OZnN2CRos_GBqUKfAAAAgA"] [Sun Jul 12 18:05:46.551285 2026] [security2:error] [pid 941081:tid 941339] [client 57.141.18.102:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQr2uZnN2CRos_GBqULEQAAAgg"] [Sun Jul 12 18:05:46.969920 2026] [security2:error] [pid 941081:tid 941345] [client 90.208.241.167:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr2uZnN2CRos_GBqULGQAAAg4"] [Sun Jul 12 18:05:46.980699 2026] [authz_core:error] [pid 940777:tid 940994] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:46.981213 2026] [authz_core:error] [pid 940777:tid 940994] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:47.079993 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr1-ZnN2CRos_GBqUKygAAAaI"] [Sun Jul 12 18:05:47.148437 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr15ihQxksrpCflyFNKgAAAJ4"], referer: http://67.222.38.115/admin/transfer/tokens [Sun Jul 12 18:05:47.168148 2026] [security2:error] [pid 940777:tid 940937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2JihQxksrpCflyFNNAAAAJk"], referer: http://67.222.38.115/admin/users [Sun Jul 12 18:05:47.297494 2026] [security2:error] [pid 941081:tid 941294] [client 57.141.18.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQr2uZnN2CRos_GBqULKQAAAds"] [Sun Jul 12 18:05:47.393876 2026] [security2:error] [pid 941081:tid 941183] [remote 103.82.20.130:57688] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQr2-ZnN2CRos_GBqULNQACBF4"] [Sun Jul 12 18:05:47.750272 2026] [authz_core:error] [pid 941081:tid 941297] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:47.750775 2026] [authz_core:error] [pid 941081:tid 941297] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:48.273005 2026] [security2:error] [pid 941081:tid 941284] [client 197.48.221.253:61862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr3OZnN2CRos_GBqULTQAAAdE"] [Sun Jul 12 18:05:48.273258 2026] [security2:error] [pid 941081:tid 941284] [client 197.48.221.253:61862] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr3OZnN2CRos_GBqULTQAAAdE"] [Sun Jul 12 18:05:48.357803 2026] [security2:error] [pid 941081:tid 941246] [client 168.100.149.5:24758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40105/bargainor/2307_psychoreflex.jsp"] [unique_id "alQr3OZnN2CRos_GBqULUAAAAas"] [Sun Jul 12 18:05:48.399559 2026] [security2:error] [pid 941081:tid 941259] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3M0LTMyMjY5LXM0bGoxLTcwMzAtNGxq.cgi"] [unique_id "alQr3OZnN2CRos_GBqULUQAAAbg"] [Sun Jul 12 18:05:48.489419 2026] [authz_core:error] [pid 940777:tid 941042] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:48.489990 2026] [authz_core:error] [pid 940777:tid 941042] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:48.774468 2026] [security2:error] [pid 940777:tid 941020] [client 20.244.27.100:60935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-textdomain-registry.php"] [unique_id "alQr3JihQxksrpCflyFNWgAAAOw"], referer: binance.com [Sun Jul 12 18:05:48.943848 2026] [security2:error] [pid 941081:tid 941307] [client 24.203.79.110:64029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr3OZnN2CRos_GBqULaQAAAeg"] [Sun Jul 12 18:05:48.944311 2026] [security2:error] [pid 941081:tid 941307] [client 24.203.79.110:64029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr3OZnN2CRos_GBqULaQAAAeg"] [Sun Jul 12 18:05:49.102284 2026] [security2:error] [pid 941081:tid 941188] [remote 103.82.20.130:39580] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQr3eZnN2CRos_GBqULbAABo2M"] [Sun Jul 12 18:05:49.235268 2026] [security2:error] [pid 941081:tid 941317] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqUK-gAAAfI"] [Sun Jul 12 18:05:49.319923 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:49.320572 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:49.525365 2026] [security2:error] [pid 940777:tid 940966] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr3JihQxksrpCflyFNXAAAALY"] [Sun Jul 12 18:05:49.525440 2026] [security2:error] [pid 940777:tid 940966] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr3JihQxksrpCflyFNXAAAALY"] [Sun Jul 12 18:05:49.529547 2026] [security2:error] [pid 941081:tid 941311] [client 65.21.113.206:51634] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3M0LTMyMjY5LXM0bGoxLTcwMzAtNGxq.cgi"] [unique_id "alQr3OZnN2CRos_GBqULZgAAAew"] [Sun Jul 12 18:05:49.789273 2026] [security2:error] [pid 940777:tid 940930] [client 74.244.119.215:35359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr3ZihQxksrpCflyFNbAAAAJI"] [Sun Jul 12 18:05:49.792319 2026] [security2:error] [pid 940777:tid 940930] [client 74.244.119.215:35359] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr3ZihQxksrpCflyFNbAAAAJI"] [Sun Jul 12 18:05:49.840273 2026] [security2:error] [pid 941081:tid 941223] [client 37.123.84.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqULDAAAAZQ"] [Sun Jul 12 18:05:49.939047 2026] [fcgid:warn] [pid 941081:tid 941227] (70014)End of file found: [client 93.174.93.12:60000] mod_fcgid: can't get data from http client [Sun Jul 12 18:05:50.077800 2026] [security2:error] [pid 941081:tid 941269] [client 202.46.62.107:62876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 107.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQr3uZnN2CRos_GBqULkgAAAcI"], referer: https://www.stephenspublishing.com/scrapers-polar-custom-p-879.html?osCsid=7sl8thrlf9b1v8h5tbfepoc0c0 [Sun Jul 12 18:05:50.115182 2026] [security2:error] [pid 941081:tid 941308] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqUK-wAAAek"], referer: http://67.222.38.115/admin/v1/ [Sun Jul 12 18:05:50.115441 2026] [security2:error] [pid 941081:tid 941330] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqUK9wAAAf8"] [Sun Jul 12 18:05:50.132376 2026] [security2:error] [pid 941081:tid 941256] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqUK-AAAAbU"] [Sun Jul 12 18:05:50.174398 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:50.175029 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:50.190173 2026] [security2:error] [pid 941081:tid 941230] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr2eZnN2CRos_GBqUK-QAAAZs"], referer: http://67.222.38.115/admin/v2/broker-stats/topics [Sun Jul 12 18:05:50.352045 2026] [security2:error] [pid 941081:tid 941310] [client 168.100.149.53:16374] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40170/bargainor/2307_mailable.jsp"] [unique_id "alQr3uZnN2CRos_GBqULmQAAAes"] [Sun Jul 12 18:05:51.013260 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:51.013836 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:51.403109 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr3uZnN2CRos_GBqULlQAAAaI"] [Sun Jul 12 18:05:51.675954 2026] [security2:error] [pid 940777:tid 940978] [client 168.100.149.104:22770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40235/bargainor/2307_epidemiology.jsp"] [unique_id "alQr35ihQxksrpCflyFNlQAAAMI"] [Sun Jul 12 18:05:51.725147 2026] [security2:error] [pid 940777:tid 940987] [client 74.7.175.142:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "scorecard.cecweb.org"] [uri "/index.php"] [unique_id "alQr35ihQxksrpCflyFNlgAAAMs"] [Sun Jul 12 18:05:51.727287 2026] [security2:error] [pid 941081:tid 941240] [client 74.7.175.142:57318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "scorecard.cecweb.org"] [uri "/robots.txt"] [unique_id "alQr3-ZnN2CRos_GBqULswABpWA"] [Sun Jul 12 18:05:51.733027 2026] [security2:error] [pid 941081:tid 941221] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3N0M2Z5LTUxODQvc3QtMTA5Ny90M2Z5"] [unique_id "alQr3-ZnN2CRos_GBqULtgAAAZI"] [Sun Jul 12 18:05:51.798604 2026] [security2:error] [pid 940777:tid 940980] [client 125.167.21.72:62908] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQr35ihQxksrpCflyFNhwAAAMQ"] [Sun Jul 12 18:05:51.878123 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:51.879052 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:52.083505 2026] [security2:error] [pid 941081:tid 941291] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr3uZnN2CRos_GBqULlwAAAdg"], referer: http://67.222.38.115/admin/v2/brokers [Sun Jul 12 18:05:52.291804 2026] [security2:error] [pid 940777:tid 941019] [client 98.244.223.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQr35ihQxksrpCflyFNiQAA60c"] [Sun Jul 12 18:05:52.316487 2026] [security2:error] [pid 940777:tid 941019] [client 98.244.223.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQr35ihQxksrpCflyFNigAA63M"] [Sun Jul 12 18:05:52.788394 2026] [authz_core:error] [pid 941081:tid 941339] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:52.789018 2026] [authz_core:error] [pid 941081:tid 941339] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:52.878473 2026] [security2:error] [pid 940777:tid 941020] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr4JihQxksrpCflyFNmwAAAOw"] [Sun Jul 12 18:05:52.878538 2026] [security2:error] [pid 940777:tid 941020] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr4JihQxksrpCflyFNmwAAAOw"] [Sun Jul 12 18:05:52.879870 2026] [security2:error] [pid 941081:tid 941232] [client 65.21.113.206:51640] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3N0M2Z5LTUxODQvc3QtMTA5Ny90M2Z5"] [unique_id "alQr4OZnN2CRos_GBqULxQAAAZ0"] [Sun Jul 12 18:05:53.017546 2026] [security2:error] [pid 940777:tid 940938] [client 149.28.47.172:50639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.47.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kahonuamomona.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQr4ZihQxksrpCflyFNoAAAAJo"] [Sun Jul 12 18:05:53.105883 2026] [security2:error] [pid 941081:tid 941333] [client 62.171.158.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQr3OZnN2CRos_GBqULYgAAAgI"] [Sun Jul 12 18:05:53.299617 2026] [security2:error] [pid 941081:tid 941220] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr3-ZnN2CRos_GBqULrAAAAZE"], referer: http://67.222.38.115/admin/v2/clusters [Sun Jul 12 18:05:53.399399 2026] [security2:error] [pid 940777:tid 941029] [client 20.244.27.100:59276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-theme-json-data.php"] [unique_id "alQr4ZihQxksrpCflyFNowAAAPU"], referer: binance.com [Sun Jul 12 18:05:53.442283 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr35ihQxksrpCflyFNkQAAALg"] [Sun Jul 12 18:05:53.450277 2026] [security2:error] [pid 940777:tid 940935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr35ihQxksrpCflyFNkAAAAJc"] [Sun Jul 12 18:05:53.580573 2026] [authz_core:error] [pid 941081:tid 941238] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:53.581239 2026] [authz_core:error] [pid 941081:tid 941238] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:54.314031 2026] [security2:error] [pid 941081:tid 941266] [client 168.100.149.108:37934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40300/bargainor/2307_secque.jsp"] [unique_id "alQr4uZnN2CRos_GBqUMCAAAAb8"] [Sun Jul 12 18:05:54.346149 2026] [authz_core:error] [pid 941081:tid 941234] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:54.346622 2026] [authz_core:error] [pid 941081:tid 941234] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:54.366409 2026] [security2:error] [pid 940777:tid 940921] [client 107.191.36.209:52877] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "guildings.ca"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQr4pihQxksrpCflyFNtQAAAIk"] [Sun Jul 12 18:05:54.450576 2026] [security2:error] [pid 941081:tid 941271] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3NfNTQ1NC9zc3YvNDIzMDlfc3Y=.htm"] [unique_id "alQr4uZnN2CRos_GBqUMCQAAAcQ"] [Sun Jul 12 18:05:55.118832 2026] [security2:error] [pid 940777:tid 940941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr4ZihQxksrpCflyFNqAAAAJ0"], referer: http://67.222.38.115/admin/v2/functions [Sun Jul 12 18:05:55.121117 2026] [authz_core:error] [pid 941081:tid 941293] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:55.121869 2026] [authz_core:error] [pid 941081:tid 941293] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:55.246110 2026] [security2:error] [pid 940777:tid 941038] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr4ZihQxksrpCflyFNqQAAAP4"], referer: http://67.222.38.115/admin/v2/namespaces [Sun Jul 12 18:05:55.256693 2026] [security2:error] [pid 940777:tid 940790] [remote 62.171.167.118:58156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/adminer.php"] [unique_id "alQrx5ihQxksrpCflyFNxQAApgQ"] [Sun Jul 12 18:05:55.287244 2026] [security2:error] [pid 941081:tid 941263] [client 94.187.171.125:50386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr4-ZnN2CRos_GBqUMIwAAAbw"] [Sun Jul 12 18:05:55.287510 2026] [security2:error] [pid 941081:tid 941263] [client 94.187.171.125:50386] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr4-ZnN2CRos_GBqUMIwAAAbw"] [Sun Jul 12 18:05:55.544996 2026] [security2:error] [pid 941081:tid 941299] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr4uZnN2CRos_GBqUMFAAAAeA"] [Sun Jul 12 18:05:55.545107 2026] [security2:error] [pid 941081:tid 941299] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr4uZnN2CRos_GBqUMFAAAAeA"] [Sun Jul 12 18:05:55.546160 2026] [security2:error] [pid 941081:tid 941301] [client 65.21.113.206:59952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3NfNTQ1NC9zc3YvNDIzMDlfc3Y=.htm"] [unique_id "alQr4uZnN2CRos_GBqUMEgAAAeI"] [Sun Jul 12 18:05:55.860084 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:55.860593 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:56.315236 2026] [security2:error] [pid 941081:tid 941251] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr4-ZnN2CRos_GBqUMHQAAAbA"] [Sun Jul 12 18:05:56.370509 2026] [security2:error] [pid 940777:tid 941039] [client 168.100.149.36:46386] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40365/bargainor/2307_dislevelment.jsp"] [unique_id "alQr5JihQxksrpCflyFN0AAAAP8"] [Sun Jul 12 18:05:56.576010 2026] [authz_core:error] [pid 940777:tid 940990] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:56.576494 2026] [authz_core:error] [pid 940777:tid 940990] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:57.000320 2026] [security2:error] [pid 941081:tid 941219] [client 51.68.111.243:19079] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gboxcargo.com"] [uri "/robots.txt"] [unique_id "alQr5OZnN2CRos_GBqUMTQAAAZA"] [Sun Jul 12 18:05:57.000561 2026] [security2:error] [pid 941081:tid 941219] [client 51.68.111.243:19079] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "gboxcargo.com"] [uri "/robots.txt"] [unique_id "alQr5OZnN2CRos_GBqUMTQAAAZA"] [Sun Jul 12 18:05:57.289555 2026] [authz_core:error] [pid 941081:tid 941283] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:57.290065 2026] [authz_core:error] [pid 941081:tid 941283] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:57.313988 2026] [security2:error] [pid 941081:tid 941260] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr4-ZnN2CRos_GBqUMJAAAAbk"] [Sun Jul 12 18:05:57.324097 2026] [security2:error] [pid 940777:tid 940955] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr45ihQxksrpCflyFNyAAAAKs"], referer: http://67.222.38.115/admin/v2/persistent [Sun Jul 12 18:05:57.499421 2026] [security2:error] [pid 941081:tid 941319] [client 65.21.113.206:56858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3NqLTI0MDY1LXNqM2RzLTc0ODMtajNk.cgi"] [unique_id "alQr5eZnN2CRos_GBqUMWAAAAfQ"] [Sun Jul 12 18:05:57.690206 2026] [security2:error] [pid 940777:tid 940929] [client 168.100.149.152:59366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40430/bargainor/2307_limnoria.jsp"] [unique_id "alQr5ZihQxksrpCflyFN4QAAAJE"] [Sun Jul 12 18:05:57.768868 2026] [security2:error] [pid 940777:tid 940814] [remote 202.51.202.242:38418] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 242.202.51.202.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentonwelch.com"] [uri "/wp-login.php"] [unique_id "alQr5ZihQxksrpCflyFN4gAA8hw"] [Sun Jul 12 18:05:57.949790 2026] [security2:error] [pid 941081:tid 941240] [client 20.244.27.100:53776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-theme-json-resolver.php"] [unique_id "alQr5eZnN2CRos_GBqUMYAAAAaU"], referer: binance.com [Sun Jul 12 18:05:58.058586 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:58.059118 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:58.072302 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr45ihQxksrpCflyFNyQAAAMI"] [Sun Jul 12 18:05:58.366217 2026] [security2:error] [pid 940777:tid 941037] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr5JihQxksrpCflyFNzwAAAP0"], referer: http://67.222.38.115/admin/v2/tenants [Sun Jul 12 18:05:58.513394 2026] [security2:error] [pid 941081:tid 941292] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr5eZnN2CRos_GBqUMYgAAAdk"] [Sun Jul 12 18:05:58.513448 2026] [security2:error] [pid 941081:tid 941292] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr5eZnN2CRos_GBqUMYgAAAdk"] [Sun Jul 12 18:05:58.515098 2026] [security2:error] [pid 941081:tid 941343] [client 65.21.113.206:59958] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3NqLTI0MDY1LXNqM2RzLTc0ODMtajNk.cgi"] [unique_id "alQr5eZnN2CRos_GBqUMYQAAAgw"] [Sun Jul 12 18:05:58.762468 2026] [security2:error] [pid 940777:tid 941011] [client 197.48.221.253:62450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr5pihQxksrpCflyFN7gAAAOM"] [Sun Jul 12 18:05:58.762882 2026] [security2:error] [pid 940777:tid 941011] [client 197.48.221.253:62450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr5pihQxksrpCflyFN7gAAAOM"] [Sun Jul 12 18:05:58.783770 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:58.784256 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:59.168708 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr5ZihQxksrpCflyFN3wAAALw"], referer: http://67.222.38.115/adminer/ [Sun Jul 12 18:05:59.428065 2026] [security2:error] [pid 941081:tid 941278] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr5uZnN2CRos_GBqUMcAAAAcs"] [Sun Jul 12 18:05:59.583595 2026] [authz_core:error] [pid 940777:tid 940987] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:05:59.584133 2026] [authz_core:error] [pid 940777:tid 940987] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:05:59.652693 2026] [security2:error] [pid 940777:tid 941024] [client 24.203.79.110:64538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr55ihQxksrpCflyFOBgAAAPA"] [Sun Jul 12 18:05:59.653063 2026] [security2:error] [pid 940777:tid 941024] [client 24.203.79.110:64538] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr55ihQxksrpCflyFOBgAAAPA"] [Sun Jul 12 18:06:00.326487 2026] [security2:error] [pid 940777:tid 940919] [client 168.100.149.200:18514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40495/bargainor/2307_milksopism.jsp"] [unique_id "alQr6JihQxksrpCflyFOFQAAAIc"] [Sun Jul 12 18:06:00.341094 2026] [security2:error] [pid 940777:tid 941034] [client 74.244.119.215:60225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr6JihQxksrpCflyFOFgAAAPo"] [Sun Jul 12 18:06:00.342103 2026] [security2:error] [pid 940777:tid 941034] [client 74.244.119.215:60225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr6JihQxksrpCflyFOFgAAAPo"] [Sun Jul 12 18:06:00.376937 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:00.377437 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:01.125637 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:01.126139 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:01.327193 2026] [security2:error] [pid 940777:tid 940961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr55ihQxksrpCflyFN-wAAALE"], referer: http://67.222.38.115/agent/invoke [Sun Jul 12 18:06:01.674988 2026] [security2:error] [pid 940777:tid 940954] [client 168.100.149.5:63508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40560/bargainor/2307_capnoides.jsp"] [unique_id "alQr6ZihQxksrpCflyFOHwAAAKo"] [Sun Jul 12 18:06:01.953701 2026] [security2:error] [pid 940777:tid 940975] [client 125.167.21.72:63294] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQr6ZihQxksrpCflyFOHgAAAL8"] [Sun Jul 12 18:06:01.971310 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:01.971870 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:02.075194 2026] [security2:error] [pid 941081:tid 941233] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr5-ZnN2CRos_GBqUMhQAAAZ4"] [Sun Jul 12 18:06:02.096637 2026] [security2:error] [pid 940777:tid 940936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr55ihQxksrpCflyFN_AAAAJg"], referer: http://67.222.38.115/administrator/ [Sun Jul 12 18:06:02.195735 2026] [security2:error] [pid 940777:tid 940958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr55ihQxksrpCflyFOBQAAAK4"] [Sun Jul 12 18:06:02.376491 2026] [cgid:error] [pid 941081:tid 941317] [client 202.46.62.75:16475] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/finder-window-clings-stock-p-863.html?osCsid=nt817knh30juag6vqq16nucvg7 [Sun Jul 12 18:06:02.804881 2026] [authz_core:error] [pid 941081:tid 941308] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:02.805527 2026] [authz_core:error] [pid 941081:tid 941308] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:02.967019 2026] [security2:error] [pid 941081:tid 941261] [client 65.21.113.206:46366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y181Mjc1L3Q2LzI3NDA1LzY=.html"] [unique_id "alQr6uZnN2CRos_GBqUM4QAAAbo"] [Sun Jul 12 18:06:03.290094 2026] [security2:error] [pid 941081:tid 941253] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6uZnN2CRos_GBqUMygAAAbI"], referer: http://67.222.38.115/agent/playground/ [Sun Jul 12 18:06:03.389354 2026] [security2:error] [pid 941081:tid 941249] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6uZnN2CRos_GBqUMwwAAAbw"] [Sun Jul 12 18:06:03.639121 2026] [security2:error] [pid 941081:tid 941314] [client 216.73.216.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM6gAAAe8"] [Sun Jul 12 18:06:03.645767 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:03.646986 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:03.746691 2026] [security2:error] [pid 941081:tid 941236] [client 74.7.230.39:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.promocorpgroup.com.prcmanage.com"] [uri "/cgi-sys/404.html"] [unique_id "alQr6-ZnN2CRos_GBqUNBQAAAaE"] [Sun Jul 12 18:06:03.748366 2026] [security2:error] [pid 940777:tid 940931] [client 74.7.230.39:47994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.promocorpgroup.com.prcmanage.com"] [uri "/robots.txt"] [unique_id "alQr65ihQxksrpCflyFOOQAAAJM"] [Sun Jul 12 18:06:03.999810 2026] [security2:error] [pid 941081:tid 941344] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM_AAAAg0"] [Sun Jul 12 18:06:03.999919 2026] [security2:error] [pid 941081:tid 941344] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM_AAAAg0"] [Sun Jul 12 18:06:04.000960 2026] [security2:error] [pid 941081:tid 941218] [client 65.21.113.206:40528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y181Mjc1L3Q2LzI3NDA1LzY=.html"] [unique_id "alQr6-ZnN2CRos_GBqUM-QAAAY8"] [Sun Jul 12 18:06:04.396353 2026] [security2:error] [pid 941081:tid 941308] [client 168.100.149.223:20484] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40625/bargainor/2307_deft.jsp"] [unique_id "alQr7OZnN2CRos_GBqUNHAAAAek"] [Sun Jul 12 18:06:04.495162 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:04.495650 2026] [authz_core:error] [pid 941081:tid 941261] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:04.671122 2026] [security2:error] [pid 941081:tid 941292] [client 57.141.18.0:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM5AAAAdk"] [Sun Jul 12 18:06:05.039491 2026] [security2:error] [pid 941081:tid 941295] [client 216.244.66.243:57040] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.charterschoolofexcellence.org"] [uri "/file/2015/01/OPEN-HOUSE-2015-2-2.jpg"] [unique_id "alQr7eZnN2CRos_GBqUNKgAAAdw"] [Sun Jul 12 18:06:05.039752 2026] [security2:error] [pid 941081:tid 941295] [client 216.244.66.243:57040] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.charterschoolofexcellence.org"] [uri "/file/2015/01/OPEN-HOUSE-2015-2-2.jpg"] [unique_id "alQr7eZnN2CRos_GBqUNKgAAAdw"] [Sun Jul 12 18:06:05.069987 2026] [security2:error] [pid 941081:tid 941316] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM9QAAAfE"] [Sun Jul 12 18:06:05.071301 2026] [security2:error] [pid 941081:tid 941219] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM9gAAAZA"], referer: http://67.222.38.115/agents [Sun Jul 12 18:06:05.200975 2026] [security2:error] [pid 941081:tid 941247] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM8QAAAaw"] [Sun Jul 12 18:06:05.307303 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:05.307844 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:05.401862 2026] [security2:error] [pid 941081:tid 941257] [client 65.55.210.144:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQr6uZnN2CRos_GBqUMxAAAAbY"] [Sun Jul 12 18:06:05.431645 2026] [security2:error] [pid 941081:tid 941317] [client 85.208.96.205:59316] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/event/level-1-2-technique-styling/2029-02-21/"] [unique_id "alQr7eZnN2CRos_GBqUNQgAAAfI"] [Sun Jul 12 18:06:05.431938 2026] [security2:error] [pid 941081:tid 941317] [client 85.208.96.205:59316] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "coloradodancesport.com"] [uri "/event/level-1-2-technique-styling/2029-02-21/"] [unique_id "alQr7eZnN2CRos_GBqUNQgAAAfI"] [Sun Jul 12 18:06:05.516140 2026] [security2:error] [pid 941081:tid 941251] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr6-ZnN2CRos_GBqUM-AAAAbA"] [Sun Jul 12 18:06:06.041029 2026] [security2:error] [pid 940777:tid 940998] [client 94.187.171.125:50878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr7pihQxksrpCflyFOVAAAANY"] [Sun Jul 12 18:06:06.041261 2026] [security2:error] [pid 940777:tid 940998] [client 94.187.171.125:50878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr7pihQxksrpCflyFOVAAAANY"] [Sun Jul 12 18:06:06.084096 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:06.084796 2026] [authz_core:error] [pid 941081:tid 941243] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:06.182108 2026] [security2:error] [pid 941081:tid 941274] [client 65.21.113.206:46366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y181NDg3L3Q2LzI3NDA1LzY=.html"] [unique_id "alQr7uZnN2CRos_GBqUNXAAAAcc"] [Sun Jul 12 18:06:06.299946 2026] [security2:error] [pid 941081:tid 941306] [client 103.174.195.74:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr7eZnN2CRos_GBqUNTAAAAec"] [Sun Jul 12 18:06:06.311013 2026] [security2:error] [pid 941081:tid 941273] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7eZnN2CRos_GBqUNNQAAAcY"] [Sun Jul 12 18:06:06.907410 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:06.907918 2026] [authz_core:error] [pid 941081:tid 941299] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:07.099194 2026] [security2:error] [pid 941081:tid 941322] [client 57.141.18.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "undameta.com"] [uri "/index.php"] [unique_id "alQr7eZnN2CRos_GBqUNRAAAAfc"] [Sun Jul 12 18:06:07.142732 2026] [security2:error] [pid 941081:tid 941248] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7eZnN2CRos_GBqUNRgAAAa0"] [Sun Jul 12 18:06:07.214382 2026] [security2:error] [pid 940777:tid 940945] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr7pihQxksrpCflyFOXgAAAKE"] [Sun Jul 12 18:06:07.214452 2026] [security2:error] [pid 940777:tid 940945] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr7pihQxksrpCflyFOXgAAAKE"] [Sun Jul 12 18:06:07.215448 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:40530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y181NDg3L3Q2LzI3NDA1LzY=.html"] [unique_id "alQr7pihQxksrpCflyFOXQAAAOc"] [Sun Jul 12 18:06:07.233280 2026] [cgid:error] [pid 940777:tid 940970] [client 66.249.70.163:40292] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/travelwithmom/404.shtml [Sun Jul 12 18:06:07.347975 2026] [security2:error] [pid 941081:tid 941250] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7uZnN2CRos_GBqUNZAAAAa8"], referer: http://67.222.38.115/airflow/api/v1/dags [Sun Jul 12 18:06:07.680971 2026] [authz_core:error] [pid 941081:tid 941335] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:07.681438 2026] [authz_core:error] [pid 941081:tid 941335] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:07.694434 2026] [security2:error] [pid 941081:tid 941261] [client 168.100.149.208:48352] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40755/bargainor/2307_delphian.jsp"] [unique_id "alQr7-ZnN2CRos_GBqUNigAAAbo"] [Sun Jul 12 18:06:07.911855 2026] [security2:error] [pid 941081:tid 941271] [client 20.172.67.176:0] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "66.147.249.243"] [uri "/index.php"] [unique_id "alQr6eZnN2CRos_GBqUMqAAAAcQ"] [Sun Jul 12 18:06:07.911913 2026] [security2:error] [pid 941081:tid 941271] [client 20.172.67.176:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "66.147.249.243"] [uri "/index.php"] [unique_id "alQr6eZnN2CRos_GBqUMqAAAAcQ"] [Sun Jul 12 18:06:07.916165 2026] [security2:error] [pid 941081:tid 941325] [client 20.172.67.176:49442] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "66.147.249.243"] [uri "/owa/auth/logon.aspx"] [unique_id "alQr6eZnN2CRos_GBqUMpgAAAfo"] [Sun Jul 12 18:06:08.464994 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:08.465492 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:08.818615 2026] [security2:error] [pid 941081:tid 941304] [client 65.21.113.206:46366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y18xNjkzL3Q2LzI3NDA1LzY=.html"] [unique_id "alQr8OZnN2CRos_GBqUNqgAAAeU"] [Sun Jul 12 18:06:09.139116 2026] [security2:error] [pid 940777:tid 940944] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr75ihQxksrpCflyFOYwAAAKA"] [Sun Jul 12 18:06:09.170028 2026] [core:error] [pid 940777:tid 940825] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.177287 2026] [core:error] [pid 940777:tid 940802] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.182823 2026] [core:error] [pid 940777:tid 940881] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.190959 2026] [core:error] [pid 940777:tid 940821] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.191036 2026] [core:error] [pid 940777:tid 940902] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.191327 2026] [core:error] [pid 940777:tid 940811] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.233618 2026] [core:error] [pid 940777:tid 940825] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.233643 2026] [core:error] [pid 940777:tid 940802] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.235867 2026] [core:error] [pid 940777:tid 940811] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.235888 2026] [core:error] [pid 940777:tid 940818] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.239496 2026] [core:error] [pid 940777:tid 940901] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.240640 2026] [core:error] [pid 940777:tid 940881] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.241400 2026] [core:error] [pid 940777:tid 940821] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.241467 2026] [core:error] [pid 940777:tid 940902] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.250775 2026] [security2:error] [pid 941081:tid 941272] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7-ZnN2CRos_GBqUNgQAAAcU"], referer: http://67.222.38.115/airflow/api/v1/health [Sun Jul 12 18:06:09.252196 2026] [core:error] [pid 940777:tid 940829] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.251343 2026] [core:error] [pid 940777:tid 940842] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.259205 2026] [core:error] [pid 940777:tid 940891] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.269239 2026] [core:error] [pid 940777:tid 940818] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.270221 2026] [core:error] [pid 940777:tid 940901] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.272358 2026] [core:error] [pid 940777:tid 940835] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.279304 2026] [core:error] [pid 940777:tid 940829] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.282323 2026] [core:error] [pid 940777:tid 940891] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.285378 2026] [core:error] [pid 940777:tid 940842] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.288847 2026] [core:error] [pid 940777:tid 940835] [remote 23.115.85.188:63497] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/ [Sun Jul 12 18:06:09.300085 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:09.300566 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:09.311931 2026] [security2:error] [pid 941081:tid 941303] [client 197.48.221.253:63036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr8eZnN2CRos_GBqUNswAAAeQ"] [Sun Jul 12 18:06:09.312143 2026] [security2:error] [pid 941081:tid 941303] [client 197.48.221.253:63036] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr8eZnN2CRos_GBqUNswAAAeQ"] [Sun Jul 12 18:06:09.341260 2026] [security2:error] [pid 941081:tid 941252] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7-ZnN2CRos_GBqUNggAAAbE"] [Sun Jul 12 18:06:09.419253 2026] [security2:error] [pid 941081:tid 941290] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr7-ZnN2CRos_GBqUNgwAAAdc"] [Sun Jul 12 18:06:09.685446 2026] [security2:error] [pid 941081:tid 941243] [client 168.100.149.136:20072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40820/bargainor/2307_anisodactyli.jsp"] [unique_id "alQr8eZnN2CRos_GBqUNzgAAAag"] [Sun Jul 12 18:06:09.879930 2026] [security2:error] [pid 941081:tid 941275] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr8eZnN2CRos_GBqUNtwAAAcg"] [Sun Jul 12 18:06:09.879986 2026] [security2:error] [pid 941081:tid 941275] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr8eZnN2CRos_GBqUNtwAAAcg"] [Sun Jul 12 18:06:09.881125 2026] [security2:error] [pid 940777:tid 941017] [client 65.21.113.206:40542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3Q2ajl6Y18xNjkzL3Q2LzI3NDA1LzY=.html"] [unique_id "alQr8ZihQxksrpCflyFOgQAAAOk"] [Sun Jul 12 18:06:10.088681 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:10.089174 2026] [authz_core:error] [pid 941081:tid 941224] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:10.199392 2026] [security2:error] [pid 941081:tid 941319] [client 24.203.79.110:65049] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr8uZnN2CRos_GBqUN4wAAAfQ"] [Sun Jul 12 18:06:10.206293 2026] [security2:error] [pid 941081:tid 941319] [client 24.203.79.110:65049] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr8uZnN2CRos_GBqUN4wAAAfQ"] [Sun Jul 12 18:06:10.586082 2026] [security2:error] [pid 940777:tid 940987] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr8ZihQxksrpCflyFOgwAAAMs"] [Sun Jul 12 18:06:10.856364 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:10.856886 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:10.870048 2026] [security2:error] [pid 941081:tid 941344] [client 2a03:2880:f800:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQr8uZnN2CRos_GBqUN7AACDU0"] [Sun Jul 12 18:06:10.878081 2026] [security2:error] [pid 941081:tid 941240] [client 168.100.149.249:22226] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40690/bargainor/2307_did.jsp"] [unique_id "alQr8uZnN2CRos_GBqUN7wAAAaU"] [Sun Jul 12 18:06:10.903727 2026] [security2:error] [pid 940777:tid 940949] [client 74.244.119.215:10742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr8pihQxksrpCflyFOnwAAAKU"] [Sun Jul 12 18:06:10.904000 2026] [security2:error] [pid 940777:tid 940949] [client 74.244.119.215:10742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr8pihQxksrpCflyFOnwAAAKU"] [Sun Jul 12 18:06:10.912335 2026] [security2:error] [pid 940777:tid 940938] [client 202.46.62.110:16324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQr8pihQxksrpCflyFOoAAAAJo"], referer: https://www.stephenspublishing.com/flyers-custom-frisbees-p-95.html?osCsid=u4rjike6sgnpfoibfnn8rg5jo5 [Sun Jul 12 18:06:11.173471 2026] [security2:error] [pid 941081:tid 941336] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr8eZnN2CRos_GBqUNvQAAAgU"] [Sun Jul 12 18:06:11.604405 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:11.604964 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:11.690613 2026] [security2:error] [pid 941081:tid 941274] [client 168.100.149.84:38020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40885/bargainor/2307_birefraction.jsp"] [unique_id "alQr8-ZnN2CRos_GBqUOCAAAAcc"] [Sun Jul 12 18:06:11.766734 2026] [security2:error] [pid 941081:tid 941246] [client 187.189.34.164:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQr8-ZnN2CRos_GBqUN_gAAAas"] [Sun Jul 12 18:06:12.082371 2026] [security2:error] [pid 941081:tid 941275] [client 65.21.113.206:46366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3QtNzMyNi90amIvMTgzNTctamJneA=="] [unique_id "alQr9OZnN2CRos_GBqUODgAAAcg"] [Sun Jul 12 18:06:12.151033 2026] [security2:error] [pid 941081:tid 941278] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr8uZnN2CRos_GBqUN6QAAAcs"], referer: http://67.222.38.115/alertmanager/api/v2/status [Sun Jul 12 18:06:12.356982 2026] [security2:error] [pid 941081:tid 941248] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr8-ZnN2CRos_GBqUN-gAAAa0"] [Sun Jul 12 18:06:12.398777 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:12.399285 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:12.742835 2026] [security2:error] [pid 940777:tid 940953] [client 125.167.21.72:61718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQr9JihQxksrpCflyFOwAAAAKk"] [Sun Jul 12 18:06:13.151805 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:13.152502 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:13.166612 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr9JihQxksrpCflyFOwQAAAPg"] [Sun Jul 12 18:06:13.166733 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr9JihQxksrpCflyFOwQAAAPg"] [Sun Jul 12 18:06:13.168352 2026] [security2:error] [pid 941081:tid 941324] [client 65.21.113.206:40546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3QtNzMyNi90amIvMTgzNTctamJneA=="] [unique_id "alQr9OZnN2CRos_GBqUOHAAAAfk"] [Sun Jul 12 18:06:13.177960 2026] [security2:error] [pid 941081:tid 941223] [client 20.244.27.100:61285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-theme-json-schema.php"] [unique_id "alQr9eZnN2CRos_GBqUOQQAAAZQ"], referer: binance.com [Sun Jul 12 18:06:13.240006 2026] [security2:error] [pid 940777:tid 941010] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9JihQxksrpCflyFOtgAAAOI"] [Sun Jul 12 18:06:13.551917 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9JihQxksrpCflyFOvgAAAM8"] [Sun Jul 12 18:06:13.960923 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:13.961417 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:14.280504 2026] [security2:error] [pid 940777:tid 940919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9ZihQxksrpCflyFO1gAAAIc"], referer: http://67.222.38.115/api/14/executions [Sun Jul 12 18:06:14.374392 2026] [security2:error] [pid 940777:tid 940975] [client 168.100.149.1:27572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40950/bargainor/2307_mediator.jsp"] [unique_id "alQr9pihQxksrpCflyFO7wAAAL8"] [Sun Jul 12 18:06:14.382874 2026] [security2:error] [pid 941081:tid 941314] [client 188.213.202.127:36755] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "geekideas.net"] [uri "/wp-login.php"] [unique_id "alQr9uZnN2CRos_GBqUOYwAAAe8"] [Sun Jul 12 18:06:14.709279 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:14.709861 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:14.824723 2026] [security2:error] [pid 941081:tid 941317] [client 65.21.113.206:46366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3QtODY1Ny90aHcvMzg1My1od2hr"] [unique_id "alQr9uZnN2CRos_GBqUObAAAAfI"] [Sun Jul 12 18:06:15.188795 2026] [security2:error] [pid 941081:tid 941276] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9eZnN2CRos_GBqUOUwAAAck"] [Sun Jul 12 18:06:15.323712 2026] [security2:error] [pid 940777:tid 940989] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9pihQxksrpCflyFO7QAAAM0"] [Sun Jul 12 18:06:15.376799 2026] [security2:error] [pid 941081:tid 941243] [client 62.171.158.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQr8-ZnN2CRos_GBqUOBAAAAag"] [Sun Jul 12 18:06:15.498615 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:15.499120 2026] [authz_core:error] [pid 941081:tid 941256] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:15.682677 2026] [security2:error] [pid 941081:tid 941231] [client 168.100.149.39:57170] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41015/bargainor/2307_gurian.jsp"] [unique_id "alQr9-ZnN2CRos_GBqUOhQAAAZw"] [Sun Jul 12 18:06:15.766788 2026] [security2:error] [pid 941081:tid 941299] [client 174.208.161.32:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQr9-ZnN2CRos_GBqUOgQAAAeA"], referer: https://smellytele.com/willin-by-little-feat/ [Sun Jul 12 18:06:15.964251 2026] [security2:error] [pid 940777:tid 941025] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr95ihQxksrpCflyFPAgAAAPE"] [Sun Jul 12 18:06:15.964316 2026] [security2:error] [pid 940777:tid 941025] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr95ihQxksrpCflyFPAgAAAPE"] [Sun Jul 12 18:06:15.965606 2026] [security2:error] [pid 941081:tid 941285] [client 65.21.113.206:45554] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3QtODY1Ny90aHcvMzg1My1od2hr"] [unique_id "alQr9-ZnN2CRos_GBqUOdgAAAdI"] [Sun Jul 12 18:06:16.298593 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:16.299115 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:16.349157 2026] [security2:error] [pid 941081:tid 941345] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9-ZnN2CRos_GBqUOeQAAAg4"] [Sun Jul 12 18:06:16.440844 2026] [security2:error] [pid 941081:tid 941244] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr9-ZnN2CRos_GBqUOcwAAAak"] [Sun Jul 12 18:06:16.527326 2026] [security2:error] [pid 941081:tid 941335] [client 149.28.43.156:58375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.43.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thatshowiroll.site"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQr-OZnN2CRos_GBqUOngAAAgQ"] [Sun Jul 12 18:06:16.703952 2026] [security2:error] [pid 940777:tid 941029] [client 94.187.171.125:51366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr-JihQxksrpCflyFPJQAAAPU"] [Sun Jul 12 18:06:16.704176 2026] [security2:error] [pid 940777:tid 941029] [client 94.187.171.125:51366] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQr-JihQxksrpCflyFPJQAAAPU"] [Sun Jul 12 18:06:17.049335 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:17.049834 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:17.202997 2026] [security2:error] [pid 941081:tid 941314] [client 47.88.11.18:50656] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "iotatraining.com"] [uri "/"] [unique_id "alQr-eZnN2CRos_GBqUOpQAAAe8"] [Sun Jul 12 18:06:17.348411 2026] [security2:error] [pid 941081:tid 941315] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr-OZnN2CRos_GBqUOlgAAAfA"] [Sun Jul 12 18:06:17.583364 2026] [security2:error] [pid 941081:tid 941261] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr-OZnN2CRos_GBqUOnQAAAbo"] [Sun Jul 12 18:06:17.757108 2026] [security2:error] [pid 940777:tid 940878] [remote 57.141.18.99:21470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/ku/t1NdsqV5mHggf5Ubgt0SZwtjSblf6"] [unique_id "alQr-ZihQxksrpCflyFPOQAAv1o"] [Sun Jul 12 18:06:17.831081 2026] [authz_core:error] [pid 941081:tid 941306] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:17.831552 2026] [authz_core:error] [pid 941081:tid 941306] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:18.335548 2026] [security2:error] [pid 941081:tid 941327] [client 168.100.149.211:30908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41080/bargainor/2307_monkey.jsp"] [unique_id "alQr-uZnN2CRos_GBqUOxgAAAfw"] [Sun Jul 12 18:06:18.407734 2026] [security2:error] [pid 941081:tid 941311] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr-eZnN2CRos_GBqUOpwAAAew"], referer: http://67.222.38.115/api/14/tokens [Sun Jul 12 18:06:18.585935 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:18.586441 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:19.228140 2026] [security2:error] [pid 941081:tid 941234] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr-eZnN2CRos_GBqUOswAAAZ8"] [Sun Jul 12 18:06:19.349296 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:19.349804 2026] [authz_core:error] [pid 941081:tid 941318] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:19.447968 2026] [security2:error] [pid 941081:tid 941293] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr-uZnN2CRos_GBqUOygAAAdo"], referer: http://67.222.38.115/api/access [Sun Jul 12 18:06:19.693964 2026] [security2:error] [pid 941081:tid 941321] [client 168.100.149.127:37670] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41145/bargainor/2307_impeccance.jsp"] [unique_id "alQr--ZnN2CRos_GBqUO4AAAAfY"] [Sun Jul 12 18:06:19.716879 2026] [security2:error] [pid 941081:tid 941295] [client 197.48.221.253:63618] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr--ZnN2CRos_GBqUO4QAAAdw"] [Sun Jul 12 18:06:19.717163 2026] [security2:error] [pid 941081:tid 941295] [client 197.48.221.253:63618] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQr--ZnN2CRos_GBqUO4QAAAdw"] [Sun Jul 12 18:06:20.102445 2026] [security2:error] [pid 940777:tid 940980] [client 50.87.253.215:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "barrozolaw.com"] [uri "/wp-cron.php"] [unique_id "alQr_JihQxksrpCflyFPUQAAAMQ"] [Sun Jul 12 18:06:20.131892 2026] [authz_core:error] [pid 941081:tid 941309] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:20.132387 2026] [authz_core:error] [pid 941081:tid 941309] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:20.329849 2026] [security2:error] [pid 941081:tid 941177] [remote 35.245.146.49:49593] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQr--ZnN2CRos_GBqUO4wAB1Vg"], referer: http://learningindia.in/media/system/js/core.js [Sun Jul 12 18:06:20.390434 2026] [security2:error] [pid 941081:tid 941338] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr--ZnN2CRos_GBqUO2QAAAgc"] [Sun Jul 12 18:06:20.447113 2026] [security2:error] [pid 941081:tid 941275] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr--ZnN2CRos_GBqUO3gAAAcg"] [Sun Jul 12 18:06:20.849701 2026] [security2:error] [pid 940777:tid 941034] [client 24.203.79.110:49177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr_JihQxksrpCflyFPXQAAAPo"] [Sun Jul 12 18:06:20.849999 2026] [security2:error] [pid 940777:tid 941034] [client 24.203.79.110:49177] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQr_JihQxksrpCflyFPXQAAAPo"] [Sun Jul 12 18:06:20.898089 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:20.898587 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:20.944136 2026] [security2:error] [pid 941081:tid 941308] [client 57.141.18.70:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQr_OZnN2CRos_GBqUO-AAAAek"] [Sun Jul 12 18:06:21.389955 2026] [security2:error] [pid 941081:tid 941344] [client 74.244.119.215:9011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr_eZnN2CRos_GBqUPDwAAAg0"] [Sun Jul 12 18:06:21.396854 2026] [security2:error] [pid 941081:tid 941344] [client 74.244.119.215:9011] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQr_eZnN2CRos_GBqUPDwAAAg0"] [Sun Jul 12 18:06:21.469100 2026] [security2:error] [pid 940777:tid 941006] [client 182.8.130.168:3846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.130.8.182.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "crystalbui.com"] [uri "/xmlrpc.php"] [unique_id "alQr_ZihQxksrpCflyFPZAAAAN4"] [Sun Jul 12 18:06:21.469330 2026] [security2:error] [pid 940777:tid 941006] [client 182.8.130.168:3846] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "crystalbui.com"] [uri "/xmlrpc.php"] [unique_id "alQr_ZihQxksrpCflyFPZAAAAN4"] [Sun Jul 12 18:06:21.471702 2026] [security2:error] [pid 940777:tid 940943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_JihQxksrpCflyFPVgAAAJ8"], referer: http://67.222.38.115/api/admin/state/export [Sun Jul 12 18:06:21.559962 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_JihQxksrpCflyFPUwAAAPk"] [Sun Jul 12 18:06:21.655123 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:21.655600 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:21.709775 2026] [security2:error] [pid 940777:tid 940978] [client 168.100.149.165:62130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41210/bargainor/2307_gunz.jsp"] [unique_id "alQr_ZihQxksrpCflyFPbgAAAMI"] [Sun Jul 12 18:06:21.881015 2026] [security2:error] [pid 940777:tid 940914] [remote 31.171.101.62:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_ZihQxksrpCflyFPbwAAsX4"] [Sun Jul 12 18:06:21.942265 2026] [security2:error] [pid 941081:tid 941253] [client 20.244.27.100:59054] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-theme-json.php"] [unique_id "alQr_eZnN2CRos_GBqUPIQAAAbI"], referer: binance.com [Sun Jul 12 18:06:22.424308 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:22.424809 2026] [authz_core:error] [pid 940777:tid 940997] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:22.851205 2026] [security2:error] [pid 940777:tid 940961] [client 31.171.101.62:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_ZihQxksrpCflyFPbwAAsX4"] [Sun Jul 12 18:06:22.851327 2026] [security2:error] [pid 940777:tid 940961] [client 31.171.101.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_ZihQxksrpCflyFPbwAAsX4"] [Sun Jul 12 18:06:23.032890 2026] [security2:error] [pid 941081:tid 941156] [remote 103.82.20.130:58278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.20.82.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-login.php"] [unique_id "alQr_-ZnN2CRos_GBqUPOAABlUQ"] [Sun Jul 12 18:06:23.183571 2026] [authz_core:error] [pid 941081:tid 941233] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:23.184143 2026] [authz_core:error] [pid 941081:tid 941233] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:23.189459 2026] [security2:error] [pid 941081:tid 941324] [client 65.21.113.206:45252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3QtOTk5NC90eHMvMzk1NTMteHN4Mg=="] [unique_id "alQr_-ZnN2CRos_GBqUPPgAAAfk"] [Sun Jul 12 18:06:23.258036 2026] [security2:error] [pid 941081:tid 941226] [client 66.132.195.75:24598] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQr_-ZnN2CRos_GBqUPPQAAAZc"] [Sun Jul 12 18:06:23.422791 2026] [security2:error] [pid 940777:tid 940940] [client 125.167.21.72:62120] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQr_5ihQxksrpCflyFPegAAAJw"] [Sun Jul 12 18:06:23.699004 2026] [security2:error] [pid 941081:tid 941272] [client 168.100.149.156:58820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41275/bargainor/2307_monadically.jsp"] [unique_id "alQr_-ZnN2CRos_GBqUPQgAAAcU"] [Sun Jul 12 18:06:23.866538 2026] [security2:error] [pid 940777:tid 940819] [remote 31.171.100.5:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_5ihQxksrpCflyFPhwAAsyE"] [Sun Jul 12 18:06:23.927853 2026] [authz_core:error] [pid 940777:tid 941024] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:23.928343 2026] [authz_core:error] [pid 940777:tid 941024] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:24.126179 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_ZihQxksrpCflyFPaQAAANY"] [Sun Jul 12 18:06:24.203107 2026] [security2:error] [pid 941081:tid 941249] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_eZnN2CRos_GBqUPGAAAAa4"], referer: http://67.222.38.115/api/admin/stats [Sun Jul 12 18:06:24.223898 2026] [security2:error] [pid 941081:tid 941248] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_eZnN2CRos_GBqUPHAAAAa0"], referer: http://67.222.38.115/api/admins [Sun Jul 12 18:06:24.261823 2026] [security2:error] [pid 941081:tid 941293] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQr_eZnN2CRos_GBqUPFwAAAdo"] [Sun Jul 12 18:06:24.282216 2026] [security2:error] [pid 941081:tid 941186] [remote 156.59.198.136:40708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.nwuav.net"] [uri "/media/press-news/NWUAV-Opens-Hydrogen-Fuel-Cell-Mfg-Center.pdf"] [unique_id "alQsAOZnN2CRos_GBqUPVAABuWE"] [Sun Jul 12 18:06:24.321109 2026] [security2:error] [pid 940777:tid 940953] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr_5ihQxksrpCflyFPhgAAAKk"] [Sun Jul 12 18:06:24.321165 2026] [security2:error] [pid 940777:tid 940953] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQr_5ihQxksrpCflyFPhgAAAKk"] [Sun Jul 12 18:06:24.322388 2026] [security2:error] [pid 940777:tid 940989] [client 65.21.113.206:51762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3QtOTk5NC90eHMvMzk1NTMteHN4Mg=="] [unique_id "alQr_5ihQxksrpCflyFPgwAAAM0"] [Sun Jul 12 18:06:24.698081 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:24.698568 2026] [authz_core:error] [pid 941081:tid 941253] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:24.922998 2026] [security2:error] [pid 940777:tid 940963] [client 31.171.100.5:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_5ihQxksrpCflyFPhwAAsyE"] [Sun Jul 12 18:06:24.923119 2026] [security2:error] [pid 940777:tid 940963] [client 31.171.100.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQr_5ihQxksrpCflyFPhwAAsyE"] [Sun Jul 12 18:06:25.354123 2026] [security2:error] [pid 941081:tid 941234] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAOZnN2CRos_GBqUPUgAAAZ8"] [Sun Jul 12 18:06:25.474418 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:25.474981 2026] [authz_core:error] [pid 941081:tid 941338] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:25.480518 2026] [security2:error] [pid 940777:tid 940934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAJihQxksrpCflyFPjwAAAJY"] [Sun Jul 12 18:06:25.701903 2026] [security2:error] [pid 941081:tid 941261] [client 65.21.113.206:45252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3QwMjNxZ182NDUwL3QwLzE1NzAxLzA=.html"] [unique_id "alQsAeZnN2CRos_GBqUPewAAAbo"] [Sun Jul 12 18:06:26.066743 2026] [security2:error] [pid 940777:tid 940812] [remote 31.171.100.47:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsAZihQxksrpCflyFPqwABAho"] [Sun Jul 12 18:06:26.255939 2026] [authz_core:error] [pid 941081:tid 941292] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:26.256444 2026] [authz_core:error] [pid 941081:tid 941292] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:26.360857 2026] [security2:error] [pid 941081:tid 941312] [client 168.100.149.24:27426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41340/bargainor/2307_enhalo.jsp"] [unique_id "alQsAuZnN2CRos_GBqUPmgAAAe0"] [Sun Jul 12 18:06:26.743606 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsAuZnN2CRos_GBqUPkwAAAgs"] [Sun Jul 12 18:06:26.743704 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsAuZnN2CRos_GBqUPkwAAAgs"] [Sun Jul 12 18:06:26.745650 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:51768] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3QwMjNxZ182NDUwL3QwLzE1NzAxLzA=.html"] [unique_id "alQsAuZnN2CRos_GBqUPkQAAAdc"] [Sun Jul 12 18:06:26.908035 2026] [security2:error] [pid 941081:tid 941279] [client 20.244.27.100:61781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-token-map.php"] [unique_id "alQsAuZnN2CRos_GBqUPpQAAAcw"], referer: binance.com [Sun Jul 12 18:06:26.917250 2026] [security2:error] [pid 940777:tid 941042] [client 31.171.100.47:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsAZihQxksrpCflyFPqwABAho"] [Sun Jul 12 18:06:26.917365 2026] [security2:error] [pid 940777:tid 941042] [client 31.171.100.47:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsAZihQxksrpCflyFPqwABAho"] [Sun Jul 12 18:06:27.070931 2026] [security2:error] [pid 941081:tid 941222] [client 57.141.18.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQsAeZnN2CRos_GBqUPegAAAZM"] [Sun Jul 12 18:06:27.100933 2026] [authz_core:error] [pid 941081:tid 941288] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:27.102058 2026] [authz_core:error] [pid 941081:tid 941288] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:27.151529 2026] [security2:error] [pid 941081:tid 941265] [client 152.42.242.202:61852] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.zoeybluesky.com"] [uri "/index.php"] [unique_id "alQsA-ZnN2CRos_GBqUPrgAAAb4"] [Sun Jul 12 18:06:27.206860 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAeZnN2CRos_GBqUPcAAAAds"], referer: http://67.222.38.115/api/admins/auth-with-password [Sun Jul 12 18:06:27.249156 2026] [security2:error] [pid 941081:tid 941299] [client 149.28.225.231:53534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sarahrweidman.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsA-ZnN2CRos_GBqUPsAAAAeA"] [Sun Jul 12 18:06:27.267710 2026] [security2:error] [pid 940777:tid 940926] [client 57.141.18.64:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsApihQxksrpCflyFPrwAAAI4"] [Sun Jul 12 18:06:27.422468 2026] [security2:error] [pid 941081:tid 941277] [client 94.187.171.125:51850] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsA-ZnN2CRos_GBqUPtwAAAco"] [Sun Jul 12 18:06:27.422715 2026] [security2:error] [pid 941081:tid 941277] [client 94.187.171.125:51850] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsA-ZnN2CRos_GBqUPtwAAAco"] [Sun Jul 12 18:06:27.503468 2026] [security2:error] [pid 941081:tid 941297] [client 43.173.181.31:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQsAuZnN2CRos_GBqUPnQAB3mU"] [Sun Jul 12 18:06:27.909194 2026] [authz_core:error] [pid 941081:tid 941308] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:27.909722 2026] [authz_core:error] [pid 941081:tid 941308] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:28.019708 2026] [security2:error] [pid 940777:tid 940904] [remote 31.171.100.24:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsA5ihQxksrpCflyFPuAAA53Q"] [Sun Jul 12 18:06:28.143139 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAZihQxksrpCflyFPowAAAPM"] [Sun Jul 12 18:06:28.188561 2026] [security2:error] [pid 940777:tid 940994] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAZihQxksrpCflyFPpAAAANI"], referer: http://67.222.38.115/api/alerts [Sun Jul 12 18:06:28.205909 2026] [security2:error] [pid 941081:tid 941267] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsAeZnN2CRos_GBqUPdAAAAcA"], referer: http://67.222.38.115/api/alert [Sun Jul 12 18:06:28.389451 2026] [security2:error] [pid 940777:tid 941011] [client 168.100.149.226:21796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41405/bargainor/2307_metalogical.jsp"] [unique_id "alQsBJihQxksrpCflyFPvQAAAOM"] [Sun Jul 12 18:06:28.546947 2026] [security2:error] [pid 941081:tid 941284] [client 116.179.37.156:50778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsBOZnN2CRos_GBqUP3QAAAdE"], referer: https://idreamofjeannemarie.com/a-question-about-dolls/?utm_source=rss&utm_medium=rss&utm_campaign=a-question-about-dolls [Sun Jul 12 18:06:28.670129 2026] [security2:error] [pid 941081:tid 941238] [client 152.42.242.202:61874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.zoeybluesky.com"] [uri "/index.php"] [unique_id "alQsBOZnN2CRos_GBqUP4QAAAaM"] [Sun Jul 12 18:06:28.689414 2026] [authz_core:error] [pid 941081:tid 941342] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:28.689959 2026] [authz_core:error] [pid 941081:tid 941342] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:28.909332 2026] [security2:error] [pid 940777:tid 941015] [client 31.171.100.24:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsA5ihQxksrpCflyFPuAAA53Q"] [Sun Jul 12 18:06:28.909463 2026] [security2:error] [pid 940777:tid 941015] [client 31.171.100.24:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsA5ihQxksrpCflyFPuAAA53Q"] [Sun Jul 12 18:06:29.385655 2026] [security2:error] [pid 941081:tid 941315] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBOZnN2CRos_GBqUPzwAAAfA"] [Sun Jul 12 18:06:29.445460 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:29.447291 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:29.461392 2026] [security2:error] [pid 941081:tid 941273] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBOZnN2CRos_GBqUP0QAAAcY"] [Sun Jul 12 18:06:30.054064 2026] [security2:error] [pid 940777:tid 940802] [remote 31.171.101.209:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsBZihQxksrpCflyFP0gAAzBA"] [Sun Jul 12 18:06:30.215278 2026] [security2:error] [pid 940777:tid 940980] [client 197.48.221.253:64206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsBpihQxksrpCflyFP2QAAAMQ"] [Sun Jul 12 18:06:30.215610 2026] [security2:error] [pid 940777:tid 940980] [client 197.48.221.253:64206] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsBpihQxksrpCflyFP2QAAAMQ"] [Sun Jul 12 18:06:30.262845 2026] [authz_core:error] [pid 941081:tid 941248] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:30.263363 2026] [authz_core:error] [pid 941081:tid 941248] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:30.332231 2026] [security2:error] [pid 941081:tid 941259] [client 168.100.149.68:53738] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41470/bargainor/2307_psychoreflex.jsp"] [unique_id "alQsBuZnN2CRos_GBqUQAwAAAbg"] [Sun Jul 12 18:06:31.023747 2026] [security2:error] [pid 940777:tid 940988] [client 31.171.101.209:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsBZihQxksrpCflyFP0gAAzBA"] [Sun Jul 12 18:06:31.023893 2026] [security2:error] [pid 940777:tid 940988] [client 31.171.101.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsBZihQxksrpCflyFP0gAAzBA"] [Sun Jul 12 18:06:31.081046 2026] [authz_core:error] [pid 940777:tid 940954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:31.081549 2026] [authz_core:error] [pid 940777:tid 940954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:31.200166 2026] [security2:error] [pid 940777:tid 940923] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3RiNjduLzMyNDAvdGIvNzkzMy9i"] [unique_id "alQsB5ihQxksrpCflyFP3wAAAIs"] [Sun Jul 12 18:06:31.322877 2026] [security2:error] [pid 941081:tid 941270] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBeZnN2CRos_GBqUP8wAAAcM"] [Sun Jul 12 18:06:31.497903 2026] [security2:error] [pid 940777:tid 940925] [client 57.141.18.99:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQsB5ihQxksrpCflyFP3gAAAI0"] [Sun Jul 12 18:06:31.498128 2026] [security2:error] [pid 940777:tid 941039] [client 24.203.79.110:49697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsB5ihQxksrpCflyFP6QAAAP8"] [Sun Jul 12 18:06:31.498312 2026] [security2:error] [pid 940777:tid 941039] [client 24.203.79.110:49697] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsB5ihQxksrpCflyFP6QAAAP8"] [Sun Jul 12 18:06:31.607063 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.158.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQsBJihQxksrpCflyFPvAAAAJw"] [Sun Jul 12 18:06:31.869486 2026] [security2:error] [pid 941081:tid 941287] [client 74.244.119.215:39658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsB-ZnN2CRos_GBqUQKwAAAdQ"] [Sun Jul 12 18:06:31.872530 2026] [security2:error] [pid 941081:tid 941287] [client 74.244.119.215:39658] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsB-ZnN2CRos_GBqUQKwAAAdQ"] [Sun Jul 12 18:06:31.887813 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:31.888317 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:32.047881 2026] [security2:error] [pid 940777:tid 940829] [remote 31.171.101.33:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsB5ihQxksrpCflyFP8QAA2ys"] [Sun Jul 12 18:06:32.107984 2026] [security2:error] [pid 940777:tid 941022] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBZihQxksrpCflyFPywAAAO4"], referer: http://67.222.38.115/api/analyzer [Sun Jul 12 18:06:32.154151 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBZihQxksrpCflyFPygAAAPg"], referer: http://67.222.38.115/api/alerts/conditions [Sun Jul 12 18:06:32.204944 2026] [security2:error] [pid 941081:tid 941277] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsBeZnN2CRos_GBqUP9wAAAco"] [Sun Jul 12 18:06:32.310575 2026] [security2:error] [pid 941081:tid 941274] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQKQAAAcc"] [Sun Jul 12 18:06:32.310637 2026] [security2:error] [pid 941081:tid 941274] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQKQAAAcc"] [Sun Jul 12 18:06:32.311947 2026] [security2:error] [pid 940777:tid 941028] [client 65.21.113.206:51784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3RiNjduLzMyNDAvdGIvNzkzMy9i"] [unique_id "alQsB5ihQxksrpCflyFP7QAAAPQ"] [Sun Jul 12 18:06:32.398983 2026] [security2:error] [pid 941081:tid 941244] [client 168.100.149.97:42426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41535/bargainor/2307_mailable.jsp"] [unique_id "alQsCOZnN2CRos_GBqUQQAAAAak"] [Sun Jul 12 18:06:32.530494 2026] [security2:error] [pid 940777:tid 940961] [client 20.244.27.100:53963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wp-url-pattern-prefixer.php"] [unique_id "alQsCJihQxksrpCflyFP-wAAALE"], referer: binance.com [Sun Jul 12 18:06:32.664539 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:32.665078 2026] [authz_core:error] [pid 941081:tid 941344] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:32.746760 2026] [security2:error] [pid 940777:tid 941044] [client 67.218.251.186:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsCJihQxksrpCflyFP9AAAAQQ"] [Sun Jul 12 18:06:33.428545 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:33.429093 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:33.595406 2026] [security2:error] [pid 941081:tid 941227] [client 57.141.18.41:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQsCOZnN2CRos_GBqUQPQAAAZg"] [Sun Jul 12 18:06:33.873924 2026] [security2:error] [pid 941081:tid 941247] [client 125.167.21.72:62529] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsCeZnN2CRos_GBqUQXAAAAaw"] [Sun Jul 12 18:06:34.045608 2026] [security2:error] [pid 940777:tid 941003] [client 31.171.101.33:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsB5ihQxksrpCflyFP8QAA2ys"] [Sun Jul 12 18:06:34.045747 2026] [security2:error] [pid 940777:tid 941003] [client 31.171.101.33:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsB5ihQxksrpCflyFP8QAA2ys"] [Sun Jul 12 18:06:34.261828 2026] [authz_core:error] [pid 940777:tid 941040] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:34.262510 2026] [authz_core:error] [pid 940777:tid 941040] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:34.333384 2026] [security2:error] [pid 941081:tid 941292] [client 168.100.149.204:39514] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41600/bargainor/2307_epidemiology.jsp"] [unique_id "alQsCuZnN2CRos_GBqUQZgAAAdk"] [Sun Jul 12 18:06:35.063971 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:35.064817 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:35.135947 2026] [security2:error] [pid 941081:tid 941339] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQFQAAAgg"], referer: http://67.222.38.115/api/application.wadl [Sun Jul 12 18:06:35.161468 2026] [security2:error] [pid 940777:tid 940838] [remote 31.171.100.183:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsCpihQxksrpCflyFQFgAAxDQ"] [Sun Jul 12 18:06:35.204681 2026] [security2:error] [pid 941081:tid 941284] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQFwAAAdE"], referer: http://67.222.38.115/api/apiKeys.list [Sun Jul 12 18:06:35.205167 2026] [security2:error] [pid 941081:tid 941258] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQFgAAAbc"] [Sun Jul 12 18:06:35.252478 2026] [security2:error] [pid 941081:tid 941235] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQGAAAAaA"] [Sun Jul 12 18:06:35.273549 2026] [security2:error] [pid 941081:tid 941337] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsB-ZnN2CRos_GBqUQGQAAAgY"], referer: http://67.222.38.115/api/application [Sun Jul 12 18:06:35.491065 2026] [security2:error] [pid 941081:tid 941327] [client 65.21.113.206:41414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsC-ZnN2CRos_GBqUQfgAAAfw"] [Sun Jul 12 18:06:35.829559 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:35.830116 2026] [authz_core:error] [pid 941081:tid 941231] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:36.006655 2026] [security2:error] [pid 940777:tid 940955] [client 65.21.113.206:58350] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsC5ihQxksrpCflyFQJAAAAKs"] [Sun Jul 12 18:06:36.097749 2026] [security2:error] [pid 940777:tid 940980] [client 31.171.100.183:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsCpihQxksrpCflyFQFgAAxDQ"] [Sun Jul 12 18:06:36.097879 2026] [security2:error] [pid 940777:tid 940980] [client 31.171.100.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsCpihQxksrpCflyFQFgAAxDQ"] [Sun Jul 12 18:06:36.172560 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3RrLTEyMjQ5LXRrdTFtLTQ0NzAta3Ux.cgi"] [unique_id "alQsDJihQxksrpCflyFQJwAAAO4"] [Sun Jul 12 18:06:36.348477 2026] [security2:error] [pid 940777:tid 940926] [client 65.21.113.206:58350] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsDJihQxksrpCflyFQKAAAAI4"] [Sun Jul 12 18:06:36.417965 2026] [security2:error] [pid 940777:tid 941043] [client 168.100.149.36:18302] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41665/bargainor/2307_secque.jsp"] [unique_id "alQsDJihQxksrpCflyFQKgAAAQM"] [Sun Jul 12 18:06:36.464093 2026] [security2:error] [pid 941081:tid 941276] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsC-ZnN2CRos_GBqUQfAAAAck"], referer: http://67.222.38.115/api/auth.config [Sun Jul 12 18:06:36.477312 2026] [security2:error] [pid 940777:tid 940988] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsC5ihQxksrpCflyFQGwAAAMw"] [Sun Jul 12 18:06:36.620304 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:36.620807 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:37.166570 2026] [security2:error] [pid 940777:tid 940913] [remote 31.171.101.229:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsDZihQxksrpCflyFQOwAA830"] [Sun Jul 12 18:06:37.329953 2026] [security2:error] [pid 941081:tid 941331] [client 78.142.18.40:65238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kelcurrah.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsDeZnN2CRos_GBqUQrgAAAgA"] [Sun Jul 12 18:06:37.432621 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:37.432645 2026] [security2:error] [pid 941081:tid 941291] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQngAAAdg"] [Sun Jul 12 18:06:37.432740 2026] [security2:error] [pid 941081:tid 941291] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQngAAAdg"] [Sun Jul 12 18:06:37.433234 2026] [authz_core:error] [pid 941081:tid 941304] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:37.433622 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:58362] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3RrLTEyMjQ5LXRrdTFtLTQ0NzAta3Ux.cgi"] [unique_id "alQsDJihQxksrpCflyFQOQAAAP0"] [Sun Jul 12 18:06:37.710537 2026] [security2:error] [pid 941081:tid 941328] [client 168.100.149.182:18806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41730/bargainor/2307_dislevelment.jsp"] [unique_id "alQsDeZnN2CRos_GBqUQuAAAAf0"] [Sun Jul 12 18:06:37.723721 2026] [security2:error] [pid 941081:tid 941258] [client 78.142.18.40:49771] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kelcurrah.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsDeZnN2CRos_GBqUQuQAAAbc"] [Sun Jul 12 18:06:38.119483 2026] [security2:error] [pid 941081:tid 941242] [client 78.142.18.40:50995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kelcurrah.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsDuZnN2CRos_GBqUQwwAAAac"] [Sun Jul 12 18:06:38.147155 2026] [security2:error] [pid 941081:tid 941334] [client 94.187.171.125:52337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsDuZnN2CRos_GBqUQxQAAAgM"] [Sun Jul 12 18:06:38.147428 2026] [security2:error] [pid 941081:tid 941334] [client 94.187.171.125:52337] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsDuZnN2CRos_GBqUQxQAAAgM"] [Sun Jul 12 18:06:38.163896 2026] [security2:error] [pid 940777:tid 941027] [client 31.171.101.229:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsDZihQxksrpCflyFQOwAA830"] [Sun Jul 12 18:06:38.164008 2026] [security2:error] [pid 940777:tid 941027] [client 31.171.101.229:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsDZihQxksrpCflyFQOwAA830"] [Sun Jul 12 18:06:38.237052 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:38.237559 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:38.333085 2026] [security2:error] [pid 941081:tid 941238] [client 113.196.56.150:61180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "team.nke.rvq.mybluehost.me"] [uri "/"] [unique_id "alQsDuZnN2CRos_GBqUQygAAAaM"] [Sun Jul 12 18:06:38.514900 2026] [security2:error] [pid 940777:tid 941020] [client 78.142.18.40:51983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kelcurrah.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsDpihQxksrpCflyFQQwAAAOw"] [Sun Jul 12 18:06:38.754308 2026] [security2:error] [pid 941081:tid 941345] [client 190.108.20.200:49970] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQmAAAAg4"] [Sun Jul 12 18:06:38.980881 2026] [authz_core:error] [pid 941081:tid 941232] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:38.981370 2026] [authz_core:error] [pid 941081:tid 941232] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:39.090352 2026] [security2:error] [pid 941081:tid 941218] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQkgAAAY8"] [Sun Jul 12 18:06:39.090869 2026] [security2:error] [pid 941081:tid 941224] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQkwAAAZU"], referer: http://67.222.38.115/api/auth/login [Sun Jul 12 18:06:39.093447 2026] [security2:error] [pid 940777:tid 941015] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3RrLTEyMjQ5LXRrdTFtLTkyMDMta3Ux.cgi"] [unique_id "alQsD5ihQxksrpCflyFQRgAAAOc"] [Sun Jul 12 18:06:39.204952 2026] [security2:error] [pid 941081:tid 941265] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQkQAAAb4"], referer: http://67.222.38.115/api/auth/csrf [Sun Jul 12 18:06:39.245744 2026] [security2:error] [pid 940777:tid 940863] [remote 31.171.101.135:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsD5ihQxksrpCflyFQRQAAlUw"] [Sun Jul 12 18:06:39.339923 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsDOZnN2CRos_GBqUQlQAAAds"] [Sun Jul 12 18:06:39.702890 2026] [security2:error] [pid 940777:tid 940953] [client 168.100.149.21:63478] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41795/bargainor/2307_limnoria.jsp"] [unique_id "alQsD5ihQxksrpCflyFQUwAAAKk"] [Sun Jul 12 18:06:39.755217 2026] [authz_core:error] [pid 940777:tid 941038] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:39.755933 2026] [authz_core:error] [pid 940777:tid 941038] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:39.815464 2026] [security2:error] [pid 940777:tid 940920] [client 20.244.27.100:55751] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/class-wpdb.php"] [unique_id "alQsD5ihQxksrpCflyFQVAAAAIg"], referer: binance.com [Sun Jul 12 18:06:40.248433 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsD-ZnN2CRos_GBqUQ8gAAAgs"] [Sun Jul 12 18:06:40.248517 2026] [security2:error] [pid 941081:tid 941342] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsD-ZnN2CRos_GBqUQ8gAAAgs"] [Sun Jul 12 18:06:40.250513 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:58368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3RrLTEyMjQ5LXRrdTFtLTkyMDMta3Ux.cgi"] [unique_id "alQsD5ihQxksrpCflyFQUQAAAMU"] [Sun Jul 12 18:06:40.289991 2026] [security2:error] [pid 940777:tid 940933] [client 31.171.101.135:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsD5ihQxksrpCflyFQRQAAlUw"] [Sun Jul 12 18:06:40.290110 2026] [security2:error] [pid 940777:tid 940933] [client 31.171.101.135:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsD5ihQxksrpCflyFQRQAAlUw"] [Sun Jul 12 18:06:40.470458 2026] [security2:error] [pid 941081:tid 941343] [client 146.174.160.143:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsD-ZnN2CRos_GBqUQ9gAAAgw"] [Sun Jul 12 18:06:40.602078 2026] [authz_core:error] [pid 941081:tid 941309] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:40.602743 2026] [authz_core:error] [pid 941081:tid 941309] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:40.769056 2026] [security2:error] [pid 941081:tid 941314] [client 197.48.221.253:64802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsEOZnN2CRos_GBqURBgAAAe8"] [Sun Jul 12 18:06:40.769376 2026] [security2:error] [pid 941081:tid 941314] [client 197.48.221.253:64802] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsEOZnN2CRos_GBqURBgAAAe8"] [Sun Jul 12 18:06:41.163691 2026] [security2:error] [pid 941081:tid 941203] [remote 37.59.204.130:45994] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "uirvda.com"] [uri "/robots.txt"] [unique_id "alQsEeZnN2CRos_GBqURDQABynI"] [Sun Jul 12 18:06:41.164060 2026] [security2:error] [pid 941081:tid 941277] [client 37.59.204.130:45994] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "uirvda.com"] [uri "/robots.txt"] [unique_id "alQsEeZnN2CRos_GBqURDQABynI"] [Sun Jul 12 18:06:41.182892 2026] [security2:error] [pid 940777:tid 940931] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsD5ihQxksrpCflyFQSgAAAJM"], referer: http://67.222.38.115/api/auth/providers [Sun Jul 12 18:06:41.221521 2026] [security2:error] [pid 941081:tid 941188] [remote 110.249.201.69:50472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nwuav.com"] [uri "/images/range/NW-88_rangePg.webp"] [unique_id "alQsEeZnN2CRos_GBqUREAABlGM"] [Sun Jul 12 18:06:41.321127 2026] [security2:error] [pid 940777:tid 940956] [client 45.174.237.156:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsEJihQxksrpCflyFQXgAAAKw"] [Sun Jul 12 18:06:41.372222 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsD5ihQxksrpCflyFQUAAAALQ"] [Sun Jul 12 18:06:41.381010 2026] [security2:error] [pid 940777:tid 940907] [remote 31.171.101.71:0] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsEZihQxksrpCflyFQZQAAwXc"] [Sun Jul 12 18:06:41.422944 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:41.423551 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:41.874287 2026] [autoindex:error] [pid 940777:tid 940952] [client 62.171.158.190:0] AH01276: Cannot serve directory /home3/dancetre/public_html/coloradodancesport/.tmb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:06:41.884535 2026] [security2:error] [pid 940777:tid 940959] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3RsLTEyNDE3LXRsZnJjLTQ0NzAtbGZy.cgi"] [unique_id "alQsEZihQxksrpCflyFQeAAAAK8"] [Sun Jul 12 18:06:42.098460 2026] [security2:error] [pid 941081:tid 941241] [client 24.203.79.110:50213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsEuZnN2CRos_GBqURJQAAAaY"] [Sun Jul 12 18:06:42.121617 2026] [security2:error] [pid 941081:tid 941241] [client 24.203.79.110:50213] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsEuZnN2CRos_GBqURJQAAAaY"] [Sun Jul 12 18:06:42.210367 2026] [authz_core:error] [pid 941081:tid 941249] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:42.210880 2026] [authz_core:error] [pid 941081:tid 941249] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:42.321002 2026] [security2:error] [pid 940777:tid 940977] [client 31.171.101.71:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsEZihQxksrpCflyFQZQAAwXc"] [Sun Jul 12 18:06:42.321113 2026] [security2:error] [pid 940777:tid 940977] [client 31.171.101.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "barrozolaw.com"] [uri "/wp-comments-post.php"] [unique_id "alQsEZihQxksrpCflyFQZQAAwXc"] [Sun Jul 12 18:06:42.346523 2026] [security2:error] [pid 941081:tid 941322] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsEeZnN2CRos_GBqURDwAAAfc"] [Sun Jul 12 18:06:42.415491 2026] [security2:error] [pid 941081:tid 941334] [client 168.100.149.240:36194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41860/bargainor/2307_milksopism.jsp"] [unique_id "alQsEuZnN2CRos_GBqURKQAAAgM"] [Sun Jul 12 18:06:42.498621 2026] [security2:error] [pid 941081:tid 941237] [client 74.244.119.215:42855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsEuZnN2CRos_GBqURKwAAAaI"] [Sun Jul 12 18:06:42.498933 2026] [security2:error] [pid 941081:tid 941237] [client 74.244.119.215:42855] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsEuZnN2CRos_GBqURKwAAAaI"] [Sun Jul 12 18:06:42.554393 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsEZihQxksrpCflyFQbAAAAM8"], referer: http://67.222.38.115/api/auth/signin [Sun Jul 12 18:06:42.584220 2026] [security2:error] [pid 941081:tid 941156] [remote 54.39.210.109:56158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "uirvda.com"] [uri "/deer-path-of-huntley-inc/"] [unique_id "alQsEuZnN2CRos_GBqURLAAB_EQ"] [Sun Jul 12 18:06:42.584588 2026] [security2:error] [pid 941081:tid 941327] [client 54.39.210.109:56158] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "uirvda.com"] [uri "/deer-path-of-huntley-inc/"] [unique_id "alQsEuZnN2CRos_GBqURLAAB_EQ"] [Sun Jul 12 18:06:42.746339 2026] [cgid:error] [pid 940777:tid 940994] [client 202.46.62.30:53878] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-547.html?osCsid=1j5lr62f3d2i92eee0ha6flk12 [Sun Jul 12 18:06:42.846777 2026] [security2:error] [pid 941081:tid 941239] [client 202.46.62.20:58855] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQsEuZnN2CRos_GBqUROwAAAaQ"], referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-547.html?osCsid=1j5lr62f3d2i92eee0ha6flk12 [Sun Jul 12 18:06:42.928990 2026] [security2:error] [pid 940777:tid 940935] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsEpihQxksrpCflyFQgQAAAJc"] [Sun Jul 12 18:06:42.929046 2026] [security2:error] [pid 940777:tid 940935] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsEpihQxksrpCflyFQgQAAAJc"] [Sun Jul 12 18:06:42.930492 2026] [security2:error] [pid 940777:tid 940921] [client 65.21.113.206:58370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3RsLTEyNDE3LXRsZnJjLTQ0NzAtbGZy.cgi"] [unique_id "alQsEpihQxksrpCflyFQfwAAAIk"] [Sun Jul 12 18:06:43.008348 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:43.008982 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:43.061900 2026] [security2:error] [pid 941081:tid 941302] [client 104.156.225.167:61358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "the72hoursolution.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsE-ZnN2CRos_GBqURRgAAAeM"] [Sun Jul 12 18:06:43.255559 2026] [security2:error] [pid 941081:tid 941320] [client 104.156.225.167:57894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "the72hoursolution.net"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsE-ZnN2CRos_GBqURTQAAAfU"] [Sun Jul 12 18:06:43.355152 2026] [security2:error] [pid 941081:tid 941329] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsEuZnN2CRos_GBqURKAAAAf4"] [Sun Jul 12 18:06:43.706029 2026] [security2:error] [pid 941081:tid 941260] [client 168.100.149.31:19898] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41925/bargainor/2307_capnoides.jsp"] [unique_id "alQsE-ZnN2CRos_GBqURYAAAAbk"] [Sun Jul 12 18:06:43.824641 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:43.825168 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:43.961195 2026] [security2:error] [pid 941081:tid 941334] [client 114.119.147.205:35231] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "box2216.temp.domains"] [uri "/~sophiakw/wp-content/uploads/2020/06/work-hard-dream-big-hand-lettering-motivational-quotes_26428-337.jpg"] [unique_id "alQsE-ZnN2CRos_GBqURZQAAAgM"], referer: http://box2216.temp.domains/~sophiakw/wp-content/uploads/2020/06/work-hard-dream-big-hand-lettering-motivational-quotes_26428-337.jpg [Sun Jul 12 18:06:44.099942 2026] [security2:error] [pid 940777:tid 941037] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsEpihQxksrpCflyFQhQAAAP0"] [Sun Jul 12 18:06:44.233533 2026] [security2:error] [pid 941081:tid 941269] [client 125.167.21.72:62962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsFOZnN2CRos_GBqURZgAAAcI"] [Sun Jul 12 18:06:44.286408 2026] [security2:error] [pid 940777:tid 940984] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3RsLTEyNDE3LXRsZnJjLTQ1MjEtbGZy.cgi"] [unique_id "alQsFJihQxksrpCflyFQpQAAAMg"] [Sun Jul 12 18:06:44.573255 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:44.573759 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:45.168429 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsE5ihQxksrpCflyFQkQAAANY"] [Sun Jul 12 18:06:45.227776 2026] [security2:error] [pid 941081:tid 941266] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsFOZnN2CRos_GBqURcwAAAb8"] [Sun Jul 12 18:06:45.227830 2026] [security2:error] [pid 941081:tid 941266] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsFOZnN2CRos_GBqURcwAAAb8"] [Sun Jul 12 18:06:45.228967 2026] [security2:error] [pid 940777:tid 940929] [client 65.21.113.206:32972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3RsLTEyNDE3LXRsZnJjLTQ1MjEtbGZy.cgi"] [unique_id "alQsFJihQxksrpCflyFQtgAAAJE"] [Sun Jul 12 18:06:45.329553 2026] [authz_core:error] [pid 940777:tid 941024] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:45.330139 2026] [authz_core:error] [pid 940777:tid 941024] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:45.746145 2026] [security2:error] [pid 941081:tid 941310] [client 104.194.8.156:52374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.ophtek.com"] [uri "/wp-login.php"] [unique_id "alQsFeZnN2CRos_GBqURhgAAAes"] [Sun Jul 12 18:06:45.786465 2026] [security2:error] [pid 940777:tid 940878] [remote 67.207.94.191:34462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.94.207.67.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sinfully-desilicious.com"] [uri "/wp-login.php"] [unique_id "alQsFZihQxksrpCflyFQxAAAwVo"] [Sun Jul 12 18:06:45.971811 2026] [security2:error] [pid 940777:tid 940971] [client 20.244.27.100:59992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/collaboration.php"] [unique_id "alQsFZihQxksrpCflyFQxwAAALs"], referer: binance.com [Sun Jul 12 18:06:46.072487 2026] [authz_core:error] [pid 940777:tid 940965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:46.073025 2026] [authz_core:error] [pid 940777:tid 940965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:46.131744 2026] [security2:error] [pid 940777:tid 940981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsFJihQxksrpCflyFQnwAAAMU"] [Sun Jul 12 18:06:46.149243 2026] [security2:error] [pid 940777:tid 940948] [client 37.41.90.236:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQsFJihQxksrpCflyFQtwAAAKQ"] [Sun Jul 12 18:06:46.183601 2026] [security2:error] [pid 940777:tid 940933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsFJihQxksrpCflyFQoAAAAJU"], referer: http://67.222.38.115/api/card [Sun Jul 12 18:06:46.223920 2026] [security2:error] [pid 940777:tid 940987] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsFJihQxksrpCflyFQoQAAAMs"], referer: http://67.222.38.115/api/case [Sun Jul 12 18:06:46.403692 2026] [security2:error] [pid 940777:tid 940949] [client 168.100.149.114:30856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41990/bargainor/2307_deft.jsp"] [unique_id "alQsFpihQxksrpCflyFQ1wAAAKU"] [Sun Jul 12 18:06:46.849556 2026] [authz_core:error] [pid 940777:tid 940956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:46.850068 2026] [authz_core:error] [pid 940777:tid 940956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:47.310165 2026] [security2:error] [pid 940777:tid 941005] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsFpihQxksrpCflyFQ0AAAAN0"] [Sun Jul 12 18:06:47.339329 2026] [security2:error] [pid 941081:tid 941222] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsFuZnN2CRos_GBqURmAAAAZM"] [Sun Jul 12 18:06:47.405205 2026] [security2:error] [pid 940777:tid 940988] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3UtMTY1NC91NTgvMTY3MDUtNThjdw=="] [unique_id "alQsF5ihQxksrpCflyFQ7AAAAMw"] [Sun Jul 12 18:06:47.593997 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:47.594719 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:48.348980 2026] [security2:error] [pid 940777:tid 941043] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsF5ihQxksrpCflyFQ6AAAAQM"] [Sun Jul 12 18:06:48.349486 2026] [security2:error] [pid 941081:tid 941316] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsF-ZnN2CRos_GBqURpgAAAfE"], referer: http://67.222.38.115/api/cluster [Sun Jul 12 18:06:48.352271 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:48.352941 2026] [authz_core:error] [pid 941081:tid 941244] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:48.403221 2026] [security2:error] [pid 940777:tid 940997] [client 168.100.149.115:50040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42055/bargainor/2307_did.jsp"] [unique_id "alQsGJihQxksrpCflyFQ_wAAANU"] [Sun Jul 12 18:06:48.529313 2026] [security2:error] [pid 940777:tid 941024] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsF5ihQxksrpCflyFQ7wAAAPA"] [Sun Jul 12 18:06:48.531148 2026] [security2:error] [pid 941081:tid 941299] [client 65.21.113.206:32986] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3UtMTY1NC91NTgvMTY3MDUtNThjdw=="] [unique_id "alQsF-ZnN2CRos_GBqURtwAAAeA"] [Sun Jul 12 18:06:48.555602 2026] [security2:error] [pid 940777:tid 941024] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsF5ihQxksrpCflyFQ7wAAAPA"] [Sun Jul 12 18:06:48.786576 2026] [security2:error] [pid 940777:tid 940977] [client 94.187.171.125:52818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsGJihQxksrpCflyFRBQAAAME"] [Sun Jul 12 18:06:48.786859 2026] [security2:error] [pid 940777:tid 940977] [client 94.187.171.125:52818] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsGJihQxksrpCflyFRBQAAAME"] [Sun Jul 12 18:06:49.088435 2026] [security2:error] [pid 940777:tid 941041] [client 202.46.62.61:52282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQsGZihQxksrpCflyFRCQAAAQE"], referer: https://www.stephenspublishing.com/round-stick-pens-custom-p-493.html?osCsid=7sl8thrlf9b1v8h5tbfepoc0c0 [Sun Jul 12 18:06:49.138030 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:49.138559 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:49.323009 2026] [security2:error] [pid 941081:tid 941302] [client 114.119.149.1:23181] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "box2216.temp.domains"] [uri "/~msunive2/staging/6981"] [unique_id "alQsGeZnN2CRos_GBqUR5gAAAeM"], referer: http://www.ms-universal.com/wp-content/flagallery/fixed-seating/webview/fixed-seating6.jpg [Sun Jul 12 18:06:49.739645 2026] [security2:error] [pid 940777:tid 940955] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3VtOHU0c185OTUzL3VtLzIyODkvbQ==.html"] [unique_id "alQsGZihQxksrpCflyFRHwAAAKs"] [Sun Jul 12 18:06:49.903981 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:49.904570 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:50.269535 2026] [security2:error] [pid 941081:tid 941323] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsGOZnN2CRos_GBqURxgAAAfg"] [Sun Jul 12 18:06:50.282516 2026] [security2:error] [pid 941081:tid 941308] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsGOZnN2CRos_GBqURxwAAAek"], referer: http://67.222.38.115/api/collections [Sun Jul 12 18:06:50.363727 2026] [security2:error] [pid 940777:tid 940926] [client 168.100.149.106:23010] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42120/bargainor/2307_delphian.jsp"] [unique_id "alQsGpihQxksrpCflyFRKgAAAI4"] [Sun Jul 12 18:06:50.723551 2026] [authz_core:error] [pid 941081:tid 941280] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:50.724288 2026] [authz_core:error] [pid 941081:tid 941280] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:50.972465 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsGpihQxksrpCflyFRJwAAAPg"] [Sun Jul 12 18:06:50.972548 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsGpihQxksrpCflyFRJwAAAPg"] [Sun Jul 12 18:06:50.973962 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:32998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3VtOHU0c185OTUzL3VtLzIyODkvbQ==.html"] [unique_id "alQsGuZnN2CRos_GBqUR-gAAAag"] [Sun Jul 12 18:06:51.062678 2026] [security2:error] [pid 940777:tid 940833] [remote 57.141.18.54:56090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQsGpihQxksrpCflyFRNQABAy8"] [Sun Jul 12 18:06:51.109914 2026] [security2:error] [pid 940777:tid 941011] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsGJihQxksrpCflyFQ_QAAAOM"], referer: http://67.222.38.115/api/cluster_conf [Sun Jul 12 18:06:51.167086 2026] [security2:error] [pid 941081:tid 941317] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsGOZnN2CRos_GBqURyAAAAfI"] [Sun Jul 12 18:06:51.272039 2026] [security2:error] [pid 940777:tid 941008] [client 197.48.221.253:65397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsG5ihQxksrpCflyFRPAAAAOA"] [Sun Jul 12 18:06:51.272325 2026] [security2:error] [pid 940777:tid 941008] [client 197.48.221.253:65397] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsG5ihQxksrpCflyFRPAAAAOA"] [Sun Jul 12 18:06:51.295434 2026] [security2:error] [pid 940777:tid 940919] [client 35.204.109.104:24576] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.homeyeats.com"] [uri "/"] [unique_id "alQsG5ihQxksrpCflyFRPQAAAIc"] [Sun Jul 12 18:06:51.337153 2026] [security2:error] [pid 940777:tid 940919] [client 35.204.109.104:24576] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.homeyeats.com"] [uri "/"] [unique_id "alQsG5ihQxksrpCflyFRPQAAAIc"] [Sun Jul 12 18:06:51.562245 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:51.562770 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:51.721273 2026] [security2:error] [pid 941081:tid 941247] [client 168.100.149.38:58078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42185/bargainor/2307_anisodactyli.jsp"] [unique_id "alQsG-ZnN2CRos_GBqUSGAAAAaw"] [Sun Jul 12 18:06:52.199870 2026] [security2:error] [pid 940777:tid 940945] [client 20.244.27.100:63816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/compat-utf8.php"] [unique_id "alQsHJihQxksrpCflyFRSAAAAKE"], referer: binance.com [Sun Jul 12 18:06:52.262575 2026] [security2:error] [pid 940777:tid 941012] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsG5ihQxksrpCflyFROgAAAOQ"], referer: http://67.222.38.115/api/connector [Sun Jul 12 18:06:52.316040 2026] [security2:error] [pid 941081:tid 941334] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsG-ZnN2CRos_GBqUSDQAAAgM"] [Sun Jul 12 18:06:52.355060 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:52.355760 2026] [authz_core:error] [pid 941081:tid 941302] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:52.593239 2026] [security2:error] [pid 940777:tid 940931] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3YwdThlLTE4MjAvdjAtMjgyNTcvMHU4ZQ=="] [unique_id "alQsHJihQxksrpCflyFRUQAAAJM"] [Sun Jul 12 18:06:52.715125 2026] [security2:error] [pid 940777:tid 941014] [client 24.203.79.110:50729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsHJihQxksrpCflyFRVAAAAOY"] [Sun Jul 12 18:06:52.715435 2026] [security2:error] [pid 940777:tid 941014] [client 24.203.79.110:50729] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsHJihQxksrpCflyFRVAAAAOY"] [Sun Jul 12 18:06:52.909378 2026] [security2:error] [pid 940777:tid 940951] [client 74.244.119.215:50585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsHJihQxksrpCflyFRVgAAAKc"] [Sun Jul 12 18:06:52.909694 2026] [security2:error] [pid 940777:tid 940951] [client 74.244.119.215:50585] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsHJihQxksrpCflyFRVgAAAKc"] [Sun Jul 12 18:06:52.932115 2026] [security2:error] [pid 941081:tid 941345] [client 193.56.116.79:60501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.116.56.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "danbcaldwell.com"] [uri "/wp-login.php"] [unique_id "alQsHOZnN2CRos_GBqUSKwAAAg4"] [Sun Jul 12 18:06:53.253139 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:53.253809 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:53.354605 2026] [security2:error] [pid 940777:tid 941015] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHJihQxksrpCflyFRTQAAAOc"] [Sun Jul 12 18:06:53.358233 2026] [security2:error] [pid 940777:tid 940995] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHJihQxksrpCflyFRSgAAANM"] [Sun Jul 12 18:06:53.578920 2026] [security2:error] [pid 940777:tid 940941] [client 54.174.58.224:52561] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "michigansparc.com"] [uri "/index.php"] [unique_id "alQsG5ihQxksrpCflyFRPgAAAJ0"] [Sun Jul 12 18:06:53.671443 2026] [security2:error] [pid 941081:tid 941219] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsHeZnN2CRos_GBqUSMwAAAZA"] [Sun Jul 12 18:06:53.671529 2026] [security2:error] [pid 941081:tid 941219] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsHeZnN2CRos_GBqUSMwAAAZA"] [Sun Jul 12 18:06:53.672586 2026] [security2:error] [pid 940777:tid 940965] [client 65.21.113.206:37090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3YwdThlLTE4MjAvdjAtMjgyNTcvMHU4ZQ=="] [unique_id "alQsHZihQxksrpCflyFRVwAAALU"] [Sun Jul 12 18:06:54.020639 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:54.021158 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:54.368063 2026] [security2:error] [pid 940777:tid 940927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHZihQxksrpCflyFRWwAAAI8"], referer: http://67.222.38.115/api/datasources [Sun Jul 12 18:06:54.369245 2026] [security2:error] [pid 941081:tid 941313] [client 168.100.149.139:54816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42250/bargainor/2307_birefraction.jsp"] [unique_id "alQsHuZnN2CRos_GBqUSZQAAAe4"] [Sun Jul 12 18:06:54.417108 2026] [security2:error] [pid 941081:tid 941108] [remote 194.164.192.228:34662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.192.164.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "resoluteroad.ca"] [uri "/wp-login.php"] [unique_id "alQsHuZnN2CRos_GBqUSaAABwxQ"] [Sun Jul 12 18:06:54.477084 2026] [security2:error] [pid 941081:tid 941299] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHeZnN2CRos_GBqUSOQAAAeA"] [Sun Jul 12 18:06:54.821902 2026] [authz_core:error] [pid 940777:tid 941029] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:54.822394 2026] [authz_core:error] [pid 940777:tid 941029] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:54.887558 2026] [security2:error] [pid 941081:tid 941320] [client 57.141.18.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQsHuZnN2CRos_GBqUSggAAAfU"] [Sun Jul 12 18:06:55.022301 2026] [security2:error] [pid 941081:tid 941305] [client 125.167.21.72:61405] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsHuZnN2CRos_GBqUSiwAAAeY"] [Sun Jul 12 18:06:55.364974 2026] [security2:error] [pid 941081:tid 941225] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHuZnN2CRos_GBqUSZwAAAZY"] [Sun Jul 12 18:06:55.579469 2026] [security2:error] [pid 940777:tid 940923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsHpihQxksrpCflyFRagAAAIs"], referer: http://67.222.38.115/api/dcim/interfaces/ [Sun Jul 12 18:06:55.590389 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:55.590929 2026] [authz_core:error] [pid 941081:tid 941321] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:56.006128 2026] [security2:error] [pid 941081:tid 941269] [client 172.252.163.124:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQsH-ZnN2CRos_GBqUSqwAAAcI"] [Sun Jul 12 18:06:56.396133 2026] [security2:error] [pid 941081:tid 941309] [client 168.100.149.133:50798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42315/bargainor/2307_mediator.jsp"] [unique_id "alQsIOZnN2CRos_GBqUS3AAAAeo"] [Sun Jul 12 18:06:56.447287 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:56.447874 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:56.489490 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsH5ihQxksrpCflyFRfgAAAM8"] [Sun Jul 12 18:06:56.516430 2026] [core:error] [pid 941081:tid 941088] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.517948 2026] [core:error] [pid 941081:tid 941195] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.523015 2026] [core:error] [pid 941081:tid 941197] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.529917 2026] [core:error] [pid 941081:tid 941088] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.535174 2026] [core:error] [pid 941081:tid 941195] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.539048 2026] [core:error] [pid 941081:tid 941197] [remote 23.115.85.188:63503] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:06:56.570176 2026] [security2:error] [pid 940777:tid 940931] [client 40.77.167.136:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsH5ihQxksrpCflyFRjAAAAJM"] [Sun Jul 12 18:06:56.829349 2026] [security2:error] [pid 940777:tid 940958] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3YwdThlLTkwMjQvdjAtMjgyNTcvMHU4ZQ=="] [unique_id "alQsIJihQxksrpCflyFRoQAAAK4"] [Sun Jul 12 18:06:57.103698 2026] [security2:error] [pid 941081:tid 941337] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsH-ZnN2CRos_GBqUSrAAAAgY"] [Sun Jul 12 18:06:57.234479 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:57.235025 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:57.607301 2026] [security2:error] [pid 940777:tid 940966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsIJihQxksrpCflyFRnwAAALY"] [Sun Jul 12 18:06:57.729941 2026] [security2:error] [pid 940777:tid 940986] [client 168.100.149.20:38568] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42380/bargainor/2307_gurian.jsp"] [unique_id "alQsIZihQxksrpCflyFRrgAAAMo"] [Sun Jul 12 18:06:57.831936 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsIZihQxksrpCflyFRqQAAANE"] [Sun Jul 12 18:06:57.832018 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsIZihQxksrpCflyFRqQAAANE"] [Sun Jul 12 18:06:57.832845 2026] [security2:error] [pid 940777:tid 940961] [client 65.21.113.206:37098] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3YwdThlLTkwMjQvdjAtMjgyNTcvMHU4ZQ=="] [unique_id "alQsIZihQxksrpCflyFRpwAAALE"] [Sun Jul 12 18:06:58.015901 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:58.016382 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:58.162979 2026] [security2:error] [pid 941081:tid 941262] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsIeZnN2CRos_GBqUS-QAAAbs"], referer: http://67.222.38.115/api/documents.list [Sun Jul 12 18:06:58.794800 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:58.795283 2026] [authz_core:error] [pid 941081:tid 941305] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:59.037553 2026] [core:error] [pid 941081:tid 941294] [client 87.236.176.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:06:59.037599 2026] [core:error] [pid 941081:tid 941294] [client 87.236.176.163:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:06:59.130927 2026] [security2:error] [pid 941081:tid 941261] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsIeZnN2CRos_GBqUTCwAAAbo"] [Sun Jul 12 18:06:59.165512 2026] [security2:error] [pid 941081:tid 941233] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsIuZnN2CRos_GBqUTHAAAAZ4"] [Sun Jul 12 18:06:59.220824 2026] [security2:error] [pid 941081:tid 941097] [remote 40.77.167.63:13672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index11.xml"] [unique_id "alQsI-ZnN2CRos_GBqUTRAABlgk"] [Sun Jul 12 18:06:59.449425 2026] [security2:error] [pid 941081:tid 941318] [client 94.187.171.125:53315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsI-ZnN2CRos_GBqUTYAAAAfM"] [Sun Jul 12 18:06:59.449650 2026] [security2:error] [pid 941081:tid 941318] [client 94.187.171.125:53315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsI-ZnN2CRos_GBqUTYAAAAfM"] [Sun Jul 12 18:06:59.581754 2026] [authz_core:error] [pid 941081:tid 941320] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:06:59.582221 2026] [authz_core:error] [pid 941081:tid 941320] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:06:59.744354 2026] [security2:error] [pid 940777:tid 941027] [client 162.141.167.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mmdservices.ca"] [uri "/index.php"] [unique_id "alQsIZihQxksrpCflyFRtAAAAPM"] [Sun Jul 12 18:06:59.744823 2026] [security2:error] [pid 941081:tid 941220] [client 162.141.167.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mmdservices.ca"] [uri "/index.php"] [unique_id "alQsIeZnN2CRos_GBqUTCQAAAZE"] [Sun Jul 12 18:06:59.880786 2026] [security2:error] [pid 940777:tid 940942] [client 196.121.156.108:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsI5ihQxksrpCflyFRxQAAAJ4"] [Sun Jul 12 18:07:00.036681 2026] [security2:error] [pid 940777:tid 940968] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3cwLTExNDA5LXcwcGpnLTMxNDktMHBq.cgi"] [unique_id "alQsJJihQxksrpCflyFR0AAAALg"] [Sun Jul 12 18:07:00.291460 2026] [security2:error] [pid 940777:tid 940923] [client 65.49.20.66:47430] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQsI5ihQxksrpCflyFRzwAAAIs"] [Sun Jul 12 18:07:00.336556 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:00.337058 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:00.356328 2026] [security2:error] [pid 941081:tid 941287] [client 112.86.225.163:59382] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/products-components.html"] [unique_id "alQsJOZnN2CRos_GBqUThgAAAdQ"] [Sun Jul 12 18:07:00.356552 2026] [security2:error] [pid 941081:tid 941287] [client 112.86.225.163:59382] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/products-components.html"] [unique_id "alQsJOZnN2CRos_GBqUThgAAAdQ"] [Sun Jul 12 18:07:00.356823 2026] [security2:error] [pid 940777:tid 940964] [client 168.100.149.29:33662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42445/bargainor/2307_monkey.jsp"] [unique_id "alQsJJihQxksrpCflyFR1AAAALQ"] [Sun Jul 12 18:07:00.755514 2026] [security2:error] [pid 941081:tid 941278] [client 104.248.177.153:32842] ModSecurity: Warning. Pattern match "^\\\\/$" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1450"] [id "9011111"] [msg "SQUID data collection"] [hostname "michaeloremus.org"] [uri "/"] [unique_id "alQsJOZnN2CRos_GBqUTjwAAAcs"] [Sun Jul 12 18:07:01.017682 2026] [security2:error] [pid 940777:tid 940985] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsJJihQxksrpCflyFR1gAAAMk"] [Sun Jul 12 18:07:01.017752 2026] [security2:error] [pid 940777:tid 940985] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsJJihQxksrpCflyFR1gAAAMk"] [Sun Jul 12 18:07:01.020768 2026] [security2:error] [pid 940777:tid 940928] [client 65.21.113.206:37102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3cwLTExNDA5LXcwcGpnLTMxNDktMHBq.cgi"] [unique_id "alQsJJihQxksrpCflyFR1QAAAJA"] [Sun Jul 12 18:07:01.081640 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:01.082346 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:01.226940 2026] [security2:error] [pid 941081:tid 941250] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsI-ZnN2CRos_GBqUTPQAAAa8"], referer: http://67.222.38.115/api/edges [Sun Jul 12 18:07:01.229891 2026] [security2:error] [pid 941081:tid 941331] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsI-ZnN2CRos_GBqUTOQAAAgA"], referer: http://67.222.38.115/api/documents.search [Sun Jul 12 18:07:01.323071 2026] [security2:error] [pid 941081:tid 941229] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsI-ZnN2CRos_GBqUTPAAAAZo"] [Sun Jul 12 18:07:01.344152 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsI-ZnN2CRos_GBqUTQwAAAec"], referer: http://67.222.38.115/api/emails [Sun Jul 12 18:07:01.745704 2026] [security2:error] [pid 941081:tid 941344] [client 197.48.221.253:49600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsJeZnN2CRos_GBqUToAAAAg0"] [Sun Jul 12 18:07:01.745939 2026] [security2:error] [pid 941081:tid 941344] [client 197.48.221.253:49600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsJeZnN2CRos_GBqUToAAAAg0"] [Sun Jul 12 18:07:01.913544 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:01.914077 2026] [authz_core:error] [pid 941081:tid 941300] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:02.374231 2026] [security2:error] [pid 941081:tid 941279] [client 168.100.149.109:16810] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42510/bargainor/2307_impeccance.jsp"] [unique_id "alQsJuZnN2CRos_GBqUTqwAAAcw"] [Sun Jul 12 18:07:02.535847 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJZihQxksrpCflyFR4gAAALw"] [Sun Jul 12 18:07:02.746645 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:02.747136 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:03.106352 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJZihQxksrpCflyFR5AAAAJI"] [Sun Jul 12 18:07:03.360497 2026] [security2:error] [pid 941081:tid 941296] [client 24.203.79.110:51252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsJ-ZnN2CRos_GBqUTxwAAAd0"] [Sun Jul 12 18:07:03.360741 2026] [security2:error] [pid 941081:tid 941296] [client 24.203.79.110:51252] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsJ-ZnN2CRos_GBqUTxwAAAd0"] [Sun Jul 12 18:07:03.413814 2026] [security2:error] [pid 941081:tid 941317] [client 74.244.119.215:24517] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsJ-ZnN2CRos_GBqUTywAAAfI"] [Sun Jul 12 18:07:03.414047 2026] [security2:error] [pid 941081:tid 941317] [client 74.244.119.215:24517] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsJ-ZnN2CRos_GBqUTywAAAfI"] [Sun Jul 12 18:07:03.475450 2026] [security2:error] [pid 941081:tid 941189] [remote 47.128.114.87:30900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/serverimage/PS-5301-08HA(2).jpg"] [unique_id "alQsJ-ZnN2CRos_GBqUTzgACCmQ"], referer: https://viapase.weebly.com/ [Sun Jul 12 18:07:03.484353 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:03.484871 2026] [authz_core:error] [pid 941081:tid 941246] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:03.523834 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3cwLTExNDA5LXcwcGpnLTk2NTYtMHBq.cgi"] [unique_id "alQsJ5ihQxksrpCflyFR_wAAAO4"] [Sun Jul 12 18:07:03.578558 2026] [security2:error] [pid 941081:tid 941332] [client 57.141.18.106:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mbitschoolstore.com"] [uri "/index.php"] [unique_id "alQsJOZnN2CRos_GBqUTfAAAAgE"] [Sun Jul 12 18:07:03.727277 2026] [security2:error] [pid 940777:tid 940974] [client 168.100.149.198:43972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42575/bargainor/2307_gunz.jsp"] [unique_id "alQsJ5ihQxksrpCflyFSBQAAAL4"] [Sun Jul 12 18:07:03.824525 2026] [security2:error] [pid 940777:tid 940906] [remote 165.73.0.178:53988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.0.73.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "abigailspenser.com"] [uri "/wp-login.php"] [unique_id "alQsJ5ihQxksrpCflyFSBgAAmXY"] [Sun Jul 12 18:07:04.106600 2026] [security2:error] [pid 941081:tid 941251] [client 78.142.18.40:50901] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKOZnN2CRos_GBqUT2gAAAbA"] [Sun Jul 12 18:07:04.264246 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:04.264912 2026] [authz_core:error] [pid 941081:tid 941259] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:04.265590 2026] [security2:error] [pid 940777:tid 940918] [client 78.142.18.40:51457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKJihQxksrpCflyFSCQAAAIY"] [Sun Jul 12 18:07:04.271090 2026] [security2:error] [pid 941081:tid 941245] [client 78.142.18.40:51466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKOZnN2CRos_GBqUT4gAAAao"] [Sun Jul 12 18:07:04.338697 2026] [security2:error] [pid 941081:tid 941297] [client 78.142.18.40:51572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKOZnN2CRos_GBqUT5AAAAd4"] [Sun Jul 12 18:07:04.363213 2026] [security2:error] [pid 941081:tid 941233] [client 45.189.148.189:41044] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.eagledownstudios.com"] [uri "/index.php"] [unique_id "alQsJOZnN2CRos_GBqUTigAAAZ4"] [Sun Jul 12 18:07:04.532240 2026] [security2:error] [pid 941081:tid 941312] [client 78.142.18.40:51835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKOZnN2CRos_GBqUT5gAAAe0"] [Sun Jul 12 18:07:04.606805 2026] [security2:error] [pid 941081:tid 941319] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsKOZnN2CRos_GBqUT1QAAAfQ"] [Sun Jul 12 18:07:04.606871 2026] [security2:error] [pid 941081:tid 941319] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsKOZnN2CRos_GBqUT1QAAAfQ"] [Sun Jul 12 18:07:04.608857 2026] [security2:error] [pid 941081:tid 941281] [client 65.21.113.206:47702] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3cwLTExNDA5LXcwcGpnLTk2NTYtMHBq.cgi"] [unique_id "alQsKOZnN2CRos_GBqUT1AAAAc4"] [Sun Jul 12 18:07:04.796858 2026] [security2:error] [pid 941081:tid 941321] [client 78.142.18.40:52301] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKOZnN2CRos_GBqUT6gAAAfY"] [Sun Jul 12 18:07:04.992833 2026] [security2:error] [pid 940777:tid 940892] [remote 57.141.18.33:56528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 33.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/-8EO8PhZ_YtHjTAt.lWez"] [unique_id "alQsKJihQxksrpCflyFSDAAArWg"] [Sun Jul 12 18:07:05.067587 2026] [authz_core:error] [pid 941081:tid 941260] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:05.068338 2026] [authz_core:error] [pid 941081:tid 941260] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:05.179935 2026] [security2:error] [pid 941081:tid 941262] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJuZnN2CRos_GBqUTswAAAbs"], referer: http://67.222.38.115/api/entrypoints [Sun Jul 12 18:07:05.188782 2026] [security2:error] [pid 941081:tid 941300] [client 78.142.18.40:54053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKeZnN2CRos_GBqUT9wAAAeE"] [Sun Jul 12 18:07:05.579618 2026] [security2:error] [pid 940777:tid 940923] [client 78.142.18.40:54772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKZihQxksrpCflyFSGwAAAIs"] [Sun Jul 12 18:07:05.624793 2026] [security2:error] [pid 941081:tid 941252] [client 125.167.21.72:61825] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "200"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsKeZnN2CRos_GBqUUCQAAAbE"] [Sun Jul 12 18:07:05.755634 2026] [security2:error] [pid 941081:tid 941229] [client 78.142.18.40:52260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKeZnN2CRos_GBqUUGAAAAZo"] [Sun Jul 12 18:07:05.827549 2026] [security2:error] [pid 940777:tid 940940] [client 78.142.18.40:52249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKZihQxksrpCflyFSHwAAAJw"] [Sun Jul 12 18:07:05.904899 2026] [authz_core:error] [pid 940777:tid 940990] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:05.905395 2026] [authz_core:error] [pid 940777:tid 940990] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:05.928142 2026] [security2:error] [pid 941081:tid 941322] [client 78.142.18.40:52789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKeZnN2CRos_GBqUUHgAAAfc"] [Sun Jul 12 18:07:06.090774 2026] [security2:error] [pid 941081:tid 941343] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJ-ZnN2CRos_GBqUTuwAAAgw"], referer: http://67.222.38.115/api/events/definitions [Sun Jul 12 18:07:06.106309 2026] [security2:error] [pid 940777:tid 941011] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJpihQxksrpCflyFR9wAAAOM"], referer: http://67.222.38.115/api/events [Sun Jul 12 18:07:06.144529 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsJpihQxksrpCflyFR9AAAAL8"] [Sun Jul 12 18:07:06.157397 2026] [security2:error] [pid 941081:tid 941273] [client 78.142.18.40:56473] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKuZnN2CRos_GBqUUIwAAAcY"] [Sun Jul 12 18:07:06.248585 2026] [security2:error] [pid 940777:tid 940903] [remote 104.194.8.156:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "webmail.interconnectionplaybook.com"] [uri "/wp-login.php"] [unique_id "alQsKpihQxksrpCflyFSKwAAn3M"] [Sun Jul 12 18:07:06.325747 2026] [security2:error] [pid 940777:tid 941005] [client 78.142.18.40:56836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKpihQxksrpCflyFSLAAAAN0"] [Sun Jul 12 18:07:06.355219 2026] [security2:error] [pid 940777:tid 940963] [client 168.100.149.165:33750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42640/bargainor/2307_monadically.jsp"] [unique_id "alQsKpihQxksrpCflyFSLQAAALM"] [Sun Jul 12 18:07:06.387805 2026] [security2:error] [pid 940777:tid 940952] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3d3cm1vLzc4NTIvd3cvMzc5Nzcvdw=="] [unique_id "alQsKpihQxksrpCflyFSLgAAAKg"] [Sun Jul 12 18:07:06.557548 2026] [security2:error] [pid 940777:tid 940966] [client 78.142.18.40:57393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKpihQxksrpCflyFSMAAAALY"] [Sun Jul 12 18:07:06.620748 2026] [security2:error] [pid 941081:tid 941244] [client 207.46.13.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "undameta.com"] [uri "/index.php"] [unique_id "alQsKOZnN2CRos_GBqUT7gAAAak"] [Sun Jul 12 18:07:06.734623 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:06.735390 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:06.995186 2026] [security2:error] [pid 940777:tid 940987] [client 78.142.18.40:56584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsKpihQxksrpCflyFSNwAAAMs"] [Sun Jul 12 18:07:07.209113 2026] [security2:error] [pid 941081:tid 941267] [client 57.141.18.108:28218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.cecweb.org"] [uri "/index.php"] [unique_id "alQsK-ZnN2CRos_GBqUUPwABwFQ"] [Sun Jul 12 18:07:07.296743 2026] [security2:error] [pid 941081:tid 941228] [client 57.141.18.77:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsKuZnN2CRos_GBqUUNgAAAZk"] [Sun Jul 12 18:07:07.396143 2026] [security2:error] [pid 941081:tid 941290] [client 78.142.18.40:59090] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsK-ZnN2CRos_GBqUUSQAAAdc"] [Sun Jul 12 18:07:07.522912 2026] [security2:error] [pid 941081:tid 941227] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsKuZnN2CRos_GBqUUOgAAAZg"] [Sun Jul 12 18:07:07.523003 2026] [security2:error] [pid 941081:tid 941227] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsKuZnN2CRos_GBqUUOgAAAZg"] [Sun Jul 12 18:07:07.526440 2026] [security2:error] [pid 941081:tid 941261] [client 65.21.113.206:47704] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3d3cm1vLzc4NTIvd3cvMzc5Nzcvdw=="] [unique_id "alQsKuZnN2CRos_GBqUUNwAAAbo"] [Sun Jul 12 18:07:07.530022 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:07.530487 2026] [authz_core:error] [pid 941081:tid 941336] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:07.737075 2026] [security2:error] [pid 941081:tid 941273] [client 168.100.149.234:41630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42705/bargainor/2307_enhalo.jsp"] [unique_id "alQsK-ZnN2CRos_GBqUUWQAAAcY"] [Sun Jul 12 18:07:07.999692 2026] [security2:error] [pid 941081:tid 941295] [client 104.156.225.167:64523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theblessednewbie.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsK-ZnN2CRos_GBqUUYQAAAdw"] [Sun Jul 12 18:07:08.327686 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:08.360128 2026] [authz_core:error] [pid 941081:tid 941333] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:09.218724 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:09.219203 2026] [authz_core:error] [pid 941081:tid 941279] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:09.918606 2026] [security2:error] [pid 940777:tid 941008] [client 57.141.18.50:43600] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.mattbeyer.com"] [uri "/index.php"] [unique_id "alQsK5ihQxksrpCflyFSOgAA4A0"] [Sun Jul 12 18:07:10.010705 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:10.011376 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:10.016273 2026] [security2:error] [pid 940777:tid 941017] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3dfMTMwMi93bnkvNTI2NDFfbnk=.htm"] [unique_id "alQsLpihQxksrpCflyFSTQAAAOk"] [Sun Jul 12 18:07:10.121713 2026] [security2:error] [pid 940777:tid 941012] [client 94.187.171.125:53813] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsLpihQxksrpCflyFSTgAAAOQ"] [Sun Jul 12 18:07:10.122015 2026] [security2:error] [pid 940777:tid 941012] [client 94.187.171.125:53813] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsLpihQxksrpCflyFSTgAAAOQ"] [Sun Jul 12 18:07:10.200835 2026] [security2:error] [pid 940777:tid 940984] [client 38.253.52.116:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsLZihQxksrpCflyFSSQAAAMg"] [Sun Jul 12 18:07:10.378157 2026] [security2:error] [pid 940777:tid 941036] [client 168.100.149.70:55072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42770/bargainor/2307_metalogical.jsp"] [unique_id "alQsLpihQxksrpCflyFSUQAAAPw"] [Sun Jul 12 18:07:10.839419 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:10.839963 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:10.843113 2026] [security2:error] [pid 940777:tid 941023] [client 20.244.27.100:52993] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/connectors.php"] [unique_id "alQsLpihQxksrpCflyFSXAAAAO8"], referer: binance.com [Sun Jul 12 18:07:11.121719 2026] [security2:error] [pid 941081:tid 941281] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsLuZnN2CRos_GBqUUugAAAc4"] [Sun Jul 12 18:07:11.121799 2026] [security2:error] [pid 941081:tid 941281] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsLuZnN2CRos_GBqUUugAAAc4"] [Sun Jul 12 18:07:11.148208 2026] [security2:error] [pid 941081:tid 941336] [client 65.21.113.206:47712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3dfMTMwMi93bnkvNTI2NDFfbnk=.htm"] [unique_id "alQsLuZnN2CRos_GBqUUuAAAAgU"] [Sun Jul 12 18:07:11.605145 2026] [authz_core:error] [pid 941081:tid 941230] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:11.605612 2026] [authz_core:error] [pid 941081:tid 941230] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:11.739323 2026] [security2:error] [pid 941081:tid 941261] [client 168.100.149.1:57834] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42835/bargainor/2307_psychoreflex.jsp"] [unique_id "alQsL-ZnN2CRos_GBqUU0QAAAbo"] [Sun Jul 12 18:07:12.226176 2026] [security2:error] [pid 941081:tid 941318] [client 197.48.221.253:50217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsMOZnN2CRos_GBqUU4wAAAfM"] [Sun Jul 12 18:07:12.226393 2026] [security2:error] [pid 941081:tid 941318] [client 197.48.221.253:50217] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsMOZnN2CRos_GBqUU4wAAAfM"] [Sun Jul 12 18:07:12.322495 2026] [security2:error] [pid 941081:tid 941306] [client 157.10.7.202:45337] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "box2216.bluehost.com"] [uri "/boaform/admin/formLogin"] [unique_id "alQsMOZnN2CRos_GBqUU9QAAAec"] [Sun Jul 12 18:07:12.390289 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:12.391043 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:12.414293 2026] [security2:error] [pid 941081:tid 941306] [client 157.10.7.202:45337] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsMOZnN2CRos_GBqUU9QAAAec"] [Sun Jul 12 18:07:12.898934 2026] [security2:error] [pid 941081:tid 941218] [client 31.56.58.122:47526] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "raid-n-trade.de"] [uri "/.env"] [unique_id "alQsMOZnN2CRos_GBqUU_wAAAY8"] [Sun Jul 12 18:07:12.947774 2026] [proxy:error] [pid 941081:tid 941237] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:07:12.947974 2026] [proxy_http:error] [pid 941081:tid 941237] [client 74.7.241.137:33340] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:07:12.949985 2026] [proxy:error] [pid 941081:tid 941237] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:07:12.950159 2026] [proxy_http:error] [pid 941081:tid 941237] [client 74.7.241.137:33340] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:07:12.950375 2026] [security2:error] [pid 941081:tid 941237] [client 74.7.241.137:33340] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcalendars.shop-caviar.com"] [uri "/___proxy_subdomain_cpcalendars/cgi-sys/503.html"] [unique_id "alQsMOZnN2CRos_GBqUVAAAAAaI"] [Sun Jul 12 18:07:13.112208 2026] [proxy:error] [pid 941081:tid 941120] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:07:13.112363 2026] [proxy_http:error] [pid 941081:tid 941120] [remote 74.7.241.137:43200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:07:13.114429 2026] [proxy:error] [pid 941081:tid 941120] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:07:13.114616 2026] [proxy_http:error] [pid 941081:tid 941120] [remote 74.7.241.137:43200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:07:13.135934 2026] [security2:error] [pid 941081:tid 941272] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKeZnN2CRos_GBqUUAAAAAcU"] [Sun Jul 12 18:07:13.192690 2026] [authz_core:error] [pid 941081:tid 941250] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:13.193196 2026] [authz_core:error] [pid 941081:tid 941250] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:13.969161 2026] [security2:error] [pid 940777:tid 941031] [client 74.244.119.215:13388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsMZihQxksrpCflyFSjwAAAPc"] [Sun Jul 12 18:07:13.969431 2026] [security2:error] [pid 940777:tid 941031] [client 74.244.119.215:13388] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsMZihQxksrpCflyFSjwAAAPc"] [Sun Jul 12 18:07:13.981322 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:13.981837 2026] [authz_core:error] [pid 941081:tid 941298] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:14.009322 2026] [security2:error] [pid 941081:tid 941277] [client 24.203.79.110:51772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsMuZnN2CRos_GBqUVHAAAAco"] [Sun Jul 12 18:07:14.009608 2026] [security2:error] [pid 941081:tid 941277] [client 24.203.79.110:51772] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsMuZnN2CRos_GBqUVHAAAAco"] [Sun Jul 12 18:07:14.443396 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3dhYnQ0LzEwMzgvd2EvNDgyODEvYQ=="] [unique_id "alQsMpihQxksrpCflyFSkgAAAIw"] [Sun Jul 12 18:07:14.732657 2026] [authz_core:error] [pid 940777:tid 940926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:14.733353 2026] [authz_core:error] [pid 940777:tid 940926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:14.828316 2026] [security2:error] [pid 941081:tid 941301] [client 216.73.216.142:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQsMeZnN2CRos_GBqUVFQAAAeI"], referer: http://www.gethsemanegardens.com/category_s/134.htm [Sun Jul 12 18:07:15.080900 2026] [security2:error] [pid 941081:tid 941284] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKeZnN2CRos_GBqUT_wAAAdE"], referer: http://67.222.38.115/api/exchanges [Sun Jul 12 18:07:15.091821 2026] [security2:error] [pid 941081:tid 941293] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKeZnN2CRos_GBqUUAwAAAdo"] [Sun Jul 12 18:07:15.091946 2026] [security2:error] [pid 941081:tid 941334] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKeZnN2CRos_GBqUT_gAAAgM"], referer: http://67.222.38.115/api/extras/config-contexts/ [Sun Jul 12 18:07:15.111018 2026] [security2:error] [pid 941081:tid 941280] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKuZnN2CRos_GBqUUIgAAAc0"], referer: http://67.222.38.115/api/extras/scripts/ [Sun Jul 12 18:07:15.121132 2026] [security2:error] [pid 941081:tid 941291] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKuZnN2CRos_GBqUUIAAAAdg"] [Sun Jul 12 18:07:15.127687 2026] [security2:error] [pid 941081:tid 941285] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKeZnN2CRos_GBqUUAgAAAdI"] [Sun Jul 12 18:07:15.137496 2026] [security2:error] [pid 940777:tid 941042] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsKpihQxksrpCflyFSKAAAAQI"] [Sun Jul 12 18:07:15.186468 2026] [security2:error] [pid 940777:tid 940940] [client 74.7.230.17:56732] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "alpha.ultrasoundleadershipacademy.com"] [uri "/robots.txt"] [unique_id "alQsM5ihQxksrpCflyFSmwAAAJw"] [Sun Jul 12 18:07:15.483174 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:15.483691 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:15.597557 2026] [security2:error] [pid 940777:tid 940929] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsMpihQxksrpCflyFSmAAAAJE"] [Sun Jul 12 18:07:15.597609 2026] [security2:error] [pid 940777:tid 940929] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsMpihQxksrpCflyFSmAAAAJE"] [Sun Jul 12 18:07:15.598959 2026] [security2:error] [pid 940777:tid 940946] [client 65.21.113.206:47398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3dhYnQ0LzEwMzgvd2EvNDgyODEvYQ=="] [unique_id "alQsMpihQxksrpCflyFSlgAAAKI"] [Sun Jul 12 18:07:15.788049 2026] [security2:error] [pid 941081:tid 941315] [client 125.167.21.72:62243] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsM-ZnN2CRos_GBqUVOAAAAfA"] [Sun Jul 12 18:07:15.788310 2026] [security2:error] [pid 941081:tid 941315] [client 125.167.21.72:62243] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsM-ZnN2CRos_GBqUVOAAAAfA"] [Sun Jul 12 18:07:16.170506 2026] [security2:error] [pid 940777:tid 940931] [client 74.7.244.18:36318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "401"] [hostname "webdisk.jasonleewriter.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQsNJihQxksrpCflyFSpgAAAJM"] [Sun Jul 12 18:07:16.224337 2026] [authz_core:error] [pid 941081:tid 941227] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:16.224889 2026] [authz_core:error] [pid 941081:tid 941227] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:16.353597 2026] [core:error] [pid 941081:tid 941264] [client 74.7.244.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:07:16.353651 2026] [core:error] [pid 941081:tid 941264] [client 74.7.244.18:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:07:16.353935 2026] [security2:error] [pid 941081:tid 941264] [client 74.7.244.18:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.jasonleewriter.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "alQsNOZnN2CRos_GBqUVRAAAAb0"] [Sun Jul 12 18:07:16.365715 2026] [security2:error] [pid 941081:tid 941302] [client 74.7.244.18:42388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.jasonleewriter.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQsNOZnN2CRos_GBqUVQgAB4zw"] [Sun Jul 12 18:07:16.418071 2026] [security2:error] [pid 940777:tid 941005] [client 168.100.149.70:39648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42965/bargainor/2307_epidemiology.jsp"] [unique_id "alQsNJihQxksrpCflyFSpwAAAN0"] [Sun Jul 12 18:07:16.870086 2026] [security2:error] [pid 941081:tid 941268] [client 38.248.173.79:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsNOZnN2CRos_GBqUVSAAAAcE"] [Sun Jul 12 18:07:16.999282 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:16.999777 2026] [authz_core:error] [pid 941081:tid 941225] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:17.031140 2026] [security2:error] [pid 940777:tid 940939] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3dzZ2Qzcl8xNjU0L3dzLzE2NzA5L3M=.html"] [unique_id "alQsNZihQxksrpCflyFSqwAAAJs"] [Sun Jul 12 18:07:17.114893 2026] [security2:error] [pid 940777:tid 940987] [client 20.244.27.100:51520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts.php"] [unique_id "alQsNZihQxksrpCflyFSrAAAAMs"], referer: binance.com [Sun Jul 12 18:07:17.139045 2026] [security2:error] [pid 941081:tid 941244] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsK-ZnN2CRos_GBqUUXAAAAak"], referer: http://67.222.38.115/api/projects/search [Sun Jul 12 18:07:17.139527 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsK5ihQxksrpCflyFSPQAAAL4"] [Sun Jul 12 18:07:17.156452 2026] [security2:error] [pid 941081:tid 941319] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsK-ZnN2CRos_GBqUURAAAAfQ"], referer: http://67.222.38.115/api/pool [Sun Jul 12 18:07:17.206194 2026] [security2:error] [pid 941081:tid 941239] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsLOZnN2CRos_GBqUUeAAAAaQ"] [Sun Jul 12 18:07:17.223575 2026] [security2:error] [pid 941081:tid 941266] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsLOZnN2CRos_GBqUUhAAAAb8"] [Sun Jul 12 18:07:17.242900 2026] [security2:error] [pid 941081:tid 941321] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsLOZnN2CRos_GBqUUjAAAAfY"], referer: http://67.222.38.115/api/ps [Sun Jul 12 18:07:17.493656 2026] [security2:error] [pid 941081:tid 941333] [client 223.109.252.142:39166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/services-uav-engineering.html"] [unique_id "alQsNeZnN2CRos_GBqUVagAAAgI"] [Sun Jul 12 18:07:17.493978 2026] [security2:error] [pid 941081:tid 941333] [client 223.109.252.142:39166] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/services-uav-engineering.html"] [unique_id "alQsNeZnN2CRos_GBqUVagAAAgI"] [Sun Jul 12 18:07:17.599407 2026] [security2:error] [pid 940777:tid 941027] [client 168.100.149.213:19708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42900/bargainor/2307_mailable.jsp"] [unique_id "alQsNZihQxksrpCflyFSvgAAAPM"] [Sun Jul 12 18:07:17.781025 2026] [authz_core:error] [pid 940777:tid 941003] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:17.781545 2026] [authz_core:error] [pid 940777:tid 941003] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:18.000867 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsNeZnN2CRos_GBqUVbgAAAeM"] [Sun Jul 12 18:07:18.000918 2026] [security2:error] [pid 941081:tid 941302] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsNeZnN2CRos_GBqUVbgAAAeM"] [Sun Jul 12 18:07:18.002404 2026] [security2:error] [pid 940777:tid 940920] [client 65.21.113.206:47402] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3dzZ2Qzcl8xNjU0L3dzLzE2NzA5L3M=.html"] [unique_id "alQsNZihQxksrpCflyFSvAAAAIg"] [Sun Jul 12 18:07:18.426080 2026] [security2:error] [pid 941081:tid 941293] [client 168.100.149.199:63590] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43030/bargainor/2307_secque.jsp"] [unique_id "alQsNuZnN2CRos_GBqUVhAAAAdo"] [Sun Jul 12 18:07:18.528906 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:18.529376 2026] [authz_core:error] [pid 941081:tid 941287] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:18.561529 2026] [security2:error] [pid 941081:tid 941272] [client 52.167.144.65:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.eatthedistrict.com"] [uri "/index.php"] [unique_id "alQsNeZnN2CRos_GBqUVWAAAAcU"] [Sun Jul 12 18:07:19.295212 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:19.352969 2026] [authz_core:error] [pid 941081:tid 941286] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:19.736598 2026] [security2:error] [pid 940777:tid 940990] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3gtNTQzNi94bGgvMzQ0ODUtbGhndw=="] [unique_id "alQsN5ihQxksrpCflyFSzQAAAM4"] [Sun Jul 12 18:07:20.138465 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:20.139382 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:20.166467 2026] [access_compat:error] [pid 940777:tid 941021] [client 31.207.20.114:52794] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/dc_loadv20/dcloner.exe [Sun Jul 12 18:07:20.423309 2026] [security2:error] [pid 941081:tid 941331] [client 168.100.149.26:32484] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43095/bargainor/2307_dislevelment.jsp"] [unique_id "alQsOOZnN2CRos_GBqUVnQAAAgA"] [Sun Jul 12 18:07:20.626024 2026] [security2:error] [pid 940777:tid 940989] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsOJihQxksrpCflyFS0QAAAM0"] [Sun Jul 12 18:07:20.626099 2026] [security2:error] [pid 940777:tid 940989] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsOJihQxksrpCflyFS0QAAAM0"] [Sun Jul 12 18:07:20.627055 2026] [security2:error] [pid 941081:tid 941227] [client 65.21.113.206:47406] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3gtNTQzNi94bGgvMzQ0ODUtbGhndw=="] [unique_id "alQsOOZnN2CRos_GBqUVmgAAAZg"] [Sun Jul 12 18:07:20.802948 2026] [security2:error] [pid 940777:tid 940958] [client 94.187.171.125:54294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsOJihQxksrpCflyFS1gAAAK4"] [Sun Jul 12 18:07:20.803171 2026] [security2:error] [pid 940777:tid 940958] [client 94.187.171.125:54294] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsOJihQxksrpCflyFS1gAAAK4"] [Sun Jul 12 18:07:20.912657 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:20.913272 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:21.692001 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:21.692473 2026] [authz_core:error] [pid 941081:tid 941334] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:21.740340 2026] [security2:error] [pid 941081:tid 941258] [client 168.100.149.35:48618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43160/bargainor/2307_limnoria.jsp"] [unique_id "alQsOeZnN2CRos_GBqUVuAAAAbc"] [Sun Jul 12 18:07:22.163060 2026] [security2:error] [pid 940777:tid 940970] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3gtOTYzMC94bGgvMzQ0ODUtbGhndw=="] [unique_id "alQsOpihQxksrpCflyFS2wAAALo"] [Sun Jul 12 18:07:22.436211 2026] [authz_core:error] [pid 941081:tid 941218] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:22.436719 2026] [authz_core:error] [pid 941081:tid 941218] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:22.453708 2026] [security2:error] [pid 941081:tid 941257] [client 50.87.253.215:51794] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2020/08/20200731_080903-1.jpg"] [unique_id "alQsOuZnN2CRos_GBqUVvgAAAbY"] [Sun Jul 12 18:07:22.685890 2026] [security2:error] [pid 941081:tid 941228] [client 197.48.221.253:50802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsOuZnN2CRos_GBqUVxwAAAZk"] [Sun Jul 12 18:07:22.686123 2026] [security2:error] [pid 941081:tid 941228] [client 197.48.221.253:50802] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsOuZnN2CRos_GBqUVxwAAAZk"] [Sun Jul 12 18:07:23.069385 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsOuZnN2CRos_GBqUVxgAAAag"] [Sun Jul 12 18:07:23.069460 2026] [security2:error] [pid 941081:tid 941243] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsOuZnN2CRos_GBqUVxgAAAag"] [Sun Jul 12 18:07:23.078088 2026] [security2:error] [pid 941081:tid 941324] [client 65.21.113.206:54670] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3gtOTYzMC94bGgvMzQ0ODUtbGhndw=="] [unique_id "alQsOuZnN2CRos_GBqUVxAAAAfk"] [Sun Jul 12 18:07:23.097396 2026] [security2:error] [pid 941081:tid 941311] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNeZnN2CRos_GBqUVZAAAAew"] [Sun Jul 12 18:07:23.112248 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFSuQAAAOY"] [Sun Jul 12 18:07:23.134405 2026] [security2:error] [pid 940777:tid 941036] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFStwAAAPw"], referer: http://67.222.38.115/api/queries [Sun Jul 12 18:07:23.160072 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFStQAAAOE"] [Sun Jul 12 18:07:23.162505 2026] [security2:error] [pid 940777:tid 941034] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFSugAAAPo"] [Sun Jul 12 18:07:23.163121 2026] [security2:error] [pid 940777:tid 940984] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFStgAAAMg"] [Sun Jul 12 18:07:23.180393 2026] [security2:error] [pid 940777:tid 940924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNZihQxksrpCflyFSuwAAAIw"] [Sun Jul 12 18:07:23.191273 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:23.191780 2026] [authz_core:error] [pid 941081:tid 941331] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:23.210335 2026] [security2:error] [pid 941081:tid 941327] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsNeZnN2CRos_GBqUVdAAAAfw"] [Sun Jul 12 18:07:23.327508 2026] [security2:error] [pid 940777:tid 941004] [client 20.244.27.100:63506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/global-styles-and-settings.php"] [unique_id "alQsO5ihQxksrpCflyFS3AAAANw"], referer: binance.com [Sun Jul 12 18:07:23.741033 2026] [security2:error] [pid 941081:tid 941319] [client 168.100.149.237:58522] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43225/bargainor/2307_milksopism.jsp"] [unique_id "alQsO-ZnN2CRos_GBqUV7AAAAfQ"] [Sun Jul 12 18:07:24.028263 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:24.029237 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:24.415853 2026] [security2:error] [pid 940777:tid 940973] [client 74.244.119.215:11600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsPJihQxksrpCflyFS6gAAAL0"] [Sun Jul 12 18:07:24.422646 2026] [security2:error] [pid 940777:tid 940973] [client 74.244.119.215:11600] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsPJihQxksrpCflyFS6gAAAL0"] [Sun Jul 12 18:07:24.668916 2026] [security2:error] [pid 940777:tid 940981] [client 24.203.79.110:52295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsPJihQxksrpCflyFS8wAAAMU"] [Sun Jul 12 18:07:24.669115 2026] [security2:error] [pid 940777:tid 940981] [client 24.203.79.110:52295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsPJihQxksrpCflyFS8wAAAMU"] [Sun Jul 12 18:07:24.795277 2026] [authz_core:error] [pid 941081:tid 941337] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:24.795772 2026] [authz_core:error] [pid 941081:tid 941337] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:24.958592 2026] [security2:error] [pid 940777:tid 940957] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQsPJihQxksrpCflyFS8gAAAK0"] [Sun Jul 12 18:07:25.303949 2026] [security2:error] [pid 941081:tid 941245] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsO-ZnN2CRos_GBqUV6AAAAao"] [Sun Jul 12 18:07:25.314919 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsO-ZnN2CRos_GBqUV6wAAAaI"] [Sun Jul 12 18:07:25.317769 2026] [security2:error] [pid 941081:tid 941236] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsO-ZnN2CRos_GBqUV5wAAAaE"] [Sun Jul 12 18:07:25.328701 2026] [security2:error] [pid 941081:tid 941301] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsO-ZnN2CRos_GBqUV5gAAAeI"] [Sun Jul 12 18:07:25.552015 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:25.552506 2026] [authz_core:error] [pid 941081:tid 941255] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:25.738492 2026] [security2:error] [pid 941081:tid 941231] [client 168.100.149.182:46850] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43290/bargainor/2307_capnoides.jsp"] [unique_id "alQsPeZnN2CRos_GBqUWGwAAAZw"] [Sun Jul 12 18:07:26.309820 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:26.326601 2026] [authz_core:error] [pid 941081:tid 941275] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:26.551460 2026] [security2:error] [pid 940777:tid 940930] [client 125.167.21.72:62669] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsPpihQxksrpCflyFTEgAAAJI"] [Sun Jul 12 18:07:26.551850 2026] [security2:error] [pid 940777:tid 940930] [client 125.167.21.72:62669] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsPpihQxksrpCflyFTEgAAAJI"] [Sun Jul 12 18:07:26.622439 2026] [security2:error] [pid 940777:tid 940933] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3h6NnR1LTk5OTQveHotMzk2MjUvejZ0dQ=="] [unique_id "alQsPpihQxksrpCflyFTFgAAAJU"] [Sun Jul 12 18:07:27.100275 2026] [authz_core:error] [pid 940777:tid 940976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:27.100994 2026] [authz_core:error] [pid 940777:tid 940976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:27.256733 2026] [security2:error] [pid 941081:tid 941334] [client 216.73.216.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tumorumor.com"] [uri "/index.php"] [unique_id "alQsPuZnN2CRos_GBqUWMAAAAgM"] [Sun Jul 12 18:07:27.647041 2026] [security2:error] [pid 941081:tid 941266] [client 69.171.249.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.aboveandbeyondheating.com"] [uri "/index.php"] [unique_id "alQsOeZnN2CRos_GBqUVtwAAAb8"] [Sun Jul 12 18:07:27.710479 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsP-ZnN2CRos_GBqUWNgAAAdc"] [Sun Jul 12 18:07:27.710547 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsP-ZnN2CRos_GBqUWNgAAAdc"] [Sun Jul 12 18:07:27.713434 2026] [security2:error] [pid 941081:tid 941239] [client 65.21.113.206:54672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3h6NnR1LTk5OTQveHotMzk2MjUvejZ0dQ=="] [unique_id "alQsP-ZnN2CRos_GBqUWMwAAAaQ"] [Sun Jul 12 18:07:27.913314 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:27.913842 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:28.446655 2026] [security2:error] [pid 940777:tid 941024] [client 168.100.149.173:35072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43355/bargainor/2307_deft.jsp"] [unique_id "alQsQJihQxksrpCflyFTLAAAAPA"] [Sun Jul 12 18:07:28.666917 2026] [authz_core:error] [pid 941081:tid 941289] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:28.667401 2026] [authz_core:error] [pid 941081:tid 941289] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:28.723675 2026] [security2:error] [pid 941081:tid 941230] [client 20.244.27.100:58607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/https-detection.php"] [unique_id "alQsQOZnN2CRos_GBqUWVAAAAZs"], referer: binance.com [Sun Jul 12 18:07:28.750166 2026] [security2:error] [pid 941081:tid 941262] [client 127.0.0.1:47818] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQsQOZnN2CRos_GBqUWUAAAAbs"] [Sun Jul 12 18:07:28.750347 2026] [security2:error] [pid 941081:tid 941340] [client 74.7.228.60:52872] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.gabo.cl"] [uri "/robots.txt"] [unique_id "alQsQOZnN2CRos_GBqUWTgAAAgk"] [Sun Jul 12 18:07:29.001151 2026] [security2:error] [pid 940777:tid 940969] [client 127.0.0.1:47836] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQsQJihQxksrpCflyFTMgAAALk"], referer: http://autodiscover.gabo.cl/robots.txt [Sun Jul 12 18:07:29.001272 2026] [security2:error] [pid 940777:tid 941044] [client 127.0.0.1:47822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.gabo.cl"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQsQJihQxksrpCflyFTMQAAAQQ"], referer: http://autodiscover.gabo.cl/robots.txt [Sun Jul 12 18:07:29.001725 2026] [security2:error] [pid 940777:tid 941023] [client 74.7.228.60:34872] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.gabo.cl"] [uri "/autodiscover/autodiscover.xml"] [unique_id "alQsQJihQxksrpCflyFTMAAA7zM"], referer: http://autodiscover.gabo.cl/robots.txt [Sun Jul 12 18:07:29.426711 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:29.427345 2026] [authz_core:error] [pid 941081:tid 941268] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:29.600874 2026] [security2:error] [pid 941081:tid 941308] [client 57.141.18.55:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQsQeZnN2CRos_GBqUWbQAAAek"] [Sun Jul 12 18:07:29.792547 2026] [security2:error] [pid 940777:tid 940922] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3h6Zmh4ZF81MjczL3h6LzE3MzUzL3o=.html"] [unique_id "alQsQZihQxksrpCflyFTPgAAAIo"] [Sun Jul 12 18:07:30.214982 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:30.215496 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:30.320904 2026] [security2:error] [pid 941081:tid 941278] [client 105.113.8.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsQeZnN2CRos_GBqUWcwAAAcs"] [Sun Jul 12 18:07:30.470261 2026] [security2:error] [pid 941081:tid 941328] [client 168.100.149.61:52408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43420/bargainor/2307_did.jsp"] [unique_id "alQsQuZnN2CRos_GBqUWfQAAAf0"] [Sun Jul 12 18:07:30.525790 2026] [security2:error] [pid 940777:tid 940956] [client 40.77.167.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.eatthedistrict.com"] [uri "/index.php"] [unique_id "alQsQpihQxksrpCflyFTSQAAAKw"] [Sun Jul 12 18:07:30.862391 2026] [security2:error] [pid 941081:tid 941241] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsQuZnN2CRos_GBqUWfAAAAaY"] [Sun Jul 12 18:07:30.862459 2026] [security2:error] [pid 941081:tid 941241] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsQuZnN2CRos_GBqUWfAAAAaY"] [Sun Jul 12 18:07:30.864042 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:54682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3h6Zmh4ZF81MjczL3h6LzE3MzUzL3o=.html"] [unique_id "alQsQuZnN2CRos_GBqUWegAAAdc"] [Sun Jul 12 18:07:30.931236 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:30.931733 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:31.074377 2026] [security2:error] [pid 940777:tid 940934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPZihQxksrpCflyFS_gAAAJY"] [Sun Jul 12 18:07:31.098362 2026] [security2:error] [pid 940777:tid 941021] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPZihQxksrpCflyFTAAAAAO0"] [Sun Jul 12 18:07:31.147739 2026] [security2:error] [pid 941081:tid 941245] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPeZnN2CRos_GBqUWCwAAAao"] [Sun Jul 12 18:07:31.155398 2026] [security2:error] [pid 940777:tid 941041] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPZihQxksrpCflyFS_wAAAQE"] [Sun Jul 12 18:07:31.205215 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPZihQxksrpCflyFTAgAAANY"] [Sun Jul 12 18:07:31.222153 2026] [security2:error] [pid 941081:tid 941338] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPeZnN2CRos_GBqUWDgAAAgc"] [Sun Jul 12 18:07:31.272188 2026] [security2:error] [pid 940777:tid 940955] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPZihQxksrpCflyFTAwAAAKs"] [Sun Jul 12 18:07:31.273860 2026] [security2:error] [pid 941081:tid 941264] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsPeZnN2CRos_GBqUWDAAAAb0"] [Sun Jul 12 18:07:31.509525 2026] [security2:error] [pid 940777:tid 940921] [client 94.187.171.125:54778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsQ5ihQxksrpCflyFTUgAAAIk"] [Sun Jul 12 18:07:31.509822 2026] [security2:error] [pid 940777:tid 940921] [client 94.187.171.125:54778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsQ5ihQxksrpCflyFTUgAAAIk"] [Sun Jul 12 18:07:31.721129 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:31.721644 2026] [authz_core:error] [pid 941081:tid 941270] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:32.435285 2026] [security2:error] [pid 941081:tid 941236] [client 168.100.149.54:41710] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43485/bargainor/2307_delphian.jsp"] [unique_id "alQsROZnN2CRos_GBqUWrgAAAaE"] [Sun Jul 12 18:07:32.476106 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:32.476720 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:33.201790 2026] [security2:error] [pid 941081:tid 941318] [client 197.48.221.253:51485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsReZnN2CRos_GBqUWuwAAAfM"] [Sun Jul 12 18:07:33.202084 2026] [security2:error] [pid 941081:tid 941318] [client 197.48.221.253:51485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsReZnN2CRos_GBqUWuwAAAfM"] [Sun Jul 12 18:07:33.251657 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:33.252411 2026] [authz_core:error] [pid 941081:tid 941241] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:33.503726 2026] [security2:error] [pid 941081:tid 941256] [client 20.244.27.100:55961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/https-migration.php"] [unique_id "alQsReZnN2CRos_GBqUWxAAAAbU"], referer: binance.com [Sun Jul 12 18:07:33.749792 2026] [security2:error] [pid 941081:tid 941292] [client 168.100.149.210:16816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43550/bargainor/2307_anisodactyli.jsp"] [unique_id "alQsReZnN2CRos_GBqUWzwAAAdk"] [Sun Jul 12 18:07:34.081322 2026] [authz_core:error] [pid 941081:tid 941218] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:34.081930 2026] [authz_core:error] [pid 941081:tid 941218] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:34.100409 2026] [security2:error] [pid 941081:tid 941258] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsQ-ZnN2CRos_GBqUWlAAAAbc"] [Sun Jul 12 18:07:34.103805 2026] [security2:error] [pid 941081:tid 941276] [client 64.176.198.37:61804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julesroyaltypetcare.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsRuZnN2CRos_GBqUW2gAAAck"] [Sun Jul 12 18:07:34.117552 2026] [security2:error] [pid 941081:tid 941251] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsQ-ZnN2CRos_GBqUWjQAAAbA"] [Sun Jul 12 18:07:34.119974 2026] [security2:error] [pid 941081:tid 941284] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsQ-ZnN2CRos_GBqUWnAAAAdE"] [Sun Jul 12 18:07:34.120555 2026] [security2:error] [pid 941081:tid 941334] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsQ-ZnN2CRos_GBqUWmwAAAgM"] [Sun Jul 12 18:07:34.501898 2026] [security2:error] [pid 940777:tid 941022] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3hkMDcxLTE2NTkveGQtMjA4NjUvZDA3MQ=="] [unique_id "alQsRpihQxksrpCflyFTcwAAAO4"] [Sun Jul 12 18:07:34.806081 2026] [security2:error] [pid 941081:tid 941231] [client 158.173.67.50:39939] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "main.sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsRuZnN2CRos_GBqUW-wAAAZw"] [Sun Jul 12 18:07:34.870163 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:34.870890 2026] [authz_core:error] [pid 941081:tid 941237] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:35.028581 2026] [security2:error] [pid 940777:tid 940948] [client 158.173.67.50:54169] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR5ihQxksrpCflyFTdwAAAKQ"] [Sun Jul 12 18:07:35.061555 2026] [security2:error] [pid 941081:tid 941228] [client 74.244.119.215:25624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsR-ZnN2CRos_GBqUXAAAAAZk"] [Sun Jul 12 18:07:35.063913 2026] [security2:error] [pid 941081:tid 941228] [client 74.244.119.215:25624] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsR-ZnN2CRos_GBqUXAAAAAZk"] [Sun Jul 12 18:07:35.189730 2026] [security2:error] [pid 941081:tid 941323] [client 72.49.214.212:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsRuZnN2CRos_GBqUW8gAAAfg"] [Sun Jul 12 18:07:35.238387 2026] [security2:error] [pid 941081:tid 941230] [client 158.173.67.50:31577] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "main.sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR-ZnN2CRos_GBqUXAwAAAZs"] [Sun Jul 12 18:07:35.354187 2026] [security2:error] [pid 941081:tid 941289] [client 24.203.79.110:52820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsR-ZnN2CRos_GBqUXCAAAAdY"] [Sun Jul 12 18:07:35.360254 2026] [security2:error] [pid 941081:tid 941289] [client 24.203.79.110:52820] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsR-ZnN2CRos_GBqUXCAAAAdY"] [Sun Jul 12 18:07:35.450517 2026] [security2:error] [pid 941081:tid 941329] [client 158.173.67.50:30861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "dev.sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR-ZnN2CRos_GBqUXDAAAAf4"] [Sun Jul 12 18:07:35.577327 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsR5ihQxksrpCflyFTdgAAAIw"] [Sun Jul 12 18:07:35.577456 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsR5ihQxksrpCflyFTdgAAAIw"] [Sun Jul 12 18:07:35.577731 2026] [security2:error] [pid 941081:tid 941233] [client 65.21.113.206:34332] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3hkMDcxLTE2NTkveGQtMjA4NjUvZDA3MQ=="] [unique_id "alQsRuZnN2CRos_GBqUW_AAAAZ4"] [Sun Jul 12 18:07:35.673035 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:35.673540 2026] [authz_core:error] [pid 941081:tid 941226] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:35.744420 2026] [security2:error] [pid 941081:tid 941258] [client 168.100.149.237:32578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43615/bargainor/2307_birefraction.jsp"] [unique_id "alQsR-ZnN2CRos_GBqUXFgAAAbc"] [Sun Jul 12 18:07:35.902202 2026] [security2:error] [pid 941081:tid 941334] [client 158.173.67.50:24871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR-ZnN2CRos_GBqUXGgAAAgM"] [Sun Jul 12 18:07:35.911563 2026] [security2:error] [pid 941081:tid 941337] [client 158.173.67.50:59763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "campfiresessions.seantario.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR-ZnN2CRos_GBqUXGwAAAgY"] [Sun Jul 12 18:07:35.919948 2026] [security2:error] [pid 941081:tid 941274] [client 158.173.67.50:50537] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "illinoismentoring-org.cecillinois.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsR-ZnN2CRos_GBqUXHAAAAcc"] [Sun Jul 12 18:07:36.328964 2026] [security2:error] [pid 940777:tid 941041] [client 158.173.67.50:22941] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sumikrishnan.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSJihQxksrpCflyFTfgAAAQE"] [Sun Jul 12 18:07:36.337231 2026] [security2:error] [pid 941081:tid 941301] [client 158.173.67.50:36523] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "campfiresessions.seantario.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSOZnN2CRos_GBqUXJgAAAeI"] [Sun Jul 12 18:07:36.344563 2026] [security2:error] [pid 940777:tid 940993] [client 158.173.67.50:43699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "illinoismentoring-org.cecillinois.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSJihQxksrpCflyFTgAAAANE"] [Sun Jul 12 18:07:36.448581 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:36.449100 2026] [authz_core:error] [pid 941081:tid 941278] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:36.643989 2026] [security2:error] [pid 941081:tid 941311] [client 57.141.18.85:42072] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQsSOZnN2CRos_GBqUXKwAB7C8"] [Sun Jul 12 18:07:36.836030 2026] [security2:error] [pid 940777:tid 940999] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3hpeWYwLzgyNDYveGkvMzkwNjkvaQ=="] [unique_id "alQsSJihQxksrpCflyFT2gAAANc"] [Sun Jul 12 18:07:36.855683 2026] [security2:error] [pid 940777:tid 940851] [remote 57.141.18.48:21306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 48.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/09NS/7W-.lWez"] [unique_id "alQsSJihQxksrpCflyFT2wAA3EA"] [Sun Jul 12 18:07:36.956841 2026] [security2:error] [pid 941081:tid 941263] [client 125.167.21.72:63118] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsSOZnN2CRos_GBqUXLwAAAbw"] [Sun Jul 12 18:07:36.957070 2026] [security2:error] [pid 941081:tid 941263] [client 125.167.21.72:63118] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsSOZnN2CRos_GBqUXLwAAAbw"] [Sun Jul 12 18:07:37.017087 2026] [security2:error] [pid 941081:tid 941321] [client 186.122.90.58:4280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.90.122.186.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dailycaviarnews.com"] [uri "/xmlrpc.php"] [unique_id "alQsSOZnN2CRos_GBqUXLgAAAfY"] [Sun Jul 12 18:07:37.017396 2026] [security2:error] [pid 941081:tid 941321] [client 186.122.90.58:4280] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dailycaviarnews.com"] [uri "/xmlrpc.php"] [unique_id "alQsSOZnN2CRos_GBqUXLgAAAfY"] [Sun Jul 12 18:07:37.235818 2026] [authz_core:error] [pid 941081:tid 941271] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:37.236305 2026] [authz_core:error] [pid 941081:tid 941271] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:37.783775 2026] [security2:error] [pid 941081:tid 941314] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsSeZnN2CRos_GBqUXNgAAAe8"] [Sun Jul 12 18:07:37.783856 2026] [security2:error] [pid 941081:tid 941314] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsSeZnN2CRos_GBqUXNgAAAe8"] [Sun Jul 12 18:07:37.784936 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:34346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3hpeWYwLzgyNDYveGkvMzkwNjkvaQ=="] [unique_id "alQsSZihQxksrpCflyFT9QAAAPg"] [Sun Jul 12 18:07:37.986366 2026] [authz_core:error] [pid 941081:tid 941245] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:37.986909 2026] [authz_core:error] [pid 941081:tid 941245] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:38.280988 2026] [security2:error] [pid 941081:tid 941325] [client 158.173.67.50:41305] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.michaelkalna.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSuZnN2CRos_GBqUXQgAAAfo"] [Sun Jul 12 18:07:38.282894 2026] [security2:error] [pid 940777:tid 941023] [client 158.173.67.50:41087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "michaelkalna.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSpihQxksrpCflyFT_AAAAO8"] [Sun Jul 12 18:07:38.382501 2026] [security2:error] [pid 941081:tid 941250] [client 168.100.149.147:52734] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43680/bargainor/2307_mediator.jsp"] [unique_id "alQsSuZnN2CRos_GBqUXQwAAAa8"] [Sun Jul 12 18:07:38.702712 2026] [security2:error] [pid 941081:tid 941276] [client 158.173.67.50:22255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.michaelkalna.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSuZnN2CRos_GBqUXUQAAAck"] [Sun Jul 12 18:07:38.703374 2026] [security2:error] [pid 941081:tid 941279] [client 158.173.67.50:22735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "michaelkalna.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsSuZnN2CRos_GBqUXUgAAAcw"] [Sun Jul 12 18:07:38.765376 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:38.765925 2026] [authz_core:error] [pid 941081:tid 941274] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:39.049052 2026] [security2:error] [pid 941081:tid 941236] [client 57.141.18.31:49386] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.cecweb.org"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXWwABoXI"] [Sun Jul 12 18:07:39.122980 2026] [security2:error] [pid 941081:tid 941283] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRuZnN2CRos_GBqUW5gAAAdA"] [Sun Jul 12 18:07:39.126748 2026] [security2:error] [pid 941081:tid 941312] [client 62.171.167.118:53904] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsMOZnN2CRos_GBqUW4wAB7Vg"] [Sun Jul 12 18:07:39.144151 2026] [security2:error] [pid 941081:tid 941270] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRuZnN2CRos_GBqUW5QAAAcM"] [Sun Jul 12 18:07:39.431335 2026] [security2:error] [pid 941081:tid 941305] [client 24.235.141.78:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsSuZnN2CRos_GBqUXVgAAAeY"] [Sun Jul 12 18:07:39.536849 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:39.537355 2026] [authz_core:error] [pid 940777:tid 941034] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:39.658588 2026] [security2:error] [pid 940777:tid 941001] [client 116.179.32.212:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQsS5ihQxksrpCflyFUFAAAANk"] [Sun Jul 12 18:07:39.665561 2026] [security2:error] [pid 941081:tid 941310] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXeAAAAes"] [Sun Jul 12 18:07:40.109516 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRpihQxksrpCflyFTbgAAAOY"] [Sun Jul 12 18:07:40.120121 2026] [security2:error] [pid 940777:tid 940971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRpihQxksrpCflyFTbAAAALs"] [Sun Jul 12 18:07:40.293571 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:40.297008 2026] [security2:error] [pid 941081:tid 941253] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTOZnN2CRos_GBqUXjwAAAbI"] [Sun Jul 12 18:07:40.359288 2026] [authz_core:error] [pid 941081:tid 941332] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:40.438614 2026] [security2:error] [pid 940777:tid 941040] [client 168.100.149.115:55074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43745/bargainor/2307_gurian.jsp"] [unique_id "alQsTJihQxksrpCflyFUJQAAAQA"] [Sun Jul 12 18:07:40.543974 2026] [security2:error] [pid 940777:tid 940936] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/remote/info.php"] [unique_id "alQsTJihQxksrpCflyFUJwAAAJg"] [Sun Jul 12 18:07:40.640199 2026] [security2:error] [pid 940777:tid 940977] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3hqMjB1LTQxNy94ai0zMTE2OS9qMjB1"] [unique_id "alQsTJihQxksrpCflyFULQAAAME"] [Sun Jul 12 18:07:40.939267 2026] [security2:error] [pid 940777:tid 941037] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTJihQxksrpCflyFULgAAAP0"] [Sun Jul 12 18:07:41.082394 2026] [security2:error] [pid 941081:tid 941330] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRuZnN2CRos_GBqUW5wAAAf8"] [Sun Jul 12 18:07:41.086817 2026] [security2:error] [pid 940777:tid 940960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRpihQxksrpCflyFTbwAAALA"] [Sun Jul 12 18:07:41.133940 2026] [authz_core:error] [pid 941081:tid 941295] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:41.134598 2026] [authz_core:error] [pid 941081:tid 941295] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:41.178109 2026] [security2:error] [pid 941081:tid 941259] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsRuZnN2CRos_GBqUW6gAAAbg"] [Sun Jul 12 18:07:41.412277 2026] [security2:error] [pid 940777:tid 940944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTZihQxksrpCflyFUNAAAAKA"] [Sun Jul 12 18:07:41.507393 2026] [security2:error] [pid 941081:tid 941173] [remote 173.236.254.75:57640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.254.236.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQsTeZnN2CRos_GBqUXsgACAFQ"] [Sun Jul 12 18:07:41.604345 2026] [security2:error] [pid 940777:tid 940982] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/app/phpinfo.php"] [unique_id "alQsTZihQxksrpCflyFUNwAAAMY"] [Sun Jul 12 18:07:41.705929 2026] [security2:error] [pid 941081:tid 941260] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsTeZnN2CRos_GBqUXrQAAAbk"] [Sun Jul 12 18:07:41.705985 2026] [security2:error] [pid 941081:tid 941260] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsTeZnN2CRos_GBqUXrQAAAbk"] [Sun Jul 12 18:07:41.707569 2026] [security2:error] [pid 941081:tid 941293] [client 65.21.113.206:34352] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3hqMjB1LTQxNy94ai0zMTE2OS9qMjB1"] [unique_id "alQsTeZnN2CRos_GBqUXqwAAAdo"] [Sun Jul 12 18:07:41.763080 2026] [security2:error] [pid 941081:tid 941225] [client 168.100.149.6:33516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43810/bargainor/2307_monkey.jsp"] [unique_id "alQsTeZnN2CRos_GBqUXuAAAAZY"] [Sun Jul 12 18:07:41.845871 2026] [security2:error] [pid 941081:tid 941305] [client 66.249.79.32:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "connorpresbyterianchurch.org"] [uri "/index.php"] [unique_id "alQsTeZnN2CRos_GBqUXsQAAAeY"] [Sun Jul 12 18:07:41.907179 2026] [authz_core:error] [pid 940777:tid 940938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:41.907704 2026] [authz_core:error] [pid 940777:tid 940938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:42.053268 2026] [security2:error] [pid 941081:tid 941302] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTeZnN2CRos_GBqUXvQAAAeM"] [Sun Jul 12 18:07:42.150575 2026] [security2:error] [pid 941081:tid 941262] [client 94.187.171.125:55259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsTuZnN2CRos_GBqUXyQAAAbs"] [Sun Jul 12 18:07:42.150886 2026] [security2:error] [pid 941081:tid 941262] [client 94.187.171.125:55259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsTuZnN2CRos_GBqUXyQAAAbs"] [Sun Jul 12 18:07:42.190311 2026] [security2:error] [pid 941081:tid 941226] [client 65.49.1.108:16648] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.20.107.48"] [uri "/index.php"] [unique_id "alQsTOZnN2CRos_GBqUXlgAAAZc"] [Sun Jul 12 18:07:42.491841 2026] [security2:error] [pid 941081:tid 941336] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTuZnN2CRos_GBqUX0AAAAgU"] [Sun Jul 12 18:07:42.631568 2026] [authz_core:error] [pid 941081:tid 941280] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:42.632090 2026] [authz_core:error] [pid 941081:tid 941280] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:42.865896 2026] [security2:error] [pid 940777:tid 941029] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsTpihQxksrpCflyFUSQAAAPU"] [Sun Jul 12 18:07:43.071697 2026] [security2:error] [pid 940777:tid 941008] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ktMTY1NC95enYvMTY3MzMtenZ6eA=="] [unique_id "alQsT5ihQxksrpCflyFUSwAAAOA"] [Sun Jul 12 18:07:43.320005 2026] [security2:error] [pid 941081:tid 941345] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsT-ZnN2CRos_GBqUX5AAAAg4"] [Sun Jul 12 18:07:43.362275 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:43.362765 2026] [authz_core:error] [pid 941081:tid 941269] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:43.490483 2026] [security2:error] [pid 941081:tid 941199] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/kafka/.env"] [unique_id "alQsT-ZnN2CRos_GBqUX6wABtW4"] [Sun Jul 12 18:07:43.635950 2026] [security2:error] [pid 941081:tid 941321] [client 197.48.221.253:52199] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsT-ZnN2CRos_GBqUX8gAAAfY"] [Sun Jul 12 18:07:43.636211 2026] [security2:error] [pid 941081:tid 941321] [client 197.48.221.253:52199] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsT-ZnN2CRos_GBqUX8gAAAfY"] [Sun Jul 12 18:07:43.850921 2026] [security2:error] [pid 940777:tid 940941] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsT5ihQxksrpCflyFUVAAAAJ0"] [Sun Jul 12 18:07:43.935564 2026] [security2:error] [pid 940777:tid 940809] [remote 57.141.18.54:33988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 54.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php//.lWez"] [unique_id "alQsT5ihQxksrpCflyFUVgAAyhc"] [Sun Jul 12 18:07:43.995509 2026] [security2:error] [pid 940777:tid 941034] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsT5ihQxksrpCflyFUUAAAAPo"] [Sun Jul 12 18:07:43.995579 2026] [security2:error] [pid 940777:tid 941034] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsT5ihQxksrpCflyFUUAAAAPo"] [Sun Jul 12 18:07:43.996355 2026] [security2:error] [pid 941081:tid 941290] [client 65.21.113.206:54480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ktMTY1NC95enYvMTY3MzMtenZ6eA=="] [unique_id "alQsT-ZnN2CRos_GBqUX7wAAAdc"] [Sun Jul 12 18:07:44.124078 2026] [security2:error] [pid 941081:tid 941285] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsT-ZnN2CRos_GBqUX-QAB0lI"], referer: http://www.michigansparc.info/blog/ [Sun Jul 12 18:07:44.158959 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:44.159484 2026] [authz_core:error] [pid 941081:tid 941258] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:44.250991 2026] [security2:error] [pid 940777:tid 941040] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUJihQxksrpCflyFUWAAAAQA"] [Sun Jul 12 18:07:44.450061 2026] [security2:error] [pid 941081:tid 941307] [client 168.100.149.248:17172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43875/bargainor/2307_impeccance.jsp"] [unique_id "alQsUOZnN2CRos_GBqUYDQAAAeg"] [Sun Jul 12 18:07:44.451421 2026] [security2:error] [pid 941081:tid 941267] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsUOZnN2CRos_GBqUYCAABwAI"], referer: http://www.michigansparc.info/wordpress/ [Sun Jul 12 18:07:44.651051 2026] [security2:error] [pid 941081:tid 941273] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUOZnN2CRos_GBqUYDAAAAcY"] [Sun Jul 12 18:07:44.948200 2026] [authz_core:error] [pid 940777:tid 941018] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:44.948748 2026] [authz_core:error] [pid 940777:tid 941018] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:45.110271 2026] [security2:error] [pid 941081:tid 941331] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUOZnN2CRos_GBqUYIAAAAgA"] [Sun Jul 12 18:07:45.151115 2026] [security2:error] [pid 941081:tid 941230] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsUOZnN2CRos_GBqUYIgABmwk"], referer: http://www.michigansparc.info/backup/ [Sun Jul 12 18:07:45.301622 2026] [security2:error] [pid 941081:tid 941110] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/linkedin/.env"] [unique_id "alQsUeZnN2CRos_GBqUYKgABqhY"] [Sun Jul 12 18:07:45.364682 2026] [security2:error] [pid 940777:tid 941030] [client 119.249.100.45:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQsUJihQxksrpCflyFUWwAAAPY"] [Sun Jul 12 18:07:45.434874 2026] [security2:error] [pid 941081:tid 941289] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYKAAB1hg"], referer: http://www.michigansparc.info/wp/ [Sun Jul 12 18:07:45.519547 2026] [security2:error] [pid 940777:tid 940973] [client 74.244.119.215:18814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsUZihQxksrpCflyFUbwAAAL0"] [Sun Jul 12 18:07:45.521848 2026] [security2:error] [pid 940777:tid 940973] [client 74.244.119.215:18814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsUZihQxksrpCflyFUbwAAAL0"] [Sun Jul 12 18:07:45.764842 2026] [security2:error] [pid 940777:tid 941023] [client 168.100.149.12:37506] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/43940/bargainor/2307_gunz.jsp"] [unique_id "alQsUZihQxksrpCflyFUegAAAO8"] [Sun Jul 12 18:07:45.768958 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:45.769539 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:45.784834 2026] [security2:error] [pid 941081:tid 941288] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYNwAB1SE"], referer: http://www.michigansparc.info/new/ [Sun Jul 12 18:07:45.802842 2026] [security2:error] [pid 940777:tid 940940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUZihQxksrpCflyFUbgAAAJw"] [Sun Jul 12 18:07:46.015099 2026] [security2:error] [pid 940777:tid 941000] [client 24.203.79.110:53347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsUpihQxksrpCflyFUgAAAANg"] [Sun Jul 12 18:07:46.015360 2026] [security2:error] [pid 940777:tid 941000] [client 24.203.79.110:53347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsUpihQxksrpCflyFUgAAAANg"] [Sun Jul 12 18:07:46.059230 2026] [security2:error] [pid 941081:tid 941262] [client 34.153.19.39:39218] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.michigansparc.info"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYQAABu0I"], referer: http://www.michigansparc.info/old/ [Sun Jul 12 18:07:46.212472 2026] [security2:error] [pid 940777:tid 941015] [client 182.160.102.5:51008] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsUpihQxksrpCflyFUgQAAAOc"] [Sun Jul 12 18:07:46.253653 2026] [security2:error] [pid 941081:tid 941251] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYQgAAAbA"] [Sun Jul 12 18:07:46.333455 2026] [security2:error] [pid 940777:tid 940934] [client 158.173.67.50:32399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritustechnologies.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUpihQxksrpCflyFUigAAAJY"] [Sun Jul 12 18:07:46.340172 2026] [security2:error] [pid 940777:tid 940941] [client 158.173.67.50:55561] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritustech.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUpihQxksrpCflyFUjAAAAJ0"] [Sun Jul 12 18:07:46.384924 2026] [security2:error] [pid 940777:tid 941034] [client 158.173.67.50:56327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritus.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUpihQxksrpCflyFUjwAAAPo"] [Sun Jul 12 18:07:46.427266 2026] [security2:error] [pid 941081:tid 941208] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/etc/info.php"] [unique_id "alQsUuZnN2CRos_GBqUYTAAB_Hc"] [Sun Jul 12 18:07:46.525537 2026] [security2:error] [pid 940777:tid 941016] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ktMTYwL3l6di8xNjczMy16dnp4"] [unique_id "alQsUpihQxksrpCflyFUkwAAAOg"] [Sun Jul 12 18:07:46.562301 2026] [security2:error] [pid 940777:tid 940976] [client 54.236.1.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUpihQxksrpCflyFUjQAAAMA"] [Sun Jul 12 18:07:46.578527 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:46.579231 2026] [authz_core:error] [pid 941081:tid 941223] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:46.596812 2026] [security2:error] [pid 941081:tid 941190] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/food-app/frontend/.env"] [unique_id "alQsUuZnN2CRos_GBqUYTwAB6GU"] [Sun Jul 12 18:07:46.610143 2026] [security2:error] [pid 940777:tid 941015] [client 182.160.102.5:51008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsUpihQxksrpCflyFUgQAAAOc"] [Sun Jul 12 18:07:46.610251 2026] [security2:error] [pid 940777:tid 941015] [client 182.160.102.5:51008] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsUpihQxksrpCflyFUgQAAAOc"] [Sun Jul 12 18:07:46.772846 2026] [security2:error] [pid 941081:tid 941227] [client 158.173.67.50:53725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritustech.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUuZnN2CRos_GBqUYWQAAAZg"] [Sun Jul 12 18:07:46.774248 2026] [security2:error] [pid 941081:tid 941267] [client 158.173.67.50:37313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritustechnologies.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUuZnN2CRos_GBqUYWgAAAcA"] [Sun Jul 12 18:07:46.805751 2026] [security2:error] [pid 941081:tid 941274] [client 158.173.67.50:56405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tritus.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsUuZnN2CRos_GBqUYXAAAAcc"] [Sun Jul 12 18:07:46.850318 2026] [security2:error] [pid 941081:tid 941320] [client 57.141.18.48:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsUuZnN2CRos_GBqUYSQAAAfU"] [Sun Jul 12 18:07:47.120535 2026] [security2:error] [pid 941081:tid 941311] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsUuZnN2CRos_GBqUYWwAAAew"] [Sun Jul 12 18:07:47.315748 2026] [security2:error] [pid 941081:tid 941108] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/etc/aws.json"] [unique_id "alQsU-ZnN2CRos_GBqUYZQAB8xQ"] [Sun Jul 12 18:07:47.346335 2026] [security2:error] [pid 941081:tid 941245] [client 158.173.67.50:55329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tritustechnologies.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsU-ZnN2CRos_GBqUYZwAAAao"] [Sun Jul 12 18:07:47.362767 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:47.363228 2026] [authz_core:error] [pid 941081:tid 941301] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:47.610131 2026] [security2:error] [pid 940777:tid 940918] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsU5ihQxksrpCflyFUmgAAAIY"] [Sun Jul 12 18:07:47.610189 2026] [security2:error] [pid 940777:tid 940918] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsU5ihQxksrpCflyFUmgAAAIY"] [Sun Jul 12 18:07:47.611312 2026] [security2:error] [pid 941081:tid 941295] [client 65.21.113.206:54494] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ktMTYwL3l6di8xNjczMy16dnp4"] [unique_id "alQsU-ZnN2CRos_GBqUYYAAAAdw"] [Sun Jul 12 18:07:47.620335 2026] [security2:error] [pid 940777:tid 940981] [client 125.167.21.72:61564] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsU5ihQxksrpCflyFUogAAAMU"] [Sun Jul 12 18:07:47.620642 2026] [security2:error] [pid 940777:tid 940981] [client 125.167.21.72:61564] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsU5ihQxksrpCflyFUogAAAMU"] [Sun Jul 12 18:07:47.715783 2026] [security2:error] [pid 941081:tid 941296] [client 20.40.50.229:55760] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sunsetbeachwomansclub.org"] [uri "/w_api/Handler.php"] [unique_id "alQsUuZnN2CRos_GBqUYXgAAAd0"], referer: binance.com [Sun Jul 12 18:07:47.742392 2026] [security2:error] [pid 940777:tid 941024] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsU5ihQxksrpCflyFUoQAAAPA"] [Sun Jul 12 18:07:47.771010 2026] [security2:error] [pid 940777:tid 940979] [client 168.100.149.228:54086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44005/bargainor/2307_monadically.jsp"] [unique_id "alQsU5ihQxksrpCflyFUowAAAMM"] [Sun Jul 12 18:07:47.773536 2026] [security2:error] [pid 940777:tid 940952] [client 158.173.67.50:45927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.tritustechnologies.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsU5ihQxksrpCflyFUpAAAAKg"] [Sun Jul 12 18:07:47.913336 2026] [security2:error] [pid 941081:tid 941162] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/home/ec2-user/.ssh/aws_key.pem"] [unique_id "alQsU-ZnN2CRos_GBqUYbQAB0ko"] [Sun Jul 12 18:07:47.988370 2026] [security2:error] [pid 940777:tid 940926] [client 182.160.102.5:51076] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsU5ihQxksrpCflyFUqwAAAI4"] [Sun Jul 12 18:07:48.123972 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:48.124464 2026] [authz_core:error] [pid 941081:tid 941314] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:48.305448 2026] [security2:error] [pid 940777:tid 940926] [client 182.160.102.5:51076] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "429"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsU5ihQxksrpCflyFUqwAAAI4"] [Sun Jul 12 18:07:48.329227 2026] [security2:error] [pid 940777:tid 941039] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUZihQxksrpCflyFUdAAAAP8"] [Sun Jul 12 18:07:48.334677 2026] [security2:error] [pid 941081:tid 941294] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYOgAAAds"], referer: http://67.222.40.58/phpunit.xml [Sun Jul 12 18:07:48.336426 2026] [security2:error] [pid 941081:tid 941263] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYPQAAAbw"] [Sun Jul 12 18:07:48.348490 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUZihQxksrpCflyFUcwAAAM8"] [Sun Jul 12 18:07:48.461683 2026] [security2:error] [pid 941081:tid 941332] [client 155.117.163.21:28414] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVOZnN2CRos_GBqUYhQAAAgE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.499429 2026] [security2:error] [pid 940777:tid 940925] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUrwAAAI0"] [Sun Jul 12 18:07:48.821507 2026] [security2:error] [pid 940777:tid 941010] [client 67.205.163.118:56312] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUxgAAAOI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.849428 2026] [security2:error] [pid 940777:tid 940992] [client 157.230.87.15:54394] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUxwAAANA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.853395 2026] [security2:error] [pid 940777:tid 941044] [client 204.48.25.22:42008] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUyAAAAQQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.868430 2026] [security2:error] [pid 940777:tid 941026] [client 159.223.162.18:51282] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUyQAAAPI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.884323 2026] [security2:error] [pid 940777:tid 940917] [client 204.48.25.22:42004] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUzAAAAIU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.894361 2026] [security2:error] [pid 940777:tid 940940] [client 159.65.216.154:42594] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUywAAAJw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.902285 2026] [security2:error] [pid 940777:tid 940969] [client 159.65.216.154:42582] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFU0QAAALk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.907564 2026] [security2:error] [pid 940777:tid 941032] [client 159.65.216.154:42608] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUygAAAPg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.924558 2026] [security2:error] [pid 940777:tid 941040] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUxQAAAQA"] [Sun Jul 12 18:07:48.934491 2026] [security2:error] [pid 940777:tid 940933] [client 157.230.87.15:54408] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFU0wAAAJU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.946772 2026] [security2:error] [pid 940777:tid 941025] [client 204.48.25.22:42022] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFU0gAAAPE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.954410 2026] [security2:error] [pid 940777:tid 941019] [client 159.223.170.163:56916] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVJihQxksrpCflyFUzwAAAOs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.954446 2026] [security2:error] [pid 941081:tid 941276] [client 143.198.168.5:44344] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVOZnN2CRos_GBqUYjwAAAck"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:48.983960 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:48.984441 2026] [authz_core:error] [pid 940777:tid 940996] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:49.073113 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS5ihQxksrpCflyFUEQAAAOE"] [Sun Jul 12 18:07:49.098168 2026] [security2:error] [pid 940777:tid 940957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUZihQxksrpCflyFUcgAAAK0"] [Sun Jul 12 18:07:49.114380 2026] [security2:error] [pid 941081:tid 941344] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXawAAAg0"] [Sun Jul 12 18:07:49.119021 2026] [security2:error] [pid 941081:tid 941340] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsUeZnN2CRos_GBqUYPAAAAgk"] [Sun Jul 12 18:07:49.153179 2026] [security2:error] [pid 941081:tid 941099] [remote 62.171.167.118:53904] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsMOZnN2CRos_GBqUXZQAB7Qs"] [Sun Jul 12 18:07:49.159015 2026] [security2:error] [pid 940777:tid 940999] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3ktNjY0Ni95bXAvNDQ5Ny1tcGtm"] [unique_id "alQsVZihQxksrpCflyFU1AAAANc"] [Sun Jul 12 18:07:49.416404 2026] [security2:error] [pid 941081:tid 941293] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVeZnN2CRos_GBqUYlAAAAdo"] [Sun Jul 12 18:07:49.695653 2026] [security2:error] [pid 941081:tid 941318] [client 182.160.102.5:51128] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsVeZnN2CRos_GBqUYowAAAfM"] [Sun Jul 12 18:07:49.768654 2026] [security2:error] [pid 941081:tid 941305] [client 168.100.149.52:41950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44070/bargainor/2307_enhalo.jsp"] [unique_id "alQsVeZnN2CRos_GBqUYpQAAAeY"] [Sun Jul 12 18:07:49.778702 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:49.779173 2026] [authz_core:error] [pid 941081:tid 941222] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:49.810752 2026] [security2:error] [pid 941081:tid 941264] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVeZnN2CRos_GBqUYlwAAAb0"] [Sun Jul 12 18:07:49.897043 2026] [security2:error] [pid 941081:tid 941318] [client 182.160.102.5:51128] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "429"] [hostname "tumorumor.com"] [uri "/wp-comments-post.php"] [unique_id "alQsVeZnN2CRos_GBqUYowAAAfM"] [Sun Jul 12 18:07:50.072483 2026] [security2:error] [pid 941081:tid 941298] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXbwAAAd8"] [Sun Jul 12 18:07:50.103272 2026] [security2:error] [pid 940777:tid 940984] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS5ihQxksrpCflyFUEgAAAMg"] [Sun Jul 12 18:07:50.106569 2026] [security2:error] [pid 941081:tid 941272] [client 20.244.27.100:60219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/robots-template.php"] [unique_id "alQsVuZnN2CRos_GBqUYsQAAAcU"], referer: binance.com [Sun Jul 12 18:07:50.174291 2026] [security2:error] [pid 940777:tid 941017] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS5ihQxksrpCflyFUEwAAAOk"] [Sun Jul 12 18:07:50.232236 2026] [security2:error] [pid 941081:tid 941265] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsVeZnN2CRos_GBqUYnwAAAb4"] [Sun Jul 12 18:07:50.232300 2026] [security2:error] [pid 941081:tid 941265] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsVeZnN2CRos_GBqUYnwAAAb4"] [Sun Jul 12 18:07:50.235067 2026] [security2:error] [pid 941081:tid 941326] [client 65.21.113.206:54510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3ktNjY0Ni95bXAvNDQ5Ny1tcGtm"] [unique_id "alQsVeZnN2CRos_GBqUYmwAAAfs"] [Sun Jul 12 18:07:50.285641 2026] [security2:error] [pid 940777:tid 940959] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVZihQxksrpCflyFU2wAAAK8"] [Sun Jul 12 18:07:50.569199 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:50.569714 2026] [authz_core:error] [pid 941081:tid 941323] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:50.581009 2026] [security2:error] [pid 941081:tid 941232] [client 123.24.195.96:42054] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVuZnN2CRos_GBqUYwwAAAZ0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:50.622457 2026] [security2:error] [pid 941081:tid 941233] [client 32.193.60.217:33633] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "pamelaweaver.com"] [uri "/index.php"] [unique_id "alQsU-ZnN2CRos_GBqUYcgAAAZ4"] [Sun Jul 12 18:07:50.713542 2026] [security2:error] [pid 940777:tid 941034] [client 158.173.67.50:43685] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wwcufm.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsVpihQxksrpCflyFU8AAAAPo"] [Sun Jul 12 18:07:50.716163 2026] [security2:error] [pid 940777:tid 940924] [client 158.173.67.50:43369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wwcufm.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsVpihQxksrpCflyFU8QAAAIw"] [Sun Jul 12 18:07:50.733972 2026] [security2:error] [pid 941081:tid 941311] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVuZnN2CRos_GBqUYwgAAAew"] [Sun Jul 12 18:07:51.025708 2026] [security2:error] [pid 940777:tid 940928] [client 189.50.194.86:53981] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsVpihQxksrpCflyFU9QAAAJA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.039900 2026] [security2:error] [pid 941081:tid 941321] [client 158.173.67.50:32175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY1QAAAfY"] [Sun Jul 12 18:07:51.070387 2026] [security2:error] [pid 941081:tid 941289] [client 158.173.67.50:64963] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY1wAAAdY"] [Sun Jul 12 18:07:51.078520 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsTJihQxksrpCflyFUIgAAANY"] [Sun Jul 12 18:07:51.086938 2026] [security2:error] [pid 940777:tid 940956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS5ihQxksrpCflyFUFQAAAKw"] [Sun Jul 12 18:07:51.089758 2026] [security2:error] [pid 941081:tid 941282] [client 158.173.67.50:53287] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "insight.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY2AAAAc8"] [Sun Jul 12 18:07:51.121264 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsTJihQxksrpCflyFUIwAAALw"] [Sun Jul 12 18:07:51.126946 2026] [security2:error] [pid 941081:tid 941306] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXbQAAAec"] [Sun Jul 12 18:07:51.135200 2026] [security2:error] [pid 940777:tid 941044] [client 158.173.67.50:21919] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.wwcufm.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV5ihQxksrpCflyFU_AAAAQQ"] [Sun Jul 12 18:07:51.139495 2026] [security2:error] [pid 940777:tid 941026] [client 158.173.67.50:53131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wwcufm.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV5ihQxksrpCflyFU_QAAAPI"] [Sun Jul 12 18:07:51.169550 2026] [security2:error] [pid 941081:tid 941237] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXcAAAAaI"] [Sun Jul 12 18:07:51.175278 2026] [security2:error] [pid 941081:tid 941333] [client 14.191.169.117:22246] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY1AAAAgI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.175585 2026] [security2:error] [pid 940777:tid 941019] [client 158.173.67.50:54031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.spa-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV5ihQxksrpCflyFU_gAAAOs"] [Sun Jul 12 18:07:51.177520 2026] [security2:error] [pid 941081:tid 941316] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXcgAAAfE"] [Sun Jul 12 18:07:51.191334 2026] [security2:error] [pid 941081:tid 941324] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsS-ZnN2CRos_GBqUXcQAAAfk"] [Sun Jul 12 18:07:51.225845 2026] [security2:error] [pid 940777:tid 941043] [client 158.173.67.50:31999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "help.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV5ihQxksrpCflyFVAAAAAQM"] [Sun Jul 12 18:07:51.271015 2026] [security2:error] [pid 941081:tid 941174] [remote 103.82.20.130:50540] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsV-ZnN2CRos_GBqUY4AAB2FU"] [Sun Jul 12 18:07:51.282350 2026] [security2:error] [pid 940777:tid 941010] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsVpihQxksrpCflyFU9gAAAOI"] [Sun Jul 12 18:07:51.407536 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:51.408174 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:51.447924 2026] [security2:error] [pid 941081:tid 941240] [client 185.106.31.131:54876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY4gAAAaU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.461246 2026] [security2:error] [pid 940777:tid 940999] [client 158.173.67.50:51689] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV5ihQxksrpCflyFVCwAAANc"] [Sun Jul 12 18:07:51.462052 2026] [security2:error] [pid 941081:tid 941271] [client 119.249.100.234:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQsVuZnN2CRos_GBqUYyAAAAcQ"] [Sun Jul 12 18:07:51.495658 2026] [security2:error] [pid 941081:tid 941223] [client 158.173.67.50:26371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY6AAAAZQ"] [Sun Jul 12 18:07:51.516970 2026] [security2:error] [pid 941081:tid 941315] [client 158.173.67.50:30823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "insight.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY6QAAAfA"] [Sun Jul 12 18:07:51.599822 2026] [security2:error] [pid 941081:tid 941296] [client 158.173.67.50:37403] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.spa-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY7QAAAd0"] [Sun Jul 12 18:07:51.628970 2026] [security2:error] [pid 941081:tid 941256] [client 138.122.188.71:48224] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY6gAAAbU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.655303 2026] [security2:error] [pid 941081:tid 941249] [client 158.173.67.50:46465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "help.salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsV-ZnN2CRos_GBqUY7wAAAa4"] [Sun Jul 12 18:07:51.670359 2026] [security2:error] [pid 941081:tid 941243] [client 45.183.39.31:20226] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY6wAAAag"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.674567 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsV5ihQxksrpCflyFVDQAAALA"] [Sun Jul 12 18:07:51.735919 2026] [security2:error] [pid 941081:tid 941230] [client 191.92.12.162:36982] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY8AAAAZs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:51.770029 2026] [security2:error] [pid 940777:tid 940997] [client 168.100.149.98:35228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44135/bargainor/2307_metalogical.jsp"] [unique_id "alQsV5ihQxksrpCflyFVDwAAANU"] [Sun Jul 12 18:07:51.783277 2026] [security2:error] [pid 941081:tid 941276] [client 186.119.235.69:43514] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV-ZnN2CRos_GBqUY8QAAAck"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:52.035948 2026] [security2:error] [pid 940777:tid 940963] [client 186.193.216.115:23733] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsV5ihQxksrpCflyFVEwAAALM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:52.044746 2026] [security2:error] [pid 940777:tid 940981] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsV5ihQxksrpCflyFVEQAAAMU"] [Sun Jul 12 18:07:52.133700 2026] [security2:error] [pid 940777:tid 941028] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUvAAAAKQ"], referer: http://67.222.40.58/yarn.lock [Sun Jul 12 18:07:52.144658 2026] [security2:error] [pid 940777:tid 940951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUvQAAAKc"], referer: http://67.222.40.58/LICENSE.md [Sun Jul 12 18:07:52.144786 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUvwAAAMk"], referer: http://67.222.40.58/.s3cfg [Sun Jul 12 18:07:52.146267 2026] [security2:error] [pid 940777:tid 940938] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3l1M3Rpbl8yMzY0L3l1LzIyNDIxL3U=.html"] [unique_id "alQsWJihQxksrpCflyFVGQAAAJo"] [Sun Jul 12 18:07:52.150230 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUugAAALg"], referer: http://67.222.40.58/.vimrc [Sun Jul 12 18:07:52.209728 2026] [security2:error] [pid 941081:tid 941280] [client 158.173.67.50:59715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spa-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsWOZnN2CRos_GBqUY-wAAAc0"] [Sun Jul 12 18:07:52.268313 2026] [autoindex:error] [pid 940777:tid 940952] [client 20.40.50.229:0] AH01276: Cannot serve directory /home3/saltwau2/public_html/sunsetbeachwomansclub.com/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sun Jul 12 18:07:52.277519 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:52.277840 2026] [security2:error] [pid 940777:tid 940946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsVJihQxksrpCflyFUwAAAAKI"], referer: http://67.222.40.58/nginx.conf [Sun Jul 12 18:07:52.278156 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:52.507004 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsV5ihQxksrpCflyFVAgAAAOE"] [Sun Jul 12 18:07:52.509235 2026] [security2:error] [pid 940777:tid 940966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsV5ihQxksrpCflyFU_wAAALY"] [Sun Jul 12 18:07:52.630806 2026] [security2:error] [pid 940777:tid 941011] [client 158.173.67.50:20525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.67.173.158.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spa-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsWJihQxksrpCflyFVKwAAAOM"] [Sun Jul 12 18:07:52.687772 2026] [security2:error] [pid 940777:tid 941025] [client 181.20.188.120:55320] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsWJihQxksrpCflyFVKgAAAPE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:52.764322 2026] [security2:error] [pid 940777:tid 940959] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVHgAAAK8"] [Sun Jul 12 18:07:52.861552 2026] [security2:error] [pid 940777:tid 941001] [client 94.187.171.125:55736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsWJihQxksrpCflyFVMAAAANk"] [Sun Jul 12 18:07:52.861796 2026] [security2:error] [pid 940777:tid 941001] [client 94.187.171.125:55736] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsWJihQxksrpCflyFVMAAAANk"] [Sun Jul 12 18:07:52.876659 2026] [security2:error] [pid 941081:tid 941327] [client 188.213.202.117:48585] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thecuttingedgemallorca.com"] [uri "/wp-login.php"] [unique_id "alQsWOZnN2CRos_GBqUZDAAAAfw"] [Sun Jul 12 18:07:52.903881 2026] [security2:error] [pid 941081:tid 941290] [client 174.229.177.113:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/index.php/magazine/articles/angels-and-inspiration/495-archangel-gabriel"] [unique_id "alQsWOZnN2CRos_GBqUZFAAAAdc"] [Sun Jul 12 18:07:52.904954 2026] [security2:error] [pid 941081:tid 941175] [remote 174.229.177.113:8966] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/index.php/magazine/articles/angels-and-inspiration/495-archangel-gabriel"] [unique_id "alQsWOZnN2CRos_GBqUZDgABv1Y"] [Sun Jul 12 18:07:52.942743 2026] [security2:error] [pid 941081:tid 941157] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.backup.sql"] [unique_id "alQsWOZnN2CRos_GBqUZGAAB50U"] [Sun Jul 12 18:07:53.091263 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:53.091914 2026] [authz_core:error] [pid 941081:tid 941277] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:53.206587 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVLgAAANE"] [Sun Jul 12 18:07:53.206698 2026] [security2:error] [pid 940777:tid 940993] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVLgAAANE"] [Sun Jul 12 18:07:53.208226 2026] [security2:error] [pid 941081:tid 941229] [client 65.21.113.206:44066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3l1M3Rpbl8yMzY0L3l1LzIyNDIxL3U=.html"] [unique_id "alQsWOZnN2CRos_GBqUZBgAAAZo"] [Sun Jul 12 18:07:53.401231 2026] [security2:error] [pid 941081:tid 941250] [client 186.14.124.82:52666] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsWeZnN2CRos_GBqUZKwAAAa8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:53.423331 2026] [security2:error] [pid 941081:tid 941224] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsWeZnN2CRos_GBqUZJgAAAZU"] [Sun Jul 12 18:07:53.666067 2026] [security2:error] [pid 941081:tid 941197] [remote 103.82.20.130:58354] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsWeZnN2CRos_GBqUZNAAB72w"] [Sun Jul 12 18:07:53.767026 2026] [security2:error] [pid 941081:tid 941319] [client 168.100.149.11:62952] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44200/bargainor/2307_psychoreflex.jsp"] [unique_id "alQsWeZnN2CRos_GBqUZNgAAAfQ"] [Sun Jul 12 18:07:53.815783 2026] [security2:error] [pid 941081:tid 941326] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsWeZnN2CRos_GBqUZMwAAAfs"] [Sun Jul 12 18:07:53.945741 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:53.946267 2026] [authz_core:error] [pid 941081:tid 941284] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:54.101266 2026] [security2:error] [pid 940777:tid 940921] [client 20.210.108.71:58778] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVHwAAAIk"], referer: binance.com [Sun Jul 12 18:07:54.188557 2026] [security2:error] [pid 941081:tid 941280] [client 197.48.221.253:52794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsWuZnN2CRos_GBqUZPwAAAc0"] [Sun Jul 12 18:07:54.188888 2026] [security2:error] [pid 941081:tid 941280] [client 197.48.221.253:52794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsWuZnN2CRos_GBqUZPwAAAc0"] [Sun Jul 12 18:07:54.250259 2026] [security2:error] [pid 940777:tid 940944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsWpihQxksrpCflyFVPQAAAKA"] [Sun Jul 12 18:07:54.377602 2026] [security2:error] [pid 940777:tid 941013] [client 20.244.27.100:57752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/script-modules.php"] [unique_id "alQsWpihQxksrpCflyFVSAAAAOU"], referer: binance.com [Sun Jul 12 18:07:54.678405 2026] [security2:error] [pid 940777:tid 940943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsWpihQxksrpCflyFVSwAAAJ8"] [Sun Jul 12 18:07:54.692183 2026] [security2:error] [pid 940777:tid 940974] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lrcnQzaV81NDM2L3lrLzM0Mzc3L2s=.html"] [unique_id "alQsWpihQxksrpCflyFVVwAAAL4"] [Sun Jul 12 18:07:54.712995 2026] [authz_core:error] [pid 940777:tid 940984] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:54.713485 2026] [authz_core:error] [pid 940777:tid 940984] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:54.767518 2026] [security2:error] [pid 940777:tid 940879] [remote 194.164.192.228:39186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.192.164.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dawnartist.com"] [uri "/wp-login.php"] [unique_id "alQsWpihQxksrpCflyFVWAAAuFs"] [Sun Jul 12 18:07:54.848412 2026] [security2:error] [pid 941081:tid 941095] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/parity/.env"] [unique_id "alQsWuZnN2CRos_GBqUZRQABowc"] [Sun Jul 12 18:07:55.022407 2026] [security2:error] [pid 941081:tid 941211] [remote 185.177.72.12:1114] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/download.php.copy"] [unique_id "alQsW-ZnN2CRos_GBqUZSwAB0no"] [Sun Jul 12 18:07:55.126645 2026] [security2:error] [pid 941081:tid 941311] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsWOZnN2CRos_GBqUZAwAAAew"] [Sun Jul 12 18:07:55.170128 2026] [security2:error] [pid 941081:tid 941242] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsWOZnN2CRos_GBqUZBAAAAac"], referer: http://67.222.38.115/api/system/info [Sun Jul 12 18:07:55.193865 2026] [security2:error] [pid 941081:tid 941102] [remote 194.164.192.228:39190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.192.164.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "notesformykids.com"] [uri "/wp-login.php"] [unique_id "alQsW-ZnN2CRos_GBqUZVwAB6w4"] [Sun Jul 12 18:07:55.391356 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:39738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test.php"] [unique_id "alQsW5ihQxksrpCflyFVhgAAALM"] [Sun Jul 12 18:07:55.503741 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:55.504254 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:55.598335 2026] [security2:error] [pid 941081:tid 941131] [remote 103.82.20.130:36112] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsW-ZnN2CRos_GBqUZXAABwSs"] [Sun Jul 12 18:07:55.669095 2026] [security2:error] [pid 940777:tid 940998] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVYwAAANY"] [Sun Jul 12 18:07:55.669151 2026] [security2:error] [pid 940777:tid 940998] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVYwAAANY"] [Sun Jul 12 18:07:55.671285 2026] [security2:error] [pid 941081:tid 941246] [client 65.21.113.206:44072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lrcnQzaV81NDM2L3lrLzM0Mzc3L2s=.html"] [unique_id "alQsW-ZnN2CRos_GBqUZVgAAAas"] [Sun Jul 12 18:07:55.758582 2026] [security2:error] [pid 940777:tid 940938] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test_dev.php"] [unique_id "alQsW5ihQxksrpCflyFVrwAAAJo"] [Sun Jul 12 18:07:56.042096 2026] [security2:error] [pid 940777:tid 940943] [client 74.244.119.215:56950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsXJihQxksrpCflyFVxAAAAJ8"] [Sun Jul 12 18:07:56.046796 2026] [security2:error] [pid 940777:tid 940824] [remote 57.141.18.39:35553] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/cJYaZ9M.lWez"] [unique_id "alQsXJihQxksrpCflyFVwwAApiY"] [Sun Jul 12 18:07:56.055898 2026] [security2:error] [pid 940777:tid 940943] [client 74.244.119.215:56950] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsXJihQxksrpCflyFVxAAAAJ8"] [Sun Jul 12 18:07:56.090575 2026] [security2:error] [pid 940777:tid 940967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVJwAAALc"], referer: http://67.222.38.115/api/system/indexer/indices [Sun Jul 12 18:07:56.155950 2026] [security2:error] [pid 940777:tid 940936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsWJihQxksrpCflyFVJgAAAN4"], referer: http://67.222.38.115/api/system/indexer/cluster/health [Sun Jul 12 18:07:56.187134 2026] [security2:error] [pid 940777:tid 941011] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVvwAAAOM"] [Sun Jul 12 18:07:56.324117 2026] [security2:error] [pid 940777:tid 941029] [client 138.94.197.135:13318] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsXJihQxksrpCflyFVyAAAAPU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:07:56.340327 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:56.340921 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:56.470595 2026] [security2:error] [pid 940777:tid 940933] [client 168.100.149.194:61082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44265/bargainor/2307_mailable.jsp"] [unique_id "alQsXJihQxksrpCflyFV0AAAAJU"] [Sun Jul 12 18:07:56.538495 2026] [security2:error] [pid 940777:tid 940815] [remote 185.177.72.12:41706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/backup/info.sql"] [unique_id "alQsXJihQxksrpCflyFV0QAAzR0"] [Sun Jul 12 18:07:56.668642 2026] [security2:error] [pid 940777:tid 940948] [client 24.203.79.110:53869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsXJihQxksrpCflyFV1gAAAKQ"] [Sun Jul 12 18:07:56.674507 2026] [security2:error] [pid 940777:tid 940948] [client 24.203.79.110:53869] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsXJihQxksrpCflyFV1gAAAKQ"] [Sun Jul 12 18:07:56.743594 2026] [security2:error] [pid 940777:tid 940921] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/gasmilano/admin/config.php"] [unique_id "alQsXJihQxksrpCflyFV3AAAAIk"] [Sun Jul 12 18:07:57.105237 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:57.106033 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:57.229951 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsXJihQxksrpCflyFV5AAAALA"] [Sun Jul 12 18:07:57.308756 2026] [security2:error] [pid 940777:tid 941032] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lrcnQzaV83ODU1L3lrLzM0Mzc3L2s=.html"] [unique_id "alQsXZihQxksrpCflyFV7gAAAPg"] [Sun Jul 12 18:07:57.656743 2026] [security2:error] [pid 940777:tid 941015] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsXZihQxksrpCflyFV9gAAAOc"] [Sun Jul 12 18:07:57.824449 2026] [security2:error] [pid 940777:tid 940810] [remote 103.82.20.130:43290] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsXZihQxksrpCflyFWFAAAshg"] [Sun Jul 12 18:07:57.913265 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:57.914015 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:57.974171 2026] [security2:error] [pid 940777:tid 940964] [client 20.244.27.100:64423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/speculative-loading.php"] [unique_id "alQsXZihQxksrpCflyFWKAAAALQ"], referer: binance.com [Sun Jul 12 18:07:58.090504 2026] [security2:error] [pid 940777:tid 941007] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsXZihQxksrpCflyFWGQAAAN8"] [Sun Jul 12 18:07:58.280934 2026] [security2:error] [pid 940777:tid 940791] [remote 185.177.72.12:41706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.cpanel/caches/config/.env"] [unique_id "alQsXpihQxksrpCflyFWNQAAoQU"] [Sun Jul 12 18:07:58.289348 2026] [security2:error] [pid 940777:tid 941043] [client 125.167.21.72:61981] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsXpihQxksrpCflyFWMAAAAQM"] [Sun Jul 12 18:07:58.289710 2026] [security2:error] [pid 940777:tid 941043] [client 125.167.21.72:61981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsXpihQxksrpCflyFWMAAAAQM"] [Sun Jul 12 18:07:58.301817 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVqgAAALM"] [Sun Jul 12 18:07:58.324650 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVpQAAAJ4"] [Sun Jul 12 18:07:58.376328 2026] [security2:error] [pid 940777:tid 940965] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsXZihQxksrpCflyFWEwAAALU"] [Sun Jul 12 18:07:58.376400 2026] [security2:error] [pid 940777:tid 940965] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsXZihQxksrpCflyFWEwAAALU"] [Sun Jul 12 18:07:58.377293 2026] [security2:error] [pid 940777:tid 941038] [client 65.21.113.206:44080] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lrcnQzaV83ODU1L3lrLzM0Mzc3L2s=.html"] [unique_id "alQsXZihQxksrpCflyFWEAAAAP4"] [Sun Jul 12 18:07:58.436846 2026] [security2:error] [pid 940777:tid 940993] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWLgAAANE"] [Sun Jul 12 18:07:58.458504 2026] [security2:error] [pid 940777:tid 940869] [remote 185.177.72.12:41706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test/.env.bak"] [unique_id "alQsXpihQxksrpCflyFWUQAAtFE"] [Sun Jul 12 18:07:58.460100 2026] [security2:error] [pid 940777:tid 940940] [client 168.100.149.220:54444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44330/bargainor/2307_epidemiology.jsp"] [unique_id "alQsXpihQxksrpCflyFWUgAAAJw"] [Sun Jul 12 18:07:58.479365 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVmgAAknc"] [Sun Jul 12 18:07:58.713176 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:58.713680 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:58.870140 2026] [security2:error] [pid 940777:tid 941006] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWXAAAAN4"] [Sun Jul 12 18:07:59.114515 2026] [security2:error] [pid 940777:tid 940918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVqQAAAIY"] [Sun Jul 12 18:07:59.140102 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVqwAAAPA"] [Sun Jul 12 18:07:59.151534 2026] [security2:error] [pid 940777:tid 940961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVqAAAALE"] [Sun Jul 12 18:07:59.397680 2026] [security2:error] [pid 940777:tid 940945] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsX5ihQxksrpCflyFWaQAAAKE"] [Sun Jul 12 18:07:59.477439 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:07:59.477973 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:07:59.605424 2026] [security2:error] [pid 940777:tid 941000] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lsLzQ5MzEveWwvODQ3MS9sejg=.asp"] [unique_id "alQsX5ihQxksrpCflyFWhgAAANg"] [Sun Jul 12 18:07:59.730095 2026] [security2:error] [pid 940777:tid 941017] [client 45.205.1.223:35856] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "skyobrien.com"] [uri "/400.shtml"] [unique_id "alQsX5ihQxksrpCflyFWhwAAAOk"] [Sun Jul 12 18:07:59.768934 2026] [security2:error] [pid 940777:tid 940939] [client 168.100.149.98:57116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44395/bargainor/2307_secque.jsp"] [unique_id "alQsX5ihQxksrpCflyFWiAAAAJs"] [Sun Jul 12 18:07:59.843432 2026] [security2:error] [pid 940777:tid 941032] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsX5ihQxksrpCflyFWhQAAAPg"] [Sun Jul 12 18:08:00.095594 2026] [security2:error] [pid 940777:tid 940838] [remote 103.82.20.130:50690] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsYJihQxksrpCflyFWlQAAnTQ"] [Sun Jul 12 18:08:00.098531 2026] [security2:error] [pid 940777:tid 940992] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVYQAAANA"] [Sun Jul 12 18:08:00.109087 2026] [security2:error] [pid 940777:tid 940995] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVYAAAANM"] [Sun Jul 12 18:08:00.187977 2026] [security2:error] [pid 941081:tid 941261] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW-ZnN2CRos_GBqUZVQAAAbo"] [Sun Jul 12 18:08:00.215982 2026] [security2:error] [pid 941081:tid 941329] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW-ZnN2CRos_GBqUZVAAAAf4"], referer: http://67.222.38.115/api/system/inputs [Sun Jul 12 18:08:00.314757 2026] [security2:error] [pid 940777:tid 940932] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVZAAAAJQ"], referer: http://67.222.38.115/api/system/loggers [Sun Jul 12 18:08:00.314776 2026] [security2:error] [pid 940777:tid 940917] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFVYgAAAIU"] [Sun Jul 12 18:08:00.344526 2026] [security2:error] [pid 940777:tid 941019] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWkgAAAOs"] [Sun Jul 12 18:08:00.379022 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:00.379557 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:00.553515 2026] [security2:error] [pid 940777:tid 940948] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/upload/config.php"] [unique_id "alQsYJihQxksrpCflyFWtQAAAKQ"] [Sun Jul 12 18:08:00.675424 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWnQAAAP0"] [Sun Jul 12 18:08:00.675479 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWnQAAAP0"] [Sun Jul 12 18:08:00.676580 2026] [security2:error] [pid 940777:tid 941014] [client 65.21.113.206:44090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lsLzQ5MzEveWwvODQ3MS9sejg=.asp"] [unique_id "alQsYJihQxksrpCflyFWlAAAAOY"] [Sun Jul 12 18:08:00.965745 2026] [security2:error] [pid 940777:tid 940974] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWvAAAAL4"] [Sun Jul 12 18:08:01.148355 2026] [security2:error] [pid 940777:tid 940830] [remote 185.177.72.12:41706] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/var/www/.env"] [unique_id "alQsYZihQxksrpCflyFW0gAAjCw"] [Sun Jul 12 18:08:01.207327 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:01.208053 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:01.559245 2026] [security2:error] [pid 940777:tid 940973] [client 116.179.33.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWwwAAAL0"] [Sun Jul 12 18:08:01.595432 2026] [security2:error] [pid 940777:tid 940977] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsYZihQxksrpCflyFW1wAAAME"] [Sun Jul 12 18:08:01.744872 2026] [security2:error] [pid 940777:tid 941040] [client 20.63.87.152:24194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/.dj/index.php"] [unique_id "alQsYZihQxksrpCflyFW5gAAAQA"] [Sun Jul 12 18:08:01.904328 2026] [security2:error] [pid 940777:tid 940979] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lseGd6ZF80MjU0L3lsLzE2MS9s.html"] [unique_id "alQsYZihQxksrpCflyFW7AAAAMM"] [Sun Jul 12 18:08:01.991550 2026] [security2:error] [pid 940777:tid 940825] [remote 103.82.20.130:59318] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsYZihQxksrpCflyFW8AAApic"] [Sun Jul 12 18:08:01.995193 2026] [authz_core:error] [pid 940777:tid 940974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:01.996006 2026] [authz_core:error] [pid 940777:tid 940974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:02.025922 2026] [security2:error] [pid 940777:tid 940936] [client 185.177.72.12:41706] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/export-personal-data.php"] [unique_id "alQsYZihQxksrpCflyFW5wAAmEQ"] [Sun Jul 12 18:08:02.050718 2026] [core:error] [pid 940777:tid 940997] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.069281 2026] [core:error] [pid 940777:tid 940997] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.336348 2026] [security2:error] [pid 940777:tid 940975] [client 20.63.87.152:18971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/.trash7206/index.php"] [unique_id "alQsYpihQxksrpCflyFXAQAAAL8"] [Sun Jul 12 18:08:02.552062 2026] [security2:error] [pid 940777:tid 940957] [client 74.7.175.144:46298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/robots.txt"] [unique_id "alQsYpihQxksrpCflyFXDgAAAK0"] [Sun Jul 12 18:08:02.696855 2026] [security2:error] [pid 940777:tid 940802] [remote 185.177.72.12:13934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQsYpihQxksrpCflyFXDwAA3xA"] [Sun Jul 12 18:08:02.700090 2026] [core:error] [pid 940777:tid 940961] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.700149 2026] [core:error] [pid 940777:tid 940961] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.778319 2026] [security2:error] [pid 940777:tid 940936] [client 74.7.175.144:46312] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/robots.txt"] [unique_id "alQsYpihQxksrpCflyFXFwAAAJg"] [Sun Jul 12 18:08:02.897708 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:02.898197 2026] [authz_core:error] [pid 940777:tid 941020] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:02.947234 2026] [security2:error] [pid 940777:tid 941025] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "74.220.208.93"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWsAAAAPE"] [Sun Jul 12 18:08:02.950985 2026] [security2:error] [pid 940777:tid 940934] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsYpihQxksrpCflyFXBwAAAJY"] [Sun Jul 12 18:08:02.951034 2026] [security2:error] [pid 940777:tid 940934] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsYpihQxksrpCflyFXBwAAAJY"] [Sun Jul 12 18:08:02.957658 2026] [security2:error] [pid 940777:tid 940994] [client 65.21.113.206:44100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lseGd6ZF80MjU0L3lsLzE2MS9s.html"] [unique_id "alQsYpihQxksrpCflyFXAwAAANI"] [Sun Jul 12 18:08:02.976521 2026] [core:error] [pid 940777:tid 940963] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.976575 2026] [core:error] [pid 940777:tid 940963] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:02.985192 2026] [security2:error] [pid 940777:tid 941012] [client 74.7.175.144:46320] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/robots.txt"] [unique_id "alQsYpihQxksrpCflyFXJgAAAOQ"] [Sun Jul 12 18:08:03.097328 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWpQAAAM8"], referer: http://67.222.38.115/api/system/metrics [Sun Jul 12 18:08:03.224513 2026] [security2:error] [pid 940777:tid 941031] [client 74.7.175.144:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/cgi-sys/404.html"] [unique_id "alQsY5ihQxksrpCflyFXOgAAAPc"], referer: http://www.impetusbornconsulting.dancetrenz.com/robots.txt [Sun Jul 12 18:08:03.226423 2026] [security2:error] [pid 940777:tid 941036] [client 74.7.175.144:34438] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/robots.txt"] [unique_id "alQsY5ihQxksrpCflyFXLwAAAPw"], referer: http://www.impetusbornconsulting.dancetrenz.com/robots.txt [Sun Jul 12 18:08:03.243526 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/amp/admin/config.php"] [unique_id "alQsY5ihQxksrpCflyFXPQAAALE"] [Sun Jul 12 18:08:03.270534 2026] [security2:error] [pid 940777:tid 941001] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWpwAAANk"], referer: http://67.222.38.115/api/system/notifications [Sun Jul 12 18:08:03.295525 2026] [security2:error] [pid 940777:tid 941039] [client 20.63.87.152:41502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQsY5ihQxksrpCflyFXQQAAAP8"] [Sun Jul 12 18:08:03.300479 2026] [security2:error] [pid 940777:tid 941024] [client 20.244.27.100:57612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/style-engine.php"] [unique_id "alQsY5ihQxksrpCflyFXQwAAAPA"], referer: binance.com [Sun Jul 12 18:08:03.419592 2026] [security2:error] [pid 940777:tid 940794] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phpinfo.php.copy.original.bak"] [unique_id "alQsY5ihQxksrpCflyFXSQABBAg"] [Sun Jul 12 18:08:03.480649 2026] [security2:error] [pid 940777:tid 940937] [client 94.187.171.125:56217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsY5ihQxksrpCflyFXTgAAAJk"] [Sun Jul 12 18:08:03.480960 2026] [security2:error] [pid 940777:tid 940937] [client 94.187.171.125:56217] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsY5ihQxksrpCflyFXTgAAAJk"] [Sun Jul 12 18:08:03.543311 2026] [security2:error] [pid 940777:tid 940949] [client 20.63.87.152:41524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQsY5ihQxksrpCflyFXWAAAAKU"] [Sun Jul 12 18:08:03.559584 2026] [security2:error] [pid 940777:tid 941020] [client 74.7.175.144:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/cgi-sys/404.html"] [unique_id "alQsY5ihQxksrpCflyFXVwAAAOw"] [Sun Jul 12 18:08:03.560810 2026] [security2:error] [pid 940777:tid 940933] [client 74.7.175.144:34438] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.impetusbornconsulting.dancetrenz.com"] [uri "/robots.txt"] [unique_id "alQsY5ihQxksrpCflyFXUAAAAJU"] [Sun Jul 12 18:08:03.583994 2026] [security2:error] [pid 940777:tid 940895] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/public-api/.env"] [unique_id "alQsY5ihQxksrpCflyFXXAAAsGs"] [Sun Jul 12 18:08:03.612544 2026] [security2:error] [pid 940777:tid 941016] [client 99.226.17.45:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsYpihQxksrpCflyFXJQAAAOg"] [Sun Jul 12 18:08:03.752256 2026] [security2:error] [pid 940777:tid 940974] [client 57.141.18.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXSAAAAL4"] [Sun Jul 12 18:08:03.766356 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:03.766875 2026] [authz_core:error] [pid 940777:tid 940999] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:03.838142 2026] [security2:error] [pid 940777:tid 940939] [client 20.63.87.152:19007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQsY5ihQxksrpCflyFXaAAAAJs"] [Sun Jul 12 18:08:04.033600 2026] [security2:error] [pid 940777:tid 940951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXZQAAAKc"] [Sun Jul 12 18:08:04.083030 2026] [security2:error] [pid 940777:tid 941022] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWqwAAAO4"] [Sun Jul 12 18:08:04.124603 2026] [security2:error] [pid 940777:tid 940940] [client 20.63.87.152:24229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/0.kb-v3.php"] [unique_id "alQsZJihQxksrpCflyFXbgAAAJw"] [Sun Jul 12 18:08:04.125430 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsYJihQxksrpCflyFWqgAAAKE"] [Sun Jul 12 18:08:04.401528 2026] [security2:error] [pid 940777:tid 940950] [client 168.100.149.109:38538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44525/bargainor/2307_limnoria.jsp"] [unique_id "alQsZJihQxksrpCflyFXfgAAAKY"] [Sun Jul 12 18:08:04.472558 2026] [security2:error] [pid 940777:tid 941027] [client 20.63.87.152:22976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/0.php"] [unique_id "alQsZJihQxksrpCflyFXhAAAAPM"] [Sun Jul 12 18:08:04.545940 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:04.546412 2026] [authz_core:error] [pid 940777:tid 941007] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:04.607623 2026] [security2:error] [pid 940777:tid 941037] [client 197.48.221.253:53382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsZJihQxksrpCflyFXiAAAAP0"] [Sun Jul 12 18:08:04.607936 2026] [security2:error] [pid 940777:tid 941037] [client 197.48.221.253:53382] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsZJihQxksrpCflyFXiAAAAP0"] [Sun Jul 12 18:08:04.648938 2026] [security2:error] [pid 940777:tid 940979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZJihQxksrpCflyFXfAAAAMM"] [Sun Jul 12 18:08:04.695556 2026] [security2:error] [pid 940777:tid 940995] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lseGd6ZF80Njg4L3lsLzE2MS9s.html"] [unique_id "alQsZJihQxksrpCflyFXigAAANM"] [Sun Jul 12 18:08:04.714983 2026] [security2:error] [pid 940777:tid 940977] [client 20.63.87.152:31255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/002.php"] [unique_id "alQsZJihQxksrpCflyFXiwAAAME"] [Sun Jul 12 18:08:04.819920 2026] [security2:error] [pid 940777:tid 940878] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.git/config.orig.bak"] [unique_id "alQsZJihQxksrpCflyFXjQAAnVo"] [Sun Jul 12 18:08:04.852508 2026] [security2:error] [pid 940777:tid 941004] [client 207.46.13.127:56680] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "cognitions.co.uk"] [uri "/index.php"] [unique_id "alQsXJihQxksrpCflyFV2wAA3Cg"] [Sun Jul 12 18:08:04.944343 2026] [security2:error] [pid 940777:tid 941025] [client 20.63.87.152:13010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/01.php"] [unique_id "alQsZJihQxksrpCflyFXkAAAAPE"] [Sun Jul 12 18:08:05.152348 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFWOAAAkmU"] [Sun Jul 12 18:08:05.155342 2026] [security2:error] [pid 940777:tid 940787] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test.php"] [unique_id "alQsW5ihQxksrpCflyFXmwAAkgE"] [Sun Jul 12 18:08:05.159128 2026] [security2:error] [pid 940777:tid 940871] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env"] [unique_id "alQsW5ihQxksrpCflyFXnwAAklM"] [Sun Jul 12 18:08:05.270901 2026] [security2:error] [pid 940777:tid 941022] [client 20.63.87.152:23706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/0x.php"] [unique_id "alQsZZihQxksrpCflyFXxAAAAO4"] [Sun Jul 12 18:08:05.330174 2026] [security2:error] [pid 940777:tid 940951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXlAAAAKc"] [Sun Jul 12 18:08:05.383289 2026] [authz_core:error] [pid 940777:tid 940933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:05.383827 2026] [authz_core:error] [pid 940777:tid 940933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:05.494907 2026] [security2:error] [pid 940777:tid 940909] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/routes/.env"] [unique_id "alQsZZihQxksrpCflyFXyAAA-3k"] [Sun Jul 12 18:08:05.589723 2026] [security2:error] [pid 940777:tid 941019] [client 20.63.87.152:26907] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.jprtproof.com"] [uri "/1.php"] [unique_id "alQsZZihQxksrpCflyFXzwAAAOs"] [Sun Jul 12 18:08:05.590144 2026] [security2:error] [pid 940777:tid 941019] [client 20.63.87.152:26907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/1.php"] [unique_id "alQsZZihQxksrpCflyFXzwAAAOs"] [Sun Jul 12 18:08:05.715391 2026] [security2:error] [pid 940777:tid 941011] [client 168.100.149.151:49024] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44460/bargainor/2307_dislevelment.jsp"] [unique_id "alQsZZihQxksrpCflyFX1gAAAOM"] [Sun Jul 12 18:08:05.796513 2026] [security2:error] [pid 940777:tid 941024] [client 20.63.87.152:25863] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/100.php"] [unique_id "alQsZZihQxksrpCflyFX2gAAAPA"] [Sun Jul 12 18:08:05.813538 2026] [security2:error] [pid 940777:tid 940948] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXwwAAAKQ"] [Sun Jul 12 18:08:05.814225 2026] [security2:error] [pid 940777:tid 940948] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXwwAAAKQ"] [Sun Jul 12 18:08:05.814554 2026] [security2:error] [pid 940777:tid 941000] [client 65.21.113.206:43172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lseGd6ZF80Njg4L3lsLzE2MS9s.html"] [unique_id "alQsZZihQxksrpCflyFXswAAANg"] [Sun Jul 12 18:08:05.895395 2026] [security2:error] [pid 940777:tid 940977] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFX1QAAAME"] [Sun Jul 12 18:08:06.047919 2026] [security2:error] [pid 940777:tid 941031] [client 45.173.228.204:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXywAAAPc"] [Sun Jul 12 18:08:06.059493 2026] [security2:error] [pid 940777:tid 940940] [client 20.63.87.152:23705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/122.php"] [unique_id "alQsZpihQxksrpCflyFX5wAAAJw"] [Sun Jul 12 18:08:06.060570 2026] [security2:error] [pid 940777:tid 940840] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db/env/temp/master.sql"] [unique_id "alQsZpihQxksrpCflyFX5QAA3zU"] [Sun Jul 12 18:08:06.172911 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:06.173452 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:06.391095 2026] [http2:info] [pid 960377:tid 960377] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:08:06.432387 2026] [security2:error] [pid 940777:tid 940958] [client 20.63.87.152:28500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/123.php"] [unique_id "alQsZpihQxksrpCflyFX7wAAAK4"] [Sun Jul 12 18:08:06.457737 2026] [security2:error] [pid 940777:tid 940999] [client 168.100.149.239:63748] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44590/bargainor/2307_milksopism.jsp"] [unique_id "alQsZpihQxksrpCflyFX8gAAANc"] [Sun Jul 12 18:08:06.528554 2026] [security2:error] [pid 940777:tid 941016] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZpihQxksrpCflyFX7gAAAOg"] [Sun Jul 12 18:08:06.553219 2026] [security2:error] [pid 940777:tid 940976] [client 74.244.119.215:8264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsZpihQxksrpCflyFX-wAAAMA"] [Sun Jul 12 18:08:06.553518 2026] [security2:error] [pid 940777:tid 940976] [client 74.244.119.215:8264] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsZpihQxksrpCflyFX-wAAAMA"] [Sun Jul 12 18:08:06.666892 2026] [security2:error] [pid 960377:tid 960508] [client 20.63.87.152:28480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/13.php"] [unique_id "alQsZhMANaV5i2_BLQr2TAAAAAA"] [Sun Jul 12 18:08:06.875416 2026] [security2:error] [pid 940777:tid 941041] [client 20.63.87.152:37323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/133.php"] [unique_id "alQsZpihQxksrpCflyFYBAAAAQE"] [Sun Jul 12 18:08:06.951340 2026] [security2:error] [pid 940777:tid 941044] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZpihQxksrpCflyFX_wAAAQQ"] [Sun Jul 12 18:08:06.964605 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:06.965122 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:07.028965 2026] [security2:error] [pid 940777:tid 940972] [client 65.21.113.206:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3lvczl2ZF81OTYwL3lvLzE3NzczL28=.html"] [unique_id "alQsZ5ihQxksrpCflyFYEAAAALw"] [Sun Jul 12 18:08:07.081912 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWRwAAAMI"] [Sun Jul 12 18:08:07.108989 2026] [security2:error] [pid 940777:tid 941003] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWRQAAANs"] [Sun Jul 12 18:08:07.171913 2026] [security2:error] [pid 960377:tid 960514] [client 20.63.87.152:13045] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/155.php"] [unique_id "alQsZxMANaV5i2_BLQr2VQAAAAY"] [Sun Jul 12 18:08:07.189229 2026] [security2:error] [pid 940777:tid 940957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXNAAAAK0"] [Sun Jul 12 18:08:07.265817 2026] [security2:error] [pid 940777:tid 941002] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXOQAAANo"] [Sun Jul 12 18:08:07.278217 2026] [security2:error] [pid 940777:tid 940970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXNwAAALo"] [Sun Jul 12 18:08:07.304276 2026] [security2:error] [pid 940777:tid 940918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXOAAAAIY"], referer: http://67.222.38.115/api/system/sessions [Sun Jul 12 18:08:07.329768 2026] [security2:error] [pid 960377:tid 960523] [client 24.203.79.110:54434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsZxMANaV5i2_BLQr2WAAAAA8"] [Sun Jul 12 18:08:07.335702 2026] [security2:error] [pid 960377:tid 960523] [client 24.203.79.110:54434] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsZxMANaV5i2_BLQr2WAAAAA8"] [Sun Jul 12 18:08:07.358459 2026] [security2:error] [pid 940777:tid 941030] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsY5ihQxksrpCflyFXMwAAAPY"], referer: http://67.222.38.115/api/system/permissions [Sun Jul 12 18:08:07.441049 2026] [security2:error] [pid 940777:tid 941039] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZ5ihQxksrpCflyFYGQAAAP8"] [Sun Jul 12 18:08:07.451610 2026] [security2:error] [pid 960377:tid 960533] [client 20.63.87.152:25868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/177.php"] [unique_id "alQsZxMANaV5i2_BLQr2XAAAABk"] [Sun Jul 12 18:08:07.617378 2026] [security2:error] [pid 940777:tid 940821] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/live/.env.bak"] [unique_id "alQsZ5ihQxksrpCflyFYLQABAyM"] [Sun Jul 12 18:08:07.729123 2026] [security2:error] [pid 960377:tid 960547] [client 20.63.87.152:24228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/1index.php"] [unique_id "alQsZxMANaV5i2_BLQr2agAAACc"] [Sun Jul 12 18:08:07.782494 2026] [authz_core:error] [pid 960377:tid 960562] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:07.783147 2026] [authz_core:error] [pid 960377:tid 960562] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:07.915938 2026] [security2:error] [pid 960377:tid 960504] [remote 57.141.18.15:62470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/C9Pi9XrdIqiZ91ur5kB9UN"] [unique_id "alQsZxMANaV5i2_BLQr2cwAAOn0"] [Sun Jul 12 18:08:08.025650 2026] [security2:error] [pid 940777:tid 941000] [client 20.63.87.152:24229] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/2.php"] [unique_id "alQsaJihQxksrpCflyFYPAAAANg"] [Sun Jul 12 18:08:08.048300 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsZxMANaV5i2_BLQr2bQAAADA"] [Sun Jul 12 18:08:08.095537 2026] [security2:error] [pid 940777:tid 940943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWRAAAAJ8"] [Sun Jul 12 18:08:08.142426 2026] [security2:error] [pid 960377:tid 960538] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsZxMANaV5i2_BLQr2YwAAAB4"] [Sun Jul 12 18:08:08.142497 2026] [security2:error] [pid 960377:tid 960538] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsZxMANaV5i2_BLQr2YwAAAB4"] [Sun Jul 12 18:08:08.178149 2026] [security2:error] [pid 960377:tid 960530] [client 65.21.113.206:43186] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3lvczl2ZF81OTYwL3lvLzE3NzczL28=.html"] [unique_id "alQsZxMANaV5i2_BLQr2XwAAABY"] [Sun Jul 12 18:08:08.199141 2026] [security2:error] [pid 960377:tid 960603] [client 20.244.27.100:59502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/template-canvas.php"] [unique_id "alQsaBMANaV5i2_BLQr2eAAAAF8"], referer: binance.com [Sun Jul 12 18:08:08.275959 2026] [security2:error] [pid 940777:tid 941021] [client 20.63.87.152:18712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/222.php"] [unique_id "alQsaJihQxksrpCflyFYQAAAAO0"] [Sun Jul 12 18:08:08.502553 2026] [security2:error] [pid 940777:tid 940953] [client 168.100.149.238:23562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44655/bargainor/2307_capnoides.jsp"] [unique_id "alQsaJihQxksrpCflyFYRQAAAKk"] [Sun Jul 12 18:08:08.523491 2026] [security2:error] [pid 960377:tid 960579] [client 20.63.87.152:18983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/2p.update.php"] [unique_id "alQsaBMANaV5i2_BLQr2gQAAAEc"] [Sun Jul 12 18:08:08.611527 2026] [authz_core:error] [pid 960377:tid 960583] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:08.612264 2026] [authz_core:error] [pid 960377:tid 960583] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:08.755030 2026] [security2:error] [pid 960377:tid 960604] [client 125.167.21.72:62392] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsaBMANaV5i2_BLQr2hgAAAGA"] [Sun Jul 12 18:08:08.755324 2026] [security2:error] [pid 960377:tid 960604] [client 125.167.21.72:62392] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsaBMANaV5i2_BLQr2hgAAAGA"] [Sun Jul 12 18:08:08.801868 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsaBMANaV5i2_BLQr2gwAAAFA"] [Sun Jul 12 18:08:08.808415 2026] [security2:error] [pid 960377:tid 960608] [client 20.63.87.152:37357] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/3.php"] [unique_id "alQsaBMANaV5i2_BLQr2hwAAAGQ"] [Sun Jul 12 18:08:09.038551 2026] [security2:error] [pid 940777:tid 940972] [client 20.63.87.152:26895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQsaZihQxksrpCflyFYVQAAALw"] [Sun Jul 12 18:08:09.051904 2026] [security2:error] [pid 940777:tid 940829] [remote 45.132.115.67:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQsaJihQxksrpCflyFYVAAA0is"] [Sun Jul 12 18:08:09.078176 2026] [security2:error] [pid 940777:tid 941038] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsX5ihQxksrpCflyFWeQAAAP4"] [Sun Jul 12 18:08:09.101259 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsX5ihQxksrpCflyFWcgAAAJ4"] [Sun Jul 12 18:08:09.114041 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWSQAAAPk"] [Sun Jul 12 18:08:09.115621 2026] [security2:error] [pid 940777:tid 941031] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsZ5ihQxksrpCflyFYHgAAAPc"], referer: http://67.222.38.115/api/system/status [Sun Jul 12 18:08:09.144043 2026] [security2:error] [pid 940777:tid 941042] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWSAAAAQI"] [Sun Jul 12 18:08:09.152775 2026] [authz_core:error] [pid 960377:tid 960510] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/.htpasswd [Sun Jul 12 18:08:09.278746 2026] [security2:error] [pid 940777:tid 941034] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsZ5ihQxksrpCflyFYHwAAAPo"] [Sun Jul 12 18:08:09.286998 2026] [security2:error] [pid 940777:tid 940946] [client 20.63.87.152:26913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/403.php"] [unique_id "alQsaZihQxksrpCflyFYZwAAAKI"] [Sun Jul 12 18:08:09.295373 2026] [security2:error] [pid 960377:tid 960635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsaBMANaV5i2_BLQr2jgAAAH8"] [Sun Jul 12 18:08:09.469461 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:09.470327 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:09.492752 2026] [security2:error] [pid 940777:tid 941037] [client 20.63.87.152:10952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.jprtproof.com"] [uri "/404.php"] [unique_id "alQsaZihQxksrpCflyFYcAAAAP0"] [Sun Jul 12 18:08:09.577509 2026] [security2:error] [pid 940777:tid 940995] [client 81.98.132.75:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsaJihQxksrpCflyFYTgAAANM"] [Sun Jul 12 18:08:09.696065 2026] [security2:error] [pid 940777:tid 941001] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYbwAAANk"] [Sun Jul 12 18:08:10.112175 2026] [security2:error] [pid 960377:tid 960540] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsaRMANaV5i2_BLQr2ngAAACA"] [Sun Jul 12 18:08:10.132141 2026] [security2:error] [pid 940777:tid 940981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsX5ihQxksrpCflyFWegAAAMU"] [Sun Jul 12 18:08:10.151324 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFWSgAAknc"] [Sun Jul 12 18:08:10.394125 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:10.394733 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:10.469745 2026] [security2:error] [pid 960377:tid 960567] [client 168.100.149.116:19372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44720/bargainor/2307_deft.jsp"] [unique_id "alQsahMANaV5i2_BLQr2rQAAADs"] [Sun Jul 12 18:08:10.622371 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsahMANaV5i2_BLQr2qwAAADg"] [Sun Jul 12 18:08:10.780528 2026] [security2:error] [pid 940777:tid 941038] [client 86.180.67.237:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsapihQxksrpCflyFYfwAAAP4"] [Sun Jul 12 18:08:11.062790 2026] [security2:error] [pid 960377:tid 960600] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsahMANaV5i2_BLQr2uwAAAFw"] [Sun Jul 12 18:08:11.092015 2026] [security2:error] [pid 940777:tid 940987] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsXpihQxksrpCflyFWVQAAAMs"] [Sun Jul 12 18:08:11.126134 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFWOwAAkhI"] [Sun Jul 12 18:08:11.246409 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:11.247224 2026] [authz_core:error] [pid 940777:tid 940985] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:11.343748 2026] [security2:error] [pid 940777:tid 941037] [client 186.243.15.95:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsapihQxksrpCflyFYjgAAAP0"] [Sun Jul 12 18:08:11.526441 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsaxMANaV5i2_BLQr2xgAAAFo"] [Sun Jul 12 18:08:11.908879 2026] [security2:error] [pid 940777:tid 940990] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYnwAAAM4"] [Sun Jul 12 18:08:12.058474 2026] [authz_core:error] [pid 960377:tid 960527] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:12.059648 2026] [authz_core:error] [pid 960377:tid 960527] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:12.112938 2026] [security2:error] [pid 940777:tid 940958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYXwAAANE"], referer: http://67.222.38.115/api/tcp/routers [Sun Jul 12 18:08:12.460285 2026] [security2:error] [pid 960377:tid 960568] [client 168.100.149.83:44982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44785/bargainor/2307_did.jsp"] [unique_id "alQsbBMANaV5i2_BLQr26QAAADw"] [Sun Jul 12 18:08:12.527602 2026] [security2:error] [pid 960377:tid 960542] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbBMANaV5i2_BLQr25AAAACI"] [Sun Jul 12 18:08:12.728781 2026] [security2:error] [pid 940777:tid 941019] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/modules/h/ajax.php/config.php"] [unique_id "alQsbJihQxksrpCflyFYuQAAAOs"] [Sun Jul 12 18:08:12.855004 2026] [authz_core:error] [pid 940777:tid 940995] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:12.855470 2026] [authz_core:error] [pid 940777:tid 940995] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:12.992261 2026] [security2:error] [pid 960377:tid 960605] [client 20.244.27.100:60367] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/theme-previews.php"] [unique_id "alQsbBMANaV5i2_BLQr2-AAAAGE"], referer: binance.com [Sun Jul 12 18:08:13.003715 2026] [core:error] [pid 960377:tid 960586] [client 74.7.244.15:35222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:13.003769 2026] [core:error] [pid 960377:tid 960586] [client 74.7.244.15:35222] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:13.004146 2026] [security2:error] [pid 960377:tid 960586] [client 74.7.244.15:35222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.website-79c5178e.falconaviation.org"] [uri "/website_79c5178e/index.php"] [unique_id "alQsbBMANaV5i2_BLQr2-QAAAE4"] [Sun Jul 12 18:08:13.135855 2026] [security2:error] [pid 940777:tid 940988] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYYgAAALM"], referer: http://67.222.38.115/api/tap [Sun Jul 12 18:08:13.136142 2026] [security2:error] [pid 940777:tid 940988] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYYQAAAPM"], referer: http://67.222.38.115/api/tags [Sun Jul 12 18:08:13.182112 2026] [security2:error] [pid 940777:tid 941041] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbJihQxksrpCflyFYvgAAAQE"] [Sun Jul 12 18:08:13.186274 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaRMANaV5i2_BLQr2mwAAABI"] [Sun Jul 12 18:08:13.259165 2026] [security2:error] [pid 940777:tid 941003] [client 62.171.167.118:39918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phptest.php"] [unique_id "alQsbZihQxksrpCflyFYywAAANs"] [Sun Jul 12 18:08:13.356942 2026] [security2:error] [pid 940777:tid 940822] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api2/.env"] [unique_id "alQsbZihQxksrpCflyFYzgAA6CQ"] [Sun Jul 12 18:08:13.465621 2026] [security2:error] [pid 940777:tid 940961] [client 51.75.21.177:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYZQAAALE"] [Sun Jul 12 18:08:13.595648 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:13.596163 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:13.750093 2026] [security2:error] [pid 940777:tid 940938] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbZihQxksrpCflyFY0wAAAJo"] [Sun Jul 12 18:08:13.792768 2026] [security2:error] [pid 940777:tid 941038] [client 168.100.149.96:15856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44850/bargainor/2307_delphian.jsp"] [unique_id "alQsbZihQxksrpCflyFY1QAAAP4"] [Sun Jul 12 18:08:14.041756 2026] [autoindex:error] [pid 940777:tid 941044] [client 199.45.155.72:38274] AH01276: Cannot serve directory /home4/zigzags3/public_html/tenethomes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:08:14.127848 2026] [security2:error] [pid 960377:tid 960632] [client 94.187.171.125:56698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsbhMANaV5i2_BLQr3EQAAAHw"] [Sun Jul 12 18:08:14.128136 2026] [security2:error] [pid 960377:tid 960632] [client 94.187.171.125:56698] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsbhMANaV5i2_BLQr3EQAAAHw"] [Sun Jul 12 18:08:14.242418 2026] [security2:error] [pid 940777:tid 940970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbZihQxksrpCflyFY3gAAALo"] [Sun Jul 12 18:08:14.380115 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:14.380599 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:14.635594 2026] [security2:error] [pid 940777:tid 940999] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbpihQxksrpCflyFY7AAAANc"] [Sun Jul 12 18:08:15.106838 2026] [security2:error] [pid 960377:tid 960609] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsbhMANaV5i2_BLQr3KgAAAGU"] [Sun Jul 12 18:08:15.110935 2026] [security2:error] [pid 940777:tid 941024] [client 197.48.221.253:53968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsb5ihQxksrpCflyFY_QAAAPA"] [Sun Jul 12 18:08:15.111212 2026] [security2:error] [pid 940777:tid 941024] [client 197.48.221.253:53968] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsb5ihQxksrpCflyFY_QAAAPA"] [Sun Jul 12 18:08:15.212659 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:15.213407 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:15.254504 2026] [security2:error] [pid 960377:tid 960405] [remote 57.141.18.86:32884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/HWcSz9hj/7ZVjHJRpDyF.lWez"] [unique_id "alQsbxMANaV5i2_BLQr3OAAAehs"] [Sun Jul 12 18:08:15.295820 2026] [security2:error] [pid 940777:tid 940989] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/testapi7.php"] [unique_id "alQsb5ihQxksrpCflyFZAgAAAM0"] [Sun Jul 12 18:08:15.461009 2026] [security2:error] [pid 940777:tid 940840] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/library/.env"] [unique_id "alQsb5ihQxksrpCflyFZCAAA9TU"] [Sun Jul 12 18:08:15.777210 2026] [security2:error] [pid 960377:tid 960546] [client 168.100.149.17:57484] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44915/bargainor/2307_anisodactyli.jsp"] [unique_id "alQsbxMANaV5i2_BLQr3PQAAACY"] [Sun Jul 12 18:08:15.854790 2026] [security2:error] [pid 940777:tid 940985] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsb5ihQxksrpCflyFZDAAAAMk"] [Sun Jul 12 18:08:16.031794 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:16.032290 2026] [authz_core:error] [pid 940777:tid 940963] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:16.350365 2026] [security2:error] [pid 940777:tid 940988] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscJihQxksrpCflyFZFAAAAMw"] [Sun Jul 12 18:08:16.514485 2026] [security2:error] [pid 940777:tid 940809] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/fastapi-app/backend/.env"] [unique_id "alQscJihQxksrpCflyFZGgAAhRc"] [Sun Jul 12 18:08:16.521395 2026] [security2:error] [pid 960377:tid 960575] [client 62.171.167.118:45656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin.php"] [unique_id "alQscBMANaV5i2_BLQr3TQAAAEM"] [Sun Jul 12 18:08:16.572869 2026] [security2:error] [pid 960377:tid 960545] [client 114.119.156.126:35457] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.rpadvancedmobilesystems.nwuav.net"] [uri "/media/rp-ride-mitigation-seats.pdf"] [unique_id "alQscBMANaV5i2_BLQr3TgAAACU"] [Sun Jul 12 18:08:16.847241 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:16.847751 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:16.903833 2026] [security2:error] [pid 940777:tid 941000] [client 20.244.27.100:57952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/theme-templates.php"] [unique_id "alQscJihQxksrpCflyFZIAAAANg"], referer: binance.com [Sun Jul 12 18:08:16.936129 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscBMANaV5i2_BLQr3UwAAAFU"] [Sun Jul 12 18:08:17.081254 2026] [security2:error] [pid 940777:tid 940972] [client 74.244.119.215:65327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQscZihQxksrpCflyFZJwAAALw"] [Sun Jul 12 18:08:17.084204 2026] [security2:error] [pid 940777:tid 940972] [client 74.244.119.215:65327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQscZihQxksrpCflyFZJwAAALw"] [Sun Jul 12 18:08:17.415055 2026] [security2:error] [pid 940777:tid 940977] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscZihQxksrpCflyFZKQAAAME"] [Sun Jul 12 18:08:17.615402 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:17.615958 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:17.767604 2026] [security2:error] [pid 940777:tid 941029] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscZihQxksrpCflyFZMgAAAPU"] [Sun Jul 12 18:08:17.990363 2026] [security2:error] [pid 940777:tid 940933] [client 24.203.79.110:54964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQscZihQxksrpCflyFZNwAAAJU"] [Sun Jul 12 18:08:17.996049 2026] [security2:error] [pid 940777:tid 940933] [client 24.203.79.110:54964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQscZihQxksrpCflyFZNwAAAJU"] [Sun Jul 12 18:08:18.217723 2026] [security2:error] [pid 940777:tid 940986] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYqwAAAMo"] [Sun Jul 12 18:08:18.260481 2026] [security2:error] [pid 940777:tid 940985] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscZihQxksrpCflyFZNgAAAMk"] [Sun Jul 12 18:08:18.404962 2026] [authz_core:error] [pid 940777:tid 941036] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:18.405471 2026] [authz_core:error] [pid 940777:tid 941036] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:18.442309 2026] [security2:error] [pid 940777:tid 940927] [client 168.100.149.101:56462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/44980/bargainor/2307_birefraction.jsp"] [unique_id "alQscpihQxksrpCflyFZUgAAAI8"] [Sun Jul 12 18:08:18.571452 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:45658] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php.php"] [unique_id "alQscpihQxksrpCflyFZVQAAALw"] [Sun Jul 12 18:08:18.627098 2026] [security2:error] [pid 940777:tid 941000] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscpihQxksrpCflyFZUQAAANg"] [Sun Jul 12 18:08:18.791543 2026] [security2:error] [pid 940777:tid 940847] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/path/.env"] [unique_id "alQscpihQxksrpCflyFZXAAAojw"] [Sun Jul 12 18:08:18.956242 2026] [security2:error] [pid 940777:tid 940852] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/data/users.bak"] [unique_id "alQscpihQxksrpCflyFZXwAAxEE"] [Sun Jul 12 18:08:19.077102 2026] [security2:error] [pid 940777:tid 941004] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYqQAAANw"], referer: http://67.222.38.115/api/v1/admin/repos [Sun Jul 12 18:08:19.116801 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYqgAAAJ4"], referer: http://67.222.38.115/api/v1/admin/users [Sun Jul 12 18:08:19.150778 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaxMANaV5i2_BLQr23AAAAAY"] [Sun Jul 12 18:08:19.207010 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:19.207752 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:19.208432 2026] [security2:error] [pid 960377:tid 960521] [client 50.87.253.215:17448] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2022/12/IMG-0588-1-scaled.jpg"] [unique_id "alQscxMANaV5i2_BLQr3fgAAAA0"] [Sun Jul 12 18:08:19.412106 2026] [security2:error] [pid 960377:tid 960509] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQscxMANaV5i2_BLQr3gQAAAAE"] [Sun Jul 12 18:08:19.423117 2026] [security2:error] [pid 940777:tid 941018] [client 125.167.21.72:62814] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsc5ihQxksrpCflyFZZgAAAOo"] [Sun Jul 12 18:08:19.423455 2026] [security2:error] [pid 940777:tid 941018] [client 125.167.21.72:62814] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsc5ihQxksrpCflyFZZgAAAOo"] [Sun Jul 12 18:08:19.577294 2026] [security2:error] [pid 940777:tid 940904] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/pfbe/.env"] [unique_id "alQsc5ihQxksrpCflyFZawAAt3Q"] [Sun Jul 12 18:08:19.966652 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:19.967161 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:20.003989 2026] [security2:error] [pid 940777:tid 941034] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsc5ihQxksrpCflyFZbQAAAPo"] [Sun Jul 12 18:08:20.082702 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsaxMANaV5i2_BLQr22wAAAA4"] [Sun Jul 12 18:08:20.104644 2026] [security2:error] [pid 940777:tid 940969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsbZihQxksrpCflyFYxwAAALk"] [Sun Jul 12 18:08:20.106270 2026] [security2:error] [pid 940777:tid 940965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYqAAAALU"] [Sun Jul 12 18:08:20.128838 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFXpQAAknA"] [Sun Jul 12 18:08:20.196119 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFXnQAAkgE"] [Sun Jul 12 18:08:20.220744 2026] [security2:error] [pid 940777:tid 940787] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env"] [unique_id "alQsW5ihQxksrpCflyFZhQAAkgE"], referer: http://67.222.40.58/.env [Sun Jul 12 18:08:20.253648 2026] [security2:error] [pid 960377:tid 960561] [client 153.80.137.50:8809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 50.137.80.153.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/wp-comments-post.php"] [unique_id "alQsdBMANaV5i2_BLQr3ngAAADU"], referer: https://newjetnet.com/#comment-53261 [Sun Jul 12 18:08:20.253945 2026] [security2:error] [pid 960377:tid 960561] [client 153.80.137.50:8809] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/wp-comments-post.php"] [unique_id "alQsdBMANaV5i2_BLQr3ngAAADU"], referer: https://newjetnet.com/#comment-53261 [Sun Jul 12 18:08:20.279872 2026] [security2:error] [pid 940777:tid 940990] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsbZihQxksrpCflyFYyAAAAM4"] [Sun Jul 12 18:08:20.279978 2026] [authz_core:error] [pid 960377:tid 960529] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/.htpasswd, referer: http://67.222.40.58/.htpasswd [Sun Jul 12 18:08:20.381555 2026] [security2:error] [pid 960377:tid 960532] [client 193.138.195.242:51952] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.169.24"] [uri "/.env"] [unique_id "alQsdBMANaV5i2_BLQr3tQAAABg"] [Sun Jul 12 18:08:20.432882 2026] [security2:error] [pid 960377:tid 960514] [client 168.100.149.108:50504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45045/bargainor/2307_mediator.jsp"] [unique_id "alQsdBMANaV5i2_BLQr3tgAAAAY"] [Sun Jul 12 18:08:20.518441 2026] [security2:error] [pid 960377:tid 960634] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3rQAAAH4"] [Sun Jul 12 18:08:20.607445 2026] [security2:error] [pid 960377:tid 960548] [client 31.38.143.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQscxMANaV5i2_BLQr3kwAAACg"] [Sun Jul 12 18:08:20.678227 2026] [security2:error] [pid 960377:tid 960558] [client 193.138.195.242:53440] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.169.24"] [uri "/.env.example"] [unique_id "alQsdBMANaV5i2_BLQr3ugAAADI"] [Sun Jul 12 18:08:20.914286 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:20.914815 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:20.915009 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3vAAAACk"] [Sun Jul 12 18:08:21.118000 2026] [security2:error] [pid 940777:tid 941023] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXuwAAAL0"] [Sun Jul 12 18:08:21.148204 2026] [security2:error] [pid 940777:tid 940956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXugAAAKw"] [Sun Jul 12 18:08:21.414615 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsdRMANaV5i2_BLQr3wwAAAB4"] [Sun Jul 12 18:08:21.581428 2026] [security2:error] [pid 940777:tid 940824] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/env/users.bak"] [unique_id "alQsdZihQxksrpCflyFZtQAA_yY"] [Sun Jul 12 18:08:21.657437 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:21.657963 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:21.790725 2026] [security2:error] [pid 960377:tid 960516] [client 168.100.149.114:42830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45110/bargainor/2307_gurian.jsp"] [unique_id "alQsdRMANaV5i2_BLQr32wAAAAg"] [Sun Jul 12 18:08:21.976422 2026] [security2:error] [pid 960377:tid 960519] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsdRMANaV5i2_BLQr32gAAAAs"] [Sun Jul 12 18:08:22.283936 2026] [security2:error] [pid 960377:tid 960551] [client 20.244.27.100:54781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/utf8.php"] [unique_id "alQsdhMANaV5i2_BLQr34gAAACs"], referer: binance.com [Sun Jul 12 18:08:22.420483 2026] [authz_core:error] [pid 940777:tid 940971] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:22.421079 2026] [authz_core:error] [pid 940777:tid 940971] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:22.942358 2026] [security2:error] [pid 960377:tid 960633] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/new/test.php"] [unique_id "alQsdhMANaV5i2_BLQr36QAAAH0"] [Sun Jul 12 18:08:23.119130 2026] [security2:error] [pid 940777:tid 940934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXvQAAAJY"] [Sun Jul 12 18:08:23.137033 2026] [security2:error] [pid 940777:tid 940931] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXwgAAAOE"] [Sun Jul 12 18:08:23.153764 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXwQAAAKA"] [Sun Jul 12 18:08:23.282597 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:23.317163 2026] [authz_core:error] [pid 940777:tid 940948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:23.702351 2026] [security2:error] [pid 940777:tid 941011] [client 5.29.20.174:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "elleholmes.pub"] [uri "/index.php"] [unique_id "alQscZihQxksrpCflyFZLwAAAOM"] [Sun Jul 12 18:08:23.732945 2026] [security2:error] [pid 940777:tid 940967] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsd5ihQxksrpCflyFZyQAAALc"] [Sun Jul 12 18:08:24.085300 2026] [security2:error] [pid 940777:tid 940925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXvwAAAI0"] [Sun Jul 12 18:08:24.114980 2026] [security2:error] [pid 940777:tid 940957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYXQAAAK0"] [Sun Jul 12 18:08:24.184908 2026] [authz_core:error] [pid 940777:tid 941022] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:24.185578 2026] [authz_core:error] [pid 940777:tid 941022] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:24.241886 2026] [security2:error] [pid 940777:tid 941033] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsd5ihQxksrpCflyFZ1QAAAPk"] [Sun Jul 12 18:08:24.407460 2026] [security2:error] [pid 940777:tid 940822] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/Modix/ClientApp/.env"] [unique_id "alQseJihQxksrpCflyFZ3gAA2iQ"] [Sun Jul 12 18:08:24.469297 2026] [security2:error] [pid 960377:tid 960520] [client 168.100.149.105:49172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45175/bargainor/2307_monkey.jsp"] [unique_id "alQseBMANaV5i2_BLQr3_wAAAAw"] [Sun Jul 12 18:08:24.590767 2026] [security2:error] [pid 940777:tid 940987] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin.php.3"] [unique_id "alQseJihQxksrpCflyFZ4gAAAMs"] [Sun Jul 12 18:08:24.729193 2026] [security2:error] [pid 940777:tid 940982] [client 94.187.171.125:57173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQseJihQxksrpCflyFZ5QAAAMY"] [Sun Jul 12 18:08:24.729410 2026] [security2:error] [pid 940777:tid 940982] [client 94.187.171.125:57173] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQseJihQxksrpCflyFZ5QAAAMY"] [Sun Jul 12 18:08:24.755705 2026] [security2:error] [pid 940777:tid 940876] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/reddit/.env"] [unique_id "alQseJihQxksrpCflyFZ5gAA9Fg"] [Sun Jul 12 18:08:25.001006 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:25.001509 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:25.033608 2026] [security2:error] [pid 940777:tid 940791] [remote 216.73.216.109:17160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQseZihQxksrpCflyFZ8AAA6AU"] [Sun Jul 12 18:08:25.117122 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXuQAAALQ"] [Sun Jul 12 18:08:25.286270 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQseBMANaV5i2_BLQr4DwAAACc"] [Sun Jul 12 18:08:25.614786 2026] [security2:error] [pid 960377:tid 960607] [client 197.48.221.253:54558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQseRMANaV5i2_BLQr4GQAAAGM"] [Sun Jul 12 18:08:25.615016 2026] [security2:error] [pid 960377:tid 960607] [client 197.48.221.253:54558] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQseRMANaV5i2_BLQr4GQAAAGM"] [Sun Jul 12 18:08:25.732529 2026] [security2:error] [pid 960377:tid 960553] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQseRMANaV5i2_BLQr4FQAAAC0"] [Sun Jul 12 18:08:25.844460 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:25.844963 2026] [authz_core:error] [pid 940777:tid 940932] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:25.898900 2026] [security2:error] [pid 940777:tid 940841] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend/assets/.env"] [unique_id "alQseZihQxksrpCflyFaGgAA1DY"] [Sun Jul 12 18:08:25.959527 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:50944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/vendor/autoload.php"] [unique_id "alQseRMANaV5i2_BLQr4HQAAAG8"] [Sun Jul 12 18:08:25.964277 2026] [security2:error] [pid 940777:tid 940957] [client 34.156.118.101:45920] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.221.0"] [uri "/"] [unique_id "alQseZihQxksrpCflyFaGwAAAK0"] [Sun Jul 12 18:08:26.107838 2026] [security2:error] [pid 940777:tid 940960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXtgAAALA"] [Sun Jul 12 18:08:26.136533 2026] [security2:error] [pid 940777:tid 940857] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFYewAAkkY"] [Sun Jul 12 18:08:26.141059 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXtAAAAPg"] [Sun Jul 12 18:08:26.141956 2026] [security2:error] [pid 940777:tid 940949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsa5ihQxksrpCflyFYlwAAAKc"] [Sun Jul 12 18:08:26.150290 2026] [security2:error] [pid 940777:tid 940922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXtwAAAIo"] [Sun Jul 12 18:08:26.182749 2026] [security2:error] [pid 940777:tid 941005] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQscpihQxksrpCflyFZSgAAAN0"], referer: http://67.222.38.115/api/v1/buckets [Sun Jul 12 18:08:26.213945 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQschMANaV5i2_BLQr3bwAAAHM"], referer: http://67.222.38.115/api/v1/applications [Sun Jul 12 18:08:26.401716 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsehMANaV5i2_BLQr4IQAAAFI"] [Sun Jul 12 18:08:26.475482 2026] [security2:error] [pid 940777:tid 940983] [client 168.100.149.185:51150] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45240/bargainor/2307_impeccance.jsp"] [unique_id "alQsepihQxksrpCflyFaJwAAAMc"] [Sun Jul 12 18:08:26.661582 2026] [authz_core:error] [pid 960377:tid 960531] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:26.662098 2026] [authz_core:error] [pid 960377:tid 960531] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:26.787094 2026] [security2:error] [pid 940777:tid 941034] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsepihQxksrpCflyFaLgAAAPo"] [Sun Jul 12 18:08:26.954440 2026] [security2:error] [pid 940777:tid 940885] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/joomla/.env"] [unique_id "alQsepihQxksrpCflyFaMwAAuWE"] [Sun Jul 12 18:08:27.081112 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQschMANaV5i2_BLQr3cAAAAG0"] [Sun Jul 12 18:08:27.096931 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZZihQxksrpCflyFXwAAAAIk"] [Sun Jul 12 18:08:27.112770 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsaBMANaV5i2_BLQr2dwAAAF0"] [Sun Jul 12 18:08:27.119923 2026] [security2:error] [pid 940777:tid 940907] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFYeQAAknc"] [Sun Jul 12 18:08:27.121065 2026] [security2:error] [pid 960377:tid 960613] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQschMANaV5i2_BLQr3cgAAAGk"], referer: http://67.222.38.115/api/v1/archived-workflows [Sun Jul 12 18:08:27.215389 2026] [security2:error] [pid 940777:tid 941000] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZogAAANg"] [Sun Jul 12 18:08:27.221926 2026] [security2:error] [pid 940777:tid 941000] [client 20.244.27.100:53792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/view-transitions.php"] [unique_id "alQse5ihQxksrpCflyFaOgAAANg"], referer: binance.com [Sun Jul 12 18:08:27.233368 2026] [security2:error] [pid 940777:tid 940966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQscpihQxksrpCflyFZRwAAALY"] [Sun Jul 12 18:08:27.261092 2026] [security2:error] [pid 940777:tid 940919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQscpihQxksrpCflyFZSwAAAIc"], referer: http://67.222.38.115/api/v1/channels.list [Sun Jul 12 18:08:27.266342 2026] [security2:error] [pid 960377:tid 960630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQschMANaV5i2_BLQr3cQAAAHo"] [Sun Jul 12 18:08:27.350004 2026] [security2:error] [pid 940777:tid 940943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZmAAAAJ8"] [Sun Jul 12 18:08:27.443114 2026] [security2:error] [pid 960377:tid 960587] [client 57.141.18.122:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsehMANaV5i2_BLQr4MgAAAE8"] [Sun Jul 12 18:08:27.445959 2026] [security2:error] [pid 940777:tid 940956] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQse5ihQxksrpCflyFaOQAAAKw"] [Sun Jul 12 18:08:27.469496 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:27.470176 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:27.542493 2026] [security2:error] [pid 960377:tid 960600] [client 74.244.119.215:62085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsexMANaV5i2_BLQr4YQAAAFw"] [Sun Jul 12 18:08:27.542770 2026] [security2:error] [pid 960377:tid 960600] [client 74.244.119.215:62085] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsexMANaV5i2_BLQr4YQAAAFw"] [Sun Jul 12 18:08:27.610748 2026] [security2:error] [pid 940777:tid 940854] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/referrals/.env"] [unique_id "alQse5ihQxksrpCflyFaQgAA9UM"] [Sun Jul 12 18:08:27.775500 2026] [security2:error] [pid 940777:tid 940824] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/bookchain-client/.env"] [unique_id "alQse5ihQxksrpCflyFaRQAA-CY"] [Sun Jul 12 18:08:27.870137 2026] [security2:error] [pid 960377:tid 960556] [client 216.24.219.6:22379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.219.24.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQsexMANaV5i2_BLQr4YwAAADA"] [Sun Jul 12 18:08:27.938607 2026] [security2:error] [pid 940777:tid 940890] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/etc/ssh/id_ecdsa"] [unique_id "alQse5ihQxksrpCflyFaRgAApWY"] [Sun Jul 12 18:08:28.082964 2026] [security2:error] [pid 940777:tid 940859] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFYWQAAkkg"] [Sun Jul 12 18:08:28.101525 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZxMANaV5i2_BLQr2VwAAABE"] [Sun Jul 12 18:08:28.125443 2026] [security2:error] [pid 940777:tid 940880] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/movie-app/backend/.env"] [unique_id "alQsfJihQxksrpCflyFaSwAAllw"] [Sun Jul 12 18:08:28.290714 2026] [security2:error] [pid 940777:tid 940887] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/cronlab/.env"] [unique_id "alQsfJihQxksrpCflyFaVAAAxmM"] [Sun Jul 12 18:08:28.302487 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:28.303013 2026] [authz_core:error] [pid 940777:tid 940935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:28.458545 2026] [security2:error] [pid 940777:tid 940831] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/*.env.swp"] [unique_id "alQsfJihQxksrpCflyFaVQAAzC0"] [Sun Jul 12 18:08:28.470688 2026] [security2:error] [pid 940777:tid 940917] [client 168.100.149.171:16560] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45305/bargainor/2307_gunz.jsp"] [unique_id "alQsfJihQxksrpCflyFaVgAAAIU"] [Sun Jul 12 18:08:28.618868 2026] [security2:error] [pid 940777:tid 941016] [client 24.203.79.110:55495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsfJihQxksrpCflyFaWAAAAOg"] [Sun Jul 12 18:08:28.619096 2026] [security2:error] [pid 940777:tid 941016] [client 24.203.79.110:55495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsfJihQxksrpCflyFaWAAAAOg"] [Sun Jul 12 18:08:28.926931 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfBMANaV5i2_BLQr4dAAAAFg"] [Sun Jul 12 18:08:29.134983 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsZxMANaV5i2_BLQr2VgAAABA"] [Sun Jul 12 18:08:29.164948 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsexMANaV5i2_BLQr4WAAAAAE"] [Sun Jul 12 18:08:29.180836 2026] [authz_core:error] [pid 960377:tid 960565] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:29.181374 2026] [authz_core:error] [pid 960377:tid 960565] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:29.211106 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsexMANaV5i2_BLQr4WQAAAGg"], referer: http://67.222.38.115/api/v1/cluster-workflow-templates [Sun Jul 12 18:08:29.531567 2026] [security2:error] [pid 960377:tid 960630] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4hQAAAHo"] [Sun Jul 12 18:08:29.549979 2026] [security2:error] [pid 940777:tid 940946] [client 2.158.250.180:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsfJihQxksrpCflyFaWgAAAKI"] [Sun Jul 12 18:08:29.934220 2026] [authz_core:error] [pid 960377:tid 960580] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:29.935026 2026] [authz_core:error] [pid 960377:tid 960580] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:30.003532 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4nAAAABE"] [Sun Jul 12 18:08:30.009826 2026] [proxy:warn] [pid 960377:tid 960595] [client 45.205.1.223:49312] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be hatcherpasslodge.com for uri /400.shtml [Sun Jul 12 18:08:30.057064 2026] [security2:error] [pid 940777:tid 940928] [client 125.167.21.72:63295] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsfZihQxksrpCflyFaZgAAAJA"] [Sun Jul 12 18:08:30.057587 2026] [security2:error] [pid 940777:tid 940928] [client 125.167.21.72:63295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsfZihQxksrpCflyFaZgAAAJA"] [Sun Jul 12 18:08:30.471765 2026] [security2:error] [pid 960377:tid 960612] [client 168.100.149.240:29070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45370/bargainor/2307_monadically.jsp"] [unique_id "alQsfhMANaV5i2_BLQr4swAAAGg"] [Sun Jul 12 18:08:30.515072 2026] [security2:error] [pid 960377:tid 960599] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfhMANaV5i2_BLQr4sAAAAFs"] [Sun Jul 12 18:08:30.685527 2026] [security2:error] [pid 940777:tid 940822] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ajax.php.copy"] [unique_id "alQsfpihQxksrpCflyFadQAAlCQ"] [Sun Jul 12 18:08:30.768258 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:30.768817 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:30.771258 2026] [security2:error] [pid 960377:tid 960594] [client 51.77.210.64:38698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.210.77.51.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.monreaghulsterscotscentre.com"] [uri "/wp-content/themes/Divi/includes/builder/plugin-compat/pilotpress.php"] [unique_id "alQsfhMANaV5i2_BLQr4ugAAAFY"] [Sun Jul 12 18:08:30.771648 2026] [security2:error] [pid 960377:tid 960553] [client 47.128.32.78:63976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "cognitions.co.uk"] [uri "/robots.txt"] [unique_id "alQsfhMANaV5i2_BLQr4vAAAAC0"] [Sun Jul 12 18:08:31.185862 2026] [security2:error] [pid 960377:tid 960600] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfhMANaV5i2_BLQr4wQAAAFw"] [Sun Jul 12 18:08:31.257390 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4iwAAAG8"] [Sun Jul 12 18:08:31.266935 2026] [security2:error] [pid 960377:tid 960605] [client 141.94.79.3:35164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.79.94.141.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.monreaghulsterscotscentre.com"] [uri "/wp-content/themes/Divi/includes/builder/plugin-compat/pilotpress.php"] [unique_id "alQsfxMANaV5i2_BLQr4wwAAAGE"] [Sun Jul 12 18:08:31.471008 2026] [lsapi:warn] [pid 940777:tid 940945] [client 14.164.217.8:39808] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:08:31.546899 2026] [security2:error] [pid 940777:tid 940945] [client 14.164.217.8:39808] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "rapports-minoritaires.net"] [uri "/index.php"] [unique_id "alQsfZihQxksrpCflyFaYAAAAKE"] [Sun Jul 12 18:08:31.558452 2026] [authz_core:error] [pid 960377:tid 960526] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:31.558962 2026] [authz_core:error] [pid 960377:tid 960526] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:31.660148 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr4zwAAAHA"] [Sun Jul 12 18:08:31.796238 2026] [security2:error] [pid 960377:tid 960616] [client 168.100.149.153:42372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45435/bargainor/2307_enhalo.jsp"] [unique_id "alQsfxMANaV5i2_BLQr42QAAAGw"] [Sun Jul 12 18:08:32.165108 2026] [security2:error] [pid 960377:tid 960573] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4jQAAAAU"], referer: http://67.222.38.115/api/v1/configmaps [Sun Jul 12 18:08:32.226190 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr42gAAAA4"] [Sun Jul 12 18:08:32.230235 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4kAAAACE"], referer: http://67.222.38.115/api/v1/configs [Sun Jul 12 18:08:32.251237 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfRMANaV5i2_BLQr4jAAAABs"] [Sun Jul 12 18:08:32.350649 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:32.351196 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:32.615708 2026] [security2:error] [pid 940777:tid 941000] [client 45.205.1.223:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/index.php"] [unique_id "alQsfpihQxksrpCflyFaZwAAANg"] [Sun Jul 12 18:08:32.615762 2026] [security2:error] [pid 940777:tid 941000] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/index.php"] [unique_id "alQsfpihQxksrpCflyFaZwAAANg"] [Sun Jul 12 18:08:32.616953 2026] [security2:error] [pid 960377:tid 960595] [client 45.205.1.223:49312] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/400.shtml"] [unique_id "alQsfhMANaV5i2_BLQr4owAAAFc"] [Sun Jul 12 18:08:32.713622 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgBMANaV5i2_BLQr47AAAAAg"] [Sun Jul 12 18:08:32.876180 2026] [security2:error] [pid 940777:tid 940840] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/whm/.env"] [unique_id "alQsgJihQxksrpCflyFamgABADU"] [Sun Jul 12 18:08:33.107181 2026] [security2:error] [pid 940777:tid 940924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsaZihQxksrpCflyFYXgAAAIw"] [Sun Jul 12 18:08:33.241249 2026] [authz_core:error] [pid 960377:tid 960517] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:33.241838 2026] [authz_core:error] [pid 960377:tid 960517] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:33.404763 2026] [security2:error] [pid 940777:tid 940974] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgZihQxksrpCflyFangAAAL4"] [Sun Jul 12 18:08:33.566807 2026] [security2:error] [pid 940777:tid 940795] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/Hash/.env"] [unique_id "alQsgZihQxksrpCflyFaogABAQk"] [Sun Jul 12 18:08:33.730562 2026] [security2:error] [pid 940777:tid 940828] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/etc/consul.d/config.json"] [unique_id "alQsgZihQxksrpCflyFapgABAio"] [Sun Jul 12 18:08:33.804224 2026] [security2:error] [pid 940777:tid 941038] [client 168.100.149.43:30994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45500/bargainor/2307_metalogical.jsp"] [unique_id "alQsgZihQxksrpCflyFaqAAAAP4"] [Sun Jul 12 18:08:33.905600 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:50956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php"] [unique_id "alQsgRMANaV5i2_BLQr5AQAAAAs"] [Sun Jul 12 18:08:33.939595 2026] [proxy:warn] [pid 960377:tid 960546] [client 45.205.1.223:49328] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be hatcherpasslodge.com for uri /400.shtml [Sun Jul 12 18:08:34.040563 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:34.041152 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:34.221990 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:51848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php.txt"] [unique_id "alQsgpihQxksrpCflyFavgAAAL8"] [Sun Jul 12 18:08:34.266104 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgZihQxksrpCflyFarQAAALA"] [Sun Jul 12 18:08:34.315023 2026] [security2:error] [pid 940777:tid 940933] [client 45.205.1.223:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/index.php"] [unique_id "alQsgZihQxksrpCflyFargAAAJU"] [Sun Jul 12 18:08:34.315090 2026] [security2:error] [pid 940777:tid 940933] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/index.php"] [unique_id "alQsgZihQxksrpCflyFargAAAJU"] [Sun Jul 12 18:08:34.316126 2026] [security2:error] [pid 960377:tid 960546] [client 45.205.1.223:49328] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "hatcherpasslodge.com"] [uri "/400.shtml"] [unique_id "alQsgRMANaV5i2_BLQr5BQAAACY"] [Sun Jul 12 18:08:34.400356 2026] [authz_core:error] [pid 940777:tid 940922] [client 141.94.94.121:0] AH01630: client denied by server configuration: /home4/monreagh/public_html/monreaghulsterscotscentre/wp-content/themes/Divi/includes/builder/feature/error_log [Sun Jul 12 18:08:34.551383 2026] [security2:error] [pid 960377:tid 960504] [remote 68.178.160.25:49810] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsghMANaV5i2_BLQr5GwAAN30"] [Sun Jul 12 18:08:34.621476 2026] [security2:error] [pid 960377:tid 960504] [remote 68.178.160.25:49810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.160.178.68.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQsghMANaV5i2_BLQr5GwAAN30"] [Sun Jul 12 18:08:34.711200 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsghMANaV5i2_BLQr5GgAAADI"] [Sun Jul 12 18:08:34.831551 2026] [core:error] [pid 960377:tid 960498] (13)Permission denied: [remote 2a0d:5600:19:34::13:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/page/2/?eventDate=2024-03-08&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:08:34.943768 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:34.944257 2026] [authz_core:error] [pid 940777:tid 940964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:34.955032 2026] [core:error] [pid 940777:tid 940820] (13)Permission denied: [remote 190.166.198.111:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/page/4/?eventDate=2023-06-03&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:08:34.991866 2026] [core:error] [pid 940777:tid 940838] (13)Permission denied: [remote 154.59.206.40:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/page/4/?eventDate=2023-06-03&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:08:35.100284 2026] [security2:error] [pid 940777:tid 940802] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZhgAAkhA"], referer: http://67.222.40.58/config.json [Sun Jul 12 18:08:35.103127 2026] [security2:error] [pid 960377:tid 960510] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsaRMANaV5i2_BLQr2lQAAAAI"] [Sun Jul 12 18:08:35.129722 2026] [security2:error] [pid 940777:tid 940804] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFYlQAAkhI"] [Sun Jul 12 18:08:35.271060 2026] [security2:error] [pid 940777:tid 941034] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgpihQxksrpCflyFaywAAAPo"] [Sun Jul 12 18:08:35.337409 2026] [security2:error] [pid 940777:tid 940950] [client 94.187.171.125:57653] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsg5ihQxksrpCflyFa0QAAAKY"] [Sun Jul 12 18:08:35.337651 2026] [security2:error] [pid 940777:tid 940950] [client 94.187.171.125:57653] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsg5ihQxksrpCflyFa0QAAAKY"] [Sun Jul 12 18:08:35.702528 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgxMANaV5i2_BLQr5LwAAAFQ"] [Sun Jul 12 18:08:35.727529 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:35.728049 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:35.806762 2026] [security2:error] [pid 960377:tid 960538] [client 168.100.149.63:15206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45565/bargainor/2307_psychoreflex.jsp"] [unique_id "alQsgxMANaV5i2_BLQr5PAAAAB4"] [Sun Jul 12 18:08:36.085154 2026] [security2:error] [pid 940777:tid 940818] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZcgAAkiA"], referer: http://67.222.40.58/yarn-debug.log [Sun Jul 12 18:08:36.101760 2026] [security2:error] [pid 940777:tid 940898] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZdgAAkm4"], referer: http://67.222.40.58/.bower.json [Sun Jul 12 18:08:36.170851 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsgxMANaV5i2_BLQr5QgAAAGE"] [Sun Jul 12 18:08:36.202144 2026] [security2:error] [pid 960377:tid 960549] [client 197.48.221.253:55157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQshBMANaV5i2_BLQr5RQAAACk"] [Sun Jul 12 18:08:36.202477 2026] [security2:error] [pid 960377:tid 960549] [client 197.48.221.253:55157] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQshBMANaV5i2_BLQr5RQAAACk"] [Sun Jul 12 18:08:36.342790 2026] [security2:error] [pid 940777:tid 940902] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/storage/api_keys.sql"] [unique_id "alQshJihQxksrpCflyFa4AAAunI"] [Sun Jul 12 18:08:36.546856 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:36.547527 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:36.614864 2026] [security2:error] [pid 960377:tid 960634] [client 51.68.107.144:9653] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "tigmaroses.com"] [uri "/robots.txt"] [unique_id "alQshBMANaV5i2_BLQr5UAAAAH4"] [Sun Jul 12 18:08:36.616257 2026] [security2:error] [pid 960377:tid 960634] [client 51.68.107.144:9653] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "tigmaroses.com"] [uri "/robots.txt"] [unique_id "alQshBMANaV5i2_BLQr5UAAAAH4"] [Sun Jul 12 18:08:36.802579 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQshBMANaV5i2_BLQr5TQAAABA"] [Sun Jul 12 18:08:36.832063 2026] [security2:error] [pid 940777:tid 940933] [client 5.255.231.5:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQshJihQxksrpCflyFa6QAAAJU"] [Sun Jul 12 18:08:36.929884 2026] [security2:error] [pid 940777:tid 940982] [client 85.215.150.55:57343] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.cecweb.org"] [uri "/.git/config"] [unique_id "alQshJihQxksrpCflyFa7gAAAMY"] [Sun Jul 12 18:08:36.967828 2026] [security2:error] [pid 940777:tid 940841] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/java-app/server/.env"] [unique_id "alQshJihQxksrpCflyFa8QAAnjY"] [Sun Jul 12 18:08:37.002963 2026] [security2:error] [pid 940777:tid 940952] [client 193.19.109.32:48017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.109.19.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "idealicious.com"] [uri "/wp-login.php"] [unique_id "alQshJihQxksrpCflyFa7wAAAKg"] [Sun Jul 12 18:08:37.004832 2026] [security2:error] [pid 940777:tid 941015] [client 173.239.254.173:39387] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.254.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "idealiciousblog.com"] [uri "/wp-login.php"] [unique_id "alQshJihQxksrpCflyFa8gAAAOc"] [Sun Jul 12 18:08:37.066117 2026] [security2:error] [pid 960377:tid 960612] [client 173.239.254.150:63395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 150.254.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "idealiciousdesign.com"] [uri "/wp-login.php"] [unique_id "alQshBMANaV5i2_BLQr5WwAAAGg"] [Sun Jul 12 18:08:37.094027 2026] [security2:error] [pid 940777:tid 940886] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZdAAAkmI"], referer: http://67.222.40.58/Gruntfile.js [Sun Jul 12 18:08:37.108856 2026] [security2:error] [pid 960377:tid 960577] [client 173.239.254.170:24617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.254.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "idealiciousdesigngroup.com"] [uri "/wp-login.php"] [unique_id "alQshRMANaV5i2_BLQr5XgAAAEU"] [Sun Jul 12 18:08:37.108934 2026] [security2:error] [pid 940777:tid 940894] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZfwAAkmo"], referer: http://67.222.40.58/webpack.config.js [Sun Jul 12 18:08:37.133888 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr4zAAAACg"] [Sun Jul 12 18:08:37.185281 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZlAAAAMI"], referer: http://67.222.40.58/readme.txt [Sun Jul 12 18:08:37.343074 2026] [security2:error] [pid 940777:tid 940959] [client 43.173.1.57:42490] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "tekbevy.com"] [uri "/400.shtml"] [unique_id "alQshZihQxksrpCflyFbCwAAAK8"] [Sun Jul 12 18:08:37.395950 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:37.396440 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:37.607071 2026] [security2:error] [pid 940777:tid 940893] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/vite.config.js.bak"] [unique_id "alQshZihQxksrpCflyFbEwAA3Wk"] [Sun Jul 12 18:08:37.625699 2026] [security2:error] [pid 960377:tid 960535] [client 57.141.18.29:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5dgAAABs"] [Sun Jul 12 18:08:37.635119 2026] [security2:error] [pid 940777:tid 940969] [client 84.85.5.41:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQshJihQxksrpCflyFa9AAAALk"] [Sun Jul 12 18:08:38.053039 2026] [security2:error] [pid 960377:tid 960578] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5hAAAAEY"] [Sun Jul 12 18:08:38.085026 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3qAAAABY"], referer: http://67.222.40.58/.editorconfig [Sun Jul 12 18:08:38.107029 2026] [security2:error] [pid 940777:tid 940987] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/.env"] [unique_id "alQshpihQxksrpCflyFbHAAAAMs"] [Sun Jul 12 18:08:38.123145 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr4zQAAADY"], referer: http://67.222.38.115/api/v1/cron-workflows [Sun Jul 12 18:08:38.132123 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZnAAAALw"], referer: http://67.222.40.58/mkdocs.yml [Sun Jul 12 18:08:38.164112 2026] [security2:error] [pid 940777:tid 941006] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsf5ihQxksrpCflyFaegAAAN4"] [Sun Jul 12 18:08:38.176156 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3rAAAAHk"], referer: http://67.222.40.58/config/database.yml [Sun Jul 12 18:08:38.234978 2026] [security2:error] [pid 940777:tid 940945] [client 74.244.119.215:30876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQshpihQxksrpCflyFbHwAAAKE"] [Sun Jul 12 18:08:38.235426 2026] [security2:error] [pid 940777:tid 940945] [client 74.244.119.215:30876] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQshpihQxksrpCflyFbHwAAAKE"] [Sun Jul 12 18:08:38.279486 2026] [authz_core:error] [pid 940777:tid 940983] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:38.280487 2026] [authz_core:error] [pid 940777:tid 940983] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:38.445844 2026] [security2:error] [pid 960377:tid 960628] [client 168.100.149.8:17756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45630/bargainor/2307_mailable.jsp"] [unique_id "alQshhMANaV5i2_BLQr5lwAAAHg"] [Sun Jul 12 18:08:38.545941 2026] [security2:error] [pid 960377:tid 960571] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQshhMANaV5i2_BLQr5lgAAAD8"] [Sun Jul 12 18:08:38.594167 2026] [security2:error] [pid 940777:tid 941034] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/.env"] [unique_id "alQshpihQxksrpCflyFbJAAAAPo"] [Sun Jul 12 18:08:39.085587 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:39.086316 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:39.086543 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQshhMANaV5i2_BLQr5pgAAAGk"] [Sun Jul 12 18:08:39.216971 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr4zgAAACM"], referer: http://67.222.38.115/api/v1/databases [Sun Jul 12 18:08:39.311114 2026] [security2:error] [pid 960377:tid 960519] [client 88.18.209.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQshhMANaV5i2_BLQr5owAAAAs"] [Sun Jul 12 18:08:39.312372 2026] [security2:error] [pid 960377:tid 960562] [client 24.203.79.110:56010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQshxMANaV5i2_BLQr5vQAAADY"] [Sun Jul 12 18:08:39.342283 2026] [security2:error] [pid 960377:tid 960562] [client 24.203.79.110:56010] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQshxMANaV5i2_BLQr5vQAAADY"] [Sun Jul 12 18:08:39.323548 2026] [core:error] [pid 940777:tid 940801] (13)Permission denied: [remote 36.80.116.41:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/page/2/?eventDate=2024-03-08&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:08:39.597180 2026] [security2:error] [pid 940777:tid 940924] [client 65.21.113.206:59990] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsh5ihQxksrpCflyFbNgAAAIw"] [Sun Jul 12 18:08:39.644838 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsh5ihQxksrpCflyFbMwAAANA"] [Sun Jul 12 18:08:39.947865 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:39.948351 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:40.117387 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:50120] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsiBMANaV5i2_BLQr5yAAAABM"] [Sun Jul 12 18:08:40.131714 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQshxMANaV5i2_BLQr5xQAAACk"] [Sun Jul 12 18:08:40.171314 2026] [security2:error] [pid 960377:tid 960517] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsfxMANaV5i2_BLQr4ywAAAD0"] [Sun Jul 12 18:08:40.437587 2026] [security2:error] [pid 960377:tid 960543] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3otMTQ3Ny96a2gvNDc4MTMta2gzMA=="] [unique_id "alQsiBMANaV5i2_BLQr5zgAAACM"] [Sun Jul 12 18:08:40.450032 2026] [security2:error] [pid 940777:tid 941006] [client 125.167.21.72:61744] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsiJihQxksrpCflyFbTAAAAN4"] [Sun Jul 12 18:08:40.450286 2026] [security2:error] [pid 940777:tid 941006] [client 125.167.21.72:61744] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsiJihQxksrpCflyFbTAAAAN4"] [Sun Jul 12 18:08:40.483180 2026] [security2:error] [pid 960377:tid 960583] [client 168.100.149.181:59696] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45695/bargainor/2307_epidemiology.jsp"] [unique_id "alQsiBMANaV5i2_BLQr5zwAAAEs"] [Sun Jul 12 18:08:40.622355 2026] [security2:error] [pid 960377:tid 960625] [client 65.21.113.206:50120] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQsiBMANaV5i2_BLQr50wAAAHU"] [Sun Jul 12 18:08:40.646876 2026] [security2:error] [pid 960377:tid 960577] [client 74.7.244.3:48614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.xrayalphacharlie.slateboxstudios.com"] [uri "/robots.txt"] [unique_id "alQsiBMANaV5i2_BLQr51gAARTw"] [Sun Jul 12 18:08:40.665183 2026] [security2:error] [pid 940777:tid 940976] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/app/.env"] [unique_id "alQsiJihQxksrpCflyFbUAAAAMA"] [Sun Jul 12 18:08:40.706458 2026] [security2:error] [pid 960377:tid 960559] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsiBMANaV5i2_BLQr5zAAAADM"] [Sun Jul 12 18:08:40.741590 2026] [authz_core:error] [pid 960377:tid 960509] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:40.742097 2026] [authz_core:error] [pid 960377:tid 960509] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:40.795598 2026] [proxy:error] [pid 960377:tid 960578] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:08:40.795844 2026] [proxy_http:error] [pid 960377:tid 960578] [client 74.7.241.181:45838] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:08:40.798577 2026] [proxy:error] [pid 960377:tid 960578] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:08:40.798838 2026] [proxy_http:error] [pid 960377:tid 960578] [client 74.7.241.181:45838] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:08:40.799129 2026] [security2:error] [pid 960377:tid 960578] [client 74.7.241.181:45838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcalendars.terrygronenthal.com"] [uri "/___proxy_subdomain_cpcalendars/cgi-sys/503.html"] [unique_id "alQsiBMANaV5i2_BLQr52AAAAEY"] [Sun Jul 12 18:08:40.811613 2026] [proxy:error] [pid 940777:tid 941003] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:08:40.812487 2026] [proxy_http:error] [pid 940777:tid 941003] [client 74.7.175.155:53056] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:08:40.817461 2026] [proxy:error] [pid 940777:tid 941003] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:08:40.817770 2026] [proxy_http:error] [pid 940777:tid 941003] [client 74.7.175.155:53056] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:08:40.818229 2026] [security2:error] [pid 940777:tid 941003] [client 74.7.175.155:53056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcalendars.nohandsnoexcuses.com"] [uri "/___proxy_subdomain_cpcalendars/cgi-sys/503.html"] [unique_id "alQsiJihQxksrpCflyFbVAAAANs"] [Sun Jul 12 18:08:40.995041 2026] [core:error] [pid 940777:tid 940966] [client 74.7.241.181:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:40.995083 2026] [core:error] [pid 940777:tid 940966] [client 74.7.241.181:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:08:40.995352 2026] [security2:error] [pid 940777:tid 940966] [client 74.7.241.181:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcalendars.terrygronenthal.com"] [uri "/___proxy_subdomain_cpcalendars/index.php"] [unique_id "alQsiJihQxksrpCflyFbWgAAALY"] [Sun Jul 12 18:08:40.996685 2026] [security2:error] [pid 940777:tid 940985] [client 74.7.241.181:43860] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcalendars.terrygronenthal.com"] [uri "/___proxy_subdomain_cpcalendars/robots.txt"] [unique_id "alQsiJihQxksrpCflyFbWAAAyVw"] [Sun Jul 12 18:08:41.010963 2026] [security2:error] [pid 940777:tid 941014] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/app/.env"] [unique_id "alQsiZihQxksrpCflyFbXAAAAOY"] [Sun Jul 12 18:08:41.084878 2026] [security2:error] [pid 940777:tid 941008] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZowAAAOA"], referer: http://67.222.40.58/Procfile [Sun Jul 12 18:08:41.089995 2026] [security2:error] [pid 940777:tid 940868] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsW5ihQxksrpCflyFZhAAAklA"], referer: http://67.222.40.58/sftp-config.json [Sun Jul 12 18:08:41.142073 2026] [security2:error] [pid 940777:tid 940937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZoAAAAJk"], referer: http://67.222.40.58/license.md [Sun Jul 12 18:08:41.148973 2026] [security2:error] [pid 940777:tid 940957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsgJihQxksrpCflyFahQAAANI"], referer: http://67.222.38.115/api/v1/deploy [Sun Jul 12 18:08:41.220376 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsgBMANaV5i2_BLQr45gAAACs"] [Sun Jul 12 18:08:41.260055 2026] [security2:error] [pid 960377:tid 960571] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsiBMANaV5i2_BLQr52QAAAD8"] [Sun Jul 12 18:08:41.469329 2026] [security2:error] [pid 940777:tid 940918] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/api/.env"] [unique_id "alQsiZihQxksrpCflyFbaAAAAIY"] [Sun Jul 12 18:08:41.559387 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:41.560063 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:41.693315 2026] [security2:error] [pid 940777:tid 940931] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsiZihQxksrpCflyFbZwAAAJM"] [Sun Jul 12 18:08:41.812325 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsiRMANaV5i2_BLQr54wAAACw"] [Sun Jul 12 18:08:41.812378 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsiRMANaV5i2_BLQr54wAAACw"] [Sun Jul 12 18:08:41.813507 2026] [security2:error] [pid 960377:tid 960520] [client 65.21.113.206:50128] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3otMTQ3Ny96a2gvNDc4MTMta2gzMA=="] [unique_id "alQsiRMANaV5i2_BLQr54AAAAAw"] [Sun Jul 12 18:08:41.829330 2026] [security2:error] [pid 940777:tid 940922] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/api/.env"] [unique_id "alQsiZihQxksrpCflyFbawAAAIo"] [Sun Jul 12 18:08:41.891160 2026] [security2:error] [pid 960377:tid 960543] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/infophp.php"] [unique_id "alQsiRMANaV5i2_BLQr59gAAACM"] [Sun Jul 12 18:08:42.123921 2026] [security2:error] [pid 960377:tid 960622] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3swAAAHI"], referer: http://67.222.40.58/Dockerfile [Sun Jul 12 18:08:42.217955 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3qgAAAB8"], referer: http://67.222.40.58/readme [Sun Jul 12 18:08:42.327842 2026] [security2:error] [pid 940777:tid 941002] [client 54.236.1.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsipihQxksrpCflyFbbwAAANo"] [Sun Jul 12 18:08:42.341265 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:42.341774 2026] [authz_core:error] [pid 940777:tid 940940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:42.426634 2026] [security2:error] [pid 940777:tid 940973] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsipihQxksrpCflyFbcgAAAL0"] [Sun Jul 12 18:08:42.431556 2026] [security2:error] [pid 960377:tid 960556] [client 179.52.180.196:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "eatthedistrict.com"] [uri "/index.php"] [unique_id "alQsihMANaV5i2_BLQr6AAAAADA"], referer: https://eatthedistrict.com [Sun Jul 12 18:08:42.441307 2026] [security2:error] [pid 960377:tid 960596] [client 168.100.149.73:15796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45760/bargainor/2307_secque.jsp"] [unique_id "alQsihMANaV5i2_BLQr6AwAAAFg"] [Sun Jul 12 18:08:42.546349 2026] [authz_core:error] [pid 960377:tid 960580] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/IXR/error_log, referer: binance.com [Sun Jul 12 18:08:42.592522 2026] [security2:error] [pid 940777:tid 940849] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/accounting/.env"] [unique_id "alQsipihQxksrpCflyFbgAAAwD4"] [Sun Jul 12 18:08:42.940236 2026] [security2:error] [pid 940777:tid 940957] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/.env.old"] [unique_id "alQsipihQxksrpCflyFbjQAAAK0"] [Sun Jul 12 18:08:43.073185 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsgBMANaV5i2_BLQr46AAAAG4"], referer: http://67.222.38.115/api/v1/directory [Sun Jul 12 18:08:43.091934 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:43.092465 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:43.127058 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3qwAAAGU"], referer: http://67.222.40.58/.bashrc [Sun Jul 12 18:08:43.137921 2026] [security2:error] [pid 940777:tid 941022] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/.env.old"] [unique_id "alQsi5ihQxksrpCflyFbkQAAAO4"] [Sun Jul 12 18:08:43.174887 2026] [security2:error] [pid 940777:tid 941013] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZlQAAAOU"], referer: http://67.222.40.58/.gitattributes [Sun Jul 12 18:08:43.214855 2026] [security2:error] [pid 940777:tid 940997] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZmwAAANU"], referer: http://67.222.40.58/VERSION [Sun Jul 12 18:08:43.324068 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsihMANaV5i2_BLQr6FQAAABs"] [Sun Jul 12 18:08:43.458427 2026] [security2:error] [pid 940777:tid 940981] [client 14.232.230.204:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "writtenbyjca.com"] [uri "/index.php"] [unique_id "alQshZihQxksrpCflyFbDQAAAMU"] [Sun Jul 12 18:08:43.500050 2026] [security2:error] [pid 960377:tid 960513] [client 116.179.37.165:41294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 165.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQsixMANaV5i2_BLQr6GgAAAAU"], referer: https://idreamofjeannemarie.com/part-2-of-my-2017-doll-dresses-in-review/comment-page-1/ [Sun Jul 12 18:08:43.688990 2026] [security2:error] [pid 960377:tid 960605] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQsihMANaV5i2_BLQr6DwAAAGE"] [Sun Jul 12 18:08:43.713789 2026] [security2:error] [pid 940777:tid 940934] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQsf5ihQxksrpCflyFaggAAAJY"] [Sun Jul 12 18:08:43.783570 2026] [security2:error] [pid 960377:tid 960617] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsixMANaV5i2_BLQr6HAAAAG0"] [Sun Jul 12 18:08:43.884056 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:43.884546 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:43.951061 2026] [security2:error] [pid 940777:tid 940786] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/teams/.env"] [unique_id "alQsi5ihQxksrpCflyFbpQAAxwA"] [Sun Jul 12 18:08:44.112900 2026] [security2:error] [pid 940777:tid 940962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZpAAAALI"], referer: http://67.222.40.58/Gemfile [Sun Jul 12 18:08:44.119750 2026] [security2:error] [pid 940777:tid 940836] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/error/.env"] [unique_id "alQsjJihQxksrpCflyFbpwAAsjI"] [Sun Jul 12 18:08:44.145557 2026] [security2:error] [pid 940777:tid 941019] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZoQAAAOs"], referer: http://67.222.40.58/.hg [Sun Jul 12 18:08:44.149221 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3tAAAAHE"], referer: http://67.222.40.58/.git/HEAD [Sun Jul 12 18:08:44.157094 2026] [security2:error] [pid 940777:tid 941026] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZnwAAAPI"], referer: http://67.222.40.58/readme.mkd [Sun Jul 12 18:08:44.160078 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3sgAAAHY"], referer: http://67.222.40.58/LICENSE [Sun Jul 12 18:08:44.192436 2026] [security2:error] [pid 940777:tid 941001] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZmgAAANk"], referer: http://67.222.40.58/.bowerrc [Sun Jul 12 18:08:44.383715 2026] [security2:error] [pid 960377:tid 960630] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3otNTk2MC96bXgvMTc3NjktbXhjeQ=="] [unique_id "alQsjBMANaV5i2_BLQr6NwAAAHo"] [Sun Jul 12 18:08:44.445645 2026] [security2:error] [pid 960377:tid 960588] [client 168.100.149.85:58158] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45825/bargainor/2307_dislevelment.jsp"] [unique_id "alQsjBMANaV5i2_BLQr6OAAAAFA"] [Sun Jul 12 18:08:44.610900 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsjBMANaV5i2_BLQr6NQAAAFI"] [Sun Jul 12 18:08:44.649698 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:44.650256 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:44.776813 2026] [security2:error] [pid 940777:tid 940877] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/live/.env"] [unique_id "alQsjJihQxksrpCflyFbugAA0lk"] [Sun Jul 12 18:08:44.885285 2026] [security2:error] [pid 940777:tid 941040] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/laravel/.env"] [unique_id "alQsjJihQxksrpCflyFbwAAAAQA"] [Sun Jul 12 18:08:45.205053 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdBMANaV5i2_BLQr3qQAAABU"], referer: http://67.222.40.58/.htpasswd [Sun Jul 12 18:08:45.217062 2026] [security2:error] [pid 940777:tid 940918] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/laravel/.env"] [unique_id "alQsjZihQxksrpCflyFbxgAAAIY"] [Sun Jul 12 18:08:45.232649 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdZihQxksrpCflyFZrgAAAPM"], referer: http://67.222.40.58/.aws/credentials [Sun Jul 12 18:08:45.302944 2026] [security2:error] [pid 960377:tid 960602] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdRMANaV5i2_BLQr3xQAAAF4"], referer: http://67.222.40.58/config/deploy.yml [Sun Jul 12 18:08:45.304438 2026] [security2:error] [pid 940777:tid 941005] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsjJihQxksrpCflyFbwwAAAN0"] [Sun Jul 12 18:08:45.352243 2026] [security2:error] [pid 940777:tid 941025] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZpQAAAPE"], referer: http://67.222.40.58/pom.xml [Sun Jul 12 18:08:45.424943 2026] [security2:error] [pid 940777:tid 940999] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsdJihQxksrpCflyFZmQAAANc"], referer: http://67.222.40.58/.gitignore [Sun Jul 12 18:08:45.470934 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:45.471478 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:45.504302 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsjJihQxksrpCflyFbwQAAAI8"] [Sun Jul 12 18:08:45.504355 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsjJihQxksrpCflyFbwQAAAI8"] [Sun Jul 12 18:08:45.506349 2026] [security2:error] [pid 940777:tid 940964] [client 65.21.113.206:59722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3otNTk2MC96bXgvMTc3NjktbXhjeQ=="] [unique_id "alQsjJihQxksrpCflyFbvgAAALQ"] [Sun Jul 12 18:08:45.604164 2026] [security2:error] [pid 940777:tid 940959] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/admin-app/.env"] [unique_id "alQsjZihQxksrpCflyFb0gAAAK8"] [Sun Jul 12 18:08:45.759195 2026] [security2:error] [pid 960377:tid 960614] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsjRMANaV5i2_BLQr6VQAAAGo"] [Sun Jul 12 18:08:45.805420 2026] [security2:error] [pid 940777:tid 941002] [client 168.100.149.99:29120] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45890/bargainor/2307_limnoria.jsp"] [unique_id "alQsjZihQxksrpCflyFb1gAAANo"] [Sun Jul 12 18:08:45.970598 2026] [security2:error] [pid 960377:tid 960578] [client 94.187.171.125:58133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsjRMANaV5i2_BLQr6WgAAAEY"] [Sun Jul 12 18:08:45.970876 2026] [security2:error] [pid 960377:tid 960578] [client 94.187.171.125:58133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsjRMANaV5i2_BLQr6WgAAAEY"] [Sun Jul 12 18:08:45.997845 2026] [security2:error] [pid 940777:tid 940952] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/admin-app/.env"] [unique_id "alQsjZihQxksrpCflyFb3QAAAKg"] [Sun Jul 12 18:08:46.162350 2026] [security2:error] [pid 960377:tid 960603] [client 57.141.18.49:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "avidagents.com"] [uri "/index.php"] [unique_id "alQsihMANaV5i2_BLQr5_QAAAF8"] [Sun Jul 12 18:08:46.283314 2026] [security2:error] [pid 940777:tid 941034] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsjZihQxksrpCflyFb3AAAAPo"] [Sun Jul 12 18:08:46.319859 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:46.320529 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:46.412334 2026] [security2:error] [pid 940777:tid 941015] [client 143.14.6.65:33870] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjpihQxksrpCflyFb6gAAAOc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:46.414716 2026] [security2:error] [pid 940777:tid 941024] [client 143.14.6.31:18710] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjpihQxksrpCflyFb7gAAAPA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:46.432288 2026] [security2:error] [pid 940777:tid 941036] [client 143.14.6.206:57034] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjpihQxksrpCflyFb7QAAAPw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:46.443537 2026] [security2:error] [pid 940777:tid 940971] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/development/.env"] [unique_id "alQsjpihQxksrpCflyFb8QAAALs"] [Sun Jul 12 18:08:46.452883 2026] [security2:error] [pid 940777:tid 940802] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/pictures/.env"] [unique_id "alQsjpihQxksrpCflyFb8gAAphA"] [Sun Jul 12 18:08:46.606416 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjRMANaV5i2_BLQr6UwAAAG8"], referer: http://67.222.40.58/tags [Sun Jul 12 18:08:46.608109 2026] [security2:error] [pid 940777:tid 940825] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.ssh/id_rsa"] [unique_id "alQscZihQxksrpCflyFb-QAAkic"] [Sun Jul 12 18:08:46.610304 2026] [security2:error] [pid 940777:tid 940846] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php.php"] [unique_id "alQsdZihQxksrpCflyFb_AAAkjs"] [Sun Jul 12 18:08:46.626645 2026] [security2:error] [pid 960377:tid 960609] [client 197.48.221.253:55753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsjhMANaV5i2_BLQr6bQAAAGU"] [Sun Jul 12 18:08:46.626989 2026] [security2:error] [pid 960377:tid 960609] [client 197.48.221.253:55753] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsjhMANaV5i2_BLQr6bQAAAGU"] [Sun Jul 12 18:08:46.632173 2026] [security2:error] [pid 940777:tid 940898] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/src/api_keys.sql"] [unique_id "alQsjpihQxksrpCflyFb_gAAwW4"] [Sun Jul 12 18:08:46.647820 2026] [security2:error] [pid 940777:tid 940995] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjZihQxksrpCflyFb0AAAANM"] [Sun Jul 12 18:08:46.695282 2026] [security2:error] [pid 940777:tid 941043] [client 207.180.11.75:29116] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjpihQxksrpCflyFb9gAAAQM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:46.718095 2026] [security2:error] [pid 960377:tid 960615] [client 144.31.35.194:21058] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjhMANaV5i2_BLQr6awAAAGs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:46.801645 2026] [security2:error] [pid 960377:tid 960601] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3oxcDJ1LTUwNTgvejEtNDA0OTMvMXAydQ=="] [unique_id "alQsjhMANaV5i2_BLQr6dAAAAF0"] [Sun Jul 12 18:08:46.832019 2026] [security2:error] [pid 940777:tid 941005] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/development/.env"] [unique_id "alQsjpihQxksrpCflyFcBwAAAN0"] [Sun Jul 12 18:08:46.857572 2026] [security2:error] [pid 940777:tid 941029] [client 207.180.11.75:29120] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQsjpihQxksrpCflyFcAwAAAPU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:47.179855 2026] [security2:error] [pid 940777:tid 941041] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/apps/.env"] [unique_id "alQsj5ihQxksrpCflyFcDAAAAQE"] [Sun Jul 12 18:08:47.230455 2026] [authz_core:error] [pid 960377:tid 960611] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:47.231018 2026] [authz_core:error] [pid 960377:tid 960611] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:47.254594 2026] [security2:error] [pid 940777:tid 940967] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsjpihQxksrpCflyFcCAAAALc"] [Sun Jul 12 18:08:47.274523 2026] [security2:error] [pid 940777:tid 940994] [client 24.85.209.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsjpihQxksrpCflyFb9QAAANI"] [Sun Jul 12 18:08:47.385270 2026] [security2:error] [pid 940777:tid 940965] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/apps/.env"] [unique_id "alQsj5ihQxksrpCflyFcGQAAALU"] [Sun Jul 12 18:08:47.599442 2026] [authz_core:error] [pid 940777:tid 941044] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/IXR/error_log, referer: binance.com [Sun Jul 12 18:08:47.790622 2026] [security2:error] [pid 940777:tid 941024] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/cp/.env"] [unique_id "alQsj5ihQxksrpCflyFcKQAAAPA"] [Sun Jul 12 18:08:47.815657 2026] [security2:error] [pid 940777:tid 940954] [client 168.100.149.194:30650] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/45955/bargainor/2307_milksopism.jsp"] [unique_id "alQsj5ihQxksrpCflyFcKwAAAKo"] [Sun Jul 12 18:08:47.847761 2026] [security2:error] [pid 940777:tid 940955] [client 74.7.228.61:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQsiJihQxksrpCflyFbUwAAAKs"] [Sun Jul 12 18:08:47.847837 2026] [security2:error] [pid 940777:tid 940955] [client 74.7.228.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQsiJihQxksrpCflyFbUwAAAKs"] [Sun Jul 12 18:08:47.851000 2026] [security2:error] [pid 940777:tid 940932] [client 74.7.228.61:42052] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.xrayalphacharlie.com"] [uri "/robots.txt"] [unique_id "alQsiJihQxksrpCflyFbUQAAlEg"] [Sun Jul 12 18:08:47.888339 2026] [security2:error] [pid 940777:tid 940931] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsj5ihQxksrpCflyFcHAAAAJM"] [Sun Jul 12 18:08:47.994104 2026] [security2:error] [pid 940777:tid 940922] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsj5ihQxksrpCflyFcFgAAAIo"] [Sun Jul 12 18:08:47.994165 2026] [security2:error] [pid 940777:tid 940922] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsj5ihQxksrpCflyFcFgAAAIo"] [Sun Jul 12 18:08:47.999761 2026] [security2:error] [pid 940777:tid 941037] [client 65.21.113.206:59724] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3oxcDJ1LTUwNTgvejEtNDA0OTMvMXAydQ=="] [unique_id "alQsj5ihQxksrpCflyFcEwAAAP0"] [Sun Jul 12 18:08:48.048146 2026] [security2:error] [pid 940777:tid 940996] [client 74.7.228.61:40182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "xrayalphacharlie.com"] [uri "/robots.txt"] [unique_id "alQskJihQxksrpCflyFcMAAA1Go"], referer: https://www.xrayalphacharlie.com/robots.txt [Sun Jul 12 18:08:48.095565 2026] [authz_core:error] [pid 940777:tid 940971] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:48.096311 2026] [authz_core:error] [pid 940777:tid 940971] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:48.156529 2026] [security2:error] [pid 940777:tid 940970] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/cp/.env"] [unique_id "alQskJihQxksrpCflyFcNQAAALo"] [Sun Jul 12 18:08:48.351916 2026] [proxy:warn] [pid 960377:tid 960609] [client 185.100.87.136:49456] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahdrakedesign.com for uri /400.shtml [Sun Jul 12 18:08:48.384875 2026] [security2:error] [pid 940777:tid 941041] [client 185.100.87.136:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "sarahdrakedesign.com"] [uri "/cgi-sys/404.html"] [unique_id "alQskJihQxksrpCflyFcOgAAAQE"] [Sun Jul 12 18:08:48.388051 2026] [security2:error] [pid 960377:tid 960609] [client 185.100.87.136:49456] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "sarahdrakedesign.com"] [uri "/400.shtml"] [unique_id "alQskBMANaV5i2_BLQr6mQAAAGU"] [Sun Jul 12 18:08:48.563453 2026] [security2:error] [pid 940777:tid 941005] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskJihQxksrpCflyFcNgAAAN0"] [Sun Jul 12 18:08:48.568002 2026] [security2:error] [pid 940777:tid 941014] [client 74.244.119.215:15014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQskJihQxksrpCflyFcQAAAAOY"] [Sun Jul 12 18:08:48.568202 2026] [security2:error] [pid 940777:tid 941014] [client 74.244.119.215:15014] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQskJihQxksrpCflyFcQAAAAOY"] [Sun Jul 12 18:08:48.588312 2026] [security2:error] [pid 940777:tid 940921] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/private/.env"] [unique_id "alQskJihQxksrpCflyFcQQAAAIk"] [Sun Jul 12 18:08:48.919531 2026] [authz_core:error] [pid 960377:tid 960628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:48.920078 2026] [security2:error] [pid 940777:tid 941011] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/private/.env"] [unique_id "alQskJihQxksrpCflyFcSwAAAOM"] [Sun Jul 12 18:08:48.920355 2026] [authz_core:error] [pid 960377:tid 960628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:48.927842 2026] [security2:error] [pid 940777:tid 940918] [client 179.189.78.232:56095] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 232.78.189.179.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dauphinconstruction.com"] [uri "/xmlrpc.php"] [unique_id "alQskJihQxksrpCflyFcSQAAAIY"] [Sun Jul 12 18:08:48.928136 2026] [security2:error] [pid 940777:tid 940918] [client 179.189.78.232:56095] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dauphinconstruction.com"] [uri "/xmlrpc.php"] [unique_id "alQskJihQxksrpCflyFcSQAAAIY"] [Sun Jul 12 18:08:49.015531 2026] [security2:error] [pid 940777:tid 940925] [client 181.189.8.110:60647] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQskJihQxksrpCflyFcSgAAAI0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:49.048372 2026] [security2:error] [pid 940777:tid 940959] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskJihQxksrpCflyFcRgAAAK8"] [Sun Jul 12 18:08:49.167528 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5cAAAAFc"], referer: http://67.222.38.115/api/v1/endpoints [Sun Jul 12 18:08:49.194438 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjhMANaV5i2_BLQr6cQAAAEU"] [Sun Jul 12 18:08:49.253907 2026] [security2:error] [pid 960377:tid 960559] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjhMANaV5i2_BLQr6cgAAADM"] [Sun Jul 12 18:08:49.258539 2026] [security2:error] [pid 940777:tid 941021] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/system/.env"] [unique_id "alQskZihQxksrpCflyFcUQAAAO0"] [Sun Jul 12 18:08:49.270484 2026] [security2:error] [pid 940777:tid 941013] [client 177.255.63.204:39782] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQskZihQxksrpCflyFcTQAAAOU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:49.360980 2026] [security2:error] [pid 940777:tid 940825] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/vendor/autoload.php"] [unique_id "alQse5ihQxksrpCflyFcUwAAkic"] [Sun Jul 12 18:08:49.364824 2026] [security2:error] [pid 940777:tid 941008] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjpihQxksrpCflyFcAgAAAOA"], referer: http://67.222.40.58/.ssh/authorized_keys [Sun Jul 12 18:08:49.378285 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsjhMANaV5i2_BLQr6cwAAAGY"], referer: http://67.222.40.58/CVS/Entries [Sun Jul 12 18:08:49.533280 2026] [security2:error] [pid 960377:tid 960599] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskRMANaV5i2_BLQr6pwAAAFs"] [Sun Jul 12 18:08:49.535375 2026] [security2:error] [pid 940777:tid 940980] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/system/.env"] [unique_id "alQskZihQxksrpCflyFcYwAAAMQ"] [Sun Jul 12 18:08:49.579815 2026] [security2:error] [pid 960377:tid 960571] [client 190.175.55.1:52548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQskRMANaV5i2_BLQr6qwAAAD8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:49.656517 2026] [security2:error] [pid 960377:tid 960616] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pfMjk5OS96eGUvMjU0MjVfeGU=.htm"] [unique_id "alQskRMANaV5i2_BLQr6tAAAAGw"] [Sun Jul 12 18:08:49.725427 2026] [security2:error] [pid 940777:tid 940953] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/cms/.env"] [unique_id "alQskZihQxksrpCflyFcaQAAAKk"] [Sun Jul 12 18:08:49.773818 2026] [authz_core:error] [pid 960377:tid 960607] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:49.774549 2026] [authz_core:error] [pid 960377:tid 960607] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:49.827767 2026] [security2:error] [pid 960377:tid 960572] [client 41.13.164.191:37712] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQskRMANaV5i2_BLQr6twAAAEA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:49.857475 2026] [security2:error] [pid 960377:tid 960522] [client 24.203.79.110:56533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQskRMANaV5i2_BLQr6uwAAAA4"] [Sun Jul 12 18:08:49.857791 2026] [security2:error] [pid 960377:tid 960522] [client 24.203.79.110:56533] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQskRMANaV5i2_BLQr6uwAAAA4"] [Sun Jul 12 18:08:50.005522 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskRMANaV5i2_BLQr6tgAAADU"] [Sun Jul 12 18:08:50.125704 2026] [security2:error] [pid 940777:tid 941043] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshZihQxksrpCflyFa_wAAANY"] [Sun Jul 12 18:08:50.182958 2026] [security2:error] [pid 940777:tid 940935] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/cms/.env"] [unique_id "alQskpihQxksrpCflyFcdAAAAJc"] [Sun Jul 12 18:08:50.429801 2026] [security2:error] [pid 960377:tid 960540] [client 200.15.17.45:58261] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQskhMANaV5i2_BLQr6xgAAACA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:08:50.479348 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskhMANaV5i2_BLQr6wwAAADQ"] [Sun Jul 12 18:08:50.487921 2026] [security2:error] [pid 940777:tid 940999] [client 168.100.149.242:53492] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46020/bargainor/2307_capnoides.jsp"] [unique_id "alQskpihQxksrpCflyFcegAAANc"] [Sun Jul 12 18:08:50.575032 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:50.575530 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:50.791352 2026] [security2:error] [pid 960377:tid 960511] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQskhMANaV5i2_BLQr6wgAAAAM"] [Sun Jul 12 18:08:50.791420 2026] [security2:error] [pid 960377:tid 960511] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQskhMANaV5i2_BLQr6wgAAAAM"] [Sun Jul 12 18:08:50.792492 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:59734] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pfMjk5OS96eGUvMjU0MjVfeGU=.htm"] [unique_id "alQskhMANaV5i2_BLQr6wAAAABM"] [Sun Jul 12 18:08:50.926810 2026] [security2:error] [pid 940777:tid 941000] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskpihQxksrpCflyFcfQAAANg"] [Sun Jul 12 18:08:51.010964 2026] [security2:error] [pid 940777:tid 940964] [client 125.167.21.72:62180] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsk5ihQxksrpCflyFchQAAALQ"] [Sun Jul 12 18:08:51.011233 2026] [security2:error] [pid 940777:tid 940964] [client 125.167.21.72:62180] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsk5ihQxksrpCflyFchQAAALQ"] [Sun Jul 12 18:08:51.067410 2026] [security2:error] [pid 960377:tid 960557] [client 173.199.122.135:61511] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.122.199.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "panoramanica.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQskxMANaV5i2_BLQr6zQAAADE"] [Sun Jul 12 18:08:51.105103 2026] [security2:error] [pid 960377:tid 960554] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5dAAAAEQ"] [Sun Jul 12 18:08:51.124565 2026] [security2:error] [pid 960377:tid 960597] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5cQAAAFk"] [Sun Jul 12 18:08:51.144145 2026] [security2:error] [pid 940777:tid 940928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshZihQxksrpCflyFbBwAAAJA"] [Sun Jul 12 18:08:51.324125 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQskZihQxksrpCflyFcXgAAAPA"], referer: http://67.222.40.58/Gemfile.lock [Sun Jul 12 18:08:51.338556 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:51.339130 2026] [authz_core:error] [pid 940777:tid 940945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:51.405581 2026] [security2:error] [pid 940777:tid 940972] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/application/.env"] [unique_id "alQsk5ihQxksrpCflyFcpgAAALw"] [Sun Jul 12 18:08:51.560355 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskxMANaV5i2_BLQr60AAAAFA"] [Sun Jul 12 18:08:51.587755 2026] [security2:error] [pid 960377:tid 960616] [client 74.7.228.50:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "codingfiend.com"] [uri "/cgi-sys/404.html"] [unique_id "alQskxMANaV5i2_BLQr62wAAAGw"] [Sun Jul 12 18:08:51.589717 2026] [security2:error] [pid 960377:tid 960567] [client 74.7.228.50:52536] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "codingfiend.com"] [uri "/robots.txt"] [unique_id "alQskxMANaV5i2_BLQr62AAAO0k"] [Sun Jul 12 18:08:51.932477 2026] [security2:error] [pid 940777:tid 940950] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/application/.env"] [unique_id "alQsk5ihQxksrpCflyFcsAAAAKY"] [Sun Jul 12 18:08:52.044769 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQskxMANaV5i2_BLQr64AAAAEs"] [Sun Jul 12 18:08:52.125317 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:52.126091 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:52.150265 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQskZihQxksrpCflyFcYAAAALY"] [Sun Jul 12 18:08:52.150583 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQskZihQxksrpCflyFcXQAAAPI"] [Sun Jul 12 18:08:52.188896 2026] [security2:error] [pid 940777:tid 940935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshZihQxksrpCflyFbAwAAAL4"], referer: http://67.222.38.115/api/v1/dns/nameservers [Sun Jul 12 18:08:52.191855 2026] [security2:error] [pid 940777:tid 940994] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshZihQxksrpCflyFbAQAAAPs"], referer: http://67.222.38.115/api/v1/discovery [Sun Jul 12 18:08:52.194088 2026] [security2:error] [pid 960377:tid 960558] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5dQAAADI"] [Sun Jul 12 18:08:52.195522 2026] [security2:error] [pid 940777:tid 940834] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php"] [unique_id "alQsgZihQxksrpCflyFctAAAkjA"] [Sun Jul 12 18:08:52.235586 2026] [security2:error] [pid 940777:tid 940993] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQskZihQxksrpCflyFcXwAAANE"], referer: http://67.222.40.58/build.xml [Sun Jul 12 18:08:52.240725 2026] [security2:error] [pid 940777:tid 940891] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test/php/test.php"] [unique_id "alQsgpihQxksrpCflyFcxwAAkmc"] [Sun Jul 12 18:08:52.274959 2026] [security2:error] [pid 960377:tid 960512] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/temp/test.php"] [unique_id "alQslBMANaV5i2_BLQr69QAAAAQ"] [Sun Jul 12 18:08:52.438837 2026] [security2:error] [pid 960377:tid 960621] [client 168.100.149.76:28140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46085/bargainor/2307_deft.jsp"] [unique_id "alQslBMANaV5i2_BLQr6-QAAAHE"] [Sun Jul 12 18:08:52.726883 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr6_QAAABs"] [Sun Jul 12 18:08:52.989138 2026] [authz_core:error] [pid 960377:tid 960593] [client 20.210.108.71:58035] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/error_log, referer: binance.com [Sun Jul 12 18:08:52.991698 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:52.992207 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:53.055694 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pfNjgyMy96b3QvMzU4Njlfb3Q=.htm"] [unique_id "alQslRMANaV5i2_BLQr7CQAAACw"] [Sun Jul 12 18:08:53.084754 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshRMANaV5i2_BLQr5eQAAABQ"], referer: http://67.222.38.115/api/v1/event-sources [Sun Jul 12 18:08:53.111735 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshhMANaV5i2_BLQr5kwAAAAY"], referer: http://67.222.38.115/api/v1/events [Sun Jul 12 18:08:53.116988 2026] [security2:error] [pid 940777:tid 940932] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/back/.env"] [unique_id "alQslZihQxksrpCflyFc4QAAAJQ"] [Sun Jul 12 18:08:53.131155 2026] [security2:error] [pid 960377:tid 960546] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshxMANaV5i2_BLQr5uAAAACY"] [Sun Jul 12 18:08:53.191150 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQshhMANaV5i2_BLQr5kgAAABw"], referer: http://67.222.38.115/api/v1/find/all [Sun Jul 12 18:08:53.250255 2026] [security2:error] [pid 940777:tid 940923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsiJihQxksrpCflyFbRAAAAIs"], referer: http://67.222.38.115/api/v1/groups [Sun Jul 12 18:08:53.255236 2026] [security2:error] [pid 940777:tid 941042] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFc3gAAAQI"] [Sun Jul 12 18:08:53.302973 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsiRMANaV5i2_BLQr55gAAACo"] [Sun Jul 12 18:08:53.347430 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsiRMANaV5i2_BLQr55wAAADw"] [Sun Jul 12 18:08:53.616705 2026] [security2:error] [pid 940777:tid 940922] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/back/.env"] [unique_id "alQslZihQxksrpCflyFc8gAAAIo"] [Sun Jul 12 18:08:53.699269 2026] [security2:error] [pid 940777:tid 940953] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQslZihQxksrpCflyFc5QAAAKk"] [Sun Jul 12 18:08:53.699771 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslRMANaV5i2_BLQr7FAAAAGg"] [Sun Jul 12 18:08:53.804916 2026] [security2:error] [pid 960377:tid 960631] [client 168.100.149.172:21092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46150/bargainor/2307_did.jsp"] [unique_id "alQslRMANaV5i2_BLQr7HwAAAHs"] [Sun Jul 12 18:08:53.831794 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:53.832333 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:53.854772 2026] [authz_core:error] [pid 960377:tid 960609] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/PHPMailer/error_log, referer: binance.com [Sun Jul 12 18:08:53.866340 2026] [security2:error] [pid 940777:tid 940786] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/pki/aws_key.pem"] [unique_id "alQslZihQxksrpCflyFc9QAAtgA"] [Sun Jul 12 18:08:54.065167 2026] [security2:error] [pid 960377:tid 960558] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQslRMANaV5i2_BLQr7FQAAADI"] [Sun Jul 12 18:08:54.065241 2026] [security2:error] [pid 960377:tid 960558] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQslRMANaV5i2_BLQr7FQAAADI"] [Sun Jul 12 18:08:54.066544 2026] [security2:error] [pid 940777:tid 940956] [client 65.21.113.206:49218] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pfNjgyMy96b3QvMzU4Njlfb3Q=.htm"] [unique_id "alQslZihQxksrpCflyFc8AAAAKw"] [Sun Jul 12 18:08:54.116195 2026] [security2:error] [pid 940777:tid 941035] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/core/.env"] [unique_id "alQslpihQxksrpCflyFc_QAAAPs"] [Sun Jul 12 18:08:54.329605 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslhMANaV5i2_BLQr7JgAAADQ"] [Sun Jul 12 18:08:54.367872 2026] [security2:error] [pid 940777:tid 940971] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/core/.env"] [unique_id "alQslpihQxksrpCflyFc_wAAALs"] [Sun Jul 12 18:08:54.588505 2026] [authz_core:error] [pid 940777:tid 940938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:54.589043 2026] [authz_core:error] [pid 940777:tid 940938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:54.727813 2026] [security2:error] [pid 940777:tid 940993] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslpihQxksrpCflyFdBwAAANE"] [Sun Jul 12 18:08:54.871003 2026] [cgid:error] [pid 940777:tid 940798] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/wp/ [Sun Jul 12 18:08:54.917500 2026] [security2:error] [pid 940777:tid 940931] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/old/config.php"] [unique_id "alQslpihQxksrpCflyFdGAAAAJM"] [Sun Jul 12 18:08:54.960044 2026] [security2:error] [pid 960377:tid 960492] [remote 74.7.227.188:32846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQslhMANaV5i2_BLQr7OQAAZnE"], referer: https://www.stephenspublishing.com/stadium-cups-custom-p-333.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:08:54.995162 2026] [security2:error] [pid 940777:tid 940929] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/docker/.env"] [unique_id "alQslpihQxksrpCflyFdNAAAAJE"] [Sun Jul 12 18:08:55.158138 2026] [cgid:error] [pid 940777:tid 940847] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/new/ [Sun Jul 12 18:08:55.273826 2026] [cgid:error] [pid 940777:tid 940858] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/blog/ [Sun Jul 12 18:08:55.288879 2026] [security2:error] [pid 940777:tid 940969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQslZihQxksrpCflyFc7AAAALk"], referer: http://67.222.38.115/api/v1/info [Sun Jul 12 18:08:55.289163 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQslRMANaV5i2_BLQr7DwAAAG8"] [Sun Jul 12 18:08:55.376694 2026] [authz_core:error] [pid 960377:tid 960627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:55.386855 2026] [cgid:error] [pid 940777:tid 940897] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/wordpress/ [Sun Jul 12 18:08:55.388788 2026] [security2:error] [pid 940777:tid 940950] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/docker/.env"] [unique_id "alQsl5ihQxksrpCflyFdXAAAAKY"] [Sun Jul 12 18:08:55.392533 2026] [authz_core:error] [pid 960377:tid 960627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:55.395501 2026] [security2:error] [pid 940777:tid 940977] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsl5ihQxksrpCflyFdSwAAAME"] [Sun Jul 12 18:08:55.461929 2026] [security2:error] [pid 960377:tid 960631] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pjN2RrLzc0ODMvemMvMjQxNDUvYw=="] [unique_id "alQslxMANaV5i2_BLQr7UAAAAHs"] [Sun Jul 12 18:08:55.504775 2026] [cgid:error] [pid 940777:tid 940830] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/backup/ [Sun Jul 12 18:08:55.622611 2026] [security2:error] [pid 940777:tid 940935] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/local/.env"] [unique_id "alQsl5ihQxksrpCflyFddQAAAJc"] [Sun Jul 12 18:08:55.624314 2026] [cgid:error] [pid 940777:tid 940789] [remote 34.162.161.15:32946] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/scimagination/404.shtml, referer: http://www.scimagination.com/old/ [Sun Jul 12 18:08:55.781473 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsl5ihQxksrpCflyFdcwAAANA"] [Sun Jul 12 18:08:55.816836 2026] [security2:error] [pid 960377:tid 960566] [client 168.100.149.145:29796] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46215/bargainor/2307_delphian.jsp"] [unique_id "alQslxMANaV5i2_BLQr7VwAAADo"] [Sun Jul 12 18:08:55.875501 2026] [security2:error] [pid 940777:tid 940917] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/local/.env"] [unique_id "alQsl5ihQxksrpCflyFdegAAAIU"] [Sun Jul 12 18:08:55.931234 2026] [security2:error] [pid 960377:tid 960579] [client 216.73.216.187:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "abigailspenser.com"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7TQAAAEc"] [Sun Jul 12 18:08:55.984563 2026] [security2:error] [pid 960377:tid 960525] [client 88.191.97.22:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7VAAAABE"] [Sun Jul 12 18:08:56.255153 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:56.255660 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:56.301001 2026] [security2:error] [pid 940777:tid 941022] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/rest/.env"] [unique_id "alQsmJihQxksrpCflyFdgwAAAO4"] [Sun Jul 12 18:08:56.316298 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7XAAAADI"] [Sun Jul 12 18:08:56.481890 2026] [security2:error] [pid 940777:tid 940831] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/forum/.env"] [unique_id "alQsmJihQxksrpCflyFdhgAAry0"] [Sun Jul 12 18:08:56.636901 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7WwAAABM"] [Sun Jul 12 18:08:56.636972 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7WwAAABM"] [Sun Jul 12 18:08:56.637919 2026] [security2:error] [pid 940777:tid 941016] [client 65.21.113.206:49224] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pjN2RrLzc0ODMvemMvMjQxNDUvYw=="] [unique_id "alQsl5ihQxksrpCflyFdewAAAOg"] [Sun Jul 12 18:08:56.646641 2026] [security2:error] [pid 940777:tid 940856] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/database.bak"] [unique_id "alQsmJihQxksrpCflyFdhwAAokU"] [Sun Jul 12 18:08:56.690280 2026] [security2:error] [pid 940777:tid 940938] [client 94.187.171.125:58609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsmJihQxksrpCflyFdiAAAAJo"] [Sun Jul 12 18:08:56.690794 2026] [security2:error] [pid 940777:tid 940938] [client 94.187.171.125:58609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsmJihQxksrpCflyFdiAAAAJo"] [Sun Jul 12 18:08:56.771126 2026] [security2:error] [pid 940777:tid 941018] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/rest/.env"] [unique_id "alQsmJihQxksrpCflyFdiQAAAOo"] [Sun Jul 12 18:08:56.811074 2026] [security2:error] [pid 940777:tid 940868] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/*.env.mailjet.backup"] [unique_id "alQsmJihQxksrpCflyFdigAAzVA"] [Sun Jul 12 18:08:57.059294 2026] [security2:error] [pid 940777:tid 941011] [client 216.73.216.187:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "abigailspenser.com"] [uri "/index.php"] [unique_id "alQsmJihQxksrpCflyFdfgAAAOM"], referer: https://abigailspenser.com/sitemap.xml [Sun Jul 12 18:08:57.067183 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:57.067871 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:57.070078 2026] [security2:error] [pid 940777:tid 941034] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/shared/.env"] [unique_id "alQsmZihQxksrpCflyFdkAAAAPo"] [Sun Jul 12 18:08:57.114141 2026] [security2:error] [pid 960377:tid 960616] [client 197.48.221.253:56354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsmRMANaV5i2_BLQr7gwAAAGw"] [Sun Jul 12 18:08:57.114481 2026] [security2:error] [pid 960377:tid 960616] [client 197.48.221.253:56354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsmRMANaV5i2_BLQr7gwAAAGw"] [Sun Jul 12 18:08:57.277085 2026] [security2:error] [pid 940777:tid 940972] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/shared/.env"] [unique_id "alQsmZihQxksrpCflyFdkwAAALw"] [Sun Jul 12 18:08:57.328341 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmBMANaV5i2_BLQr7fgAAACc"] [Sun Jul 12 18:08:57.499132 2026] [security2:error] [pid 940777:tid 940822] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/yii/.env"] [unique_id "alQsmZihQxksrpCflyFdnAAAqSQ"] [Sun Jul 12 18:08:57.825219 2026] [security2:error] [pid 960377:tid 960623] [client 168.100.149.102:52614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46280/bargainor/2307_anisodactyli.jsp"] [unique_id "alQsmRMANaV5i2_BLQr7lQAAAHM"] [Sun Jul 12 18:08:57.881491 2026] [security2:error] [pid 940777:tid 940986] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmZihQxksrpCflyFdoQAAAMo"] [Sun Jul 12 18:08:57.884000 2026] [security2:error] [pid 940777:tid 940979] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/sources/.env"] [unique_id "alQsmZihQxksrpCflyFdqgAAAMM"] [Sun Jul 12 18:08:57.903910 2026] [authz_core:error] [pid 960377:tid 960546] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:57.904587 2026] [authz_core:error] [pid 960377:tid 960546] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:58.100704 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsl5ihQxksrpCflyFdVQAAAIg"] [Sun Jul 12 18:08:58.156757 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7SQAAAGA"] [Sun Jul 12 18:08:58.227269 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7SAAAACk"], referer: http://67.222.38.115/api/v1/integrations.list [Sun Jul 12 18:08:58.260287 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQslxMANaV5i2_BLQr7RwAAABU"] [Sun Jul 12 18:08:58.335477 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmhMANaV5i2_BLQr7mgAAAFY"] [Sun Jul 12 18:08:58.424620 2026] [security2:error] [pid 940777:tid 941000] [client 85.215.150.55:57443] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.cecweb.org"] [uri "/sources/.env"] [unique_id "alQsmpihQxksrpCflyFduQAAANg"] [Sun Jul 12 18:08:58.501542 2026] [security2:error] [pid 940777:tid 940826] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/public/js/.env"] [unique_id "alQsmpihQxksrpCflyFdugAA2ig"] [Sun Jul 12 18:08:58.716517 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:58.717029 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:58.890648 2026] [security2:error] [pid 940777:tid 941020] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmpihQxksrpCflyFdvwAAAOw"] [Sun Jul 12 18:08:58.942087 2026] [security2:error] [pid 960377:tid 960550] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pjZHphLTQ0NjgvemMtMzg1MDUvY2R6YQ=="] [unique_id "alQsmhMANaV5i2_BLQr7qwAAACo"] [Sun Jul 12 18:08:59.058804 2026] [security2:error] [pid 940777:tid 940808] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/contact.php.bak"] [unique_id "alQsm5ihQxksrpCflyFdwgAAixY"] [Sun Jul 12 18:08:59.092296 2026] [security2:error] [pid 960377:tid 960634] [client 74.244.119.215:3744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsmxMANaV5i2_BLQr7rAAAAH4"] [Sun Jul 12 18:08:59.093049 2026] [security2:error] [pid 960377:tid 960634] [client 74.244.119.215:3744] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsmxMANaV5i2_BLQr7rAAAAH4"] [Sun Jul 12 18:08:59.322991 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsmhMANaV5i2_BLQr7nQAAAD0"], referer: http://67.222.38.115/api/v1/security/login [Sun Jul 12 18:08:59.353207 2026] [security2:error] [pid 940777:tid 940960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsmpihQxksrpCflyFdtQAAALA"] [Sun Jul 12 18:08:59.411107 2026] [authz_core:error] [pid 960377:tid 960621] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/PHPMailer/error_log, referer: binance.com [Sun Jul 12 18:08:59.452867 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7rgAAACc"] [Sun Jul 12 18:08:59.483823 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:08:59.484324 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:08:59.824053 2026] [security2:error] [pid 960377:tid 960531] [client 168.100.149.88:49098] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46345/bargainor/2307_birefraction.jsp"] [unique_id "alQsmxMANaV5i2_BLQr7xwAAABc"] [Sun Jul 12 18:08:59.830862 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7xgAAAGc"] [Sun Jul 12 18:08:59.988908 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7wwAAABo"] [Sun Jul 12 18:08:59.989008 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7wwAAABo"] [Sun Jul 12 18:08:59.990113 2026] [security2:error] [pid 940777:tid 941033] [client 65.21.113.206:49240] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pjZHphLTQ0NjgvemMtMzg1MDUvY2R6YQ=="] [unique_id "alQsm5ihQxksrpCflyFdzAAAAPk"] [Sun Jul 12 18:09:00.035213 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/temp/phpinfo.php"] [unique_id "alQsnBMANaV5i2_BLQr70QAAAFQ"] [Sun Jul 12 18:09:00.200139 2026] [security2:error] [pid 940777:tid 940818] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/config/env.bak"] [unique_id "alQsnJihQxksrpCflyFd6QAA1SA"] [Sun Jul 12 18:09:00.299264 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:00.299875 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:00.369033 2026] [security2:error] [pid 940777:tid 940899] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/default.sql"] [unique_id "alQsnJihQxksrpCflyFd7AAApm8"] [Sun Jul 12 18:09:00.561994 2026] [security2:error] [pid 960377:tid 960587] [client 24.203.79.110:57056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsnBMANaV5i2_BLQr72AAAAE8"] [Sun Jul 12 18:09:00.562204 2026] [security2:error] [pid 960377:tid 960587] [client 24.203.79.110:57056] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsnBMANaV5i2_BLQr72AAAAE8"] [Sun Jul 12 18:09:00.741502 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsnBMANaV5i2_BLQr72QAAAFY"] [Sun Jul 12 18:09:01.081019 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:01.081519 2026] [authz_core:error] [pid 940777:tid 941001] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:01.209390 2026] [security2:error] [pid 940777:tid 940958] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsnJihQxksrpCflyFeAQAAAK4"] [Sun Jul 12 18:09:01.351919 2026] [security2:error] [pid 960377:tid 960572] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pjZHphLTUzNTgvemMtMzg1MDUvY2R6YQ=="] [unique_id "alQsnRMANaV5i2_BLQr76gAAAEA"] [Sun Jul 12 18:09:01.374536 2026] [security2:error] [pid 940777:tid 940859] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/Tests/Application/.env"] [unique_id "alQsnZihQxksrpCflyFeBgAA6kg"] [Sun Jul 12 18:09:01.538398 2026] [security2:error] [pid 940777:tid 940865] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/protected/.env"] [unique_id "alQsnZihQxksrpCflyFeCAAAmk4"] [Sun Jul 12 18:09:01.623519 2026] [security2:error] [pid 940777:tid 940965] [client 125.167.21.72:62594] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsnZihQxksrpCflyFeBwAAALU"] [Sun Jul 12 18:09:01.623809 2026] [security2:error] [pid 940777:tid 940965] [client 125.167.21.72:62594] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsnZihQxksrpCflyFeBwAAALU"] [Sun Jul 12 18:09:01.879458 2026] [authz_core:error] [pid 940777:tid 941011] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:01.880286 2026] [authz_core:error] [pid 940777:tid 941011] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:02.016201 2026] [security2:error] [pid 960377:tid 960562] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsnRMANaV5i2_BLQr77QAAADY"] [Sun Jul 12 18:09:02.180145 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7uQAAADo"] [Sun Jul 12 18:09:02.234941 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7wQAAABs"], referer: http://67.222.38.115/api/v1/servers [Sun Jul 12 18:09:02.248480 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsmxMANaV5i2_BLQr7wAAAAEo"] [Sun Jul 12 18:09:02.354105 2026] [security2:error] [pid 940777:tid 940929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsm5ihQxksrpCflyFdywAAAJE"], referer: http://67.222.38.115/api/v1/sensors [Sun Jul 12 18:09:02.508407 2026] [security2:error] [pid 960377:tid 960523] [client 168.100.149.153:41426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46410/bargainor/2307_mediator.jsp"] [unique_id "alQsnhMANaV5i2_BLQr8DAAAAA8"] [Sun Jul 12 18:09:02.513813 2026] [security2:error] [pid 940777:tid 941043] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeFwAAAQM"] [Sun Jul 12 18:09:02.703802 2026] [security2:error] [pid 940777:tid 940995] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsnZihQxksrpCflyFeEQAAANM"] [Sun Jul 12 18:09:02.703894 2026] [security2:error] [pid 940777:tid 940995] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsnZihQxksrpCflyFeEQAAANM"] [Sun Jul 12 18:09:02.706615 2026] [security2:error] [pid 940777:tid 940984] [client 65.21.113.206:49252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pjZHphLTUzNTgvemMtMzg1MDUvY2R6YQ=="] [unique_id "alQsnZihQxksrpCflyFeEAAAAMg"] [Sun Jul 12 18:09:02.737924 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:02.738458 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:02.960696 2026] [security2:error] [pid 940777:tid 941008] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeKwAAAOA"] [Sun Jul 12 18:09:02.985857 2026] [security2:error] [pid 960377:tid 960510] [client 66.187.5.104:45722] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webmail.elisacarrio.org"] [uri "/"] [unique_id "alQsnhMANaV5i2_BLQr8HgAAAAI"] [Sun Jul 12 18:09:03.093411 2026] [security2:error] [pid 940777:tid 940794] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsf5ihQxksrpCflyFcnQAAkgg"] [Sun Jul 12 18:09:03.123175 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFcygAAAPg"] [Sun Jul 12 18:09:03.151832 2026] [security2:error] [pid 940777:tid 941019] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsk5ihQxksrpCflyFcowAAAKs"], referer: http://67.222.40.58/composer.lock [Sun Jul 12 18:09:03.156992 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFcyAAAAJY"] [Sun Jul 12 18:09:03.166146 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr68gAAACU"] [Sun Jul 12 18:09:03.178086 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsk5ihQxksrpCflyFcpAAAAJw"] [Sun Jul 12 18:09:03.178364 2026] [security2:error] [pid 960377:tid 960634] [client 20.244.27.100:56675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/PHPMailer/DSNConfigurator.php"] [unique_id "alQsnxMANaV5i2_BLQr8IQAAAH4"], referer: binance.com [Sun Jul 12 18:09:03.182468 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsf5ihQxksrpCflyFcngAAkiY"], referer: http://67.222.40.58/index.js [Sun Jul 12 18:09:03.187950 2026] [security2:error] [pid 940777:tid 940999] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFczAAAAIY"] [Sun Jul 12 18:09:03.207147 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFc0AAAAL8"] [Sun Jul 12 18:09:03.431563 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsn5ihQxksrpCflyFeMwAAANA"] [Sun Jul 12 18:09:03.503082 2026] [authz_core:error] [pid 960377:tid 960579] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:03.531521 2026] [authz_core:error] [pid 960377:tid 960579] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:03.598034 2026] [security2:error] [pid 940777:tid 940857] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ssl/ec2_key.pem"] [unique_id "alQsn5ihQxksrpCflyFeOAAAr0Y"] [Sun Jul 12 18:09:03.760878 2026] [security2:error] [pid 940777:tid 940852] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/docker/db/.env"] [unique_id "alQsn5ihQxksrpCflyFeOQAA0UE"] [Sun Jul 12 18:09:03.819210 2026] [security2:error] [pid 940777:tid 941001] [client 168.100.149.221:60760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46475/bargainor/2307_gurian.jsp"] [unique_id "alQsn5ihQxksrpCflyFeOgAAANk"] [Sun Jul 12 18:09:03.946720 2026] [security2:error] [pid 940777:tid 941018] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/playground/test.php"] [unique_id "alQsn5ihQxksrpCflyFePgAAAOo"] [Sun Jul 12 18:09:04.105854 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr69AAAACI"] [Sun Jul 12 18:09:04.108285 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQskxMANaV5i2_BLQr61QAAAF8"] [Sun Jul 12 18:09:04.128934 2026] [security2:error] [pid 960377:tid 960599] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr68QAAADk"] [Sun Jul 12 18:09:04.164154 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr68AAAAEk"] [Sun Jul 12 18:09:04.229879 2026] [security2:error] [pid 940777:tid 941039] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslJihQxksrpCflyFczgAAAP8"] [Sun Jul 12 18:09:04.230807 2026] [security2:error] [pid 960377:tid 960425] [remote 185.177.72.52:43224] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/info.php.bak"] [unique_id "alQsoBMANaV5i2_BLQr8OgAAJi4"] [Sun Jul 12 18:09:04.262719 2026] [security2:error] [pid 940777:tid 940834] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsgZihQxksrpCflyFcuQAAkjA"] [Sun Jul 12 18:09:04.362287 2026] [authz_core:error] [pid 960377:tid 960534] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:04.362804 2026] [authz_core:error] [pid 960377:tid 960534] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:04.449888 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoBMANaV5i2_BLQr8NgAAAGA"] [Sun Jul 12 18:09:04.560581 2026] [security2:error] [pid 960377:tid 960568] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Y3pnLzU5L3pnLzQ2ODgvZzhx.asp"] [unique_id "alQsoBMANaV5i2_BLQr8QgAAADw"] [Sun Jul 12 18:09:04.887599 2026] [security2:error] [pid 940777:tid 940954] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoJihQxksrpCflyFeXgAAAKo"] [Sun Jul 12 18:09:05.101657 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQslBMANaV5i2_BLQr67wAAAAs"] [Sun Jul 12 18:09:05.165585 2026] [authz_core:error] [pid 940777:tid 941027] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:05.166297 2026] [authz_core:error] [pid 940777:tid 941027] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:05.311638 2026] [security2:error] [pid 940777:tid 940995] [client 45.175.20.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsoJihQxksrpCflyFeYAAAANM"] [Sun Jul 12 18:09:05.452996 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoRMANaV5i2_BLQr8UQAAAFk"] [Sun Jul 12 18:09:05.708723 2026] [security2:error] [pid 940777:tid 940997] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsoZihQxksrpCflyFeaAAAANU"] [Sun Jul 12 18:09:05.708806 2026] [security2:error] [pid 940777:tid 940997] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsoZihQxksrpCflyFeaAAAANU"] [Sun Jul 12 18:09:05.710157 2026] [security2:error] [pid 940777:tid 940922] [client 65.21.113.206:34900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Y3pnLzU5L3pnLzQ2ODgvZzhx.asp"] [unique_id "alQsoZihQxksrpCflyFeZQAAAIo"] [Sun Jul 12 18:09:05.899241 2026] [security2:error] [pid 940777:tid 940996] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoZihQxksrpCflyFecwAAANQ"] [Sun Jul 12 18:09:06.000160 2026] [authz_core:error] [pid 960377:tid 960518] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:06.000899 2026] [authz_core:error] [pid 960377:tid 960518] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:06.067106 2026] [security2:error] [pid 940777:tid 940880] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/keys/aws_key.pem"] [unique_id "alQsopihQxksrpCflyFedgAAjFw"] [Sun Jul 12 18:09:06.206315 2026] [security2:error] [pid 960377:tid 960608] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsoBMANaV5i2_BLQr8PQAAAGQ"] [Sun Jul 12 18:09:06.317305 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQshJihQxksrpCflyFeZwAAkmQ"] [Sun Jul 12 18:09:06.395049 2026] [security2:error] [pid 960377:tid 960455] [remote 47.128.43.58:14124] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bellesalisbury.com"] [uri "/category/news/"] [unique_id "alQsohMANaV5i2_BLQr8awAAV0w"] [Sun Jul 12 18:09:06.484743 2026] [security2:error] [pid 960377:tid 960613] [client 168.100.149.153:41438] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46540/bargainor/2307_monkey.jsp"] [unique_id "alQsohMANaV5i2_BLQr8bgAAAGk"] [Sun Jul 12 18:09:06.519767 2026] [security2:error] [pid 960377:tid 960591] [client 20.244.27.100:59179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/PHPMailer/OAuth.php"] [unique_id "alQsohMANaV5i2_BLQr8cQAAAFM"], referer: binance.com [Sun Jul 12 18:09:06.521090 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsohMANaV5i2_BLQr8ZwAAAFA"] [Sun Jul 12 18:09:06.625809 2026] [security2:error] [pid 960377:tid 960628] [client 85.215.150.55:59981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.150.215.85.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/frontend_dev.php/$"] [unique_id "alQsohMANaV5i2_BLQr8cgAAAHg"] [Sun Jul 12 18:09:06.688079 2026] [security2:error] [pid 940777:tid 940789] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/grems-api/.env"] [unique_id "alQsopihQxksrpCflyFeiwAAvQM"] [Sun Jul 12 18:09:06.798708 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:06.799206 2026] [authz_core:error] [pid 940777:tid 940982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:06.850648 2026] [security2:error] [pid 940777:tid 940904] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/s3/.env"] [unique_id "alQsopihQxksrpCflyFekgAAznQ"] [Sun Jul 12 18:09:06.946599 2026] [security2:error] [pid 940777:tid 940965] [client 88.0.83.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsopihQxksrpCflyFehwAAALU"] [Sun Jul 12 18:09:07.018997 2026] [security2:error] [pid 940777:tid 940883] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/website/.env"] [unique_id "alQso5ihQxksrpCflyFelwAAul8"] [Sun Jul 12 18:09:07.056534 2026] [security2:error] [pid 940777:tid 940950] [client 192.71.187.204:63314] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "atterburydesign.com"] [uri "/index.php"] [unique_id "alQsn5ihQxksrpCflyFeNAAAAKY"] [Sun Jul 12 18:09:07.057575 2026] [security2:error] [pid 940777:tid 940879] [remote 117.0.21.154:35166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.21.0.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "sourcecodecontrol.co.uk"] [uri "/wp-login.php"] [unique_id "alQso5ihQxksrpCflyFemAAAzVs"] [Sun Jul 12 18:09:07.222576 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/secrets/config.php"] [unique_id "alQsoxMANaV5i2_BLQr8gwAAAA4"] [Sun Jul 12 18:09:07.354591 2026] [security2:error] [pid 940777:tid 941030] [client 94.187.171.125:59094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQso5ihQxksrpCflyFenAAAAPY"] [Sun Jul 12 18:09:07.354927 2026] [security2:error] [pid 940777:tid 941030] [client 94.187.171.125:59094] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQso5ihQxksrpCflyFenAAAAPY"] [Sun Jul 12 18:09:07.553904 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:07.554409 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:07.582961 2026] [security2:error] [pid 960377:tid 960634] [client 197.48.221.253:56914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsoxMANaV5i2_BLQr8iwAAAH4"] [Sun Jul 12 18:09:07.583218 2026] [security2:error] [pid 960377:tid 960634] [client 197.48.221.253:56914] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsoxMANaV5i2_BLQr8iwAAAH4"] [Sun Jul 12 18:09:07.615172 2026] [security2:error] [pid 960377:tid 960510] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoxMANaV5i2_BLQr8hwAAAAI"] [Sun Jul 12 18:09:07.618433 2026] [security2:error] [pid 940777:tid 941011] [client 57.141.18.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQso5ihQxksrpCflyFemgAAAOM"] [Sun Jul 12 18:09:07.954012 2026] [security2:error] [pid 960377:tid 960556] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS00MTQ4LWUvNTA0NTMtaw=="] [unique_id "alQsoxMANaV5i2_BLQr8kwAAADA"] [Sun Jul 12 18:09:08.047051 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsoxMANaV5i2_BLQr8jgAAABE"] [Sun Jul 12 18:09:08.112252 2026] [security2:error] [pid 940777:tid 940834] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQshJihQxksrpCflyFeeQAAkjA"], referer: http://67.222.40.58/sqlnet.log [Sun Jul 12 18:09:08.128165 2026] [security2:error] [pid 940777:tid 940944] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeFQAAAKA"] [Sun Jul 12 18:09:08.150016 2026] [security2:error] [pid 940777:tid 940972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeHAAAALw"] [Sun Jul 12 18:09:08.192143 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnhMANaV5i2_BLQr8AgAAAH8"], referer: http://67.222.38.115/api/v1/servers/localhost/config [Sun Jul 12 18:09:08.225576 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnhMANaV5i2_BLQr8BAAAAB8"], referer: http://67.222.38.115/api/v1/servers/localhost [Sun Jul 12 18:09:08.262217 2026] [security2:error] [pid 960377:tid 960531] [client 192.71.187.204:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "atterburydesign.com"] [uri "/index.php"] [unique_id "alQsoxMANaV5i2_BLQr8kgAAABc"] [Sun Jul 12 18:09:08.264751 2026] [security2:error] [pid 960377:tid 960585] [client 192.71.187.204:63317] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "atterburydesign.com"] [uri "/"] [unique_id "alQsoxMANaV5i2_BLQr8kAAAAE0"] [Sun Jul 12 18:09:08.309328 2026] [security2:error] [pid 960377:tid 960523] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsohMANaV5i2_BLQr8aQAAAA8"], referer: http://67.222.40.58/.web [Sun Jul 12 18:09:08.334876 2026] [security2:error] [pid 960377:tid 960551] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsohMANaV5i2_BLQr8aAAAACs"] [Sun Jul 12 18:09:08.394478 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:08.395073 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:08.412049 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsopihQxksrpCflyFeggAAAIk"], referer: http://67.222.40.58/.meta [Sun Jul 12 18:09:08.476884 2026] [security2:error] [pid 940777:tid 941019] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspJihQxksrpCflyFeqgAAAOs"] [Sun Jul 12 18:09:08.500511 2026] [security2:error] [pid 960377:tid 960568] [client 168.100.149.168:32224] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46605/bargainor/2307_impeccance.jsp"] [unique_id "alQspBMANaV5i2_BLQr8pwAAADw"] [Sun Jul 12 18:09:08.877221 2026] [security2:error] [pid 960377:tid 960513] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspBMANaV5i2_BLQr8rwAAAAU"] [Sun Jul 12 18:09:09.046856 2026] [security2:error] [pid 960377:tid 960554] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQspBMANaV5i2_BLQr8pAAAAC4"] [Sun Jul 12 18:09:09.046908 2026] [security2:error] [pid 960377:tid 960554] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQspBMANaV5i2_BLQr8pAAAAC4"] [Sun Jul 12 18:09:09.050002 2026] [security2:error] [pid 940777:tid 940940] [client 65.21.113.206:34912] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS00MTQ4LWUvNTA0NTMtaw=="] [unique_id "alQspJihQxksrpCflyFesAAAAJw"] [Sun Jul 12 18:09:09.076970 2026] [security2:error] [pid 940777:tid 940939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeHwAAAJs"], referer: http://67.222.38.115/api/v1/servers/localhost/statistics [Sun Jul 12 18:09:09.123947 2026] [security2:error] [pid 960377:tid 960548] [client 185.238.231.195:20089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.231.238.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQspRMANaV5i2_BLQr8wQAAACg"] [Sun Jul 12 18:09:09.129819 2026] [security2:error] [pid 940777:tid 940988] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeHgAAAMw"] [Sun Jul 12 18:09:09.184304 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnhMANaV5i2_BLQr8CQAAAE4"], referer: http://67.222.38.115/api/v1/servers/localhost/zones [Sun Jul 12 18:09:09.236329 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:09.236890 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:09.242690 2026] [security2:error] [pid 940777:tid 940952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnpihQxksrpCflyFeIAAAAKg"] [Sun Jul 12 18:09:09.363510 2026] [security2:error] [pid 960377:tid 960521] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspRMANaV5i2_BLQr8vwAAAA0"] [Sun Jul 12 18:09:09.406706 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspBMANaV5i2_BLQr8nwAAACw"] [Sun Jul 12 18:09:09.559307 2026] [security2:error] [pid 960377:tid 960561] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspBMANaV5i2_BLQr8owAAADU"] [Sun Jul 12 18:09:09.664518 2026] [security2:error] [pid 940777:tid 941000] [client 74.244.119.215:38894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQspZihQxksrpCflyFeyQAAANg"] [Sun Jul 12 18:09:09.664806 2026] [security2:error] [pid 940777:tid 941000] [client 74.244.119.215:38894] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQspZihQxksrpCflyFeyQAAANg"] [Sun Jul 12 18:09:09.741216 2026] [security2:error] [pid 940777:tid 941003] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFexQAAANs"] [Sun Jul 12 18:09:09.920189 2026] [authz_core:error] [pid 960377:tid 960612] [client 20.210.108.71:49234] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/error_log, referer: binance.com [Sun Jul 12 18:09:10.005022 2026] [security2:error] [pid 940777:tid 940948] [client 20.244.27.100:63966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/PHPMailer/OAuthTokenProvider.php"] [unique_id "alQsppihQxksrpCflyFe1AAAAKQ"], referer: binance.com [Sun Jul 12 18:09:10.033298 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:10.033835 2026] [authz_core:error] [pid 940777:tid 940970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:10.240152 2026] [security2:error] [pid 940777:tid 940989] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFe0wAAAM0"] [Sun Jul 12 18:09:10.556970 2026] [security2:error] [pid 940777:tid 941015] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFeuAAAAOc"], referer: http://67.222.38.115/api/v1/service-accounts [Sun Jul 12 18:09:10.561111 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQspRMANaV5i2_BLQr8zQAAADk"] [Sun Jul 12 18:09:10.574777 2026] [security2:error] [pid 960377:tid 960607] [client 168.100.149.13:33246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/46670/bargainor/2307_gunz.jsp"] [unique_id "alQsphMANaV5i2_BLQr85AAAAGM"] [Sun Jul 12 18:09:10.670160 2026] [security2:error] [pid 960377:tid 960542] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsphMANaV5i2_BLQr82gAAACI"] [Sun Jul 12 18:09:10.793204 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:10.793716 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:10.837937 2026] [security2:error] [pid 940777:tid 940855] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/deploy/gcp_key.pem"] [unique_id "alQsppihQxksrpCflyFe4gAAoEQ"] [Sun Jul 12 18:09:11.084421 2026] [security2:error] [pid 960377:tid 960562] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS00MjkzLTkvMTMxMjktMA=="] [unique_id "alQspxMANaV5i2_BLQr88QAAADY"] [Sun Jul 12 18:09:11.239506 2026] [security2:error] [pid 960377:tid 960602] [client 24.203.79.110:57769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQspxMANaV5i2_BLQr89gAAAF4"] [Sun Jul 12 18:09:11.245318 2026] [security2:error] [pid 960377:tid 960602] [client 24.203.79.110:57769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQspxMANaV5i2_BLQr89gAAAF4"] [Sun Jul 12 18:09:11.260097 2026] [security2:error] [pid 940777:tid 940990] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFevgAAAM4"], referer: http://67.222.40.58/cgi [Sun Jul 12 18:09:11.365798 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspxMANaV5i2_BLQr88AAAAFo"] [Sun Jul 12 18:09:11.433034 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspRMANaV5i2_BLQr81wAAAEg"] [Sun Jul 12 18:09:11.531847 2026] [security2:error] [pid 940777:tid 940869] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/.ssh/gcp_key.pem"] [unique_id "alQsp5ihQxksrpCflyFe-gAAr1E"] [Sun Jul 12 18:09:11.609080 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:11.609862 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:11.700514 2026] [security2:error] [pid 940777:tid 940802] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/config/database.bak"] [unique_id "alQsp5ihQxksrpCflyFfBQAAuxA"] [Sun Jul 12 18:09:11.901189 2026] [security2:error] [pid 940777:tid 940957] [client 57.141.18.102:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQsp5ihQxksrpCflyFe-AAAAK0"] [Sun Jul 12 18:09:11.937564 2026] [lsapi:warn] [pid 940777:tid 941040] [client 192.0.102.146:39608] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:09:12.050423 2026] [security2:error] [pid 940777:tid 941002] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsp5ihQxksrpCflyFfAgAAANo"] [Sun Jul 12 18:09:12.050477 2026] [security2:error] [pid 940777:tid 941002] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsp5ihQxksrpCflyFfAgAAANo"] [Sun Jul 12 18:09:12.051784 2026] [security2:error] [pid 940777:tid 941044] [client 65.21.113.206:34922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS00MjkzLTkvMTMxMjktMA=="] [unique_id "alQsp5ihQxksrpCflyFe_wAAAQQ"] [Sun Jul 12 18:09:12.088017 2026] [security2:error] [pid 940777:tid 940977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFewgAAAME"] [Sun Jul 12 18:09:12.108403 2026] [security2:error] [pid 940777:tid 940965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQspZihQxksrpCflyFeyAAAALU"] [Sun Jul 12 18:09:12.182200 2026] [security2:error] [pid 940777:tid 941005] [client 125.167.21.72:63048] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsqJihQxksrpCflyFfDwAAAN0"] [Sun Jul 12 18:09:12.182554 2026] [security2:error] [pid 940777:tid 941005] [client 125.167.21.72:63048] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsqJihQxksrpCflyFfDwAAAN0"] [Sun Jul 12 18:09:12.186067 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQspxMANaV5i2_BLQr8_QAAADA"] [Sun Jul 12 18:09:12.448801 2026] [authz_core:error] [pid 960377:tid 960615] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:12.449446 2026] [authz_core:error] [pid 960377:tid 960615] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:12.519347 2026] [security2:error] [pid 960377:tid 960567] [client 168.100.149.221:44344] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/65/bargainor/2308_gurian.jsp"] [unique_id "alQsqBMANaV5i2_BLQr9GAAAADs"] [Sun Jul 12 18:09:12.652024 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqBMANaV5i2_BLQr9DQAAABg"] [Sun Jul 12 18:09:12.720008 2026] [security2:error] [pid 960377:tid 960575] [client 202.46.62.5:38540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 5.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQsqBMANaV5i2_BLQr9GgAAAEM"], referer: https://www.stephenspublishing.com/saddle-keytags-custom-p-102.html?osCsid=cvpodpd37hsi3ie6stp9qffrb3 [Sun Jul 12 18:09:13.067236 2026] [security2:error] [pid 960377:tid 960563] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqBMANaV5i2_BLQr9IAAAADc"] [Sun Jul 12 18:09:13.080241 2026] [security2:error] [pid 940777:tid 941006] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqJihQxksrpCflyFfDgAAAN4"], referer: http://67.222.40.58/cgi-pub [Sun Jul 12 18:09:13.086871 2026] [security2:error] [pid 940777:tid 941043] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqJihQxksrpCflyFfDQAAAQM"] [Sun Jul 12 18:09:13.133136 2026] [authz_core:error] [pid 960377:tid 960596] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/error_log [Sun Jul 12 18:09:13.224306 2026] [security2:error] [pid 960377:tid 960630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsphMANaV5i2_BLQr85wAAAHo"], referer: http://67.222.38.115/api/v1/serviceaccounts [Sun Jul 12 18:09:13.241571 2026] [security2:error] [pid 940777:tid 940820] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/exchange/.env"] [unique_id "alQsqZihQxksrpCflyFfIQAAqiI"] [Sun Jul 12 18:09:13.282495 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsphMANaV5i2_BLQr86QAAAGY"], referer: http://67.222.38.115/api/v1/service/info [Sun Jul 12 18:09:13.319851 2026] [security2:error] [pid 940777:tid 941008] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsppihQxksrpCflyFe3QAAAOA"] [Sun Jul 12 18:09:13.330181 2026] [security2:error] [pid 960377:tid 960591] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsphMANaV5i2_BLQr86AAAAFM"] [Sun Jul 12 18:09:13.353697 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:13.354361 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:13.417064 2026] [security2:error] [pid 940777:tid 940817] [remote 185.177.72.12:13948] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "mail.idreamofjeannemarie.com"] [uri "/contact.php.temp"] [unique_id "alQsqZihQxksrpCflyFfKAAA5B8"] [Sun Jul 12 18:09:13.417193 2026] [security2:error] [pid 940777:tid 940817] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "mail.idreamofjeannemarie.com"] [uri "/contact.php.temp"] [unique_id "alQsqZihQxksrpCflyFfKAAA5B8"] [Sun Jul 12 18:09:13.743600 2026] [security2:error] [pid 940777:tid 940964] [client 20.244.27.100:51457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/PHPMailer/POP3.php"] [unique_id "alQsqZihQxksrpCflyFfMQAAALQ"], referer: binance.com [Sun Jul 12 18:09:13.828896 2026] [security2:error] [pid 940777:tid 940934] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqZihQxksrpCflyFfLgAAAJY"] [Sun Jul 12 18:09:13.888025 2026] [security2:error] [pid 960377:tid 960593] [client 216.244.66.203:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "orl-koropi.gr"] [uri "/allergika-test/"] [unique_id "alQsqRMANaV5i2_BLQr9RAAAAFU"] [Sun Jul 12 18:09:13.888268 2026] [security2:error] [pid 960377:tid 960593] [client 216.244.66.203:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "orl-koropi.gr"] [uri "/allergika-test/"] [unique_id "alQsqRMANaV5i2_BLQr9RAAAAFU"] [Sun Jul 12 18:09:14.164425 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:14.165132 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:14.349444 2026] [security2:error] [pid 960377:tid 960604] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS00MjkzLXUvMTMyNDEteA=="] [unique_id "alQsqhMANaV5i2_BLQr9UAAAAGA"] [Sun Jul 12 18:09:14.371949 2026] [security2:error] [pid 960377:tid 960581] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqhMANaV5i2_BLQr9SwAAAEk"] [Sun Jul 12 18:09:14.466481 2026] [security2:error] [pid 940777:tid 940929] [client 168.100.149.227:30544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/130/bargainor/2308_monkey.jsp"] [unique_id "alQsqpihQxksrpCflyFfRAAAAJE"] [Sun Jul 12 18:09:14.510275 2026] [proxy:warn] [pid 960377:tid 960517] [client 91.92.42.80:48798] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be kurtismyson.com for uri /400.shtml [Sun Jul 12 18:09:14.533356 2026] [security2:error] [pid 940777:tid 941013] [client 91.92.42.80:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/400.shtml"] [unique_id "alQsqpihQxksrpCflyFfRgAAAOU"] [Sun Jul 12 18:09:14.534488 2026] [security2:error] [pid 960377:tid 960517] [client 91.92.42.80:48798] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/400.shtml"] [unique_id "alQsqhMANaV5i2_BLQr9UwAAAAk"] [Sun Jul 12 18:09:14.539374 2026] [security2:error] [pid 940777:tid 940866] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/restaurant-app/frontend/.env"] [unique_id "alQsqpihQxksrpCflyFfRwAA608"] [Sun Jul 12 18:09:14.654063 2026] [security2:error] [pid 940777:tid 940958] [client 47.128.45.190:54396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "speciesfishing.com"] [uri "/robots.txt"] [unique_id "alQsqpihQxksrpCflyFfSQAAAK4"] [Sun Jul 12 18:09:14.941162 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqhMANaV5i2_BLQr9VgAAAE8"] [Sun Jul 12 18:09:14.973758 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:14.974394 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:15.005220 2026] [security2:error] [pid 960377:tid 960513] [client 151.243.11.245:42790] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "americadatasystem.com"] [uri "/400.shtml"] [unique_id "alQsqxMANaV5i2_BLQr9ZgAAAAU"] [Sun Jul 12 18:09:15.102276 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9KgAAAFg"] [Sun Jul 12 18:09:15.231123 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9KQAAAHc"], referer: http://67.222.40.58/error [Sun Jul 12 18:09:15.251301 2026] [security2:error] [pid 960377:tid 960602] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9JQAAAF4"], referer: http://67.222.40.58/cgi-script [Sun Jul 12 18:09:15.343360 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9LQAAAAc"], referer: http://67.222.40.58/httpd [Sun Jul 12 18:09:15.492802 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqxMANaV5i2_BLQr9awAAAFk"] [Sun Jul 12 18:09:15.574318 2026] [security2:error] [pid 960377:tid 960632] [client 76.67.125.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsqhMANaV5i2_BLQr9YgAAAHw"] [Sun Jul 12 18:09:15.648018 2026] [security2:error] [pid 960377:tid 960622] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsqhMANaV5i2_BLQr9XwAAAHI"] [Sun Jul 12 18:09:15.648078 2026] [security2:error] [pid 960377:tid 960622] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsqhMANaV5i2_BLQr9XwAAAHI"] [Sun Jul 12 18:09:15.658469 2026] [security2:error] [pid 940777:tid 940982] [client 65.21.113.206:47424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS00MjkzLXUvMTMyNDEteA=="] [unique_id "alQsqpihQxksrpCflyFfTQAAAMY"] [Sun Jul 12 18:09:15.682162 2026] [security2:error] [pid 940777:tid 941004] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wordpress/wp-config-sample.php"] [unique_id "alQsq5ihQxksrpCflyFfYAAAANw"] [Sun Jul 12 18:09:15.784213 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:15.784741 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:16.071959 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsqxMANaV5i2_BLQr9fwAAAHg"] [Sun Jul 12 18:09:16.203619 2026] [security2:error] [pid 960377:tid 960513] [client 91.92.41.115:52115] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.elisacarrio.org"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "alQsrBMANaV5i2_BLQr9hwAAAAU"] [Sun Jul 12 18:09:16.339554 2026] [security2:error] [pid 940777:tid 941039] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsq5ihQxksrpCflyFfVQAAAP8"] [Sun Jul 12 18:09:16.434034 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqxMANaV5i2_BLQr9cgAAAFo"], referer: http://67.222.40.58/httpd.pid [Sun Jul 12 18:09:16.516783 2026] [security2:error] [pid 940777:tid 940921] [client 168.100.149.49:41740] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/195/bargainor/2308_impeccance.jsp"] [unique_id "alQsrJihQxksrpCflyFfcwAAAIk"] [Sun Jul 12 18:09:16.535556 2026] [authz_core:error] [pid 960377:tid 960522] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:16.536162 2026] [authz_core:error] [pid 960377:tid 960522] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:16.542783 2026] [security2:error] [pid 940777:tid 941037] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrJihQxksrpCflyFfaQAAAP0"] [Sun Jul 12 18:09:16.562812 2026] [proxy:error] [pid 960377:tid 960572] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:16.563042 2026] [proxy_http:error] [pid 960377:tid 960572] [client 91.92.41.115:52147] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:16.565136 2026] [proxy:error] [pid 960377:tid 960572] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:16.565356 2026] [proxy_http:error] [pid 960377:tid 960572] [client 91.92.41.115:52147] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:16.608861 2026] [security2:error] [pid 940777:tid 940919] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsqpihQxksrpCflyFfSwAAh30"] [Sun Jul 12 18:09:16.632885 2026] [security2:error] [pid 960377:tid 960429] [remote 185.177.72.52:43224] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsoBMANaV5i2_BLQr8QQAAHDI"] [Sun Jul 12 18:09:16.715089 2026] [security2:error] [pid 940777:tid 940852] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sql/dump.sql"] [unique_id "alQsrJihQxksrpCflyFfdgAA0UE"] [Sun Jul 12 18:09:16.878069 2026] [security2:error] [pid 940777:tid 940858] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/github-connect/.env"] [unique_id "alQsrJihQxksrpCflyFfeQAA4Uc"] [Sun Jul 12 18:09:17.159536 2026] [proxy:error] [pid 960377:tid 960564] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:17.160652 2026] [proxy_http:error] [pid 960377:tid 960564] [client 91.92.41.115:52174] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:17.168383 2026] [proxy:error] [pid 960377:tid 960564] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:17.168608 2026] [proxy_http:error] [pid 960377:tid 960564] [client 91.92.41.115:52174] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:17.340360 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:17.340913 2026] [authz_core:error] [pid 940777:tid 940959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:17.353712 2026] [security2:error] [pid 940777:tid 940924] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrZihQxksrpCflyFffwAAAIw"] [Sun Jul 12 18:09:17.406162 2026] [security2:error] [pid 960377:tid 960541] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS00NTIwLTcvMzM1NDEtZg=="] [unique_id "alQsrRMANaV5i2_BLQr9qgAAACE"] [Sun Jul 12 18:09:17.709795 2026] [security2:error] [pid 940777:tid 940942] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsrJihQxksrpCflyFfeAAAnjs"] [Sun Jul 12 18:09:17.716099 2026] [proxy:error] [pid 960377:tid 960568] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:17.716310 2026] [proxy_http:error] [pid 960377:tid 960568] [client 91.92.41.115:52228] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:17.718969 2026] [proxy:error] [pid 960377:tid 960568] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:09:17.719143 2026] [proxy_http:error] [pid 960377:tid 960568] [client 91.92.41.115:52228] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:09:17.720686 2026] [security2:error] [pid 960377:tid 960559] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrRMANaV5i2_BLQr9sQAAADM"] [Sun Jul 12 18:09:17.821114 2026] [security2:error] [pid 960377:tid 960631] [client 168.100.149.151:46264] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/260/bargainor/2308_gunz.jsp"] [unique_id "alQsrRMANaV5i2_BLQr9vgAAAHs"] [Sun Jul 12 18:09:17.958342 2026] [security2:error] [pid 960377:tid 960516] [client 94.187.171.125:59690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsrRMANaV5i2_BLQr9zwAAAAg"] [Sun Jul 12 18:09:17.958650 2026] [security2:error] [pid 960377:tid 960516] [client 94.187.171.125:59690] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsrRMANaV5i2_BLQr9zwAAAAg"] [Sun Jul 12 18:09:18.027463 2026] [security2:error] [pid 940777:tid 941013] [client 197.48.221.253:57509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsrpihQxksrpCflyFfjgAAAOU"] [Sun Jul 12 18:09:18.027936 2026] [security2:error] [pid 940777:tid 941013] [client 197.48.221.253:57509] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsrpihQxksrpCflyFfjgAAAOU"] [Sun Jul 12 18:09:18.114327 2026] [authz_core:error] [pid 940777:tid 940923] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:18.115440 2026] [authz_core:error] [pid 940777:tid 940923] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:18.204212 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrRMANaV5i2_BLQr9yQAAABg"] [Sun Jul 12 18:09:18.205361 2026] [security2:error] [pid 960377:tid 960601] [client 173.199.122.135:57179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.122.199.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "pacareerlinkchesco.org"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQsrhMANaV5i2_BLQr90QAAAF0"] [Sun Jul 12 18:09:18.265261 2026] [security2:error] [pid 940777:tid 941040] [client 12.104.110.9:55130] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQsrZihQxksrpCflyFfiwABAFc"] [Sun Jul 12 18:09:18.272237 2026] [security2:error] [pid 940777:tid 941040] [client 12.104.110.9:55130] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQsrZihQxksrpCflyFfjAABAHg"] [Sun Jul 12 18:09:18.295103 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrBMANaV5i2_BLQr9jgAAAHc"], referer: http://67.222.40.58/icons [Sun Jul 12 18:09:18.358418 2026] [security2:error] [pid 960377:tid 960533] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrBMANaV5i2_BLQr9jAAAABk"] [Sun Jul 12 18:09:18.367644 2026] [security2:error] [pid 940777:tid 940907] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/bot/.env"] [unique_id "alQsrpihQxksrpCflyFfkQAA73c"] [Sun Jul 12 18:09:18.384143 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrBMANaV5i2_BLQr9jQAAAAs"] [Sun Jul 12 18:09:18.415021 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrBMANaV5i2_BLQr9lAAAADk"] [Sun Jul 12 18:09:18.548825 2026] [security2:error] [pid 960377:tid 960602] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsrRMANaV5i2_BLQr9yAAAAF4"] [Sun Jul 12 18:09:18.548893 2026] [security2:error] [pid 960377:tid 960602] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsrRMANaV5i2_BLQr9yAAAAF4"] [Sun Jul 12 18:09:18.549933 2026] [security2:error] [pid 960377:tid 960571] [client 65.21.113.206:47440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS00NTIwLTcvMzM1NDEtZg=="] [unique_id "alQsrRMANaV5i2_BLQr9xQAAAD8"] [Sun Jul 12 18:09:18.759803 2026] [security2:error] [pid 940777:tid 940882] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsrZihQxksrpCflyFfhgAAxV4"] [Sun Jul 12 18:09:18.766947 2026] [security2:error] [pid 940777:tid 941030] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrpihQxksrpCflyFfnAAAAPY"] [Sun Jul 12 18:09:18.895608 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:18.896123 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:19.138769 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9MAAAACg"] [Sun Jul 12 18:09:19.214474 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrhMANaV5i2_BLQr95AAAAE8"] [Sun Jul 12 18:09:19.380063 2026] [security2:error] [pid 940777:tid 940789] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/httpd/.env"] [unique_id "alQsr5ihQxksrpCflyFfrAAAoQM"] [Sun Jul 12 18:09:19.387335 2026] [core:error] [pid 960377:tid 960421] [remote 20.244.40.74:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sun Jul 12 18:09:19.387390 2026] [core:error] [pid 960377:tid 960421] [remote 20.244.40.74:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: binance.com [Sun Jul 12 18:09:19.495801 2026] [security2:error] [pid 940777:tid 940948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrpihQxksrpCflyFfkwAAAKQ"], referer: http://67.222.40.58/index.html [Sun Jul 12 18:09:19.651368 2026] [security2:error] [pid 940777:tid 941041] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsrpihQxksrpCflyFfpwABAQ0"] [Sun Jul 12 18:09:19.710795 2026] [authz_core:error] [pid 960377:tid 960532] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:19.711348 2026] [authz_core:error] [pid 960377:tid 960532] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:19.767584 2026] [access_compat:error] [pid 960377:tid 960536] [client 45.161.156.240:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/sony-ac-adapter [Sun Jul 12 18:09:19.769376 2026] [access_compat:error] [pid 960377:tid 960536] [client 45.161.156.240:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/401.shtml [Sun Jul 12 18:09:19.862151 2026] [security2:error] [pid 960377:tid 960603] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsrxMANaV5i2_BLQr9_QAAAF8"] [Sun Jul 12 18:09:20.051116 2026] [security2:error] [pid 960377:tid 960546] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/example-config.php"] [unique_id "alQssBMANaV5i2_BLQr-CgAAACY"] [Sun Jul 12 18:09:20.129899 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrhMANaV5i2_BLQr92QAAAAY"] [Sun Jul 12 18:09:20.152068 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9OgAAAE4"], referer: http://67.222.38.115/api/v1/services [Sun Jul 12 18:09:20.168467 2026] [security2:error] [pid 960377:tid 960563] [client 74.244.119.215:1932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQssBMANaV5i2_BLQr-EQAAADc"] [Sun Jul 12 18:09:20.168822 2026] [security2:error] [pid 960377:tid 960563] [client 74.244.119.215:1932] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQssBMANaV5i2_BLQr-EQAAADc"] [Sun Jul 12 18:09:20.301902 2026] [security2:error] [pid 940777:tid 940955] [client 141.11.187.145:61181] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "cpcalendars.wordsaremedicine.org"] [uri "/___proxy_subdomain_cpcalendars/"] [unique_id "alQssJihQxksrpCflyFfyAAAAKs"] [Sun Jul 12 18:09:20.320525 2026] [security2:error] [pid 940777:tid 940973] [client 141.11.187.145:61183] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "autodiscover.wordsaremedicine.org"] [uri "/"] [unique_id "alQssJihQxksrpCflyFfyQAAAL0"] [Sun Jul 12 18:09:20.322310 2026] [security2:error] [pid 960377:tid 960622] [client 141.11.187.145:61187] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "webdisk.wordsaremedicine.org"] [uri "/___proxy_subdomain_webdisk/"] [unique_id "alQssBMANaV5i2_BLQr-FgAAAHI"] [Sun Jul 12 18:09:20.323435 2026] [security2:error] [pid 960377:tid 960557] [client 141.11.187.145:61182] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "cpcontacts.wordsaremedicine.org"] [uri "/___proxy_subdomain_cpcontacts/"] [unique_id "alQssBMANaV5i2_BLQr-FQAAADE"] [Sun Jul 12 18:09:20.323442 2026] [security2:error] [pid 960377:tid 960593] [client 141.11.187.145:61185] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "webmail.wordsaremedicine.org"] [uri "/___proxy_subdomain_webmail/"] [unique_id "alQssBMANaV5i2_BLQr-FwAAAFU"] [Sun Jul 12 18:09:20.344471 2026] [security2:error] [pid 940777:tid 940929] [client 141.11.187.145:61190] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "cpanel.wordsaremedicine.org"] [uri "/___proxy_subdomain_cpanel/"] [unique_id "alQssJihQxksrpCflyFfygAAAJE"] [Sun Jul 12 18:09:20.496028 2026] [security2:error] [pid 960377:tid 960512] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssBMANaV5i2_BLQr-FAAAAAQ"] [Sun Jul 12 18:09:20.521070 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:20.521650 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:20.553304 2026] [security2:error] [pid 960377:tid 960626] [client 168.100.149.43:17868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/325/bargainor/2308_monadically.jsp"] [unique_id "alQssBMANaV5i2_BLQr-HQAAAHY"] [Sun Jul 12 18:09:20.671769 2026] [security2:error] [pid 940777:tid 940991] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsr5ihQxksrpCflyFfvwAAzz4"] [Sun Jul 12 18:09:20.928211 2026] [security2:error] [pid 940777:tid 940906] [remote 141.11.187.145:61368] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "mail.wordsaremedicine.org"] [uri "/"] [unique_id "alQssJihQxksrpCflyFf3wAAonY"], referer: http://mail.wordsaremedicine.org [Sun Jul 12 18:09:20.951223 2026] [security2:error] [pid 940777:tid 940975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssJihQxksrpCflyFf2AAAAL8"] [Sun Jul 12 18:09:21.094193 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9OwAAABo"] [Sun Jul 12 18:09:21.141187 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9PwAAABI"] [Sun Jul 12 18:09:21.152936 2026] [security2:error] [pid 940777:tid 940982] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqZihQxksrpCflyFfJQAAAPM"] [Sun Jul 12 18:09:21.152936 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqRMANaV5i2_BLQr9OAAAAEQ"], referer: http://67.222.38.115/api/v1/settings [Sun Jul 12 18:09:21.217726 2026] [security2:error] [pid 960377:tid 960630] [client 85.215.150.55:61304] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.cecweb.org"] [uri "/index.php"] [unique_id "alQssRMANaV5i2_BLQr-JgAAAHo"] [Sun Jul 12 18:09:21.254224 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqZihQxksrpCflyFfJwAAAMI"], referer: http://67.222.38.115/api/v1/settings/api [Sun Jul 12 18:09:21.383265 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsqZihQxksrpCflyFfJgAAANY"], referer: http://67.222.38.115/api/v1/settings.public [Sun Jul 12 18:09:21.399807 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:21.401135 2026] [authz_core:error] [pid 940777:tid 941026] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:21.502734 2026] [security2:error] [pid 960377:tid 960544] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS01MTg0LTkvMTE0NS12"] [unique_id "alQssRMANaV5i2_BLQr-MAAAACQ"] [Sun Jul 12 18:09:21.534534 2026] [security2:error] [pid 940777:tid 940999] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssZihQxksrpCflyFf5wAAANc"] [Sun Jul 12 18:09:21.702050 2026] [security2:error] [pid 940777:tid 940836] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/public/.env"] [unique_id "alQssZihQxksrpCflyFf7wAAiDI"] [Sun Jul 12 18:09:21.773877 2026] [security2:error] [pid 940777:tid 941024] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQssJihQxksrpCflyFf3QAA8FA"] [Sun Jul 12 18:09:21.851179 2026] [security2:error] [pid 940777:tid 941025] [client 24.203.79.110:58452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQssZihQxksrpCflyFf8QAAAPE"] [Sun Jul 12 18:09:21.851465 2026] [security2:error] [pid 940777:tid 941025] [client 24.203.79.110:58452] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQssZihQxksrpCflyFf8QAAAPE"] [Sun Jul 12 18:09:21.884343 2026] [security2:error] [pid 960377:tid 960546] [client 85.215.150.55:61304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.150.215.85.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/phpinfo.php"] [unique_id "alQssRMANaV5i2_BLQr-OgAAACY"] [Sun Jul 12 18:09:22.150139 2026] [security2:error] [pid 940777:tid 940949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsr5ihQxksrpCflyFfswAAAKU"], referer: http://67.222.40.58/manual [Sun Jul 12 18:09:22.166300 2026] [security2:error] [pid 960377:tid 960579] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssRMANaV5i2_BLQr-OwAAAEc"] [Sun Jul 12 18:09:22.173738 2026] [security2:error] [pid 940777:tid 940962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsr5ihQxksrpCflyFfsgAAALI"] [Sun Jul 12 18:09:22.176602 2026] [security2:error] [pid 940777:tid 940855] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/server-info"] [unique_id "alQsmJihQxksrpCflyFgAgAAkkQ"] [Sun Jul 12 18:09:22.177066 2026] [security2:error] [pid 940777:tid 940884] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/server-info"] [unique_id "alQsl5ihQxksrpCflyFgAQAAkmA"], referer: http://67.222.40.58/server-info [Sun Jul 12 18:09:22.257308 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:22.258140 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:22.259922 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsrxMANaV5i2_BLQr9-QAAAHE"], referer: http://67.222.40.58/logs [Sun Jul 12 18:09:22.336082 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQssBMANaV5i2_BLQr-EgAAACk"], referer: http://67.222.40.58/phf [Sun Jul 12 18:09:22.511992 2026] [security2:error] [pid 960377:tid 960583] [client 168.100.149.157:23490] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/390/bargainor/2308_enhalo.jsp"] [unique_id "alQsshMANaV5i2_BLQr-WAAAAEs"] [Sun Jul 12 18:09:22.666221 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsshMANaV5i2_BLQr-UgAAAAo"] [Sun Jul 12 18:09:22.763605 2026] [security2:error] [pid 960377:tid 960514] [client 172.121.184.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQssRMANaV5i2_BLQr-PQAAAAY"] [Sun Jul 12 18:09:22.818210 2026] [security2:error] [pid 960377:tid 960586] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsshMANaV5i2_BLQr-QQAAAE4"] [Sun Jul 12 18:09:22.819365 2026] [security2:error] [pid 940777:tid 940994] [client 65.21.113.206:47448] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS01MTg0LTkvMTE0NS12"] [unique_id "alQssZihQxksrpCflyFf-gAAANI"] [Sun Jul 12 18:09:22.830349 2026] [security2:error] [pid 960377:tid 960586] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsshMANaV5i2_BLQr-QQAAAE4"] [Sun Jul 12 18:09:22.833799 2026] [security2:error] [pid 940777:tid 940869] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/API/.env.bak"] [unique_id "alQsspihQxksrpCflyFgHQAA3lE"] [Sun Jul 12 18:09:22.884149 2026] [security2:error] [pid 940777:tid 940802] [remote 74.7.227.188:54200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQsspihQxksrpCflyFgHgAAyhA"], referer: https://www.stephenspublishing.com/when-call-coloring-activity-books-stock-p-555.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:09:22.994210 2026] [security2:error] [pid 960377:tid 960591] [client 85.215.150.55:61547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 55.150.215.85.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/info.php"] [unique_id "alQsshMANaV5i2_BLQr-ZgAAAFM"] [Sun Jul 12 18:09:23.000618 2026] [security2:error] [pid 940777:tid 940838] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/graphql/.env"] [unique_id "alQsspihQxksrpCflyFgIQAAxjQ"] [Sun Jul 12 18:09:23.001802 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQssZihQxksrpCflyFf9gAA0Aw"] [Sun Jul 12 18:09:23.124192 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsrxMANaV5i2_BLQr97wAAAHs"] [Sun Jul 12 18:09:23.177351 2026] [authz_core:error] [pid 960377:tid 960596] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:23.178234 2026] [authz_core:error] [pid 960377:tid 960596] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:23.307984 2026] [security2:error] [pid 960377:tid 960545] [client 125.167.21.72:61501] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQssxMANaV5i2_BLQr-bwAAACU"] [Sun Jul 12 18:09:23.308483 2026] [security2:error] [pid 960377:tid 960545] [client 125.167.21.72:61501] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQssxMANaV5i2_BLQr-bwAAACU"] [Sun Jul 12 18:09:23.379770 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQssRMANaV5i2_BLQr-KgAAAA4"], referer: http://67.222.38.115/api/v1/setup-keys [Sun Jul 12 18:09:23.517387 2026] [security2:error] [pid 960377:tid 960634] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssxMANaV5i2_BLQr-bAAAAH4"] [Sun Jul 12 18:09:23.852378 2026] [security2:error] [pid 940777:tid 940949] [client 168.100.149.183:18730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/455/bargainor/2308_metalogical.jsp"] [unique_id "alQss5ihQxksrpCflyFgQQAAAKU"] [Sun Jul 12 18:09:23.889606 2026] [security2:error] [pid 940777:tid 941035] [client 147.185.132.66:61336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.132.185.147.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "annapurnahouse.com"] [uri "/webshell.php"] [unique_id "alQss5ihQxksrpCflyFgQgAAAPs"] [Sun Jul 12 18:09:23.903203 2026] [security2:error] [pid 940777:tid 941021] [client 20.210.108.71:53089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/abilities-api.php"] [unique_id "alQss5ihQxksrpCflyFgQwAAAO0"], referer: binance.com [Sun Jul 12 18:09:23.943936 2026] [security2:error] [pid 960377:tid 960574] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQssxMANaV5i2_BLQr-fgAAAEI"] [Sun Jul 12 18:09:23.982513 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:23.983112 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:24.209792 2026] [security2:error] [pid 940777:tid 940927] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQss5ihQxksrpCflyFgIwAAj24"] [Sun Jul 12 18:09:24.246823 2026] [security2:error] [pid 940777:tid 940998] [client 14.255.131.154:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQss5ihQxksrpCflyFgKgAAANY"] [Sun Jul 12 18:09:24.307682 2026] [security2:error] [pid 960377:tid 960599] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS01MjczLXgvMTczMjktNQ=="] [unique_id "alQstBMANaV5i2_BLQr-kwAAAFs"] [Sun Jul 12 18:09:24.337707 2026] [autoindex:error] [pid 940777:tid 941003] [client 85.215.150.55:0] AH01276: Cannot serve directory /home2/cecillin/public_html/cecweb/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:09:24.375240 2026] [security2:error] [pid 940777:tid 941009] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQss5ihQxksrpCflyFgNwAAAOE"] [Sun Jul 12 18:09:24.474785 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQstBMANaV5i2_BLQr-jgAAAE8"] [Sun Jul 12 18:09:24.647367 2026] [security2:error] [pid 940777:tid 940902] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/config/test.bak"] [unique_id "alQstJihQxksrpCflyFgWAAAxnI"] [Sun Jul 12 18:09:24.781549 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:24.782095 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:24.836514 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/login.php.2"] [unique_id "alQstBMANaV5i2_BLQr-ogAAAEg"] [Sun Jul 12 18:09:25.023842 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/forex/admin/config.php"] [unique_id "alQstRMANaV5i2_BLQr-pwAAADg"] [Sun Jul 12 18:09:25.025735 2026] [security2:error] [pid 960377:tid 960546] [client 91.92.41.115:53100] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "cpcontacts.elisacarrio.org"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "alQstRMANaV5i2_BLQr-qAAAACY"] [Sun Jul 12 18:09:25.228358 2026] [security2:error] [pid 940777:tid 940984] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQss5ihQxksrpCflyFgJQAAAMg"] [Sun Jul 12 18:09:25.297496 2026] [security2:error] [pid 940777:tid 940820] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQstJihQxksrpCflyFgUQAAjSI"] [Sun Jul 12 18:09:25.396513 2026] [security2:error] [pid 940777:tid 941041] [client 185.177.72.12:13948] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQstZihQxksrpCflyFgaAABARU"] [Sun Jul 12 18:09:25.428483 2026] [security2:error] [pid 940777:tid 940938] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQstJihQxksrpCflyFgYQAAAJo"] [Sun Jul 12 18:09:25.428550 2026] [security2:error] [pid 940777:tid 940938] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQstJihQxksrpCflyFgYQAAAJo"] [Sun Jul 12 18:09:25.429861 2026] [security2:error] [pid 960377:tid 960514] [client 65.21.113.206:55524] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS01MjczLXgvMTczMjktNQ=="] [unique_id "alQstBMANaV5i2_BLQr-nwAAAAY"] [Sun Jul 12 18:09:25.583891 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:25.584560 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:25.784290 2026] [security2:error] [pid 940777:tid 941015] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQstZihQxksrpCflyFgbgAAAOc"] [Sun Jul 12 18:09:26.190699 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQssxMANaV5i2_BLQr-dwAAADA"], referer: http://67.222.38.115/api/v1/status/active_queries [Sun Jul 12 18:09:26.227149 2026] [security2:error] [pid 940777:tid 940971] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQstZihQxksrpCflyFgdAAAALs"] [Sun Jul 12 18:09:26.283377 2026] [security2:error] [pid 940777:tid 940969] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQstZihQxksrpCflyFgawAAuS8"] [Sun Jul 12 18:09:26.397791 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:26.398294 2026] [authz_core:error] [pid 940777:tid 940977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:26.501281 2026] [security2:error] [pid 940777:tid 941007] [client 168.100.149.8:39014] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/520/bargainor/2308_psychoreflex.jsp"] [unique_id "alQstpihQxksrpCflyFgjQAAAN8"] [Sun Jul 12 18:09:26.626501 2026] [security2:error] [pid 940777:tid 941017] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQstpihQxksrpCflyFghQAAAOk"] [Sun Jul 12 18:09:26.769971 2026] [security2:error] [pid 960377:tid 960576] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS01MjgxLXYvODI1Ny16"] [unique_id "alQsthMANaV5i2_BLQr-1wAAAEQ"] [Sun Jul 12 18:09:27.006315 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsthMANaV5i2_BLQr-2AAAADQ"] [Sun Jul 12 18:09:27.133236 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQssxMANaV5i2_BLQr-eAAAAEk"] [Sun Jul 12 18:09:27.133329 2026] [security2:error] [pid 960377:tid 960573] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQssxMANaV5i2_BLQr-dgAAAG4"], referer: http://67.222.38.115/api/v1/statistics [Sun Jul 12 18:09:27.159431 2026] [security2:error] [pid 940777:tid 940951] [client 216.244.66.249:38010] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/robots.txt"] [unique_id "alQst5ihQxksrpCflyFglQAAAKc"] [Sun Jul 12 18:09:27.159801 2026] [security2:error] [pid 940777:tid 940951] [client 216.244.66.249:38010] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "coloradodancesport.com"] [uri "/robots.txt"] [unique_id "alQst5ihQxksrpCflyFglQAAAKc"] [Sun Jul 12 18:09:27.223996 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:27.224707 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:27.231022 2026] [security2:error] [pid 940777:tid 940966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgCgAAALY"] [Sun Jul 12 18:09:27.242238 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgCQAAALg"] [Sun Jul 12 18:09:27.266278 2026] [security2:error] [pid 940777:tid 940923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgDAAAAIs"] [Sun Jul 12 18:09:27.337255 2026] [security2:error] [pid 940777:tid 940983] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQstpihQxksrpCflyFghwAAx0o"] [Sun Jul 12 18:09:27.347295 2026] [security2:error] [pid 940777:tid 940919] [client 173.199.122.135:57110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.122.199.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "keithwallacelaw.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQst5ihQxksrpCflyFgmAAAAIc"] [Sun Jul 12 18:09:27.460960 2026] [security2:error] [pid 940777:tid 940940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQst5ihQxksrpCflyFglwAAAJw"] [Sun Jul 12 18:09:27.630265 2026] [security2:error] [pid 940777:tid 940852] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/ec2_key.pem"] [unique_id "alQst5ihQxksrpCflyFgnQAApEE"] [Sun Jul 12 18:09:27.822075 2026] [security2:error] [pid 960377:tid 960515] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQstxMANaV5i2_BLQr-6wAAAAc"] [Sun Jul 12 18:09:27.822165 2026] [security2:error] [pid 960377:tid 960515] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQstxMANaV5i2_BLQr-6wAAAAc"] [Sun Jul 12 18:09:27.824272 2026] [security2:error] [pid 960377:tid 960625] [client 65.21.113.206:55540] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS01MjgxLXYvODI1Ny16"] [unique_id "alQstxMANaV5i2_BLQr-6AAAAHU"] [Sun Jul 12 18:09:27.848721 2026] [security2:error] [pid 940777:tid 940962] [client 168.100.149.67:19762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/585/bargainor/2308_mailable.jsp"] [unique_id "alQst5ihQxksrpCflyFgpgAAALI"] [Sun Jul 12 18:09:28.043384 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:28.043932 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:28.080759 2026] [security2:error] [pid 940777:tid 940995] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgEAAAANM"], referer: http://67.222.40.58/test-cgi [Sun Jul 12 18:09:28.089266 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsshMANaV5i2_BLQr-UQAAACg"], referer: http://67.222.40.58/tmp [Sun Jul 12 18:09:28.102551 2026] [security2:error] [pid 940777:tid 941018] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgCwAAAOo"], referer: http://67.222.40.58/printenv [Sun Jul 12 18:09:28.108272 2026] [security2:error] [pid 940777:tid 940979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQst5ihQxksrpCflyFgowAAAMM"] [Sun Jul 12 18:09:28.119078 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsshMANaV5i2_BLQr-SgAAADw"], referer: http://67.222.40.58/status [Sun Jul 12 18:09:28.206356 2026] [security2:error] [pid 940777:tid 940996] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFgDQAAANQ"] [Sun Jul 12 18:09:28.285334 2026] [security2:error] [pid 940777:tid 940846] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/oracle.php.old"] [unique_id "alQsuJihQxksrpCflyFgrgAAtTs"] [Sun Jul 12 18:09:28.385296 2026] [security2:error] [pid 940777:tid 940924] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQst5ihQxksrpCflyFgnAAAjH0"] [Sun Jul 12 18:09:28.450875 2026] [security2:error] [pid 940777:tid 940897] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/temp/api_keys.sql"] [unique_id "alQsuJihQxksrpCflyFgrwAA3G0"] [Sun Jul 12 18:09:28.594397 2026] [security2:error] [pid 940777:tid 940989] [client 197.48.221.253:58115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsuJihQxksrpCflyFgtAAAAM0"] [Sun Jul 12 18:09:28.594713 2026] [security2:error] [pid 940777:tid 940989] [client 197.48.221.253:58115] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQsuJihQxksrpCflyFgtAAAAM0"] [Sun Jul 12 18:09:28.681219 2026] [security2:error] [pid 940777:tid 940971] [client 94.187.171.125:60319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsuJihQxksrpCflyFguQAAALs"] [Sun Jul 12 18:09:28.681499 2026] [security2:error] [pid 940777:tid 940971] [client 94.187.171.125:60319] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQsuJihQxksrpCflyFguQAAALs"] [Sun Jul 12 18:09:28.910713 2026] [security2:error] [pid 940777:tid 940954] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuJihQxksrpCflyFgtwAAAKo"] [Sun Jul 12 18:09:28.923323 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:28.924020 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:29.082842 2026] [security2:error] [pid 940777:tid 940790] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/analytics/.env"] [unique_id "alQsuZihQxksrpCflyFgvwAAwAQ"] [Sun Jul 12 18:09:29.225594 2026] [security2:error] [pid 960377:tid 960563] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuBMANaV5i2_BLQr_CAAAADc"] [Sun Jul 12 18:09:29.238467 2026] [security2:error] [pid 960377:tid 960524] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuBMANaV5i2_BLQr_AwAAABA"] [Sun Jul 12 18:09:29.283763 2026] [security2:error] [pid 960377:tid 960579] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS02NDUwLXEvMTU2MjEtNQ=="] [unique_id "alQsuRMANaV5i2_BLQr_FwAAAEc"] [Sun Jul 12 18:09:29.453505 2026] [security2:error] [pid 940777:tid 940947] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsuJihQxksrpCflyFgswAAoz0"] [Sun Jul 12 18:09:29.559416 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuRMANaV5i2_BLQr_GAAAAFY"] [Sun Jul 12 18:09:29.613254 2026] [security2:error] [pid 940777:tid 940854] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Matched phrase ".php.txt" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "627"] [id "340035"] [rev "5"] [msg "Atomicorp.com WAF Rules: Bogus file extensions"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/phpinfo.php.txt"] [unique_id "alQsuZihQxksrpCflyFg0gAAlUM"] [Sun Jul 12 18:09:29.726125 2026] [security2:error] [pid 940777:tid 940912] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.output/server/.env"] [unique_id "alQsuZihQxksrpCflyFg0wAApnw"] [Sun Jul 12 18:09:29.736150 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:29.736953 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:30.219577 2026] [security2:error] [pid 960377:tid 960572] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQstRMANaV5i2_BLQr-rAAAAEA"], referer: http://67.222.38.115/api/v1/status/top_queries [Sun Jul 12 18:09:30.322145 2026] [security2:error] [pid 940777:tid 940968] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFg2wAAALg"] [Sun Jul 12 18:09:30.536767 2026] [security2:error] [pid 960377:tid 960539] [client 168.100.149.83:56576] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/650/bargainor/2308_epidemiology.jsp"] [unique_id "alQsuhMANaV5i2_BLQr_PgAAAB8"] [Sun Jul 12 18:09:30.666763 2026] [authz_core:error] [pid 960377:tid 960619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:30.667511 2026] [authz_core:error] [pid 960377:tid 960619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:30.688386 2026] [security2:error] [pid 960377:tid 960547] [client 74.244.119.215:62344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsuhMANaV5i2_BLQr_QwAAACc"] [Sun Jul 12 18:09:30.690934 2026] [security2:error] [pid 960377:tid 960556] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsuRMANaV5i2_BLQr_KAAAADA"] [Sun Jul 12 18:09:30.691005 2026] [security2:error] [pid 960377:tid 960556] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsuRMANaV5i2_BLQr_KAAAADA"] [Sun Jul 12 18:09:30.694425 2026] [security2:error] [pid 960377:tid 960549] [client 65.21.113.206:55548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS02NDUwLXEvMTU2MjEtNQ=="] [unique_id "alQsuRMANaV5i2_BLQr_JgAAACk"] [Sun Jul 12 18:09:30.695053 2026] [security2:error] [pid 960377:tid 960547] [client 74.244.119.215:62344] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsuhMANaV5i2_BLQr_QwAAACc"] [Sun Jul 12 18:09:30.893125 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuhMANaV5i2_BLQr_QAAAAEo"] [Sun Jul 12 18:09:31.092519 2026] [security2:error] [pid 940777:tid 940915] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFg1QAA138"] [Sun Jul 12 18:09:31.384586 2026] [security2:error] [pid 940777:tid 941039] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFgxwAAAP8"] [Sun Jul 12 18:09:31.418697 2026] [security2:error] [pid 940777:tid 940953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFgywAAAKk"], referer: http://67.222.40.58/~bin [Sun Jul 12 18:09:31.432803 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFgyAAAAMk"], referer: http://67.222.40.58/~ftp [Sun Jul 12 18:09:31.449612 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuRMANaV5i2_BLQr_FgAAAF0"] [Sun Jul 12 18:09:31.493911 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuxMANaV5i2_BLQr_TQAAAHg"] [Sun Jul 12 18:09:31.577934 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:31.578687 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:31.637922 2026] [security2:error] [pid 940777:tid 940952] [client 57.141.18.27:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQsuZihQxksrpCflyFg0AAAAKg"] [Sun Jul 12 18:09:31.701833 2026] [security2:error] [pid 960377:tid 960502] [remote 64.225.121.94:42166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 94.121.225.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/PhpToken.php"] [unique_id "alQsuxMANaV5i2_BLQr_XwAAfns"] [Sun Jul 12 18:09:31.856773 2026] [security2:error] [pid 960377:tid 960543] [client 168.100.149.33:60558] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/715/bargainor/2308_secque.jsp"] [unique_id "alQsuxMANaV5i2_BLQr_YgAAACM"] [Sun Jul 12 18:09:31.982587 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsuxMANaV5i2_BLQr_YAAAAGE"] [Sun Jul 12 18:09:32.178701 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsthMANaV5i2_BLQr-xQAAABc"], referer: http://67.222.38.115/api/v1/superuser/users [Sun Jul 12 18:09:32.228436 2026] [security2:error] [pid 940777:tid 940922] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsu5ihQxksrpCflyFg7QAAijE"] [Sun Jul 12 18:09:32.398968 2026] [authz_core:error] [pid 960377:tid 960631] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:32.399456 2026] [authz_core:error] [pid 960377:tid 960631] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:32.436216 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvBMANaV5i2_BLQr_bAAAAA8"] [Sun Jul 12 18:09:32.523850 2026] [security2:error] [pid 960377:tid 960630] [client 24.203.79.110:58992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsvBMANaV5i2_BLQr_bwAAAHo"] [Sun Jul 12 18:09:32.573512 2026] [security2:error] [pid 960377:tid 960630] [client 24.203.79.110:58992] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsvBMANaV5i2_BLQr_bwAAAHo"] [Sun Jul 12 18:09:32.600990 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsuxMANaV5i2_BLQr_VwAAAFQ"], referer: http://67.222.40.58/~nobody [Sun Jul 12 18:09:32.635570 2026] [security2:error] [pid 940777:tid 941020] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsu5ihQxksrpCflyFg8wAAAOw"], referer: http://67.222.40.58/~root [Sun Jul 12 18:09:32.643387 2026] [authz_core:error] [pid 960377:tid 960574] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/php.ini [Sun Jul 12 18:09:32.645968 2026] [authz_core:error] [pid 960377:tid 960632] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/php.ini, referer: http://67.222.40.58/php.ini [Sun Jul 12 18:09:32.887908 2026] [security2:error] [pid 960377:tid 960599] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvBMANaV5i2_BLQr_dAAAAFs"] [Sun Jul 12 18:09:33.043918 2026] [security2:error] [pid 940777:tid 940967] [client 20.210.108.71:64006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/abilities.php"] [unique_id "alQsvZihQxksrpCflyFhGgAAALc"], referer: binance.com [Sun Jul 12 18:09:33.084970 2026] [security2:error] [pid 940777:tid 941042] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQstpihQxksrpCflyFgfgAAAQI"] [Sun Jul 12 18:09:33.136253 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsthMANaV5i2_BLQr-xgAAAGc"] [Sun Jul 12 18:09:33.156724 2026] [security2:error] [pid 960377:tid 960583] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsthMANaV5i2_BLQr-yAAAAEs"], referer: http://67.222.38.115/api/v1/superuser/organizations [Sun Jul 12 18:09:33.182709 2026] [security2:error] [pid 940777:tid 941003] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQstpihQxksrpCflyFgfwAAANs"] [Sun Jul 12 18:09:33.211416 2026] [authz_core:error] [pid 940777:tid 941008] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:33.211979 2026] [authz_core:error] [pid 940777:tid 941008] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:33.358699 2026] [security2:error] [pid 940777:tid 941038] [client 125.167.21.72:61940] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsvZihQxksrpCflyFhHgAAAP4"] [Sun Jul 12 18:09:33.359080 2026] [security2:error] [pid 940777:tid 941038] [client 125.167.21.72:61940] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsvZihQxksrpCflyFhHgAAAP4"] [Sun Jul 12 18:09:33.405767 2026] [security2:error] [pid 940777:tid 941040] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsvJihQxksrpCflyFhAAABAHY"] [Sun Jul 12 18:09:33.439872 2026] [security2:error] [pid 940777:tid 940984] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvZihQxksrpCflyFhHAAAAMg"] [Sun Jul 12 18:09:33.495749 2026] [security2:error] [pid 960377:tid 960612] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS02NzY4LXMvMzg4MzMtNQ=="] [unique_id "alQsvRMANaV5i2_BLQr_fwAAAGg"] [Sun Jul 12 18:09:33.592294 2026] [security2:error] [pid 940777:tid 940992] [client 177.81.185.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsvJihQxksrpCflyFhFQAAANA"] [Sun Jul 12 18:09:33.841599 2026] [security2:error] [pid 960377:tid 960555] [client 168.100.149.51:21494] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/780/bargainor/2308_dislevelment.jsp"] [unique_id "alQsvRMANaV5i2_BLQr_iAAAAC8"] [Sun Jul 12 18:09:33.842649 2026] [security2:error] [pid 940777:tid 941013] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvZihQxksrpCflyFhJwAAAOU"] [Sun Jul 12 18:09:34.034429 2026] [authz_core:error] [pid 960377:tid 960560] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:34.035112 2026] [authz_core:error] [pid 960377:tid 960560] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:34.074809 2026] [security2:error] [pid 960377:tid 960432] [remote 62.171.167.118:37444] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnxMANaV5i2_BLQr-4gAAdDU"], referer: http://67.222.38.115/api/v1/swagger.json [Sun Jul 12 18:09:34.221617 2026] [security2:error] [pid 960377:tid 960493] [remote 62.171.167.118:37444] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsnxMANaV5i2_BLQr-4wAAdHI"] [Sun Jul 12 18:09:34.260119 2026] [security2:error] [pid 960377:tid 960588] [client 91.92.42.80:41034] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsvhMANaV5i2_BLQr_lQAAAFA"] [Sun Jul 12 18:09:34.332711 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvhMANaV5i2_BLQr_jwAAAFM"] [Sun Jul 12 18:09:34.363002 2026] [security2:error] [pid 940777:tid 940791] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsvZihQxksrpCflyFhJQAAsAU"] [Sun Jul 12 18:09:34.410964 2026] [security2:error] [pid 940777:tid 940939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsupihQxksrpCflyFg3QAAAP0"] [Sun Jul 12 18:09:34.568925 2026] [security2:error] [pid 960377:tid 960567] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsvRMANaV5i2_BLQr_jgAAADs"] [Sun Jul 12 18:09:34.569087 2026] [security2:error] [pid 960377:tid 960567] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsvRMANaV5i2_BLQr_jgAAADs"] [Sun Jul 12 18:09:34.569957 2026] [security2:error] [pid 960377:tid 960557] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS02NzY4LXMvMzg4MzMtNQ=="] [unique_id "alQsvRMANaV5i2_BLQr_jAAAADE"] [Sun Jul 12 18:09:34.623093 2026] [security2:error] [pid 940777:tid 940965] [client 91.92.42.80:41036] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsvpihQxksrpCflyFhMwAAALU"] [Sun Jul 12 18:09:34.744826 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvhMANaV5i2_BLQr_pwAAABE"] [Sun Jul 12 18:09:34.846272 2026] [authz_core:error] [pid 960377:tid 960610] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:34.846787 2026] [authz_core:error] [pid 960377:tid 960610] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:34.979198 2026] [security2:error] [pid 960377:tid 960585] [client 91.92.42.80:41050] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsvhMANaV5i2_BLQr_rwAAAE0"] [Sun Jul 12 18:09:35.140763 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsvhMANaV5i2_BLQr_sQAAAFY"] [Sun Jul 12 18:09:35.151259 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsvBMANaV5i2_BLQr_cwAAAEI"] [Sun Jul 12 18:09:35.166075 2026] [security2:error] [pid 940777:tid 940815] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Web.config"] [unique_id "alQsqJihQxksrpCflyFhOgAAkh0"] [Sun Jul 12 18:09:35.202369 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsvBMANaV5i2_BLQr_cgAAAFE"] [Sun Jul 12 18:09:35.261573 2026] [security2:error] [pid 940777:tid 941002] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsvpihQxksrpCflyFhMgAA2kQ"] [Sun Jul 12 18:09:35.296965 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsvBMANaV5i2_BLQr_dQAAAHw"], referer: http://67.222.40.58/php.ini [Sun Jul 12 18:09:35.304420 2026] [security2:error] [pid 940777:tid 940828] [remote 185.177.72.12:13948] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/esbuild.config.js.bak"] [unique_id "alQsv5ihQxksrpCflyFhSwAAmCo"] [Sun Jul 12 18:09:35.326989 2026] [fcgid:warn] [pid 940777:tid 940921] (70014)End of file found: [client 66.132.186.184:44908] mod_fcgid: can't get data from http client [Sun Jul 12 18:09:35.344777 2026] [security2:error] [pid 940777:tid 940956] [client 91.92.42.80:41064] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsv5ihQxksrpCflyFhQgAAAKw"] [Sun Jul 12 18:09:35.444281 2026] [authz_core:error] [pid 940777:tid 940973] [client 47.79.201.78:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/php.ini, referer: https://www.google.com/ [Sun Jul 12 18:09:35.477820 2026] [security2:error] [pid 940777:tid 940998] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsvpihQxksrpCflyFhLQAAANY"] [Sun Jul 12 18:09:35.499053 2026] [authz_core:error] [pid 940777:tid 940973] [client 47.79.201.78:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/error_log, referer: https://www.google.com/ [Sun Jul 12 18:09:35.517199 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsvhMANaV5i2_BLQr_ogAAAFc"], referer: http://67.222.38.115/api/v2/buckets [Sun Jul 12 18:09:35.624242 2026] [security2:error] [pid 960377:tid 960518] [client 74.7.175.154:58100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "moonbeamsmusings.com"] [uri "/robots.txt"] [unique_id "alQsvxMANaV5i2_BLQr_xQAAAAo"] [Sun Jul 12 18:09:35.651542 2026] [security2:error] [pid 960377:tid 960495] [remote 157.66.26.183:36262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.26.66.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/PhpToken.php"] [unique_id "alQsvxMANaV5i2_BLQr_xgAAW3Q"] [Sun Jul 12 18:09:35.655171 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:35.655892 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:35.694377 2026] [security2:error] [pid 960377:tid 960580] [client 91.92.42.80:41070] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsvxMANaV5i2_BLQr_xAAAAEg"] [Sun Jul 12 18:09:35.708362 2026] [security2:error] [pid 940777:tid 940991] [client 185.177.72.12:13948] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/ms-themes.php"] [unique_id "alQsv5ihQxksrpCflyFhVAAAzwI"] [Sun Jul 12 18:09:35.829367 2026] [core:error] [pid 940777:tid 940925] [client 80.253.251.6:36270] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:09:35.855452 2026] [security2:error] [pid 960377:tid 960549] [client 168.100.149.82:32254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/845/bargainor/2308_limnoria.jsp"] [unique_id "alQsvxMANaV5i2_BLQr_zgAAACk"] [Sun Jul 12 18:09:35.864616 2026] [security2:error] [pid 960377:tid 960571] [client 47.128.117.9:48484] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "whise-global.com"] [uri "/robots.txt"] [unique_id "alQsvxMANaV5i2_BLQr_zwAAAD8"] [Sun Jul 12 18:09:36.051742 2026] [security2:error] [pid 960377:tid 960553] [client 91.92.42.80:41080] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQsvxMANaV5i2_BLQr_0gAAAC0"] [Sun Jul 12 18:09:36.074289 2026] [security2:error] [pid 940777:tid 941019] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsvJihQxksrpCflyFhDgAAAOs"] [Sun Jul 12 18:09:36.151510 2026] [security2:error] [pid 940777:tid 940967] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhUwAAt28"] [Sun Jul 12 18:09:36.235146 2026] [security2:error] [pid 940777:tid 940962] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhYQAAALI"] [Sun Jul 12 18:09:36.249773 2026] [security2:error] [pid 960377:tid 960381] [remote 185.177.72.12:1734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQswBMANaV5i2_BLQr_1wAAQwM"] [Sun Jul 12 18:09:36.407034 2026] [security2:error] [pid 960377:tid 960567] [client 91.92.42.80:41096] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQswBMANaV5i2_BLQr_2gAAADs"] [Sun Jul 12 18:09:36.411951 2026] [security2:error] [pid 960377:tid 960565] [client 65.21.113.206:59996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS03NDgzLXYvMjQwNDktbw=="] [unique_id "alQswBMANaV5i2_BLQr_3AAAADk"] [Sun Jul 12 18:09:36.460111 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:36.460742 2026] [authz_core:error] [pid 940777:tid 940939] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:36.759922 2026] [security2:error] [pid 960377:tid 960631] [client 91.92.42.80:41110] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQswBMANaV5i2_BLQr_3QAAAHs"] [Sun Jul 12 18:09:36.979159 2026] [security2:error] [pid 940777:tid 941037] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQswJihQxksrpCflyFhbAAA_RI"] [Sun Jul 12 18:09:37.003649 2026] [security2:error] [pid 960377:tid 960621] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQswBMANaV5i2_BLQr_4gAAAHE"] [Sun Jul 12 18:09:37.122079 2026] [security2:error] [pid 940777:tid 940928] [client 91.92.42.80:41118] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQswZihQxksrpCflyFhdQAAAJA"] [Sun Jul 12 18:09:37.261046 2026] [security2:error] [pid 960377:tid 960630] [client 181.233.147.241:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQswBMANaV5i2_BLQr_3wAAAHo"] [Sun Jul 12 18:09:37.297000 2026] [authz_core:error] [pid 960377:tid 960550] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:37.331563 2026] [security2:error] [pid 940777:tid 940841] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/db/log.bak"] [unique_id "alQswZihQxksrpCflyFhgAAAmDY"] [Sun Jul 12 18:09:37.376554 2026] [authz_core:error] [pid 960377:tid 960550] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:37.486874 2026] [security2:error] [pid 960377:tid 960606] [client 91.92.42.80:41120] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQswRMANaV5i2_BLQr_8gAAAGI"] [Sun Jul 12 18:09:37.593064 2026] [security2:error] [pid 960377:tid 960585] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQswBMANaV5i2_BLQr_5gAAAE0"] [Sun Jul 12 18:09:37.593124 2026] [security2:error] [pid 960377:tid 960585] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQswBMANaV5i2_BLQr_5gAAAE0"] [Sun Jul 12 18:09:37.594861 2026] [security2:error] [pid 940777:tid 941004] [client 65.21.113.206:55832] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS03NDgzLXYvMjQwNDktbw=="] [unique_id "alQswJihQxksrpCflyFhdAAAANw"] [Sun Jul 12 18:09:37.935301 2026] [security2:error] [pid 960377:tid 960599] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQswRMANaV5i2_BLQr_9QAAAFs"] [Sun Jul 12 18:09:37.943621 2026] [core:error] [pid 940777:tid 940943] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:37.943722 2026] [core:error] [pid 940777:tid 940943] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:38.109824 2026] [security2:error] [pid 940777:tid 940971] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQswZihQxksrpCflyFheAAAu3I"] [Sun Jul 12 18:09:38.241755 2026] [authz_core:error] [pid 940777:tid 940975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:38.242780 2026] [authz_core:error] [pid 940777:tid 940975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:38.337022 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhWQAAALM"] [Sun Jul 12 18:09:38.466776 2026] [security2:error] [pid 940777:tid 940988] [client 168.100.149.229:40482] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/910/bargainor/2308_milksopism.jsp"] [unique_id "alQswpihQxksrpCflyFhmgAAAMw"] [Sun Jul 12 18:09:38.562925 2026] [security2:error] [pid 940777:tid 941043] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQswpihQxksrpCflyFhlwAAAQM"] [Sun Jul 12 18:09:38.724653 2026] [security2:error] [pid 940777:tid 940837] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/public/secret.bak"] [unique_id "alQswpihQxksrpCflyFhnQAAwzM"] [Sun Jul 12 18:09:39.073128 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsvxMANaV5i2_BLQr_wAAAABs"] [Sun Jul 12 18:09:39.100829 2026] [security2:error] [pid 960377:tid 960560] [client 197.48.221.253:58705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQswxMANaV5i2_BLQoAFAAAADQ"] [Sun Jul 12 18:09:39.101164 2026] [security2:error] [pid 960377:tid 960560] [client 197.48.221.253:58705] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQswxMANaV5i2_BLQoAFAAAADQ"] [Sun Jul 12 18:09:39.139140 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsvxMANaV5i2_BLQr_wgAAACA"], referer: http://67.222.38.115/api/v2/buildinfo [Sun Jul 12 18:09:39.187431 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsvxMANaV5i2_BLQr_wwAAAFU"] [Sun Jul 12 18:09:39.222447 2026] [security2:error] [pid 940777:tid 940810] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQswpihQxksrpCflyFhmQAA1xg"] [Sun Jul 12 18:09:39.263038 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:39.263897 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:39.301428 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqJihQxksrpCflyFhPAAAkh0"] [Sun Jul 12 18:09:39.309095 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQswhMANaV5i2_BLQoADQAAADk"] [Sun Jul 12 18:09:39.375098 2026] [security2:error] [pid 960377:tid 960620] [client 94.187.171.125:60831] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQswxMANaV5i2_BLQoAHgAAAHA"] [Sun Jul 12 18:09:39.376966 2026] [security2:error] [pid 960377:tid 960620] [client 94.187.171.125:60831] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQswxMANaV5i2_BLQoAHgAAAHA"] [Sun Jul 12 18:09:39.387914 2026] [security2:error] [pid 940777:tid 940814] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/phpinfo.php.bak"] [unique_id "alQsw5ihQxksrpCflyFhrgAAkxw"] [Sun Jul 12 18:09:39.708356 2026] [security2:error] [pid 940777:tid 940806] [remote 15.235.167.25:39370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.167.235.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/PhpToken.php"] [unique_id "alQsw5ihQxksrpCflyFhtgAAwhQ"] [Sun Jul 12 18:09:39.856954 2026] [security2:error] [pid 960377:tid 960601] [client 20.210.108.71:57989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/block-bindings.php"] [unique_id "alQswxMANaV5i2_BLQoAJgAAAF0"], referer: binance.com [Sun Jul 12 18:09:39.861572 2026] [security2:error] [pid 960377:tid 960618] [client 168.100.149.127:18372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/975/bargainor/2308_capnoides.jsp"] [unique_id "alQswxMANaV5i2_BLQoAJwAAAG4"] [Sun Jul 12 18:09:39.912350 2026] [security2:error] [pid 940777:tid 941007] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsw5ihQxksrpCflyFhswAAAN8"] [Sun Jul 12 18:09:39.958966 2026] [cgid:error] [pid 960377:tid 960555] [client 202.46.62.94:62856] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-stock-p-546.html?osCsid=dj29h5iper8v3871os4b02dfh2 [Sun Jul 12 18:09:40.079240 2026] [security2:error] [pid 940777:tid 940922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhPQAAAIo"], referer: http://67.222.40.58/balancer-manager [Sun Jul 12 18:09:40.082255 2026] [security2:error] [pid 940777:tid 940909] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/config/database.sql"] [unique_id "alQsxJihQxksrpCflyFhwAAA9Hk"] [Sun Jul 12 18:09:40.128549 2026] [authz_core:error] [pid 940777:tid 940934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:40.129293 2026] [authz_core:error] [pid 940777:tid 940934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:40.135602 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqJihQxksrpCflyFhOwAAkmU"] [Sun Jul 12 18:09:40.166481 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsvxMANaV5i2_BLQr_twAAAAU"], referer: http://67.222.40.58/mod_cluster-manager [Sun Jul 12 18:09:40.242708 2026] [security2:error] [pid 940777:tid 940932] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhPwAAAJQ"] [Sun Jul 12 18:09:40.311886 2026] [security2:error] [pid 960377:tid 960405] [remote 57.141.18.83:45148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/F1-eBo/BzOY_/eatwD_aZCImSK26P.lWez"] [unique_id "alQsxBMANaV5i2_BLQoAMQAACBs"] [Sun Jul 12 18:09:40.316867 2026] [security2:error] [pid 940777:tid 941016] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhRAAAAOg"] [Sun Jul 12 18:09:40.352510 2026] [security2:error] [pid 940777:tid 940955] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsv5ihQxksrpCflyFhUgAAAKs"] [Sun Jul 12 18:09:40.394031 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQswxMANaV5i2_BLQoAGwAAAHg"] [Sun Jul 12 18:09:40.470106 2026] [security2:error] [pid 940777:tid 940989] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsw5ihQxksrpCflyFhqAAAAM0"], referer: http://67.222.38.115/api/v2/config [Sun Jul 12 18:09:40.622059 2026] [security2:error] [pid 940777:tid 941005] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsw5ihQxksrpCflyFhtAAA3Us"] [Sun Jul 12 18:09:40.673417 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoALgAAAFI"] [Sun Jul 12 18:09:40.837969 2026] [security2:error] [pid 940777:tid 940821] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/secret/.env"] [unique_id "alQsxJihQxksrpCflyFh1gAA-iM"] [Sun Jul 12 18:09:40.908188 2026] [security2:error] [pid 940777:tid 940998] [client 198.235.24.85:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "annapurnahouse.com"] [uri "/index.php"] [unique_id "alQsxJihQxksrpCflyFhxwAAANY"] [Sun Jul 12 18:09:40.996648 2026] [security2:error] [pid 940777:tid 940803] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/version2/.env"] [unique_id "alQsxJihQxksrpCflyFh2AAApRE"] [Sun Jul 12 18:09:41.034552 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:41.035412 2026] [authz_core:error] [pid 940777:tid 940973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:41.331872 2026] [security2:error] [pid 960377:tid 960608] [client 74.244.119.215:21887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsxRMANaV5i2_BLQoAXgAAAGQ"] [Sun Jul 12 18:09:41.332312 2026] [security2:error] [pid 960377:tid 960608] [client 74.244.119.215:21887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsxRMANaV5i2_BLQoAXgAAAGQ"] [Sun Jul 12 18:09:41.417080 2026] [security2:error] [pid 960377:tid 960524] [client 93.47.41.109:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoASQAAABA"] [Sun Jul 12 18:09:41.588746 2026] [core:error] [pid 940777:tid 940941] [client 69.12.64.58:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:41.588798 2026] [core:error] [pid 940777:tid 940941] [client 69.12.64.58:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:41.594858 2026] [security2:error] [pid 940777:tid 940985] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsxZihQxksrpCflyFh5wAAAMk"] [Sun Jul 12 18:09:41.779988 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/modules/core/assets/config.php"] [unique_id "alQsxRMANaV5i2_BLQoAZwAAAAw"] [Sun Jul 12 18:09:41.812159 2026] [security2:error] [pid 940777:tid 940875] [remote 129.211.218.71:43890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.218.211.129.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/PhpToken.php"] [unique_id "alQsxZihQxksrpCflyFh_wAA7Vc"] [Sun Jul 12 18:09:41.864313 2026] [security2:error] [pid 940777:tid 940997] [client 168.100.149.123:15664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1040/bargainor/2308_deft.jsp"] [unique_id "alQsxZihQxksrpCflyFiAQAAANU"] [Sun Jul 12 18:09:41.974310 2026] [authz_core:error] [pid 960377:tid 960566] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:41.975043 2026] [authz_core:error] [pid 960377:tid 960566] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:42.016211 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsxJihQxksrpCflyFh1AAAsWY"] [Sun Jul 12 18:09:42.183921 2026] [security2:error] [pid 940777:tid 940790] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env.bak"] [unique_id "alQsxpihQxksrpCflyFiCwAAlgQ"] [Sun Jul 12 18:09:42.345374 2026] [security2:error] [pid 940777:tid 940895] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env"] [unique_id "alQsxpihQxksrpCflyFiDgAArGs"] [Sun Jul 12 18:09:42.376914 2026] [security2:error] [pid 940777:tid 940920] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsxZihQxksrpCflyFiBQAAAIg"] [Sun Jul 12 18:09:42.377464 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoALwAAABc"] [Sun Jul 12 18:09:42.507933 2026] [security2:error] [pid 940777:tid 940848] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env.backup"] [unique_id "alQsxpihQxksrpCflyFiDwAApD0"] [Sun Jul 12 18:09:42.538480 2026] [security2:error] [pid 940777:tid 940797] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/appointment/.env"] [unique_id "alQsxpihQxksrpCflyFiEAAA3Qs"] [Sun Jul 12 18:09:42.826839 2026] [security2:error] [pid 940777:tid 940830] [remote 44.228.200.154:25910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.200.228.44.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/PhpToken.php"] [unique_id "alQsxpihQxksrpCflyFiIAAA7Cw"] [Sun Jul 12 18:09:42.846774 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:42.847331 2026] [authz_core:error] [pid 940777:tid 940992] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:43.079434 2026] [security2:error] [pid 940777:tid 940970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsxpihQxksrpCflyFiHAAAALo"] [Sun Jul 12 18:09:43.099999 2026] [security2:error] [pid 940777:tid 940822] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsqJihQxksrpCflyFhwQAAkiQ"] [Sun Jul 12 18:09:43.192288 2026] [security2:error] [pid 960377:tid 960610] [client 24.203.79.110:59518] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsxxMANaV5i2_BLQoAfgAAAGY"] [Sun Jul 12 18:09:43.193892 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoANQAAAAQ"] [Sun Jul 12 18:09:43.203471 2026] [security2:error] [pid 960377:tid 960610] [client 24.203.79.110:59518] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQsxxMANaV5i2_BLQoAfgAAAGY"] [Sun Jul 12 18:09:43.257790 2026] [security2:error] [pid 940777:tid 941038] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsxJihQxksrpCflyFhygAAAP4"] [Sun Jul 12 18:09:43.290787 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoAPwAAAGU"] [Sun Jul 12 18:09:43.636546 2026] [security2:error] [pid 940777:tid 941041] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsxpihQxksrpCflyFiEgABAUM"] [Sun Jul 12 18:09:43.659754 2026] [security2:error] [pid 940777:tid 941009] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsx5ihQxksrpCflyFiLQAAAOE"] [Sun Jul 12 18:09:43.711435 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:43.712097 2026] [authz_core:error] [pid 940777:tid 940918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:43.799250 2026] [security2:error] [pid 940777:tid 940907] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env.old"] [unique_id "alQsx5ihQxksrpCflyFiOAAA0nc"] [Sun Jul 12 18:09:43.861962 2026] [security2:error] [pid 960377:tid 960551] [client 168.100.149.205:29476] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1105/bargainor/2308_did.jsp"] [unique_id "alQsxxMANaV5i2_BLQoAiwAAACs"] [Sun Jul 12 18:09:44.049936 2026] [security2:error] [pid 960377:tid 960565] [client 125.167.21.72:62412] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsxxMANaV5i2_BLQoAjAAAADk"] [Sun Jul 12 18:09:44.050258 2026] [security2:error] [pid 960377:tid 960565] [client 125.167.21.72:62412] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQsxxMANaV5i2_BLQoAjAAAADk"] [Sun Jul 12 18:09:44.085078 2026] [security2:error] [pid 960377:tid 960557] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoAQwAAADE"] [Sun Jul 12 18:09:44.155169 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsxxMANaV5i2_BLQoAigAAAGg"] [Sun Jul 12 18:09:44.237130 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsxxMANaV5i2_BLQoAgQAAAAc"], referer: http://67.222.40.58/config/boot.rb [Sun Jul 12 18:09:44.271010 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsxBMANaV5i2_BLQoAQQAAAFg"], referer: http://67.222.38.115/api/v2/config/ [Sun Jul 12 18:09:44.320550 2026] [security2:error] [pid 940777:tid 940827] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/settings.php.bak"] [unique_id "alQsyJihQxksrpCflyFiRQAAnyk"] [Sun Jul 12 18:09:44.330329 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsxxMANaV5i2_BLQoAggAAAFU"] [Sun Jul 12 18:09:44.333263 2026] [security2:error] [pid 940777:tid 940991] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsxJihQxksrpCflyFh0AAAAM8"], referer: http://67.222.38.115/api/v2/credentials/ [Sun Jul 12 18:09:44.534589 2026] [authz_core:error] [pid 960377:tid 960543] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:44.535304 2026] [authz_core:error] [pid 960377:tid 960543] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:44.845301 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsyBMANaV5i2_BLQoApwAAAFA"] [Sun Jul 12 18:09:44.849710 2026] [security2:error] [pid 940777:tid 941017] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsx5ihQxksrpCflyFiOwAA6V8"] [Sun Jul 12 18:09:45.013334 2026] [security2:error] [pid 940777:tid 940826] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.docker/.env"] [unique_id "alQsyZihQxksrpCflyFiUwAAtig"] [Sun Jul 12 18:09:45.323175 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsyRMANaV5i2_BLQoAtQAAABs"] [Sun Jul 12 18:09:45.418854 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:45.419570 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:45.487345 2026] [security2:error] [pid 940777:tid 940813] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backup_2.sql"] [unique_id "alQsyZihQxksrpCflyFiWgAA1hs"] [Sun Jul 12 18:09:45.524957 2026] [security2:error] [pid 940777:tid 940971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyJihQxksrpCflyFiQwAAALs"] [Sun Jul 12 18:09:45.789071 2026] [security2:error] [pid 960377:tid 960548] [client 57.141.18.84:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQsyRMANaV5i2_BLQoAwwAAACg"] [Sun Jul 12 18:09:45.923303 2026] [security2:error] [pid 940777:tid 940940] [client 20.210.108.71:51352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/block-editor.php"] [unique_id "alQsyZihQxksrpCflyFiZgAAAJw"], referer: binance.com [Sun Jul 12 18:09:45.972840 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsyRMANaV5i2_BLQoA0AAAAGk"] [Sun Jul 12 18:09:46.144786 2026] [security2:error] [pid 940777:tid 940836] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsyZihQxksrpCflyFiVAAAsDI"] [Sun Jul 12 18:09:46.155276 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyBMANaV5i2_BLQoAnQAAAGo"], referer: http://67.222.38.115/api/v2/inventories/ [Sun Jul 12 18:09:46.184995 2026] [security2:error] [pid 960377:tid 960587] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyBMANaV5i2_BLQoAlAAAAE8"], referer: http://67.222.40.58/config/cable.yml [Sun Jul 12 18:09:46.313928 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:46.314555 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:46.368997 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyBMANaV5i2_BLQoAoQAAADo"] [Sun Jul 12 18:09:46.370770 2026] [security2:error] [pid 960377:tid 960561] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyBMANaV5i2_BLQoAngAAADU"], referer: http://67.222.40.58/config/database-example.yml [Sun Jul 12 18:09:46.433597 2026] [security2:error] [pid 940777:tid 940964] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsypihQxksrpCflyFiawAAALQ"] [Sun Jul 12 18:09:46.445415 2026] [security2:error] [pid 940777:tid 940919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyJihQxksrpCflyFiSwAAAIc"] [Sun Jul 12 18:09:46.573311 2026] [security2:error] [pid 940777:tid 941015] [client 168.100.149.69:44204] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1170/bargainor/2308_delphian.jsp"] [unique_id "alQsypihQxksrpCflyFidwAAAOc"] [Sun Jul 12 18:09:46.625051 2026] [security2:error] [pid 940777:tid 941025] [client 47.128.22.9:16832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bellesprit.com"] [uri "/robots.txt"] [unique_id "alQsypihQxksrpCflyFieQAAAPE"] [Sun Jul 12 18:09:46.903879 2026] [security2:error] [pid 960377:tid 960607] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA5wAAAGM"] [Sun Jul 12 18:09:47.033173 2026] [security2:error] [pid 940777:tid 941033] [client 2a03:2880:f800:2a:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQsypihQxksrpCflyFifgAA-UQ"] [Sun Jul 12 18:09:47.099899 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:47.100423 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:47.351191 2026] [security2:error] [pid 960377:tid 960615] [client 103.186.129.254:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "afri-safe.com"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA7QAAAGs"] [Sun Jul 12 18:09:47.390004 2026] [security2:error] [pid 940777:tid 940942] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsypihQxksrpCflyFibwAAniE"] [Sun Jul 12 18:09:47.418078 2026] [security2:error] [pid 940777:tid 940952] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsy5ihQxksrpCflyFiggAAAKg"] [Sun Jul 12 18:09:47.437002 2026] [security2:error] [pid 960377:tid 960558] [client 57.141.18.85:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA9AAAADI"] [Sun Jul 12 18:09:47.664738 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA3wAAABw"] [Sun Jul 12 18:09:47.983352 2026] [security2:error] [pid 940777:tid 940956] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsy5ihQxksrpCflyFiiwAAAKw"] [Sun Jul 12 18:09:47.988506 2026] [authz_core:error] [pid 960377:tid 960606] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:47.989051 2026] [authz_core:error] [pid 960377:tid 960606] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:48.087218 2026] [security2:error] [pid 960377:tid 960604] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA4gAAACU"], referer: http://67.222.40.58/config/environment.rb [Sun Jul 12 18:09:48.135464 2026] [proxy:warn] [pid 940777:tid 940929] [client 151.243.11.245:41444] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be speciesfishing.com for uri /400.shtml [Sun Jul 12 18:09:48.221916 2026] [security2:error] [pid 960377:tid 960633] [client 151.243.11.245:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "speciesfishing.com"] [uri "/400.shtml"] [unique_id "alQszBMANaV5i2_BLQoBFwAAAH0"] [Sun Jul 12 18:09:48.233231 2026] [security2:error] [pid 940777:tid 940929] [client 151.243.11.245:41444] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "speciesfishing.com"] [uri "/400.shtml"] [unique_id "alQszJihQxksrpCflyFikwAAAJE"] [Sun Jul 12 18:09:48.486795 2026] [security2:error] [pid 940777:tid 940938] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszJihQxksrpCflyFilQAAAJo"] [Sun Jul 12 18:09:48.535930 2026] [security2:error] [pid 940777:tid 940969] [client 168.100.149.7:41844] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1235/bargainor/2308_anisodactyli.jsp"] [unique_id "alQszJihQxksrpCflyFinwAAALk"] [Sun Jul 12 18:09:48.569378 2026] [security2:error] [pid 940777:tid 941021] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsy5ihQxksrpCflyFihwAA7SU"] [Sun Jul 12 18:09:48.903130 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:48.903832 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:48.905265 2026] [security2:error] [pid 960377:tid 960578] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszBMANaV5i2_BLQoBIwAAAEY"] [Sun Jul 12 18:09:49.145108 2026] [security2:error] [pid 940777:tid 941034] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyZihQxksrpCflyFiXgAAAPo"] [Sun Jul 12 18:09:49.367275 2026] [security2:error] [pid 940777:tid 941001] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFivQAAANk"] [Sun Jul 12 18:09:49.406733 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyxMANaV5i2_BLQoBDAAAAF0"] [Sun Jul 12 18:09:49.437338 2026] [security2:error] [pid 940777:tid 940933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsy5ihQxksrpCflyFikQAAAJU"], referer: http://67.222.40.58/config/environments [Sun Jul 12 18:09:49.447273 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsyxMANaV5i2_BLQoBCwAAAGo"] [Sun Jul 12 18:09:49.569918 2026] [security2:error] [pid 960377:tid 960572] [client 197.48.221.253:59295] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQszRMANaV5i2_BLQoBPQAAAEA"] [Sun Jul 12 18:09:49.644395 2026] [security2:error] [pid 960377:tid 960572] [client 197.48.221.253:59295] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQszRMANaV5i2_BLQoBPQAAAEA"] [Sun Jul 12 18:09:49.697570 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:49.698246 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:49.733806 2026] [security2:error] [pid 940777:tid 940944] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQszJihQxksrpCflyFipAAAoDY"] [Sun Jul 12 18:09:49.778899 2026] [proxy:warn] [pid 960377:tid 960628] [client 151.243.11.245:41100] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be speciesfishing.com for uri /400.shtml [Sun Jul 12 18:09:49.796653 2026] [security2:error] [pid 960377:tid 960628] [client 151.243.11.245:41100] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "speciesfishing.com"] [uri "/400.shtml"] [unique_id "alQszRMANaV5i2_BLQoBSAAAAHg"] [Sun Jul 12 18:09:49.846624 2026] [security2:error] [pid 940777:tid 941015] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFizgAAAOc"] [Sun Jul 12 18:09:49.957137 2026] [security2:error] [pid 960377:tid 960545] [client 204.8.96.141:36468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 141.96.8.204.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jjopentester.com"] [uri "/xmlrpc.php"] [unique_id "alQszRMANaV5i2_BLQoBTAAAACU"] [Sun Jul 12 18:09:49.958260 2026] [security2:error] [pid 960377:tid 960453] [remote 57.141.18.96:34074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/Wpslq.lWez"] [unique_id "alQszRMANaV5i2_BLQoBTgAAEko"] [Sun Jul 12 18:09:50.035939 2026] [security2:error] [pid 940777:tid 940918] [client 94.187.171.125:61315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQszpihQxksrpCflyFi4AAAAIY"] [Sun Jul 12 18:09:50.036204 2026] [security2:error] [pid 940777:tid 940918] [client 94.187.171.125:61315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQszpihQxksrpCflyFi4AAAAIY"] [Sun Jul 12 18:09:50.046422 2026] [security2:error] [pid 960377:tid 960545] [client 204.8.96.141:36468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jjopentester.com"] [uri "/xmlrpc.php"] [unique_id "alQszRMANaV5i2_BLQoBTAAAACU"] [Sun Jul 12 18:09:50.094570 2026] [security2:error] [pid 960377:tid 960622] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyRMANaV5i2_BLQoAyQAAAHI"], referer: http://67.222.38.115/api/v2/job_templates/ [Sun Jul 12 18:09:50.144532 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyZihQxksrpCflyFiXwAAAPg"] [Sun Jul 12 18:09:50.164323 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsyhMANaV5i2_BLQoA2gAAADA"], referer: http://67.222.38.115/api/v2/login [Sun Jul 12 18:09:50.394272 2026] [security2:error] [pid 940777:tid 941006] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszpihQxksrpCflyFi4QAAAN4"] [Sun Jul 12 18:09:50.399411 2026] [security2:error] [pid 960377:tid 960518] [client 14.169.214.155:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQszRMANaV5i2_BLQoBRAAAAAo"] [Sun Jul 12 18:09:50.547824 2026] [security2:error] [pid 940777:tid 940969] [client 168.100.149.138:46276] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1300/bargainor/2308_birefraction.jsp"] [unique_id "alQszpihQxksrpCflyFi7AAAALk"] [Sun Jul 12 18:09:50.589391 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:50.589472 2026] [security2:error] [pid 940777:tid 940821] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/public/index.bak"] [unique_id "alQszpihQxksrpCflyFi7gAA7SM"] [Sun Jul 12 18:09:50.590102 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:50.741042 2026] [security2:error] [pid 940777:tid 940974] [client 216.75.132.22:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFiywAAAL4"], referer: https://mackinstyle.com/ [Sun Jul 12 18:09:50.759235 2026] [security2:error] [pid 960377:tid 960588] [client 45.84.107.17:50559] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.107.84.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "jjopentester.com"] [uri "/xmlrpc.php"] [unique_id "alQszhMANaV5i2_BLQoBZgAAAFA"] [Sun Jul 12 18:09:50.765445 2026] [security2:error] [pid 940777:tid 941027] [client 216.75.132.24:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFizQAAAPM"], referer: https://mackinstyle.com/ [Sun Jul 12 18:09:50.832586 2026] [security2:error] [pid 960377:tid 960588] [client 45.84.107.17:50559] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "jjopentester.com"] [uri "/xmlrpc.php"] [unique_id "alQszhMANaV5i2_BLQoBZgAAAFA"] [Sun Jul 12 18:09:51.016124 2026] [security2:error] [pid 940777:tid 940954] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQszpihQxksrpCflyFi8gAAAKo"] [Sun Jul 12 18:09:51.029225 2026] [security2:error] [pid 940777:tid 940934] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFi2wAAll0"] [Sun Jul 12 18:09:51.123405 2026] [security2:error] [pid 940777:tid 941004] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFiyAAAANw"], referer: http://67.222.40.58/config/environments/development.rb [Sun Jul 12 18:09:51.182393 2026] [security2:error] [pid 940777:tid 940840] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/config/main.bak"] [unique_id "alQsz5ihQxksrpCflyFi9wAA4zU"] [Sun Jul 12 18:09:51.183851 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszRMANaV5i2_BLQoBNwAAADw"] [Sun Jul 12 18:09:51.431181 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:51.431959 2026] [authz_core:error] [pid 940777:tid 941041] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:51.512015 2026] [security2:error] [pid 960377:tid 960527] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQszhMANaV5i2_BLQoBWAAAABM"] [Sun Jul 12 18:09:51.556942 2026] [security2:error] [pid 940777:tid 940983] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQszpihQxksrpCflyFi5wAAAMc"] [Sun Jul 12 18:09:51.685982 2026] [security2:error] [pid 940777:tid 941037] [client 74.244.119.215:36227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsz5ihQxksrpCflyFjBwAAAP0"] [Sun Jul 12 18:09:51.686275 2026] [security2:error] [pid 940777:tid 941037] [client 74.244.119.215:36227] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQsz5ihQxksrpCflyFjBwAAAP0"] [Sun Jul 12 18:09:51.691731 2026] [security2:error] [pid 940777:tid 941022] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFjAAAAAO4"] [Sun Jul 12 18:09:52.203956 2026] [security2:error] [pid 940777:tid 940957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFjCwAAAK0"] [Sun Jul 12 18:09:52.213438 2026] [security2:error] [pid 940777:tid 940920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFi9gAAAPo"], referer: http://67.222.40.58/config/environments/test.rb [Sun Jul 12 18:09:52.293499 2026] [security2:error] [pid 940777:tid 940994] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFi-AAA0js"] [Sun Jul 12 18:09:52.295701 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszxMANaV5i2_BLQoBbQAAAAU"] [Sun Jul 12 18:09:52.303142 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:52.303889 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:52.514431 2026] [security2:error] [pid 940777:tid 940963] [client 168.100.149.120:58134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1365/bargainor/2308_mediator.jsp"] [unique_id "alQs0JihQxksrpCflyFjHQAAALM"] [Sun Jul 12 18:09:52.660469 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0BMANaV5i2_BLQoBlwAAAAo"] [Sun Jul 12 18:09:52.802358 2026] [security2:error] [pid 940777:tid 940922] [client 20.210.108.71:63074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/block-template-utils.php"] [unique_id "alQs0JihQxksrpCflyFjHwAAAIo"], referer: binance.com [Sun Jul 12 18:09:52.820425 2026] [security2:error] [pid 940777:tid 940848] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/metrics/.env"] [unique_id "alQs0JihQxksrpCflyFjIAAA7D0"] [Sun Jul 12 18:09:53.026851 2026] [core:error] [pid 960377:tid 960569] [client 115.190.62.211:58768] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:09:53.098761 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:53.099946 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:53.263070 2026] [security2:error] [pid 940777:tid 940929] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs0JihQxksrpCflyFjHAAAkWc"] [Sun Jul 12 18:09:53.296330 2026] [security2:error] [pid 940777:tid 940998] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0ZihQxksrpCflyFjKAAAANY"] [Sun Jul 12 18:09:53.596186 2026] [core:error] [pid 940777:tid 940934] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:53.596242 2026] [core:error] [pid 940777:tid 940934] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:53.735217 2026] [security2:error] [pid 940777:tid 940931] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0ZihQxksrpCflyFjMQAAAJM"] [Sun Jul 12 18:09:53.797588 2026] [security2:error] [pid 960377:tid 960568] [client 24.203.79.110:60044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs0RMANaV5i2_BLQoBrwAAADw"] [Sun Jul 12 18:09:53.797908 2026] [security2:error] [pid 960377:tid 960568] [client 24.203.79.110:60044] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs0RMANaV5i2_BLQoBrwAAADw"] [Sun Jul 12 18:09:53.942848 2026] [authz_core:error] [pid 940777:tid 940919] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:53.943468 2026] [authz_core:error] [pid 940777:tid 940919] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:53.986424 2026] [core:error] [pid 960377:tid 960536] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:53.986480 2026] [core:error] [pid 960377:tid 960536] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:09:54.057888 2026] [core:error] [pid 960377:tid 960622] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://webmail.youareadventuresome.com/ [Sun Jul 12 18:09:54.057933 2026] [core:error] [pid 960377:tid 960622] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://webmail.youareadventuresome.com/ [Sun Jul 12 18:09:54.170266 2026] [security2:error] [pid 940777:tid 940999] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs0ZihQxksrpCflyFjLQAA11w"] [Sun Jul 12 18:09:54.180522 2026] [security2:error] [pid 940777:tid 940795] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFjFQAAkgk"] [Sun Jul 12 18:09:54.206160 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0RMANaV5i2_BLQoBswAAAAw"] [Sun Jul 12 18:09:54.222716 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQszxMANaV5i2_BLQoBegAAAFg"], referer: http://67.222.38.115/api/v2/me/ [Sun Jul 12 18:09:54.245014 2026] [security2:error] [pid 940777:tid 940877] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQsspihQxksrpCflyFjGQAAklk"], referer: http://67.222.40.58/config/graphql.js [Sun Jul 12 18:09:54.304043 2026] [security2:error] [pid 960377:tid 960502] [remote 154.61.75.100:50116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.75.61.154.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hhh.sarahjoyyoga.com"] [uri "/wp-login.php"] [unique_id "alQs0hMANaV5i2_BLQoBwgAAT3s"] [Sun Jul 12 18:09:54.318711 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQszxMANaV5i2_BLQoBggAAACU"], referer: http://67.222.38.115/api/v2/organizations/ [Sun Jul 12 18:09:54.342459 2026] [security2:error] [pid 960377:tid 960562] [client 182.53.238.203:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQs0RMANaV5i2_BLQoBowAAADY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:09:54.375372 2026] [core:error] [pid 940777:tid 940944] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://webmail.youareadventuresome.com/ [Sun Jul 12 18:09:54.375420 2026] [core:error] [pid 940777:tid 940944] [client 200.239.225.216:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://webmail.youareadventuresome.com/ [Sun Jul 12 18:09:54.395428 2026] [security2:error] [pid 960377:tid 960607] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs0BMANaV5i2_BLQoBlAAAAGM"] [Sun Jul 12 18:09:54.403535 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs0BMANaV5i2_BLQoBkwAAAHA"] [Sun Jul 12 18:09:54.421102 2026] [security2:error] [pid 960377:tid 960541] [client 125.167.21.72:62854] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs0hMANaV5i2_BLQoBygAAACE"] [Sun Jul 12 18:09:54.421341 2026] [security2:error] [pid 960377:tid 960541] [client 125.167.21.72:62854] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs0hMANaV5i2_BLQoBygAAACE"] [Sun Jul 12 18:09:54.496560 2026] [security2:error] [pid 940777:tid 940924] [client 168.100.149.191:20722] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1430/bargainor/2308_gurian.jsp"] [unique_id "alQs0pihQxksrpCflyFjUQAAAIw"] [Sun Jul 12 18:09:54.756834 2026] [security2:error] [pid 940777:tid 940975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0pihQxksrpCflyFjTAAAAL8"] [Sun Jul 12 18:09:54.765701 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:54.766393 2026] [authz_core:error] [pid 940777:tid 940920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:54.922051 2026] [security2:error] [pid 940777:tid 940911] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dumps/api_keys.sql"] [unique_id "alQs0pihQxksrpCflyFjWwAAs3s"] [Sun Jul 12 18:09:55.078245 2026] [security2:error] [pid 940777:tid 941010] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFjBQAAAOI"] [Sun Jul 12 18:09:55.083206 2026] [security2:error] [pid 940777:tid 940951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQsz5ihQxksrpCflyFjBgAAAKc"], referer: http://67.222.38.115/api/v2/orgs [Sun Jul 12 18:09:55.098715 2026] [security2:error] [pid 960377:tid 960492] [remote 57.141.18.60:41666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/DHrgJ/q82b-PdUvf2S44-2keF2S7K"] [unique_id "alQs0xMANaV5i2_BLQoB4AAABnE"] [Sun Jul 12 18:09:55.123818 2026] [security2:error] [pid 960377:tid 960617] [client 51.68.107.148:10395] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "idreamofjeannemarie.com"] [uri "/robots.txt"] [unique_id "alQs0xMANaV5i2_BLQoB5wAAAG0"] [Sun Jul 12 18:09:55.124048 2026] [security2:error] [pid 960377:tid 960617] [client 51.68.107.148:10395] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "idreamofjeannemarie.com"] [uri "/robots.txt"] [unique_id "alQs0xMANaV5i2_BLQoB5wAAAG0"] [Sun Jul 12 18:09:55.232307 2026] [security2:error] [pid 940777:tid 941015] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs0pihQxksrpCflyFjRgAA50g"] [Sun Jul 12 18:09:55.414027 2026] [security2:error] [pid 960377:tid 960543] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0xMANaV5i2_BLQoB5gAAACM"] [Sun Jul 12 18:09:55.550094 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs0pihQxksrpCflyFjTwAAAPk"] [Sun Jul 12 18:09:55.593017 2026] [security2:error] [pid 940777:tid 941034] [client 191.240.211.143:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQs0pihQxksrpCflyFjVAAAAPo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:09:55.631173 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs0hMANaV5i2_BLQoBzAAAAHE"], referer: http://67.222.40.58/config/locales [Sun Jul 12 18:09:55.675907 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:55.676542 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:55.970341 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs0xMANaV5i2_BLQoB8gAAAEE"] [Sun Jul 12 18:09:56.384435 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs05ihQxksrpCflyFjYAAAAQM"], referer: http://67.222.38.115/api/v2/ping/ [Sun Jul 12 18:09:56.397130 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs0xMANaV5i2_BLQoB5AAAAHw"] [Sun Jul 12 18:09:56.466385 2026] [security2:error] [pid 940777:tid 941006] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs05ihQxksrpCflyFjZwAA3jE"] [Sun Jul 12 18:09:56.484726 2026] [security2:error] [pid 940777:tid 941002] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1JihQxksrpCflyFjgAAAANo"] [Sun Jul 12 18:09:56.510572 2026] [security2:error] [pid 960377:tid 960579] [client 168.100.149.223:35524] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1495/bargainor/2308_monkey.jsp"] [unique_id "alQs1BMANaV5i2_BLQoCEAAAAEc"] [Sun Jul 12 18:09:56.575774 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:56.576445 2026] [authz_core:error] [pid 940777:tid 941023] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:56.612535 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs0xMANaV5i2_BLQoB8AAAAEk"] [Sun Jul 12 18:09:56.651899 2026] [security2:error] [pid 940777:tid 940836] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/navbar.php.old"] [unique_id "alQs1JihQxksrpCflyFjkwAA3zI"] [Sun Jul 12 18:09:56.914436 2026] [security2:error] [pid 960377:tid 960571] [client 205.210.31.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "annapurnahouse.com"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCDQAAAD8"] [Sun Jul 12 18:09:57.010006 2026] [security2:error] [pid 960377:tid 960598] [client 205.210.31.220:64022] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "annapurnahouse.com"] [uri "/shell.php"] [unique_id "alQs1BMANaV5i2_BLQoCAQAAAFo"] [Sun Jul 12 18:09:57.143596 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs05ihQxksrpCflyFjdgAAAOY"], referer: http://67.222.40.58/config/locales/en.yml [Sun Jul 12 18:09:57.173494 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCGAAAAEU"] [Sun Jul 12 18:09:57.471016 2026] [authz_core:error] [pid 940777:tid 940946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:57.471702 2026] [authz_core:error] [pid 940777:tid 940946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:57.687906 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1RMANaV5i2_BLQoCJAAAADU"] [Sun Jul 12 18:09:57.702287 2026] [security2:error] [pid 940777:tid 940966] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs1JihQxksrpCflyFjkgAAtgE"] [Sun Jul 12 18:09:57.846444 2026] [security2:error] [pid 940777:tid 940869] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/config/default.bak"] [unique_id "alQs1ZihQxksrpCflyFjqQAAslE"] [Sun Jul 12 18:09:58.004855 2026] [security2:error] [pid 940777:tid 940802] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/developer/.env"] [unique_id "alQs1pihQxksrpCflyFjrAAA4xA"] [Sun Jul 12 18:09:58.071131 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCEQAAAAs"] [Sun Jul 12 18:09:58.313726 2026] [security2:error] [pid 940777:tid 941032] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1ZihQxksrpCflyFjnQAAAPg"], referer: http://67.222.40.58/config/mongoid-example.yml [Sun Jul 12 18:09:58.326019 2026] [authz_core:error] [pid 940777:tid 941040] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:58.326647 2026] [authz_core:error] [pid 940777:tid 941040] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:58.422134 2026] [security2:error] [pid 960377:tid 960621] [client 205.210.31.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "annapurnahouse.com"] [uri "/index.php"] [unique_id "alQs1hMANaV5i2_BLQoCMgAAAHE"] [Sun Jul 12 18:09:58.509001 2026] [security2:error] [pid 960377:tid 960541] [client 168.100.149.222:60398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1560/bargainor/2308_impeccance.jsp"] [unique_id "alQs1hMANaV5i2_BLQoCPQAAACE"] [Sun Jul 12 18:09:58.509481 2026] [security2:error] [pid 940777:tid 940973] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFjtQAAAL0"] [Sun Jul 12 18:09:58.676937 2026] [security2:error] [pid 940777:tid 940828] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/order.php.bak"] [unique_id "alQs1pihQxksrpCflyFjwQAAuio"] [Sun Jul 12 18:09:58.697833 2026] [security2:error] [pid 940777:tid 940874] [remote 13.239.222.79:42286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.222.239.13.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "elleholmes.pub"] [uri "/wp-login.php"] [unique_id "alQs1pihQxksrpCflyFjwgAAmlY"] [Sun Jul 12 18:09:58.835461 2026] [security2:error] [pid 940777:tid 940798] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/blog-app/api/.env"] [unique_id "alQs1pihQxksrpCflyFjwwAA2gw"] [Sun Jul 12 18:09:58.848864 2026] [security2:error] [pid 940777:tid 940996] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs1ZihQxksrpCflyFjqgAA1FI"] [Sun Jul 12 18:09:58.937495 2026] [security2:error] [pid 940777:tid 940945] [client 57.141.18.42:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQs0pihQxksrpCflyFjWgAAAKE"] [Sun Jul 12 18:09:58.998245 2026] [security2:error] [pid 940777:tid 940818] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/wp-config-sample.php.bak"] [unique_id "alQs1pihQxksrpCflyFjxQAAryA"] [Sun Jul 12 18:09:59.152889 2026] [security2:error] [pid 960377:tid 960578] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCCgAAAEY"] [Sun Jul 12 18:09:59.173651 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCDAAAAHc"] [Sun Jul 12 18:09:59.186893 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:09:59.201035 2026] [security2:error] [pid 960377:tid 960602] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1RMANaV5i2_BLQoCKQAAAF4"] [Sun Jul 12 18:09:59.242747 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:09:59.267152 2026] [security2:error] [pid 960377:tid 960613] [client 2.43.162.109:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs1hMANaV5i2_BLQoCQAAAAGk"] [Sun Jul 12 18:09:59.394902 2026] [security2:error] [pid 940777:tid 940947] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFjuQAAAKM"], referer: http://67.222.40.58/config/puma.rb [Sun Jul 12 18:09:59.493500 2026] [security2:error] [pid 960377:tid 960614] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCWQAAAGo"] [Sun Jul 12 18:09:59.653594 2026] [security2:error] [pid 940777:tid 940817] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/download/.env"] [unique_id "alQs15ihQxksrpCflyFj2gAA5R8"] [Sun Jul 12 18:09:59.823571 2026] [security2:error] [pid 940777:tid 940988] [client 20.210.108.71:57135] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/block-template.php"] [unique_id "alQs15ihQxksrpCflyFj3wAAAMw"], referer: binance.com [Sun Jul 12 18:09:59.830432 2026] [security2:error] [pid 940777:tid 940975] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs15ihQxksrpCflyFjxgAAv38"] [Sun Jul 12 18:09:59.874718 2026] [security2:error] [pid 960377:tid 960573] [client 168.100.149.62:16088] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1625/bargainor/2308_gunz.jsp"] [unique_id "alQs1xMANaV5i2_BLQoCdwAAAEE"] [Sun Jul 12 18:10:00.106497 2026] [security2:error] [pid 960377:tid 960527] [client 197.48.221.253:59898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs2BMANaV5i2_BLQoCewAAABM"] [Sun Jul 12 18:10:00.106877 2026] [security2:error] [pid 960377:tid 960527] [client 197.48.221.253:59898] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs2BMANaV5i2_BLQoCewAAABM"] [Sun Jul 12 18:10:00.118168 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:00.118971 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:00.132884 2026] [security2:error] [pid 960377:tid 960560] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCDwAAADQ"] [Sun Jul 12 18:10:00.139471 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCdQAAAG4"] [Sun Jul 12 18:10:00.154150 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1BMANaV5i2_BLQoCDgAAAAg"], referer: http://67.222.38.115/api/v2/projects/ [Sun Jul 12 18:10:00.282261 2026] [security2:error] [pid 960377:tid 960557] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCYAAAADE"] [Sun Jul 12 18:10:00.377766 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCYwAAAEU"] [Sun Jul 12 18:10:00.502841 2026] [security2:error] [pid 960377:tid 960384] [remote 217.113.60.80:35764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.60.113.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "srijb.org"] [uri "/wp-login.php"] [unique_id "alQs2BMANaV5i2_BLQoCgwAANwY"] [Sun Jul 12 18:10:00.607021 2026] [security2:error] [pid 940777:tid 940957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2JihQxksrpCflyFj8AAAAK0"] [Sun Jul 12 18:10:00.676372 2026] [security2:error] [pid 960377:tid 960412] [remote 69.57.172.207:37356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 207.172.57.69.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQs2BMANaV5i2_BLQoChAAAYiE"] [Sun Jul 12 18:10:00.691616 2026] [security2:error] [pid 960377:tid 960438] [remote 57.141.18.21:51132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 21.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/OINQjEM"] [unique_id "alQs2BMANaV5i2_BLQoChgAARzs"] [Sun Jul 12 18:10:00.721012 2026] [security2:error] [pid 960377:tid 960541] [client 94.187.171.125:61807] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs2BMANaV5i2_BLQoChwAAACE"] [Sun Jul 12 18:10:00.721245 2026] [security2:error] [pid 960377:tid 960541] [client 94.187.171.125:61807] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs2BMANaV5i2_BLQoChwAAACE"] [Sun Jul 12 18:10:00.768621 2026] [security2:error] [pid 940777:tid 940850] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/django_app/.env"] [unique_id "alQs2JihQxksrpCflyFj-gAAiT8"] [Sun Jul 12 18:10:00.877938 2026] [security2:error] [pid 940777:tid 940954] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs15ihQxksrpCflyFj5wAAqgg"] [Sun Jul 12 18:10:00.966189 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:00.966689 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:01.184140 2026] [security2:error] [pid 960377:tid 960578] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2BMANaV5i2_BLQoCjwAAAEY"] [Sun Jul 12 18:10:01.196024 2026] [security2:error] [pid 940777:tid 940865] [remote 40.77.167.156:15967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "yesbossclothing.com"] [uri "/qindex.php/sitemap-index22.xml"] [unique_id "alQs2ZihQxksrpCflyFj_wAAlk4"] [Sun Jul 12 18:10:01.347756 2026] [security2:error] [pid 940777:tid 940863] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/secrets/sample.bak"] [unique_id "alQs2ZihQxksrpCflyFkAAAA5Ew"] [Sun Jul 12 18:10:01.378557 2026] [fcgid:warn] [pid 940777:tid 940937] (70014)End of file found: [client 66.132.172.46:54290] mod_fcgid: can't get data from http client [Sun Jul 12 18:10:01.509757 2026] [security2:error] [pid 940777:tid 940788] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/new/readme.bak"] [unique_id "alQs2ZihQxksrpCflyFkBgAAqwI"] [Sun Jul 12 18:10:01.701197 2026] [security2:error] [pid 940777:tid 941021] [client 96.61.206.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQs15ihQxksrpCflyFj5AAAAO0"], referer: https://www.youtube.com/ [Sun Jul 12 18:10:01.785090 2026] [authz_core:error] [pid 940777:tid 941022] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:01.785589 2026] [authz_core:error] [pid 940777:tid 941022] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:02.004510 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2RMANaV5i2_BLQoCqQAAABg"] [Sun Jul 12 18:10:02.097918 2026] [security2:error] [pid 940777:tid 940967] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs2ZihQxksrpCflyFj_gAAwiI"] [Sun Jul 12 18:10:02.199858 2026] [security2:error] [pid 960377:tid 960605] [client 74.244.119.215:55322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs2hMANaV5i2_BLQoC2gAAAGE"] [Sun Jul 12 18:10:02.204143 2026] [security2:error] [pid 960377:tid 960605] [client 74.244.119.215:55322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs2hMANaV5i2_BLQoC2gAAAGE"] [Sun Jul 12 18:10:02.218987 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2BMANaV5i2_BLQoCfgAAAF8"], referer: http://67.222.40.58/config/routes.rb [Sun Jul 12 18:10:02.297896 2026] [security2:error] [pid 940777:tid 940982] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2JihQxksrpCflyFj9wAAAMY"], referer: http://67.222.40.58/config/sidekiq-example.yml [Sun Jul 12 18:10:02.361090 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2JihQxksrpCflyFj7gAAAMk"] [Sun Jul 12 18:10:02.397054 2026] [security2:error] [pid 940777:tid 940936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2JihQxksrpCflyFj7wAAAJg"], referer: http://67.222.40.58/config/secrets.yml [Sun Jul 12 18:10:02.533990 2026] [security2:error] [pid 940777:tid 940939] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2pihQxksrpCflyFkEAAAAJs"] [Sun Jul 12 18:10:02.558647 2026] [security2:error] [pid 960377:tid 960581] [client 168.100.149.49:32534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1690/bargainor/2308_monadically.jsp"] [unique_id "alQs2hMANaV5i2_BLQoC6AAAAEk"] [Sun Jul 12 18:10:02.632298 2026] [authz_core:error] [pid 940777:tid 940989] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:02.633034 2026] [authz_core:error] [pid 940777:tid 940989] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:02.731258 2026] [security2:error] [pid 960377:tid 960518] [client 81.214.183.38:56483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 38.183.214.81.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dancaldwell.net"] [uri "/xmlrpc.php"] [unique_id "alQs2hMANaV5i2_BLQoC7AAAAAo"] [Sun Jul 12 18:10:02.731569 2026] [security2:error] [pid 960377:tid 960518] [client 81.214.183.38:56483] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dancaldwell.net"] [uri "/xmlrpc.php"] [unique_id "alQs2hMANaV5i2_BLQoC7AAAAAo"] [Sun Jul 12 18:10:02.958187 2026] [security2:error] [pid 940777:tid 941027] [client 20.226.22.37:4220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/.dj/index.php"] [unique_id "alQs2pihQxksrpCflyFkIwAAAPM"] [Sun Jul 12 18:10:03.071926 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2hMANaV5i2_BLQoC8QAAAGk"] [Sun Jul 12 18:10:03.362501 2026] [security2:error] [pid 940777:tid 940967] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs2pihQxksrpCflyFkDgAAtzo"] [Sun Jul 12 18:10:03.535333 2026] [security2:error] [pid 940777:tid 941020] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2pihQxksrpCflyFkFwAAAOw"] [Sun Jul 12 18:10:03.536177 2026] [security2:error] [pid 940777:tid 941044] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs25ihQxksrpCflyFkJwAAAQQ"] [Sun Jul 12 18:10:03.538882 2026] [core:error] [pid 940777:tid 940957] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:03.538924 2026] [core:error] [pid 940777:tid 940957] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:03.556498 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:03.557270 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:03.709188 2026] [security2:error] [pid 960377:tid 960552] [client 40.77.167.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_battery.php"] [unique_id "alQs2xMANaV5i2_BLQoDEQAALHE"] [Sun Jul 12 18:10:03.860853 2026] [security2:error] [pid 960377:tid 960549] [client 168.100.149.8:27758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1755/bargainor/2308_enhalo.jsp"] [unique_id "alQs2xMANaV5i2_BLQoDFgAAACk"] [Sun Jul 12 18:10:04.004919 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs2xMANaV5i2_BLQoDFAAAAAg"] [Sun Jul 12 18:10:04.061798 2026] [security2:error] [pid 960377:tid 960593] [client 20.226.22.37:6928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/.trash7206/index.php"] [unique_id "alQs3BMANaV5i2_BLQoDGQAAAFU"] [Sun Jul 12 18:10:04.097138 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCWgAAACg"], referer: http://67.222.38.115/api/v2/settings/all/ [Sun Jul 12 18:10:04.115432 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCWwAAAAc"] [Sun Jul 12 18:10:04.155505 2026] [security2:error] [pid 940777:tid 940928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2pihQxksrpCflyFkGgAAAJA"], referer: http://67.222.40.58/config/sidekiq.yml [Sun Jul 12 18:10:04.224748 2026] [security2:error] [pid 960377:tid 960630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCXgAAAHo"] [Sun Jul 12 18:10:04.246989 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs15ihQxksrpCflyFj0QAAALE"], referer: http://67.222.38.115/api/v2/query [Sun Jul 12 18:10:04.251027 2026] [security2:error] [pid 940777:tid 940881] [remote 103.82.20.130:44058] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQs3JihQxksrpCflyFkPAAAql0"] [Sun Jul 12 18:10:04.265617 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCXAAAAGg"], referer: http://67.222.38.115/api/v2/ready [Sun Jul 12 18:10:04.413485 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs1xMANaV5i2_BLQoCXwAAAGc"] [Sun Jul 12 18:10:04.414881 2026] [security2:error] [pid 940777:tid 940929] [client 24.203.79.110:60572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs3JihQxksrpCflyFkQQAAAJE"] [Sun Jul 12 18:10:04.416167 2026] [security2:error] [pid 940777:tid 940929] [client 24.203.79.110:60572] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs3JihQxksrpCflyFkQQAAAJE"] [Sun Jul 12 18:10:04.514743 2026] [authz_core:error] [pid 960377:tid 960529] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:04.515212 2026] [security2:error] [pid 960377:tid 960527] [client 138.97.162.70:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQs2xMANaV5i2_BLQoDEwAAABM"] [Sun Jul 12 18:10:04.515385 2026] [authz_core:error] [pid 960377:tid 960529] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:04.559773 2026] [security2:error] [pid 960377:tid 960606] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3BMANaV5i2_BLQoDHwAAAGI"] [Sun Jul 12 18:10:04.631785 2026] [security2:error] [pid 940777:tid 941040] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs25ihQxksrpCflyFkLgABABM"] [Sun Jul 12 18:10:04.672016 2026] [core:error] [pid 960377:tid 960600] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:04.672063 2026] [core:error] [pid 960377:tid 960600] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:04.985356 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3BMANaV5i2_BLQoDMwAAAEg"] [Sun Jul 12 18:10:05.062069 2026] [security2:error] [pid 960377:tid 960609] [client 125.167.21.72:63281] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs3RMANaV5i2_BLQoDNgAAAGU"] [Sun Jul 12 18:10:05.062329 2026] [security2:error] [pid 960377:tid 960609] [client 125.167.21.72:63281] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs3RMANaV5i2_BLQoDNgAAAGU"] [Sun Jul 12 18:10:05.251820 2026] [core:error] [pid 940777:tid 940960] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:05.251872 2026] [core:error] [pid 940777:tid 940960] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:05.302961 2026] [security2:error] [pid 940777:tid 940940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs25ihQxksrpCflyFkNAAAAJw"] [Sun Jul 12 18:10:05.311320 2026] [security2:error] [pid 940777:tid 940962] [client 20.210.108.71:64498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-avif-info.php"] [unique_id "alQs3ZihQxksrpCflyFkVQAAALI"], referer: binance.com [Sun Jul 12 18:10:05.334245 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:05.334830 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:05.379242 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs25ihQxksrpCflyFkNQAAAIk"], referer: http://67.222.40.58/config/storage.yml [Sun Jul 12 18:10:05.442425 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2xMANaV5i2_BLQoDEAAAAG4"], referer: http://67.222.40.58/config/spring.rb [Sun Jul 12 18:10:05.453988 2026] [security2:error] [pid 960377:tid 960542] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3RMANaV5i2_BLQoDOAAAACI"] [Sun Jul 12 18:10:05.622741 2026] [security2:error] [pid 940777:tid 940846] [remote 152.42.137.70:42614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.137.42.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "michigansparc.com"] [uri "/wp-login.php"] [unique_id "alQs3ZihQxksrpCflyFkXwAApzs"] [Sun Jul 12 18:10:05.686807 2026] [security2:error] [pid 940777:tid 941006] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs3JihQxksrpCflyFkSwAA3jw"] [Sun Jul 12 18:10:05.787080 2026] [security2:error] [pid 960377:tid 960532] [client 20.226.22.37:11338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQs3RMANaV5i2_BLQoDQgAAABg"] [Sun Jul 12 18:10:05.874601 2026] [security2:error] [pid 940777:tid 940933] [client 168.100.149.99:23044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1820/bargainor/2308_metalogical.jsp"] [unique_id "alQs3ZihQxksrpCflyFkYgAAAJU"] [Sun Jul 12 18:10:05.911967 2026] [security2:error] [pid 960377:tid 960504] [remote 103.82.20.130:51432] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQs3RMANaV5i2_BLQoDSAAAPH0"] [Sun Jul 12 18:10:06.055459 2026] [security2:error] [pid 960377:tid 960562] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3RMANaV5i2_BLQoDRAAAADY"] [Sun Jul 12 18:10:06.128448 2026] [security2:error] [pid 940777:tid 940944] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3JihQxksrpCflyFkQAAAAKA"], referer: http://67.222.38.115/api/v2/settings/authentication/ [Sun Jul 12 18:10:06.137237 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:06.137743 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:06.159227 2026] [security2:error] [pid 940777:tid 941022] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3JihQxksrpCflyFkQgAAAO4"], referer: http://67.222.38.115/api/v2/settings/ldap/ [Sun Jul 12 18:10:06.354657 2026] [security2:error] [pid 940777:tid 940938] [client 20.226.22.37:11336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQs3pihQxksrpCflyFkcgAAAJo"] [Sun Jul 12 18:10:06.507276 2026] [security2:error] [pid 940777:tid 940945] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkcQAAAKE"] [Sun Jul 12 18:10:06.533784 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs3ZihQxksrpCflyFkWwAAAL8"] [Sun Jul 12 18:10:06.539967 2026] [security2:error] [pid 940777:tid 940806] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQswJihQxksrpCflyFkXAAAkhQ"] [Sun Jul 12 18:10:06.665404 2026] [security2:error] [pid 940777:tid 940891] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/mEdIa/.EnV"] [unique_id "alQs3pihQxksrpCflyFkewAA9Wc"] [Sun Jul 12 18:10:06.689024 2026] [security2:error] [pid 940777:tid 940894] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs3ZihQxksrpCflyFkYQAAxWo"] [Sun Jul 12 18:10:06.884867 2026] [security2:error] [pid 940777:tid 940954] [client 20.226.22.37:11341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQs3pihQxksrpCflyFkfgAAAKo"] [Sun Jul 12 18:10:06.980798 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:06.981338 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:07.073486 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3hMANaV5i2_BLQoDaQAAABA"] [Sun Jul 12 18:10:07.437992 2026] [security2:error] [pid 960377:tid 960561] [client 20.226.22.37:6376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/0.kb-v3.php"] [unique_id "alQs3xMANaV5i2_BLQoDeAAAADU"] [Sun Jul 12 18:10:07.487554 2026] [security2:error] [pid 940777:tid 940929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkeAAAAJE"] [Sun Jul 12 18:10:07.491083 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3xMANaV5i2_BLQoDbgAAAGA"] [Sun Jul 12 18:10:07.576819 2026] [security2:error] [pid 940777:tid 940976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkeQAAAMA"], referer: http://67.222.40.58/config/webpacker-example.yml [Sun Jul 12 18:10:07.672392 2026] [security2:error] [pid 940777:tid 940946] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkfQAAoiw"] [Sun Jul 12 18:10:07.797682 2026] [authz_core:error] [pid 960377:tid 960513] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:07.798202 2026] [authz_core:error] [pid 960377:tid 960513] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:07.893463 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs3xMANaV5i2_BLQoDhgAAABg"] [Sun Jul 12 18:10:07.954583 2026] [security2:error] [pid 960377:tid 960632] [client 20.226.22.37:6455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/0.php"] [unique_id "alQs3xMANaV5i2_BLQoDiwAAAHw"] [Sun Jul 12 18:10:08.170540 2026] [security2:error] [pid 940777:tid 941015] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkaQAAAOc"] [Sun Jul 12 18:10:08.198581 2026] [security2:error] [pid 960377:tid 960563] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3hMANaV5i2_BLQoDWwAAADc"] [Sun Jul 12 18:10:08.362949 2026] [security2:error] [pid 960377:tid 960610] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4BMANaV5i2_BLQoDjgAAAGY"] [Sun Jul 12 18:10:08.485732 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs3xMANaV5i2_BLQoDegAAAC8"] [Sun Jul 12 18:10:08.488014 2026] [security2:error] [pid 960377:tid 960572] [client 20.226.22.37:6361] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/002.php"] [unique_id "alQs4BMANaV5i2_BLQoDmwAAAEA"] [Sun Jul 12 18:10:08.510786 2026] [security2:error] [pid 960377:tid 960560] [client 168.100.149.221:42990] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1885/bargainor/2308_psychoreflex.jsp"] [unique_id "alQs4BMANaV5i2_BLQoDnAAAADQ"] [Sun Jul 12 18:10:08.564290 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs3xMANaV5i2_BLQoDgAAAAGs"], referer: http://67.222.40.58/config/webpacker.yml [Sun Jul 12 18:10:08.618467 2026] [authz_core:error] [pid 940777:tid 940989] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:08.619095 2026] [authz_core:error] [pid 940777:tid 940989] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:08.705325 2026] [security2:error] [pid 940777:tid 941028] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs35ihQxksrpCflyFkhgAA9EY"] [Sun Jul 12 18:10:08.729042 2026] [security2:error] [pid 960377:tid 960571] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4BMANaV5i2_BLQoDnwAAAD8"] [Sun Jul 12 18:10:08.999338 2026] [security2:error] [pid 940777:tid 941033] [client 20.226.22.37:4651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/01.php"] [unique_id "alQs4JihQxksrpCflyFkpwAAAPk"] [Sun Jul 12 18:10:09.008818 2026] [security2:error] [pid 940777:tid 940943] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS03NTQ1LXMvMzk4NDEtag=="] [unique_id "alQs4ZihQxksrpCflyFkqQAAAJ8"] [Sun Jul 12 18:10:09.086308 2026] [security2:error] [pid 960377:tid 960564] [client 222.127.71.164:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs4BMANaV5i2_BLQoDoAAAADg"] [Sun Jul 12 18:10:09.133790 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3hMANaV5i2_BLQoDWgAAADA"], referer: http://67.222.38.115/api/v2/settings/saml/ [Sun Jul 12 18:10:09.137934 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4BMANaV5i2_BLQoDpQAAAFM"] [Sun Jul 12 18:10:09.162141 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs3pihQxksrpCflyFkbAAAAL4"] [Sun Jul 12 18:10:09.300616 2026] [security2:error] [pid 940777:tid 940864] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/app.js.bak"] [unique_id "alQs4ZihQxksrpCflyFkrgAAtE0"] [Sun Jul 12 18:10:09.376884 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:09.377369 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:09.419983 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFknAAAAIk"] [Sun Jul 12 18:10:09.517887 2026] [security2:error] [pid 960377:tid 960546] [client 20.226.22.37:6366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/0x.php"] [unique_id "alQs4RMANaV5i2_BLQoDwwAAACY"] [Sun Jul 12 18:10:09.598751 2026] [security2:error] [pid 940777:tid 940925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkogAAAI0"] [Sun Jul 12 18:10:09.658684 2026] [authz_core:error] [pid 960377:tid 960592] [client 4.43.184.113:8788] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:10:09.680099 2026] [authz_core:error] [pid 960377:tid 960544] [client 4.43.184.113:38016] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:10:09.770034 2026] [security2:error] [pid 940777:tid 940990] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkowAAzls"] [Sun Jul 12 18:10:09.774447 2026] [security2:error] [pid 960377:tid 960552] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDwAAAACw"] [Sun Jul 12 18:10:09.818401 2026] [security2:error] [pid 960377:tid 960535] [client 172.121.174.173:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDtAAAABs"] [Sun Jul 12 18:10:09.864966 2026] [security2:error] [pid 940777:tid 940968] [client 20.210.108.71:54213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-bindings-registry.php"] [unique_id "alQs4ZihQxksrpCflyFktgAAALg"], referer: binance.com [Sun Jul 12 18:10:09.872465 2026] [security2:error] [pid 960377:tid 960579] [client 168.100.149.65:51232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/1950/bargainor/2308_mailable.jsp"] [unique_id "alQs4RMANaV5i2_BLQoDzwAAAEc"] [Sun Jul 12 18:10:10.061027 2026] [security2:error] [pid 960377:tid 960622] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDwgAAAHI"] [Sun Jul 12 18:10:10.061122 2026] [security2:error] [pid 960377:tid 960622] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDwgAAAHI"] [Sun Jul 12 18:10:10.078333 2026] [security2:error] [pid 960377:tid 960533] [client 20.226.22.37:4933] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.whatworld.com"] [uri "/1.php"] [unique_id "alQs4hMANaV5i2_BLQoD1wAAABk"] [Sun Jul 12 18:10:10.111790 2026] [security2:error] [pid 960377:tid 960604] [client 65.21.113.206:34126] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS03NTQ1LXMvMzk4NDEtag=="] [unique_id "alQs4RMANaV5i2_BLQoDvgAAAGA"] [Sun Jul 12 18:10:10.129176 2026] [security2:error] [pid 960377:tid 960533] [client 20.226.22.37:4933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/1.php"] [unique_id "alQs4hMANaV5i2_BLQoD1wAAABk"] [Sun Jul 12 18:10:10.296064 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoD1QAAAFg"] [Sun Jul 12 18:10:10.354182 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:10.354908 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:10.518271 2026] [security2:error] [pid 940777:tid 941041] [client 197.48.221.253:60502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs4pihQxksrpCflyFkxgAAAQE"] [Sun Jul 12 18:10:10.518606 2026] [security2:error] [pid 940777:tid 941041] [client 197.48.221.253:60502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs4pihQxksrpCflyFkxgAAAQE"] [Sun Jul 12 18:10:10.645852 2026] [security2:error] [pid 940777:tid 940970] [client 20.226.22.37:4619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/100.php"] [unique_id "alQs4pihQxksrpCflyFkyQAAALo"] [Sun Jul 12 18:10:10.746901 2026] [security2:error] [pid 940777:tid 940954] [client 113.196.56.150:38428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "ambassadors.nke.rvq.mybluehost.me"] [uri "/"] [unique_id "alQs4pihQxksrpCflyFkygAAAKo"] [Sun Jul 12 18:10:10.772254 2026] [security2:error] [pid 940777:tid 940978] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4pihQxksrpCflyFkxQAAAMI"] [Sun Jul 12 18:10:10.901812 2026] [security2:error] [pid 940777:tid 941037] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs4ZihQxksrpCflyFktwAA_V8"] [Sun Jul 12 18:10:11.165117 2026] [security2:error] [pid 940777:tid 941040] [client 20.226.22.37:4991] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/122.php"] [unique_id "alQs45ihQxksrpCflyFk2AAAAQA"] [Sun Jul 12 18:10:11.197780 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:11.198366 2026] [authz_core:error] [pid 940777:tid 940953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:11.240190 2026] [security2:error] [pid 960377:tid 960542] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDugAAACI"], referer: http://67.222.40.58/config/credentials.yml.enc [Sun Jul 12 18:10:11.324211 2026] [security2:error] [pid 960377:tid 960626] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4hMANaV5i2_BLQoD6QAAAHY"] [Sun Jul 12 18:10:11.407887 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDygAAAD4"], referer: http://67.222.40.58/config/master.key [Sun Jul 12 18:10:11.418504 2026] [security2:error] [pid 940777:tid 940926] [client 94.187.171.125:62299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs45ihQxksrpCflyFk4gAAAI4"] [Sun Jul 12 18:10:11.418834 2026] [security2:error] [pid 940777:tid 940926] [client 94.187.171.125:62299] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs45ihQxksrpCflyFk4gAAAI4"] [Sun Jul 12 18:10:11.435883 2026] [security2:error] [pid 940777:tid 940989] [client 116.179.37.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.miniya.jp"] [uri "/404.php"] [unique_id "alQs45ihQxksrpCflyFk4QAAzQE"], referer: https://www.miniya.jp/stysty.css [Sun Jul 12 18:10:11.701773 2026] [security2:error] [pid 960377:tid 960522] [client 20.226.22.37:11352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/123.php"] [unique_id "alQs4xMANaV5i2_BLQoD-AAAAA4"] [Sun Jul 12 18:10:11.739437 2026] [security2:error] [pid 960377:tid 960608] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4xMANaV5i2_BLQoD9gAAAGQ"] [Sun Jul 12 18:10:11.864298 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:34012] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php"] [unique_id "alQs4xMANaV5i2_BLQoD-wAAAAg"] [Sun Jul 12 18:10:11.866510 2026] [security2:error] [pid 940777:tid 940957] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS03ODU1LXgvMzQyOTctNQ=="] [unique_id "alQs45ihQxksrpCflyFk5wAAAK0"] [Sun Jul 12 18:10:11.930587 2026] [security2:error] [pid 960377:tid 960581] [client 74.7.241.158:56794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "whise-global.com"] [uri "/404.shtml"] [unique_id "alQs4xMANaV5i2_BLQoD_gAAAEk"] [Sun Jul 12 18:10:11.934498 2026] [security2:error] [pid 940777:tid 940922] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs45ihQxksrpCflyFk0wAAihs"] [Sun Jul 12 18:10:12.031756 2026] [authz_core:error] [pid 960377:tid 960544] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:12.032252 2026] [authz_core:error] [pid 960377:tid 960544] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:12.099096 2026] [security2:error] [pid 960377:tid 960590] [client 74.7.241.158:49000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "whise-global.com"] [uri "/robots.txt"] [unique_id "alQs5BMANaV5i2_BLQoEBAAAUiA"] [Sun Jul 12 18:10:12.143047 2026] [security2:error] [pid 960377:tid 960599] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDzAAAAFs"] [Sun Jul 12 18:10:12.166772 2026] [security2:error] [pid 960377:tid 960629] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs4xMANaV5i2_BLQoD_wAAAHk"] [Sun Jul 12 18:10:12.216747 2026] [security2:error] [pid 960377:tid 960602] [client 20.226.22.37:6346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/13.php"] [unique_id "alQs5BMANaV5i2_BLQoECgAAAF4"] [Sun Jul 12 18:10:12.229461 2026] [security2:error] [pid 960377:tid 960634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs4RMANaV5i2_BLQoDzQAAAH4"] [Sun Jul 12 18:10:12.545418 2026] [security2:error] [pid 940777:tid 940978] [client 168.100.149.64:32244] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2015/bargainor/2308_epidemiology.jsp"] [unique_id "alQs5JihQxksrpCflyFlAAAAAMI"] [Sun Jul 12 18:10:12.603045 2026] [security2:error] [pid 940777:tid 940937] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFk-QAAAJk"] [Sun Jul 12 18:10:12.748128 2026] [security2:error] [pid 940777:tid 940990] [client 74.244.119.215:38634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs5JihQxksrpCflyFlAwAAAM4"] [Sun Jul 12 18:10:12.748414 2026] [security2:error] [pid 940777:tid 940990] [client 74.244.119.215:38634] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs5JihQxksrpCflyFlAwAAAM4"] [Sun Jul 12 18:10:12.768019 2026] [security2:error] [pid 940777:tid 940975] [client 20.226.22.37:4198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/133.php"] [unique_id "alQs5JihQxksrpCflyFlBQAAAL8"] [Sun Jul 12 18:10:12.850785 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:12.851292 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:12.996300 2026] [security2:error] [pid 940777:tid 941007] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFk-wAAAN8"] [Sun Jul 12 18:10:12.996358 2026] [security2:error] [pid 940777:tid 941007] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFk-wAAAN8"] [Sun Jul 12 18:10:12.997979 2026] [security2:error] [pid 960377:tid 960604] [client 65.21.113.206:34128] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS03ODU1LXgvMzQyOTctNQ=="] [unique_id "alQs5BMANaV5i2_BLQoEDgAAAGA"] [Sun Jul 12 18:10:12.999964 2026] [security2:error] [pid 940777:tid 940925] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFk7AAAjUQ"] [Sun Jul 12 18:10:13.065735 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFlBwAAALE"] [Sun Jul 12 18:10:13.082480 2026] [security2:error] [pid 940777:tid 940939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkiQAAAJs"], referer: http://67.222.38.115/api/v2/setup [Sun Jul 12 18:10:13.082852 2026] [security2:error] [pid 940777:tid 941017] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkjwAAAOk"] [Sun Jul 12 18:10:13.088880 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:51046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test.php"] [unique_id "alQs5RMANaV5i2_BLQoEFQAAAGs"] [Sun Jul 12 18:10:13.179951 2026] [security2:error] [pid 940777:tid 940806] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/db/structure.sql"] [unique_id "alQsypihQxksrpCflyFlEAAAkhQ"] [Sun Jul 12 18:10:13.183563 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5BMANaV5i2_BLQoECQAAAAw"], referer: http://67.222.40.58/development.rb [Sun Jul 12 18:10:13.188354 2026] [security2:error] [pid 940777:tid 940806] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/db/structure.sql"] [unique_id "alQsypihQxksrpCflyFlEQAAkhQ"], referer: http://67.222.40.58/db/structure.sql [Sun Jul 12 18:10:13.189645 2026] [security2:error] [pid 940777:tid 940968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5JihQxksrpCflyFk9QAAALg"] [Sun Jul 12 18:10:13.207030 2026] [security2:error] [pid 940777:tid 941018] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkkAAAAOo"] [Sun Jul 12 18:10:13.218116 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkkQAAAOE"] [Sun Jul 12 18:10:13.262444 2026] [security2:error] [pid 940777:tid 941026] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4JihQxksrpCflyFkkgAAAPI"], referer: http://67.222.38.115/api/v2/tasks [Sun Jul 12 18:10:13.317110 2026] [security2:error] [pid 960377:tid 960575] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs4BMANaV5i2_BLQoDlwAAAEM"] [Sun Jul 12 18:10:13.333081 2026] [security2:error] [pid 960377:tid 960628] [client 20.226.22.37:6338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/155.php"] [unique_id "alQs5RMANaV5i2_BLQoEIgAAAHg"] [Sun Jul 12 18:10:13.484210 2026] [security2:error] [pid 960377:tid 960576] [client 198.235.24.69:59304] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "batteryadapter-com-au.huakionline.com"] [uri "/shell.php"] [unique_id "alQs5RMANaV5i2_BLQoEJAAAAEQ"] [Sun Jul 12 18:10:13.549566 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5RMANaV5i2_BLQoEIAAAADg"] [Sun Jul 12 18:10:13.634383 2026] [authz_core:error] [pid 960377:tid 960586] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:13.634996 2026] [authz_core:error] [pid 960377:tid 960586] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:13.892315 2026] [security2:error] [pid 940777:tid 941005] [client 20.226.22.37:11350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/177.php"] [unique_id "alQs5ZihQxksrpCflyFlIgAAAN0"] [Sun Jul 12 18:10:13.939836 2026] [security2:error] [pid 940777:tid 940926] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlIQAAAI4"] [Sun Jul 12 18:10:14.105422 2026] [security2:error] [pid 940777:tid 940850] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/refunds/.env"] [unique_id "alQs5pihQxksrpCflyFlJgAAlT8"] [Sun Jul 12 18:10:14.153130 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlDwAA0Dg"] [Sun Jul 12 18:10:14.427287 2026] [security2:error] [pid 960377:tid 960541] [client 20.226.22.37:11339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/1index.php"] [unique_id "alQs5hMANaV5i2_BLQoEQQAAACE"] [Sun Jul 12 18:10:14.459646 2026] [authz_core:error] [pid 960377:tid 960609] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:14.460211 2026] [authz_core:error] [pid 960377:tid 960609] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:14.501191 2026] [security2:error] [pid 960377:tid 960544] [client 168.100.149.245:64890] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2080/bargainor/2308_secque.jsp"] [unique_id "alQs5hMANaV5i2_BLQoERQAAACQ"] [Sun Jul 12 18:10:14.537141 2026] [security2:error] [pid 940777:tid 940987] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5pihQxksrpCflyFlLAAAAMs"] [Sun Jul 12 18:10:14.602128 2026] [security2:error] [pid 940777:tid 941006] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS04MjI2LXMvNDQ5MzctOQ=="] [unique_id "alQs5pihQxksrpCflyFlLwAAAN4"] [Sun Jul 12 18:10:14.897432 2026] [security2:error] [pid 960377:tid 960627] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5hMANaV5i2_BLQoETAAAAHc"] [Sun Jul 12 18:10:14.942114 2026] [security2:error] [pid 960377:tid 960550] [client 20.226.22.37:6399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/2.php"] [unique_id "alQs5hMANaV5i2_BLQoEUQAAACo"] [Sun Jul 12 18:10:14.986568 2026] [security2:error] [pid 960377:tid 960572] [client 24.203.79.110:61098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs5hMANaV5i2_BLQoEVgAAAEA"] [Sun Jul 12 18:10:14.992939 2026] [security2:error] [pid 960377:tid 960572] [client 24.203.79.110:61098] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs5hMANaV5i2_BLQoEVgAAAEA"] [Sun Jul 12 18:10:15.109368 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlGQAAAPk"], referer: http://67.222.38.115/api/v4/plugins/installed [Sun Jul 12 18:10:15.140398 2026] [security2:error] [pid 960377:tid 960524] [client 198.235.24.49:63304] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "batteryadapter-com-au.huakionline.com"] [uri "/webshell.php"] [unique_id "alQs5xMANaV5i2_BLQoEVwAAABA"] [Sun Jul 12 18:10:15.163470 2026] [security2:error] [pid 940777:tid 940973] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs5pihQxksrpCflyFlLQAAvR0"] [Sun Jul 12 18:10:15.175458 2026] [security2:error] [pid 940777:tid 940971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlFgAAALs"], referer: http://67.222.40.58/db/schema_cache.yml [Sun Jul 12 18:10:15.177982 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5RMANaV5i2_BLQoEHAAAABY"], referer: http://67.222.40.58/app/config/config.local.neon [Sun Jul 12 18:10:15.199856 2026] [security2:error] [pid 940777:tid 940999] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlHQAAANc"] [Sun Jul 12 18:10:15.222500 2026] [security2:error] [pid 940777:tid 941028] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5ZihQxksrpCflyFlFwAAAPQ"] [Sun Jul 12 18:10:15.226897 2026] [authz_core:error] [pid 960377:tid 960561] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/.user.ini [Sun Jul 12 18:10:15.261069 2026] [security2:error] [pid 960377:tid 960527] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5RMANaV5i2_BLQoEGgAAABM"] [Sun Jul 12 18:10:15.325437 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:15.326168 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:15.406822 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEWgAAAGc"] [Sun Jul 12 18:10:15.491905 2026] [security2:error] [pid 960377:tid 960626] [client 20.226.22.37:1288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/222.php"] [unique_id "alQs5xMANaV5i2_BLQoEdQAAAHY"] [Sun Jul 12 18:10:15.803054 2026] [security2:error] [pid 960377:tid 960568] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEXwAAADw"] [Sun Jul 12 18:10:15.803112 2026] [security2:error] [pid 960377:tid 960568] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEXwAAADw"] [Sun Jul 12 18:10:15.804301 2026] [security2:error] [pid 960377:tid 960558] [client 65.21.113.206:56432] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS04MjI2LXMvNDQ5MzctOQ=="] [unique_id "alQs5xMANaV5i2_BLQoEWQAAADI"] [Sun Jul 12 18:10:15.847198 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFlUwAAALE"] [Sun Jul 12 18:10:15.950925 2026] [security2:error] [pid 960377:tid 960618] [client 125.167.21.72:61768] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs5xMANaV5i2_BLQoEfwAAAG4"] [Sun Jul 12 18:10:15.951192 2026] [security2:error] [pid 960377:tid 960618] [client 125.167.21.72:61768] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs5xMANaV5i2_BLQoEfwAAAG4"] [Sun Jul 12 18:10:16.014199 2026] [security2:error] [pid 960377:tid 960602] [client 20.226.22.37:6961] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/2p.update.php"] [unique_id "alQs6BMANaV5i2_BLQoEhAAAAF4"] [Sun Jul 12 18:10:16.086898 2026] [security2:error] [pid 960377:tid 960468] [remote 138.252.125.121:44482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.125.252.138.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cpr.zoj.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "alQs6BMANaV5i2_BLQoEjAAAd1k"] [Sun Jul 12 18:10:16.095123 2026] [security2:error] [pid 960377:tid 960627] [client 138.252.125.121:44482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "cpr.zoj.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "alQs6BMANaV5i2_BLQoEjAAAd1k"] [Sun Jul 12 18:10:16.118998 2026] [security2:error] [pid 940777:tid 941018] [client 20.210.108.71:63215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-bindings-source.php"] [unique_id "alQs6JihQxksrpCflyFlXQAAAOo"], referer: binance.com [Sun Jul 12 18:10:16.140532 2026] [cgid:error] [pid 960377:tid 960588] [client 66.132.172.46:0] AH01265: stderr from /home4/globalf1/public_html/website_d706bf31/cgi-bin/: attempt to invoke directory as script, referer: http://website-d706bf31.globalflower.net:80/cgi-bin [Sun Jul 12 18:10:16.187281 2026] [security2:error] [pid 940777:tid 941003] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFlRwAA22U"] [Sun Jul 12 18:10:16.222289 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:16.223020 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:16.273045 2026] [security2:error] [pid 940777:tid 940938] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFlNwAAAJo"] [Sun Jul 12 18:10:16.296584 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6BMANaV5i2_BLQoEiQAAAEU"] [Sun Jul 12 18:10:16.308784 2026] [security2:error] [pid 960377:tid 960597] [client 14.191.6.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6BMANaV5i2_BLQoEiwAAAFk"] [Sun Jul 12 18:10:16.365327 2026] [security2:error] [pid 960377:tid 960551] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEagAAACs"], referer: http://67.222.38.115/api/v4/projects [Sun Jul 12 18:10:16.458026 2026] [security2:error] [pid 940777:tid 940825] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ecommerce-app/src/.env"] [unique_id "alQs6JihQxksrpCflyFlZwAAiSc"] [Sun Jul 12 18:10:16.554707 2026] [security2:error] [pid 940777:tid 940989] [client 20.226.22.37:11383] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/3.php"] [unique_id "alQs6JihQxksrpCflyFlagAAAM0"] [Sun Jul 12 18:10:16.582887 2026] [security2:error] [pid 960377:tid 960536] [client 168.100.149.69:29930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2145/bargainor/2308_dislevelment.jsp"] [unique_id "alQs6BMANaV5i2_BLQoEnAAAABw"] [Sun Jul 12 18:10:16.616997 2026] [security2:error] [pid 940777:tid 940821] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/smtp.inc.php.bak"] [unique_id "alQs6JihQxksrpCflyFlawAA5CM"] [Sun Jul 12 18:10:16.776577 2026] [security2:error] [pid 940777:tid 940852] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dump.sql.lz4.bak"] [unique_id "alQs6JihQxksrpCflyFlbgABAUE"] [Sun Jul 12 18:10:17.000136 2026] [authz_core:error] [pid 960377:tid 960626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:17.000657 2026] [authz_core:error] [pid 960377:tid 960626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:17.076906 2026] [security2:error] [pid 960377:tid 960631] [client 20.226.22.37:6967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQs6RMANaV5i2_BLQoErwAAAHs"] [Sun Jul 12 18:10:17.120371 2026] [security2:error] [pid 940777:tid 940845] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs6JihQxksrpCflyFlYAAAqTo"] [Sun Jul 12 18:10:17.161000 2026] [security2:error] [pid 940777:tid 940934] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS04MjQ0LXkvMTQ4MS10"] [unique_id "alQs6ZihQxksrpCflyFldQAAAJY"] [Sun Jul 12 18:10:17.166098 2026] [security2:error] [pid 960377:tid 960557] [client 143.14.6.186:32588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.6.14.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/image.php"] [unique_id "alQs6RMANaV5i2_BLQoEsAAAADE"], referer: https://www.cidclan.net/ [Sun Jul 12 18:10:17.236203 2026] [security2:error] [pid 960377:tid 960526] [client 99.244.160.16:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs6BMANaV5i2_BLQoEnwAAABI"] [Sun Jul 12 18:10:17.238072 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6BMANaV5i2_BLQoEqQAAAFU"] [Sun Jul 12 18:10:17.380264 2026] [security2:error] [pid 960377:tid 960518] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6BMANaV5i2_BLQoEkQAAAAo"] [Sun Jul 12 18:10:17.476779 2026] [security2:error] [pid 940777:tid 940947] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6JihQxksrpCflyFlYwAAAKM"], referer: http://67.222.38.115/api/v4/saml/metadata [Sun Jul 12 18:10:17.591706 2026] [security2:error] [pid 960377:tid 960583] [client 20.226.22.37:6964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/403.php"] [unique_id "alQs6RMANaV5i2_BLQoEwQAAAEs"] [Sun Jul 12 18:10:17.650760 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6RMANaV5i2_BLQoEtwAAACQ"] [Sun Jul 12 18:10:17.794513 2026] [authz_core:error] [pid 940777:tid 940949] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:17.795319 2026] [authz_core:error] [pid 940777:tid 940949] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:17.879114 2026] [security2:error] [pid 960377:tid 960608] [client 168.100.149.56:44080] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2210/bargainor/2308_limnoria.jsp"] [unique_id "alQs6RMANaV5i2_BLQoEyQAAAGQ"] [Sun Jul 12 18:10:18.083220 2026] [security2:error] [pid 940777:tid 940955] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs6ZihQxksrpCflyFldgAAqxM"] [Sun Jul 12 18:10:18.087064 2026] [security2:error] [pid 940777:tid 940958] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6ZihQxksrpCflyFlfQAAAK4"] [Sun Jul 12 18:10:18.147817 2026] [security2:error] [pid 940777:tid 940929] [client 20.226.22.37:4196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.whatworld.com"] [uri "/404.php"] [unique_id "alQs6pihQxksrpCflyFlgAAAAJE"] [Sun Jul 12 18:10:18.228792 2026] [security2:error] [pid 960377:tid 960563] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs6RMANaV5i2_BLQoExgAAADc"] [Sun Jul 12 18:10:18.228852 2026] [security2:error] [pid 960377:tid 960563] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs6RMANaV5i2_BLQoExgAAADc"] [Sun Jul 12 18:10:18.232378 2026] [security2:error] [pid 960377:tid 960553] [client 65.21.113.206:56436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS04MjQ0LXkvMTQ4MS10"] [unique_id "alQs6RMANaV5i2_BLQoExAAAAC0"] [Sun Jul 12 18:10:18.253969 2026] [security2:error] [pid 940777:tid 940812] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/invoice.php.old"] [unique_id "alQs6pihQxksrpCflyFlggAAsRo"] [Sun Jul 12 18:10:18.411570 2026] [security2:error] [pid 940777:tid 940890] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/next/.env"] [unique_id "alQs6pihQxksrpCflyFlgwAA7WY"] [Sun Jul 12 18:10:18.451566 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6RMANaV5i2_BLQoEtAAAAAE"], referer: http://67.222.38.115/api/v4/system/ping [Sun Jul 12 18:10:18.504004 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6RMANaV5i2_BLQoEwAAAACA"] [Sun Jul 12 18:10:18.568026 2026] [security2:error] [pid 940777:tid 940885] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend/api/.env"] [unique_id "alQs6pihQxksrpCflyFljQAA6mE"] [Sun Jul 12 18:10:18.587596 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:18.588121 2026] [authz_core:error] [pid 940777:tid 941032] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:18.956231 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs6pihQxksrpCflyFlgQAAsAA"] [Sun Jul 12 18:10:18.956902 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs6hMANaV5i2_BLQoE3AAAAE4"] [Sun Jul 12 18:10:19.123168 2026] [security2:error] [pid 940777:tid 940908] [remote 185.177.72.12:1748] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/APP/.env"] [unique_id "alQs65ihQxksrpCflyFlnwAAqng"] [Sun Jul 12 18:10:19.214772 2026] [security2:error] [pid 940777:tid 940892] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFlQQAAkmg"] [Sun Jul 12 18:10:19.237127 2026] [security2:error] [pid 940777:tid 941042] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFlQAAAAQI"] [Sun Jul 12 18:10:19.296296 2026] [authz_core:error] [pid 960377:tid 960632] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/.user.ini, referer: http://67.222.40.58/.user.ini [Sun Jul 12 18:10:19.390598 2026] [authz_core:error] [pid 960377:tid 960525] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:19.391241 2026] [authz_core:error] [pid 960377:tid 960525] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:19.505086 2026] [security2:error] [pid 940777:tid 941034] [client 185.177.72.12:1748] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/ms-delete-site.php"] [unique_id "alQs65ihQxksrpCflyFlswAA-gM"] [Sun Jul 12 18:10:19.873052 2026] [security2:error] [pid 960377:tid 960609] [client 168.100.149.163:15370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2275/bargainor/2308_milksopism.jsp"] [unique_id "alQs6xMANaV5i2_BLQoFAAAAAGU"] [Sun Jul 12 18:10:19.939863 2026] [core:error] [pid 960377:tid 960492] [remote 154.54.100.177:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:19.939903 2026] [core:error] [pid 960377:tid 960492] [remote 154.54.100.177:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:10:19.954459 2026] [security2:error] [pid 940777:tid 940997] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs65ihQxksrpCflyFlngAA1Ts"] [Sun Jul 12 18:10:20.055644 2026] [security2:error] [pid 960377:tid 960497] [remote 185.177.72.12:52124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQs6xMANaV5i2_BLQoFCgAAcnY"] [Sun Jul 12 18:10:20.062072 2026] [security2:error] [pid 940777:tid 940933] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS04MjQxLTEvMTUyMDEtZA=="] [unique_id "alQs7JihQxksrpCflyFluQAAAJU"] [Sun Jul 12 18:10:20.082574 2026] [security2:error] [pid 940777:tid 940814] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFlOgAAkhw"] [Sun Jul 12 18:10:20.169901 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:60270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php.php"] [unique_id "alQs7BMANaV5i2_BLQoFEAAAAB8"] [Sun Jul 12 18:10:20.177247 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:20.178012 2026] [authz_core:error] [pid 940777:tid 940924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:20.389061 2026] [security2:error] [pid 960377:tid 960579] [client 57.141.18.108:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQs6xMANaV5i2_BLQoFCAAAAEc"] [Sun Jul 12 18:10:20.859315 2026] [security2:error] [pid 940777:tid 941013] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7JihQxksrpCflyFlwgAAAOU"] [Sun Jul 12 18:10:20.982135 2026] [security2:error] [pid 960377:tid 960577] [client 197.48.221.253:61089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs7BMANaV5i2_BLQoFRwAAAEU"] [Sun Jul 12 18:10:20.982429 2026] [security2:error] [pid 960377:tid 960577] [client 197.48.221.253:61089] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs7BMANaV5i2_BLQoFRwAAAEU"] [Sun Jul 12 18:10:21.017237 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:60276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info.php"] [unique_id "alQs7RMANaV5i2_BLQoFSQAAAHs"] [Sun Jul 12 18:10:21.027579 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:21.028320 2026] [authz_core:error] [pid 940777:tid 941013] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:21.090057 2026] [security2:error] [pid 960377:tid 960561] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEZQAAADU"] [Sun Jul 12 18:10:21.137054 2026] [security2:error] [pid 960377:tid 960591] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEbAAAAFM"] [Sun Jul 12 18:10:21.142656 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEZwAAAHA"] [Sun Jul 12 18:10:21.152060 2026] [security2:error] [pid 940777:tid 940971] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs7JihQxksrpCflyFlugAAu3M"] [Sun Jul 12 18:10:21.175057 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6pihQxksrpCflyFligAAALM"] [Sun Jul 12 18:10:21.185980 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5xMANaV5i2_BLQoEaQAAABU"] [Sun Jul 12 18:10:21.232495 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFlQwAAAMI"] [Sun Jul 12 18:10:21.245018 2026] [security2:error] [pid 940777:tid 941033] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs7JihQxksrpCflyFlwwAAAPk"] [Sun Jul 12 18:10:21.245081 2026] [security2:error] [pid 940777:tid 941033] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs7JihQxksrpCflyFlwwAAAPk"] [Sun Jul 12 18:10:21.253004 2026] [security2:error] [pid 960377:tid 960599] [client 65.21.113.206:56442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS04MjQxLTEvMTUyMDEtZA=="] [unique_id "alQs7BMANaV5i2_BLQoFOwAAAFs"] [Sun Jul 12 18:10:21.300948 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6hMANaV5i2_BLQoE2AAAABc"], referer: http://67.222.38.115/api/v4/users [Sun Jul 12 18:10:21.405112 2026] [security2:error] [pid 940777:tid 940988] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6pihQxksrpCflyFliQAAAMw"] [Sun Jul 12 18:10:21.462358 2026] [security2:error] [pid 960377:tid 960551] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs6hMANaV5i2_BLQoE1AAAACs"], referer: http://67.222.38.115/api/v4/teams [Sun Jul 12 18:10:21.535840 2026] [security2:error] [pid 940777:tid 940946] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7ZihQxksrpCflyFlzwAAAKI"] [Sun Jul 12 18:10:21.960765 2026] [security2:error] [pid 940777:tid 941004] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7ZihQxksrpCflyFl3wAAANw"] [Sun Jul 12 18:10:21.997045 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:21.997542 2026] [authz_core:error] [pid 940777:tid 940991] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:22.061654 2026] [security2:error] [pid 960377:tid 960627] [client 94.187.171.125:62786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs7hMANaV5i2_BLQoFXwAAAHc"] [Sun Jul 12 18:10:22.062554 2026] [security2:error] [pid 960377:tid 960627] [client 94.187.171.125:62786] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs7hMANaV5i2_BLQoFXwAAAHc"] [Sun Jul 12 18:10:22.360941 2026] [security2:error] [pid 940777:tid 940918] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs7ZihQxksrpCflyFl1QAAhkY"] [Sun Jul 12 18:10:22.466324 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7hMANaV5i2_BLQoFYgAAAEE"] [Sun Jul 12 18:10:22.523758 2026] [security2:error] [pid 960377:tid 960524] [client 168.100.149.195:42786] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2340/bargainor/2308_capnoides.jsp"] [unique_id "alQs7hMANaV5i2_BLQoFaAAAABA"] [Sun Jul 12 18:10:22.628774 2026] [security2:error] [pid 940777:tid 940879] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rust-backend/.env"] [unique_id "alQs7pihQxksrpCflyFl6gAA0Fs"] [Sun Jul 12 18:10:22.815171 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:22.815896 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:23.155307 2026] [security2:error] [pid 960377:tid 960575] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7hMANaV5i2_BLQoFcQAAAEM"] [Sun Jul 12 18:10:23.247978 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs7RMANaV5i2_BLQoFVAAAACU"] [Sun Jul 12 18:10:23.287883 2026] [security2:error] [pid 940777:tid 940927] [client 74.244.119.215:43655] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 215.119.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs75ihQxksrpCflyFl8gAAAI8"] [Sun Jul 12 18:10:23.288378 2026] [security2:error] [pid 940777:tid 940927] [client 74.244.119.215:43655] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQs75ihQxksrpCflyFl8gAAAI8"] [Sun Jul 12 18:10:23.288706 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs7RMANaV5i2_BLQoFWgAAACM"], referer: http://67.222.38.115/api/v4/users/stats [Sun Jul 12 18:10:23.327017 2026] [security2:error] [pid 940777:tid 940876] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/env/config.bak"] [unique_id "alQs75ihQxksrpCflyFl9AAA1Vg"] [Sun Jul 12 18:10:23.353411 2026] [security2:error] [pid 960377:tid 960604] [client 20.210.108.71:59052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-editor-context.php"] [unique_id "alQs7xMANaV5i2_BLQoFfgAAAGA"], referer: binance.com [Sun Jul 12 18:10:23.514047 2026] [security2:error] [pid 940777:tid 941042] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs7pihQxksrpCflyFl6AABAjA"] [Sun Jul 12 18:10:23.635521 2026] [security2:error] [pid 960377:tid 960568] [client 185.89.157.234:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQs7hMANaV5i2_BLQoFZAAAPEc"] [Sun Jul 12 18:10:23.647199 2026] [security2:error] [pid 940777:tid 940953] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS04OTE5LWEvMzM4Nzctdw=="] [unique_id "alQs75ihQxksrpCflyFl_AAAAKk"] [Sun Jul 12 18:10:23.684651 2026] [authz_core:error] [pid 940777:tid 940967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:23.685241 2026] [authz_core:error] [pid 940777:tid 940967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:23.790693 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7xMANaV5i2_BLQoFgwAAAFg"] [Sun Jul 12 18:10:24.238620 2026] [security2:error] [pid 960377:tid 960607] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs7xMANaV5i2_BLQoFigAAAGM"] [Sun Jul 12 18:10:24.408104 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs7xMANaV5i2_BLQoFfAAAACc"] [Sun Jul 12 18:10:24.438928 2026] [security2:error] [pid 960377:tid 960610] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backup.php"] [unique_id "alQs8BMANaV5i2_BLQoFnAAAAGY"] [Sun Jul 12 18:10:24.485473 2026] [security2:error] [pid 940777:tid 940933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs75ihQxksrpCflyFl9QAAAJU"], referer: http://67.222.38.115/api/v4/webhooks/outgoing [Sun Jul 12 18:10:24.531576 2026] [authz_core:error] [pid 960377:tid 960553] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:24.532176 2026] [authz_core:error] [pid 960377:tid 960553] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:24.577405 2026] [security2:error] [pid 940777:tid 941015] [client 168.100.149.121:55714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2405/bargainor/2308_deft.jsp"] [unique_id "alQs8JihQxksrpCflyFmBwAAAOc"] [Sun Jul 12 18:10:24.647754 2026] [security2:error] [pid 940777:tid 940981] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs75ihQxksrpCflyFl_QAAxQ4"] [Sun Jul 12 18:10:24.720374 2026] [security2:error] [pid 960377:tid 960625] [client 202.46.62.52:21464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQs8BMANaV5i2_BLQoFqAAAAHU"], referer: https://www.stephenspublishing.com/scrapers-polar-custom-p-879.html?osCsid=8o5ubdcj59oeslhdf6649ed1e2 [Sun Jul 12 18:10:24.845049 2026] [security2:error] [pid 940777:tid 941021] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8JihQxksrpCflyFmCQAAAO0"] [Sun Jul 12 18:10:24.998115 2026] [security2:error] [pid 960377:tid 960616] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs8BMANaV5i2_BLQoFkAAAAGw"] [Sun Jul 12 18:10:24.998183 2026] [security2:error] [pid 960377:tid 960616] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs8BMANaV5i2_BLQoFkAAAAGw"] [Sun Jul 12 18:10:24.999279 2026] [security2:error] [pid 960377:tid 960630] [client 65.21.113.206:38698] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS04OTE5LWEvMzM4Nzctdw=="] [unique_id "alQs8BMANaV5i2_BLQoFjQAAAHo"] [Sun Jul 12 18:10:25.009532 2026] [security2:error] [pid 940777:tid 940849] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/\\xef\\xbf\\xbd\\xef\\xbf\\xbd/server/.env"] [unique_id "alQs8ZihQxksrpCflyFmDgAA8D4"] [Sun Jul 12 18:10:25.207910 2026] [security2:error] [pid 960377:tid 960543] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dev/settings/config/token.php"] [unique_id "alQs8RMANaV5i2_BLQoFsAAAACM"] [Sun Jul 12 18:10:25.403287 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:25.403947 2026] [authz_core:error] [pid 940777:tid 940966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:25.552556 2026] [security2:error] [pid 960377:tid 960587] [client 146.174.173.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs8RMANaV5i2_BLQoFrAAAAE8"] [Sun Jul 12 18:10:25.624142 2026] [security2:error] [pid 960377:tid 960536] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8RMANaV5i2_BLQoFswAAABw"] [Sun Jul 12 18:10:25.640039 2026] [security2:error] [pid 960377:tid 960518] [client 24.203.79.110:61623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs8RMANaV5i2_BLQoFtwAAAAo"] [Sun Jul 12 18:10:25.640314 2026] [security2:error] [pid 960377:tid 960518] [client 24.203.79.110:61623] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs8RMANaV5i2_BLQoFtwAAAAo"] [Sun Jul 12 18:10:25.673185 2026] [security2:error] [pid 940777:tid 940950] [client 216.244.66.243:57558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/robots.txt"] [unique_id "alQs8ZihQxksrpCflyFmHwAAAKY"] [Sun Jul 12 18:10:25.673470 2026] [security2:error] [pid 940777:tid 940950] [client 216.244.66.243:57558] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/robots.txt"] [unique_id "alQs8ZihQxksrpCflyFmHwAAAKY"] [Sun Jul 12 18:10:25.684893 2026] [security2:error] [pid 940777:tid 940988] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs8JihQxksrpCflyFmCwAAzAU"] [Sun Jul 12 18:10:25.903074 2026] [security2:error] [pid 960377:tid 960435] [remote 74.7.227.188:41386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQs8RMANaV5i2_BLQoFvwAACTg"], referer: https://www.stephenspublishing.com/economy-natural-wood-rulers-safety-rules-custom-p-222.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:10:26.091190 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8RMANaV5i2_BLQoFuQAAAB4"] [Sun Jul 12 18:10:26.104191 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs6xMANaV5i2_BLQoE9QAAAGE"] [Sun Jul 12 18:10:26.116098 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs8BMANaV5i2_BLQoFogAAADg"], referer: http://67.222.38.115/api/version [Sun Jul 12 18:10:26.207232 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs65ihQxksrpCflyFlsgAAAIk"] [Sun Jul 12 18:10:26.249657 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs8BMANaV5i2_BLQoFmwAAAG0"] [Sun Jul 12 18:10:26.332748 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:26.333253 2026] [authz_core:error] [pid 940777:tid 941006] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:26.527254 2026] [security2:error] [pid 960377:tid 960610] [client 168.100.149.198:41256] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2470/bargainor/2308_did.jsp"] [unique_id "alQs8hMANaV5i2_BLQoFygAAAGY"] [Sun Jul 12 18:10:26.578303 2026] [security2:error] [pid 940777:tid 941041] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8pihQxksrpCflyFmLAAAAQE"] [Sun Jul 12 18:10:26.777025 2026] [security2:error] [pid 940777:tid 941011] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS05NjU2LXUvMTEzOTMtYg=="] [unique_id "alQs8pihQxksrpCflyFmMwAAAOM"] [Sun Jul 12 18:10:26.837793 2026] [security2:error] [pid 940777:tid 941001] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs8ZihQxksrpCflyFmIgAA2VE"] [Sun Jul 12 18:10:26.925741 2026] [security2:error] [pid 940777:tid 940924] [client 125.167.21.72:62279] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs8pihQxksrpCflyFmNgAAAIw"] [Sun Jul 12 18:10:26.926070 2026] [security2:error] [pid 940777:tid 940924] [client 125.167.21.72:62279] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs8pihQxksrpCflyFmNgAAAIw"] [Sun Jul 12 18:10:27.009315 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8hMANaV5i2_BLQoF0AAAAHM"] [Sun Jul 12 18:10:27.035091 2026] [security2:error] [pid 960377:tid 960582] [client 104.199.6.9:49042] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "67.20.123.195"] [uri "/"] [unique_id "alQs8xMANaV5i2_BLQoF2QAAAEo"] [Sun Jul 12 18:10:27.076114 2026] [security2:error] [pid 940777:tid 941026] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs65ihQxksrpCflyFlsQAAAPI"], referer: http://67.222.40.58/.config/surge/ [Sun Jul 12 18:10:27.145700 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:27.146403 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:27.157084 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs65ihQxksrpCflyFltQAAALQ"], referer: http://67.222.40.58/applicationHost.config [Sun Jul 12 18:10:27.159994 2026] [security2:error] [pid 940777:tid 940882] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFlqAAAkl4"], referer: http://67.222.40.58/.config/netlify/config.json [Sun Jul 12 18:10:27.173408 2026] [security2:error] [pid 940777:tid 940892] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFlpAAAkmg"] [Sun Jul 12 18:10:27.193608 2026] [security2:error] [pid 940777:tid 940797] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQszZihQxksrpCflyFlrQAAkgs"], referer: http://67.222.40.58/.config/now/config.json [Sun Jul 12 18:10:27.201880 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs6xMANaV5i2_BLQoE8QAAAFQ"], referer: http://67.222.40.58/.config/surge/surge.conf [Sun Jul 12 18:10:27.214074 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs6xMANaV5i2_BLQoE9gAAAHw"], referer: http://67.222.40.58/.user.ini [Sun Jul 12 18:10:27.232722 2026] [security2:error] [pid 940777:tid 940944] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/app_dev.php/_profiler/open"] [unique_id "alQs85ihQxksrpCflyFmPwAAAKA"] [Sun Jul 12 18:10:27.234191 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:60292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs8xMANaV5i2_BLQoF3AAAAEg"] [Sun Jul 12 18:10:27.273137 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs6xMANaV5i2_BLQoE9AAAABI"], referer: http://67.222.40.58/.config/now/ [Sun Jul 12 18:10:27.344066 2026] [security2:error] [pid 940777:tid 940989] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs8pihQxksrpCflyFmKAAAAM0"] [Sun Jul 12 18:10:27.388482 2026] [security2:error] [pid 960377:tid 960612] [client 57.141.18.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQs8hMANaV5i2_BLQoFzwAAAGg"] [Sun Jul 12 18:10:27.398445 2026] [security2:error] [pid 940777:tid 940823] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test/aries-js-worker/fixtures/.env"] [unique_id "alQs85ihQxksrpCflyFmRgAA5yU"] [Sun Jul 12 18:10:27.468100 2026] [security2:error] [pid 940777:tid 941018] [client 62.171.167.118:44246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/params.php"] [unique_id "alQs85ihQxksrpCflyFmTAAAAOo"] [Sun Jul 12 18:10:27.516928 2026] [security2:error] [pid 940777:tid 941042] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs8pihQxksrpCflyFmKQAAAQI"], referer: http://67.222.38.115/api/vhosts [Sun Jul 12 18:10:27.851451 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs8xMANaV5i2_BLQoF5wAAAGA"] [Sun Jul 12 18:10:27.915345 2026] [security2:error] [pid 940777:tid 940980] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFmQwAAAMQ"] [Sun Jul 12 18:10:27.915420 2026] [security2:error] [pid 940777:tid 940980] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFmQwAAAMQ"] [Sun Jul 12 18:10:27.918276 2026] [security2:error] [pid 940777:tid 940999] [client 65.21.113.206:38708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS05NjU2LXUvMTEzOTMtYg=="] [unique_id "alQs85ihQxksrpCflyFmQAAAANc"] [Sun Jul 12 18:10:27.958773 2026] [security2:error] [pid 940777:tid 940818] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs8pihQxksrpCflyFmOAAA2yA"] [Sun Jul 12 18:10:28.005759 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:28.006311 2026] [authz_core:error] [pid 940777:tid 940968] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:28.014135 2026] [security2:error] [pid 940777:tid 940873] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/tmp/log.bak"] [unique_id "alQs9JihQxksrpCflyFmVAAAm1U"] [Sun Jul 12 18:10:28.034538 2026] [security2:error] [pid 940777:tid 940966] [client 216.244.66.238:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "daniellesdayoff.com"] [uri "/"] [unique_id "alQs9JihQxksrpCflyFmVQAAALY"] [Sun Jul 12 18:10:28.034814 2026] [security2:error] [pid 940777:tid 940966] [client 216.244.66.238:0] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "daniellesdayoff.com"] [uri "/"] [unique_id "alQs9JihQxksrpCflyFmVQAAALY"] [Sun Jul 12 18:10:28.079705 2026] [security2:error] [pid 960377:tid 960553] [client 184.105.139.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.89.23.101"] [uri "/index.php"] [unique_id "alQs8hMANaV5i2_BLQoF1QAAAC0"] [Sun Jul 12 18:10:28.418369 2026] [security2:error] [pid 940777:tid 940988] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9JihQxksrpCflyFmWwAAAMw"] [Sun Jul 12 18:10:28.446121 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFmPQAAkno"] [Sun Jul 12 18:10:28.478451 2026] [security2:error] [pid 940777:tid 941017] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFmRQAAAOk"] [Sun Jul 12 18:10:28.521505 2026] [security2:error] [pid 940777:tid 940921] [client 62.171.167.118:44256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "alQs9JihQxksrpCflyFmYAAAAIk"] [Sun Jul 12 18:10:28.529857 2026] [security2:error] [pid 960377:tid 960538] [client 168.100.149.99:55782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2535/bargainor/2308_delphian.jsp"] [unique_id "alQs9BMANaV5i2_BLQoF8QAAAB4"] [Sun Jul 12 18:10:28.570789 2026] [security2:error] [pid 940777:tid 940912] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFmQQAAknw"], referer: http://67.222.40.58/angular.json [Sun Jul 12 18:10:28.577264 2026] [security2:error] [pid 940777:tid 940987] [client 20.210.108.71:54395] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-metadata-registry.php"] [unique_id "alQs9JihQxksrpCflyFmYgAAAMs"], referer: binance.com [Sun Jul 12 18:10:28.809152 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:28.809718 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:28.876031 2026] [security2:error] [pid 940777:tid 941006] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9JihQxksrpCflyFmagAAAN4"] [Sun Jul 12 18:10:28.969611 2026] [security2:error] [pid 940777:tid 940991] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs9JihQxksrpCflyFmWQAAzxk"] [Sun Jul 12 18:10:29.061641 2026] [security2:error] [pid 940777:tid 940924] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phptest.php"] [unique_id "alQs9ZihQxksrpCflyFmcQAAAIw"] [Sun Jul 12 18:10:29.121287 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs8xMANaV5i2_BLQoF5QAAAHI"], referer: http://67.222.38.115/api/virtualization/clusters/ [Sun Jul 12 18:10:29.243349 2026] [security2:error] [pid 940777:tid 940971] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS05ODg3LTEvMzQxMy1x"] [unique_id "alQs9ZihQxksrpCflyFmeAAAALs"] [Sun Jul 12 18:10:29.530578 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9RMANaV5i2_BLQoGBgAAAFY"] [Sun Jul 12 18:10:29.605410 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:29.606102 2026] [authz_core:error] [pid 960377:tid 960511] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:29.696804 2026] [proxy:error] [pid 960377:tid 960577] (70014)End of file found: [client 139.162.88.198:45928] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 139.162.88.198 () [Sun Jul 12 18:10:29.700812 2026] [security2:error] [pid 940777:tid 940815] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/authorization/.env"] [unique_id "alQs9ZihQxksrpCflyFmewAA-x0"] [Sun Jul 12 18:10:29.864256 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:44234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/etc/env.php"] [unique_id "alQs9ZihQxksrpCflyFmfgAAAPk"] [Sun Jul 12 18:10:29.886731 2026] [security2:error] [pid 960377:tid 960552] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/keys/settings.php"] [unique_id "alQs9RMANaV5i2_BLQoGGgAAACw"] [Sun Jul 12 18:10:30.058230 2026] [security2:error] [pid 940777:tid 940935] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs9ZihQxksrpCflyFmcwAAl08"] [Sun Jul 12 18:10:30.076985 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFmXQAAkno"] [Sun Jul 12 18:10:30.159307 2026] [security2:error] [pid 940777:tid 940974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9JihQxksrpCflyFmXwAAAL4"] [Sun Jul 12 18:10:30.231000 2026] [security2:error] [pid 960377:tid 960612] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs9RMANaV5i2_BLQoGGQAAAGg"] [Sun Jul 12 18:10:30.231073 2026] [security2:error] [pid 960377:tid 960612] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs9RMANaV5i2_BLQoGGQAAAGg"] [Sun Jul 12 18:10:30.232460 2026] [security2:error] [pid 960377:tid 960592] [client 65.21.113.206:38724] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS05ODg3LTEvMzQxMy1x"] [unique_id "alQs9RMANaV5i2_BLQoGGAAAAFQ"] [Sun Jul 12 18:10:30.269535 2026] [security2:error] [pid 940777:tid 940912] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs1pihQxksrpCflyFmYQAAknw"] [Sun Jul 12 18:10:30.335733 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9RMANaV5i2_BLQoGAQAAAFI"], referer: http://67.222.38.115/api/virtualization/virtual-machines/ [Sun Jul 12 18:10:30.412788 2026] [security2:error] [pid 960377:tid 960528] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGHgAAABQ"] [Sun Jul 12 18:10:30.462123 2026] [authz_core:error] [pid 960377:tid 960531] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:30.462898 2026] [authz_core:error] [pid 960377:tid 960531] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:30.537351 2026] [security2:error] [pid 940777:tid 940946] [client 168.100.149.154:54350] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2600/bargainor/2308_anisodactyli.jsp"] [unique_id "alQs9pihQxksrpCflyFmjAAAAKI"] [Sun Jul 12 18:10:30.841598 2026] [security2:error] [pid 960377:tid 960566] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGMAAAADo"] [Sun Jul 12 18:10:31.008642 2026] [security2:error] [pid 940777:tid 940889] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/uc_server/data/config.inc.php.bak"] [unique_id "alQs95ihQxksrpCflyFmkAAA02U"] [Sun Jul 12 18:10:31.070918 2026] [security2:error] [pid 940777:tid 940928] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs9pihQxksrpCflyFmiAAAkEw"] [Sun Jul 12 18:10:31.140996 2026] [security2:error] [pid 940777:tid 941014] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs9pihQxksrpCflyFmhQAAAOY"] [Sun Jul 12 18:10:31.234815 2026] [security2:error] [pid 940777:tid 940825] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.vscode/.env"] [unique_id "alQs95ihQxksrpCflyFmlQAArSc"] [Sun Jul 12 18:10:31.245173 2026] [authz_core:error] [pid 960377:tid 960564] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:31.245888 2026] [authz_core:error] [pid 960377:tid 960564] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:31.323474 2026] [security2:error] [pid 940777:tid 941008] [client 62.171.167.118:60286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/secured/phpinfo.php"] [unique_id "alQs95ihQxksrpCflyFmlgAAAOA"] [Sun Jul 12 18:10:31.329194 2026] [security2:error] [pid 960377:tid 960517] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGLAAAAAk"], referer: http://67.222.40.58/secrets.yaml [Sun Jul 12 18:10:31.439531 2026] [security2:error] [pid 960377:tid 960557] [client 197.48.221.253:61676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs9xMANaV5i2_BLQoGPgAAADE"] [Sun Jul 12 18:10:31.440183 2026] [security2:error] [pid 960377:tid 960557] [client 197.48.221.253:61676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQs9xMANaV5i2_BLQoGPgAAADE"] [Sun Jul 12 18:10:31.495309 2026] [security2:error] [pid 960377:tid 960519] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs9xMANaV5i2_BLQoGOwAAAAs"] [Sun Jul 12 18:10:31.753769 2026] [security2:error] [pid 940777:tid 940950] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS05OTUzLXUvMjI2NS1r"] [unique_id "alQs95ihQxksrpCflyFmnQAAAKY"] [Sun Jul 12 18:10:31.763969 2026] [security2:error] [pid 960377:tid 960580] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/robots.txt"] [unique_id "alQs9xMANaV5i2_BLQoGRAAAAEg"] [Sun Jul 12 18:10:31.765101 2026] [security2:error] [pid 960377:tid 960594] [client 65.21.113.253:48666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/robots.txt"] [unique_id "alQs9xMANaV5i2_BLQoGQgAAAFY"] [Sun Jul 12 18:10:31.996303 2026] [authz_core:error] [pid 960377:tid 960625] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:31.996819 2026] [authz_core:error] [pid 960377:tid 960625] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:32.154076 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2ZihQxksrpCflyFmkwAAkno"], referer: http://67.222.40.58/.secrets.json [Sun Jul 12 18:10:32.159223 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app/.env"] [unique_id "alQs25ihQxksrpCflyFmogAAkno"], referer: http://67.222.40.58/app/.env [Sun Jul 12 18:10:32.163053 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app/.env"] [unique_id "alQs3JihQxksrpCflyFmowAAkno"] [Sun Jul 12 18:10:32.166331 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/laravel/.env"] [unique_id "alQs3ZihQxksrpCflyFmpgAAkno"] [Sun Jul 12 18:10:32.170003 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/laravel/.env"] [unique_id "alQs3pihQxksrpCflyFmpwAAkno"], referer: http://67.222.40.58/laravel/.env [Sun Jul 12 18:10:32.177539 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/api/.env"] [unique_id "alQs3pihQxksrpCflyFmqAAAkno"], referer: http://67.222.40.58/api/.env [Sun Jul 12 18:10:32.181517 2026] [security2:error] [pid 940777:tid 940910] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/api/.env"] [unique_id "alQs35ihQxksrpCflyFmqQAAkno"] [Sun Jul 12 18:10:32.181584 2026] [security2:error] [pid 940777:tid 940941] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs95ihQxksrpCflyFmmAAAnQY"] [Sun Jul 12 18:10:32.353088 2026] [security2:error] [pid 940777:tid 940912] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs2ZihQxksrpCflyFmlwAAknw"] [Sun Jul 12 18:10:32.403869 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGSAAAAAY"] [Sun Jul 12 18:10:32.531419 2026] [security2:error] [pid 960377:tid 960520] [client 168.100.149.198:51942] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2665/bargainor/2308_birefraction.jsp"] [unique_id "alQs-BMANaV5i2_BLQoGYQAAAAw"] [Sun Jul 12 18:10:32.581928 2026] [security2:error] [pid 960377:tid 960529] [client 20.210.108.71:63871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-parser-block.php"] [unique_id "alQs-BMANaV5i2_BLQoGZQAAABU"], referer: binance.com [Sun Jul 12 18:10:32.715878 2026] [security2:error] [pid 940777:tid 940992] [client 94.187.171.125:63263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs-JihQxksrpCflyFmuAAAANA"] [Sun Jul 12 18:10:32.716133 2026] [security2:error] [pid 940777:tid 940992] [client 94.187.171.125:63263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQs-JihQxksrpCflyFmuAAAANA"] [Sun Jul 12 18:10:32.754834 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:32.755595 2026] [authz_core:error] [pid 940777:tid 940927] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:32.849814 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGZgAAAGg"] [Sun Jul 12 18:10:32.854399 2026] [security2:error] [pid 940777:tid 940936] [client 45.198.224.53:34922] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "70.40.200.116"] [uri "/"] [unique_id "alQs-JihQxksrpCflyFmugAAAJg"] [Sun Jul 12 18:10:32.877381 2026] [security2:error] [pid 960377:tid 960536] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGXwAAABw"] [Sun Jul 12 18:10:32.879886 2026] [security2:error] [pid 940777:tid 940962] [client 65.21.113.253:48672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/elementor-hf-sitemap.xml"] [unique_id "alQs-JihQxksrpCflyFmrwAAALI"] [Sun Jul 12 18:10:32.947911 2026] [security2:error] [pid 960377:tid 960619] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGXQAAAG8"] [Sun Jul 12 18:10:32.947987 2026] [security2:error] [pid 960377:tid 960619] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGXQAAAG8"] [Sun Jul 12 18:10:32.949057 2026] [security2:error] [pid 960377:tid 960597] [client 65.21.113.206:38730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS05OTUzLXUvMjI2NS1r"] [unique_id "alQs-BMANaV5i2_BLQoGWAAAAFk"] [Sun Jul 12 18:10:33.073882 2026] [security2:error] [pid 960377:tid 960599] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGJQAAAFs"] [Sun Jul 12 18:10:33.153059 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGJgAAAGc"] [Sun Jul 12 18:10:33.212946 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGLwAAADA"], referer: http://67.222.38.115/api2/json/access/acl [Sun Jul 12 18:10:33.246170 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs9hMANaV5i2_BLQoGJwAAABE"], referer: http://67.222.38.115/api/webservices/list [Sun Jul 12 18:10:33.256161 2026] [security2:error] [pid 940777:tid 940979] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs-JihQxksrpCflyFmsAAAwwM"] [Sun Jul 12 18:10:33.346718 2026] [security2:error] [pid 940777:tid 940969] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-ZihQxksrpCflyFmvgAAALk"] [Sun Jul 12 18:10:33.586332 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:33.586881 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:33.746750 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-RMANaV5i2_BLQoGeAAAAEE"] [Sun Jul 12 18:10:33.909419 2026] [security2:error] [pid 940777:tid 940903] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dev_env/.env"] [unique_id "alQs-ZihQxksrpCflyFmygAAoHM"] [Sun Jul 12 18:10:34.225545 2026] [security2:error] [pid 960377:tid 960510] [client 14.177.100.233:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQs-RMANaV5i2_BLQoGfQAAAAI"] [Sun Jul 12 18:10:34.243060 2026] [security2:error] [pid 940777:tid 940830] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs-ZihQxksrpCflyFmwgAA2Sw"] [Sun Jul 12 18:10:34.371966 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-RMANaV5i2_BLQoGcgAAAGY"] [Sun Jul 12 18:10:34.372740 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:34.374130 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:34.389595 2026] [security2:error] [pid 940777:tid 941025] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-pihQxksrpCflyFmzAAAAPE"] [Sun Jul 12 18:10:34.460385 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-RMANaV5i2_BLQoGdAAAAA0"] [Sun Jul 12 18:10:34.482274 2026] [security2:error] [pid 940777:tid 940974] [client 114.119.146.77:40559] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "timelesstreasuresboutiques.com"] [uri "/updates/concrete5.4.2.2/concrete/js/tiny_mce/plugins/example/js/"] [unique_id "alQs-pihQxksrpCflyFm2AAAAL4"], referer: https://timelesstreasuresboutiques.com/updates/concrete5.4.2.2/concrete/js/tiny_mce/plugins/example/js/?C=N%3BO%3DD [Sun Jul 12 18:10:34.520339 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:44248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/config.php"] [unique_id "alQs-hMANaV5i2_BLQoGlgAAAFI"] [Sun Jul 12 18:10:34.541121 2026] [security2:error] [pid 940777:tid 940993] [client 168.100.149.20:55118] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2730/bargainor/2308_mediator.jsp"] [unique_id "alQs-pihQxksrpCflyFm2QAAANE"] [Sun Jul 12 18:10:34.550810 2026] [security2:error] [pid 940777:tid 940844] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/strapi/.env"] [unique_id "alQs-pihQxksrpCflyFm2gAA6Dk"] [Sun Jul 12 18:10:34.686116 2026] [autoindex:error] [pid 960377:tid 960574] [client 20.243.210.225:59462] AH01276: Cannot serve directory /home2/ilrdacom/public_html/qcreda/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sun Jul 12 18:10:34.957012 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-hMANaV5i2_BLQoGmgAAAG4"] [Sun Jul 12 18:10:35.067032 2026] [security2:error] [pid 960377:tid 960539] [client 190.6.13.0:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs-hMANaV5i2_BLQoGkgAAAB8"] [Sun Jul 12 18:10:35.226413 2026] [authz_core:error] [pid 960377:tid 960629] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:35.227201 2026] [authz_core:error] [pid 960377:tid 960629] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:35.309270 2026] [security2:error] [pid 960377:tid 960518] [client 20.210.108.71:56633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-parser-frame.php"] [unique_id "alQs-xMANaV5i2_BLQoGogAAAAo"], referer: binance.com [Sun Jul 12 18:10:35.325612 2026] [security2:error] [pid 940777:tid 940985] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs-pihQxksrpCflyFm1AAAyVw"] [Sun Jul 12 18:10:35.429415 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-xMANaV5i2_BLQoGoQAAAFc"] [Sun Jul 12 18:10:35.561169 2026] [security2:error] [pid 960377:tid 960598] [client 109.61.85.19:60655] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQs-xMANaV5i2_BLQoGpAAAWnE"] [Sun Jul 12 18:10:35.567688 2026] [security2:error] [pid 960377:tid 960598] [client 109.61.85.19:60655] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQs-xMANaV5i2_BLQoGpQAAWnY"] [Sun Jul 12 18:10:35.594912 2026] [security2:error] [pid 940777:tid 940857] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/hotel-app/server/.env"] [unique_id "alQs-5ihQxksrpCflyFm5QAA10Y"] [Sun Jul 12 18:10:35.883822 2026] [security2:error] [pid 940777:tid 940950] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0xNTg3LXgvMjg5NzctdQ=="] [unique_id "alQs-5ihQxksrpCflyFm7QAAAKY"] [Sun Jul 12 18:10:36.023382 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:36.023927 2026] [authz_core:error] [pid 940777:tid 941005] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:36.028841 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs-xMANaV5i2_BLQoGqQAAABE"] [Sun Jul 12 18:10:36.245771 2026] [security2:error] [pid 960377:tid 960632] [client 24.203.79.110:62149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs_BMANaV5i2_BLQoGsAAAAHw"] [Sun Jul 12 18:10:36.250498 2026] [security2:error] [pid 960377:tid 960632] [client 24.203.79.110:62149] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQs_BMANaV5i2_BLQoGsAAAAHw"] [Sun Jul 12 18:10:36.336751 2026] [security2:error] [pid 940777:tid 940986] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs-5ihQxksrpCflyFm5AAAykg"] [Sun Jul 12 18:10:36.462445 2026] [security2:error] [pid 940777:tid 940937] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_JihQxksrpCflyFm8gAAAJk"] [Sun Jul 12 18:10:36.542402 2026] [security2:error] [pid 940777:tid 940953] [client 45.205.1.223:42420] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "jeffcarrphotography.com"] [uri "/400.shtml"] [unique_id "alQs_JihQxksrpCflyFm9QAAAKk"] [Sun Jul 12 18:10:36.593540 2026] [security2:error] [pid 960377:tid 960610] [client 168.100.149.149:23876] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2795/bargainor/2308_gurian.jsp"] [unique_id "alQs_BMANaV5i2_BLQoGswAAAGY"] [Sun Jul 12 18:10:36.811076 2026] [authz_core:error] [pid 960377:tid 960631] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:36.811598 2026] [authz_core:error] [pid 960377:tid 960631] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:36.884502 2026] [security2:error] [pid 940777:tid 940919] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_JihQxksrpCflyFm-gAAAIc"] [Sun Jul 12 18:10:36.932680 2026] [security2:error] [pid 960377:tid 960630] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs_BMANaV5i2_BLQoGsgAAAHo"] [Sun Jul 12 18:10:36.932768 2026] [security2:error] [pid 960377:tid 960630] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs_BMANaV5i2_BLQoGsgAAAHo"] [Sun Jul 12 18:10:36.934110 2026] [security2:error] [pid 940777:tid 941039] [client 65.21.113.206:40076] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0xNTg3LXgvMjg5NzctdQ=="] [unique_id "alQs_JihQxksrpCflyFm8wAAAP8"] [Sun Jul 12 18:10:37.090976 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGTQAAADU"], referer: http://67.222.40.58/admin/.env [Sun Jul 12 18:10:37.101591 2026] [security2:error] [pid 940777:tid 941002] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-pihQxksrpCflyFm0gAAANo"], referer: http://67.222.38.115/api2/json/access/roles [Sun Jul 12 18:10:37.130851 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGUwAAACU"] [Sun Jul 12 18:10:37.170815 2026] [security2:error] [pid 940777:tid 940959] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/index.php"] [unique_id "alQs_JihQxksrpCflyFm_AAAAK8"] [Sun Jul 12 18:10:37.176041 2026] [security2:error] [pid 960377:tid 960533] [client 65.21.113.253:48682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sawhvoltcomm.com"] [uri "/page-sitemap.xml"] [unique_id "alQs_BMANaV5i2_BLQoGtwAAABk"] [Sun Jul 12 18:10:37.244215 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-hMANaV5i2_BLQoGlQAAAF8"] [Sun Jul 12 18:10:37.249943 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-pihQxksrpCflyFm1QAAAPM"] [Sun Jul 12 18:10:37.321968 2026] [security2:error] [pid 940777:tid 940980] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnAAAAAMQ"] [Sun Jul 12 18:10:37.330370 2026] [security2:error] [pid 960377:tid 960526] [client 125.167.21.72:62727] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs_RMANaV5i2_BLQoGzAAAABI"] [Sun Jul 12 18:10:37.330681 2026] [security2:error] [pid 960377:tid 960526] [client 125.167.21.72:62727] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQs_RMANaV5i2_BLQoGzAAAABI"] [Sun Jul 12 18:10:37.374578 2026] [security2:error] [pid 960377:tid 960550] [client 159.223.211.139:34254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env"] [unique_id "alQs_RMANaV5i2_BLQoG0wAAACo"] [Sun Jul 12 18:10:37.377647 2026] [security2:error] [pid 940777:tid 940969] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs_JihQxksrpCflyFm9AAAuSg"] [Sun Jul 12 18:10:37.408078 2026] [security2:error] [pid 960377:tid 960621] [client 159.223.211.139:34270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.orig"] [unique_id "alQs_RMANaV5i2_BLQoG1gAAAHE"] [Sun Jul 12 18:10:37.428333 2026] [security2:error] [pid 940777:tid 941043] [client 159.223.211.139:34362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.211.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.php"] [unique_id "alQs_ZihQxksrpCflyFnDgAAAQM"] [Sun Jul 12 18:10:37.432216 2026] [security2:error] [pid 940777:tid 940940] [client 159.223.211.139:34398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.old"] [unique_id "alQs_ZihQxksrpCflyFnEAAAAJw"] [Sun Jul 12 18:10:37.593434 2026] [security2:error] [pid 940777:tid 940970] [client 159.223.211.139:34846] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.swp"] [unique_id "alQs_ZihQxksrpCflyFnHwAAALo"] [Sun Jul 12 18:10:37.642007 2026] [authz_core:error] [pid 960377:tid 960525] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:37.642728 2026] [authz_core:error] [pid 960377:tid 960525] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:37.786973 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG5wAAAA4"] [Sun Jul 12 18:10:37.903114 2026] [security2:error] [pid 940777:tid 940927] [client 159.223.211.139:34448] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.backup"] [unique_id "alQs_ZihQxksrpCflyFnLwAAAI8"] [Sun Jul 12 18:10:37.904905 2026] [security2:error] [pid 960377:tid 960583] [client 159.223.211.139:34224] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.bak"] [unique_id "alQs_RMANaV5i2_BLQoG8gAAAEs"] [Sun Jul 12 18:10:37.910422 2026] [security2:error] [pid 940777:tid 940956] [client 159.223.211.139:34214] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.copy"] [unique_id "alQs_ZihQxksrpCflyFnMQAAAKw"] [Sun Jul 12 18:10:38.104799 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGVwAAAAE"], referer: http://67.222.40.58/config/php.ini [Sun Jul 12 18:10:38.146553 2026] [security2:error] [pid 940777:tid 940978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs-pihQxksrpCflyFm0wAAAMI"], referer: http://67.222.38.115/api2/json/access/domains [Sun Jul 12 18:10:38.164068 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGVQAAACg"] [Sun Jul 12 18:10:38.183502 2026] [security2:error] [pid 940777:tid 940981] [client 159.223.211.139:34676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.211.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.php"] [unique_id "alQs_pihQxksrpCflyFnRQAAAMU"] [Sun Jul 12 18:10:38.246693 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGWQAAAHc"] [Sun Jul 12 18:10:38.195620 2026] [security2:error] [pid 960377:tid 960572] [client 159.223.211.139:34270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.orig"] [unique_id "alQs_hMANaV5i2_BLQoHDwAAAEA"] [Sun Jul 12 18:10:38.196682 2026] [security2:error] [pid 940777:tid 940975] [client 159.223.211.139:34398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.old"] [unique_id "alQs_pihQxksrpCflyFnRgAAAL8"] [Sun Jul 12 18:10:38.254405 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGWgAAAHg"], referer: http://67.222.40.58/admin/config [Sun Jul 12 18:10:38.328306 2026] [security2:error] [pid 940777:tid 940957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnPgAAAK0"] [Sun Jul 12 18:10:38.508790 2026] [authz_core:error] [pid 960377:tid 960538] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:38.509401 2026] [authz_core:error] [pid 960377:tid 960538] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:38.518894 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnHgAAsVM"] [Sun Jul 12 18:10:38.556650 2026] [security2:error] [pid 940777:tid 940928] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0xNjUteS80MTM4MS15"] [unique_id "alQs_pihQxksrpCflyFnUgAAAJA"] [Sun Jul 12 18:10:38.568785 2026] [security2:error] [pid 940777:tid 940953] [client 168.100.149.102:37460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2860/bargainor/2308_monkey.jsp"] [unique_id "alQs_pihQxksrpCflyFnUwAAAKk"] [Sun Jul 12 18:10:38.759480 2026] [security2:error] [pid 940777:tid 941008] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFnUAAAAOA"] [Sun Jul 12 18:10:38.852992 2026] [security2:error] [pid 960377:tid 960509] [client 74.7.228.16:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "maternalark.com"] [uri "/robots.txt"] [unique_id "alQs_hMANaV5i2_BLQoHHQAAAAE"] [Sun Jul 12 18:10:38.918186 2026] [security2:error] [pid 940777:tid 940982] [client 159.223.211.139:34398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.old"] [unique_id "alQs_pihQxksrpCflyFnXQAAAMY"] [Sun Jul 12 18:10:38.921096 2026] [security2:error] [pid 960377:tid 960588] [client 159.223.211.139:34270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.orig"] [unique_id "alQs_hMANaV5i2_BLQoHHgAAAFA"] [Sun Jul 12 18:10:39.151737 2026] [security2:error] [pid 940777:tid 940978] [client 159.223.211.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.211.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.php"] [unique_id "alQs_5ihQxksrpCflyFnagAAAMI"] [Sun Jul 12 18:10:39.172717 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-BMANaV5i2_BLQoGVgAAAHA"] [Sun Jul 12 18:10:39.187276 2026] [security2:error] [pid 940777:tid 940908] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php"] [unique_id "alQs5ZihQxksrpCflyFnbAAAkng"] [Sun Jul 12 18:10:39.192625 2026] [security2:error] [pid 940777:tid 940908] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test.php"] [unique_id "alQs5ZihQxksrpCflyFnbQAAkng"] [Sun Jul 12 18:10:39.310145 2026] [security2:error] [pid 940777:tid 941017] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs-JihQxksrpCflyFmsgAAAOk"], referer: http://67.222.40.58/index.html [Sun Jul 12 18:10:39.454655 2026] [security2:error] [pid 940777:tid 941023] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFnXwAAAO8"] [Sun Jul 12 18:10:39.496503 2026] [authz_core:error] [pid 940777:tid 940952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:39.497275 2026] [authz_core:error] [pid 940777:tid 940952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:39.591112 2026] [security2:error] [pid 940777:tid 940950] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFnWAAApjI"] [Sun Jul 12 18:10:39.618858 2026] [security2:error] [pid 940777:tid 940813] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/news/.env"] [unique_id "alQs_5ihQxksrpCflyFnewAA8Bs"] [Sun Jul 12 18:10:39.680747 2026] [security2:error] [pid 940777:tid 941005] [client 20.210.108.71:57278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-processor.php"] [unique_id "alQs_5ihQxksrpCflyFnfgAAAN0"], referer: binance.com [Sun Jul 12 18:10:39.716001 2026] [security2:error] [pid 960377:tid 960635] [client 159.223.211.139:34270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.orig"] [unique_id "alQs_xMANaV5i2_BLQoHLgAAAH8"] [Sun Jul 12 18:10:39.719934 2026] [security2:error] [pid 940777:tid 941029] [client 159.223.211.139:34398] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.old"] [unique_id "alQs_5ihQxksrpCflyFnfwAAAPU"] [Sun Jul 12 18:10:39.780239 2026] [security2:error] [pid 940777:tid 940819] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/*.env.local.backup"] [unique_id "alQs_5ihQxksrpCflyFngQAA8yE"] [Sun Jul 12 18:10:39.866924 2026] [security2:error] [pid 960377:tid 960548] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs_xMANaV5i2_BLQoHIQAAACg"] [Sun Jul 12 18:10:39.866984 2026] [security2:error] [pid 960377:tid 960548] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQs_xMANaV5i2_BLQoHIQAAACg"] [Sun Jul 12 18:10:39.867529 2026] [security2:error] [pid 940777:tid 941014] [client 65.21.113.206:40090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0xNjUteS80MTM4MS15"] [unique_id "alQs_5ihQxksrpCflyFnYwAAAOY"] [Sun Jul 12 18:10:39.905548 2026] [security2:error] [pid 960377:tid 960545] [client 168.100.149.235:23934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2925/bargainor/2308_impeccance.jsp"] [unique_id "alQs_xMANaV5i2_BLQoHMAAAACU"] [Sun Jul 12 18:10:40.016789 2026] [security2:error] [pid 960377:tid 960536] [client 159.223.211.139:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.211.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/.env.php"] [unique_id "alQtABMANaV5i2_BLQoHNQAAABw"] [Sun Jul 12 18:10:40.401135 2026] [security2:error] [pid 940777:tid 940892] [remote 131.72.236.158:38284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 158.236.72.131.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nty.zks.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQtAJihQxksrpCflyFnjQAA7Wg"] [Sun Jul 12 18:10:40.454605 2026] [authz_core:error] [pid 960377:tid 960609] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:40.455344 2026] [authz_core:error] [pid 960377:tid 960609] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:40.510041 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQs_xMANaV5i2_BLQoHMwAAACs"] [Sun Jul 12 18:10:40.679153 2026] [security2:error] [pid 940777:tid 940793] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.kube/config.bak"] [unique_id "alQtAJihQxksrpCflyFnmQAAxQc"] [Sun Jul 12 18:10:40.842961 2026] [security2:error] [pid 940777:tid 940874] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/install.sql"] [unique_id "alQtAJihQxksrpCflyFnmgAA2lY"] [Sun Jul 12 18:10:40.967200 2026] [security2:error] [pid 940777:tid 940994] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQs_5ihQxksrpCflyFngAAA0lE"] [Sun Jul 12 18:10:41.002800 2026] [security2:error] [pid 940777:tid 940798] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/clean/.env"] [unique_id "alQtAJihQxksrpCflyFnmwAArAw"] [Sun Jul 12 18:10:41.221250 2026] [security2:error] [pid 940777:tid 940927] [client 65.21.113.206:43174] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtAZihQxksrpCflyFnpAAAAI8"] [Sun Jul 12 18:10:41.538687 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:41.539313 2026] [authz_core:error] [pid 940777:tid 940988] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:41.660856 2026] [security2:error] [pid 940777:tid 940816] [remote 111.225.149.86:62060] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nwuav.com"] [uri "/docs/directions-map.pdf"] [unique_id "alQtAZihQxksrpCflyFnqQAAqB4"] [Sun Jul 12 18:10:41.696507 2026] [http2:info] [pid 967714:tid 967714] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:10:41.718118 2026] [security2:error] [pid 940777:tid 941027] [client 62.171.167.118:58464] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php"] [unique_id "alQtAZihQxksrpCflyFnrAAAAPM"] [Sun Jul 12 18:10:41.740935 2026] [security2:error] [pid 940777:tid 941040] [client 65.21.113.206:40096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtAZihQxksrpCflyFnqwAAAQA"] [Sun Jul 12 18:10:41.849773 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtARMANaV5i2_BLQoHQwAAAHU"] [Sun Jul 12 18:10:41.902692 2026] [security2:error] [pid 940777:tid 940981] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0xODQwLXMvMzk4NDEtag=="] [unique_id "alQtAZihQxksrpCflyFnsAAAAMU"] [Sun Jul 12 18:10:41.956966 2026] [security2:error] [pid 940777:tid 941024] [client 197.48.221.253:62268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtAZihQxksrpCflyFnsQAAAPA"] [Sun Jul 12 18:10:41.971730 2026] [security2:error] [pid 940777:tid 941024] [client 197.48.221.253:62268] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtAZihQxksrpCflyFnsQAAAPA"] [Sun Jul 12 18:10:42.013759 2026] [security2:error] [pid 940777:tid 940818] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/java-app/.env"] [unique_id "alQtApihQxksrpCflyFnsgAAsSA"] [Sun Jul 12 18:10:42.089905 2026] [security2:error] [pid 940777:tid 940940] [client 65.21.113.206:40096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtApihQxksrpCflyFnswAAAJw"] [Sun Jul 12 18:10:42.266129 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs5pihQxksrpCflyFneAAAknw"], referer: http://67.222.40.58/main.js [Sun Jul 12 18:10:42.290175 2026] [security2:error] [pid 960377:tid 960620] [client 167.172.84.184:57034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.84.172.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nty.zks.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQtAhMANaV5i2_BLQoHSwAAAHA"], referer: https://nty.zks.mybluehost.me/wp-admin/ [Sun Jul 12 18:10:42.354222 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_xMANaV5i2_BLQoHJAAAABU"] [Sun Jul 12 18:10:42.377702 2026] [security2:error] [pid 940777:tid 940787] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env"] [unique_id "alQs6JihQxksrpCflyFnvgAAkgE"], referer: http://67.222.40.58/.env [Sun Jul 12 18:10:42.394502 2026] [security2:error] [pid 940777:tid 940807] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php.php"] [unique_id "alQs7JihQxksrpCflyFnwgAAkhU"] [Sun Jul 12 18:10:42.395769 2026] [security2:error] [pid 940777:tid 940787] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env"] [unique_id "alQs6ZihQxksrpCflyFnvwAAkgE"] [Sun Jul 12 18:10:42.398483 2026] [security2:error] [pid 940777:tid 940850] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info.php"] [unique_id "alQs7ZihQxksrpCflyFnwwAAkj8"] [Sun Jul 12 18:10:42.400771 2026] [security2:error] [pid 940777:tid 940833] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env.bak"] [unique_id "alQs6ZihQxksrpCflyFnwAAAki8"], referer: http://67.222.40.58/.env.bak [Sun Jul 12 18:10:42.400774 2026] [security2:error] [pid 940777:tid 940811] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env.bak"] [unique_id "alQs65ihQxksrpCflyFnwQAAkhk"] [Sun Jul 12 18:10:42.412897 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:42.430191 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:42.431928 2026] [security2:error] [pid 940777:tid 940823] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtAZihQxksrpCflyFnnwAA9SU"] [Sun Jul 12 18:10:42.584478 2026] [security2:error] [pid 960377:tid 960541] [client 168.100.149.136:50972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/2990/bargainor/2308_gunz.jsp"] [unique_id "alQtAhMANaV5i2_BLQoHVwAAACE"] [Sun Jul 12 18:10:42.657082 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHTwAAAEs"] [Sun Jul 12 18:10:43.082600 2026] [security2:error] [pid 940777:tid 940975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_5ihQxksrpCflyFndwAAAL8"], referer: http://67.222.40.58/config [Sun Jul 12 18:10:43.205261 2026] [security2:error] [pid 940777:tid 941043] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_5ihQxksrpCflyFndgAAAQM"] [Sun Jul 12 18:10:43.209043 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoGygAAAG8"], referer: http://67.222.38.115/api2/json/access/ticket [Sun Jul 12 18:10:43.218015 2026] [security2:error] [pid 967714:tid 967885] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtAl_56DeKknhy7sPqMQAAASg"] [Sun Jul 12 18:10:43.342326 2026] [security2:error] [pid 960377:tid 960562] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHWAAAADY"] [Sun Jul 12 18:10:43.342408 2026] [security2:error] [pid 960377:tid 960562] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHWAAAADY"] [Sun Jul 12 18:10:43.343518 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:40102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0xODQwLXMvMzk4NDEtag=="] [unique_id "alQtAl_56DeKknhy7sPqLQAAARw"] [Sun Jul 12 18:10:43.359469 2026] [security2:error] [pid 967714:tid 967864] [client 5.161.75.7:60784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQtA1_56DeKknhy7sPqOAAAARM"], referer: https://nwuav.com [Sun Jul 12 18:10:43.386284 2026] [security2:error] [pid 940777:tid 940858] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sql/partial.sql"] [unique_id "alQtA5ihQxksrpCflyFn4QAA3Uc"] [Sun Jul 12 18:10:43.406220 2026] [authz_core:error] [pid 967714:tid 967889] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:43.414575 2026] [security2:error] [pid 960377:tid 960509] [client 216.73.216.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.iso-5230.com"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHWgAAAAE"] [Sun Jul 12 18:10:43.423624 2026] [authz_core:error] [pid 967714:tid 967889] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:43.447249 2026] [security2:error] [pid 960377:tid 960588] [client 94.187.171.125:63754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtAxMANaV5i2_BLQoHXgAAAFA"] [Sun Jul 12 18:10:43.447569 2026] [security2:error] [pid 960377:tid 960588] [client 94.187.171.125:63754] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtAxMANaV5i2_BLQoHXgAAAFA"] [Sun Jul 12 18:10:43.544274 2026] [security2:error] [pid 940777:tid 941023] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtApihQxksrpCflyFn1gAA70A"] [Sun Jul 12 18:10:43.590749 2026] [security2:error] [pid 940777:tid 940821] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/new/secret.bak"] [unique_id "alQtA5ihQxksrpCflyFn4gAAzCM"] [Sun Jul 12 18:10:43.895342 2026] [security2:error] [pid 967714:tid 967914] [client 168.100.149.93:26060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3055/bargainor/2308_monadically.jsp"] [unique_id "alQtA1_56DeKknhy7sPqOgAAAUU"] [Sun Jul 12 18:10:43.980257 2026] [security2:error] [pid 940777:tid 940952] [client 159.223.211.139:34732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/%2eenv%2eold"] [unique_id "alQtA5ihQxksrpCflyFn7QAAAKg"] [Sun Jul 12 18:10:43.980449 2026] [security2:error] [pid 940777:tid 940946] [client 159.223.211.139:34558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/%2eenv%2eorig"] [unique_id "alQtA5ihQxksrpCflyFn7gAAAKI"] [Sun Jul 12 18:10:44.001006 2026] [cgid:error] [pid 940777:tid 940980] [client 202.46.62.85:19345] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/ceramic-mugs-white-custom-p-336.html?osCsid=hefcjhd6c961sjb4arjpblck46 [Sun Jul 12 18:10:44.047218 2026] [security2:error] [pid 967714:tid 967913] [client 202.46.62.34:1503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtBF_56DeKknhy7sPqOwAAAUQ"], referer: https://www.stephenspublishing.com/ceramic-mugs-white-custom-p-336.html?osCsid=hefcjhd6c961sjb4arjpblck46 [Sun Jul 12 18:10:44.130045 2026] [security2:error] [pid 940777:tid 940950] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtA5ihQxksrpCflyFn6wAAAKY"] [Sun Jul 12 18:10:44.132964 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG0QAAACk"], referer: http://67.222.38.115/api2/json/cluster/config/nodes [Sun Jul 12 18:10:44.168096 2026] [security2:error] [pid 960377:tid 960533] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoGyQAAAD8"] [Sun Jul 12 18:10:44.263285 2026] [security2:error] [pid 960377:tid 960508] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoGyAAAAH4"], referer: http://67.222.38.115/api2/json/access/users [Sun Jul 12 18:10:44.297599 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:44.298397 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:44.305303 2026] [security2:error] [pid 960377:tid 960510] [client 159.223.211.139:34270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 139.211.223.159.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/%00.env.php"] [unique_id "alQtBBMANaV5i2_BLQoHYgAAAAI"] [Sun Jul 12 18:10:44.643278 2026] [security2:error] [pid 940777:tid 940960] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0yMTY0LXMvMzg4MzMtNQ=="] [unique_id "alQtBJihQxksrpCflyFn9QAAALA"] [Sun Jul 12 18:10:44.710903 2026] [security2:error] [pid 940777:tid 940986] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtA5ihQxksrpCflyFn6QAAykE"] [Sun Jul 12 18:10:44.737903 2026] [security2:error] [pid 940777:tid 940995] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtBJihQxksrpCflyFn9AAAANM"] [Sun Jul 12 18:10:44.812054 2026] [security2:error] [pid 967714:tid 967894] [client 20.210.108.71:60345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-template.php"] [unique_id "alQtBF_56DeKknhy7sPqQAAAATE"], referer: binance.com [Sun Jul 12 18:10:45.108111 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG0gAAAGc"] [Sun Jul 12 18:10:45.137071 2026] [security2:error] [pid 940777:tid 940965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnBAAAALU"] [Sun Jul 12 18:10:45.169682 2026] [security2:error] [pid 940777:tid 941004] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnAwAAANw"], referer: http://67.222.38.115/api2/json/cluster/config [Sun Jul 12 18:10:45.217560 2026] [security2:error] [pid 960377:tid 960542] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQs_hMANaV5i2_BLQoHEQAAACI"], referer: http://67.222.38.115/api2/json/cluster/resources [Sun Jul 12 18:10:45.248979 2026] [security2:error] [pid 940777:tid 940792] [remote 51.79.254.190:59798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 190.254.79.51.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "waasrealty.com"] [uri "/wp-login.php"] [unique_id "alQtBZihQxksrpCflyFn-wAA3AY"] [Sun Jul 12 18:10:45.289732 2026] [authz_core:error] [pid 967714:tid 967903] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:45.291123 2026] [authz_core:error] [pid 967714:tid 967903] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:45.362366 2026] [security2:error] [pid 967714:tid 967921] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtBF_56DeKknhy7sPqQgAAAUw"] [Sun Jul 12 18:10:45.594767 2026] [security2:error] [pid 940777:tid 940953] [client 74.7.228.16:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "maternalark.com"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFnYgAAqRY"], referer: http://maternalark.com/robots.txt [Sun Jul 12 18:10:45.914731 2026] [security2:error] [pid 940777:tid 940947] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtBZihQxksrpCflyFn_AAAAKM"] [Sun Jul 12 18:10:45.914791 2026] [security2:error] [pid 940777:tid 940947] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtBZihQxksrpCflyFn_AAAAKM"] [Sun Jul 12 18:10:45.915943 2026] [security2:error] [pid 960377:tid 960620] [client 65.21.113.206:38066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0yMTY0LXMvMzg4MzMtNQ=="] [unique_id "alQtBRMANaV5i2_BLQoHaQAAAHA"] [Sun Jul 12 18:10:45.939383 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtBV_56DeKknhy7sPqUQAAAVo"] [Sun Jul 12 18:10:46.054915 2026] [security2:error] [pid 940777:tid 940961] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtBZihQxksrpCflyFn-AAAsWY"] [Sun Jul 12 18:10:46.109832 2026] [security2:error] [pid 940777:tid 940905] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/well-known/.env"] [unique_id "alQtBpihQxksrpCflyFoAQAAv3U"] [Sun Jul 12 18:10:46.189839 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:46.190605 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:46.597439 2026] [security2:error] [pid 940777:tid 940942] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnKQAAAJ4"] [Sun Jul 12 18:10:46.606958 2026] [security2:error] [pid 960377:tid 960561] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHAAAAADU"] [Sun Jul 12 18:10:46.607051 2026] [security2:error] [pid 940777:tid 940921] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnGgAAAIk"] [Sun Jul 12 18:10:46.612564 2026] [security2:error] [pid 967714:tid 967961] [client 168.100.149.186:24712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3120/bargainor/2308_enhalo.jsp"] [unique_id "alQtBl_56DeKknhy7sPqXAAAAXQ"] [Sun Jul 12 18:10:46.612880 2026] [security2:error] [pid 960377:tid 960585] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG7gAAAE0"] [Sun Jul 12 18:10:46.615387 2026] [security2:error] [pid 960377:tid 960547] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG5AAAACc"] [Sun Jul 12 18:10:46.618472 2026] [security2:error] [pid 940777:tid 941006] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnFQAAAN4"] [Sun Jul 12 18:10:46.706150 2026] [security2:error] [pid 940777:tid 941024] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtBpihQxksrpCflyFoBgAAAPA"] [Sun Jul 12 18:10:46.883287 2026] [security2:error] [pid 960377:tid 960597] [client 24.203.79.110:62676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtBhMANaV5i2_BLQoHfAAAAFk"] [Sun Jul 12 18:10:46.883554 2026] [security2:error] [pid 960377:tid 960597] [client 24.203.79.110:62676] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtBhMANaV5i2_BLQoHfAAAAFk"] [Sun Jul 12 18:10:47.020403 2026] [security2:error] [pid 940777:tid 940970] [client 116.179.37.75:33200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 75.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtB5ihQxksrpCflyFoEQAAALo"], referer: https://idreamofjeannemarie.com/we-have-a-winner-for-the-black-sweater/comment-page-1/ [Sun Jul 12 18:10:47.073516 2026] [security2:error] [pid 960377:tid 960576] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG7wAAAEQ"] [Sun Jul 12 18:10:47.083576 2026] [security2:error] [pid 940777:tid 940934] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnFwAAAJY"] [Sun Jul 12 18:10:47.086155 2026] [security2:error] [pid 940777:tid 940924] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnKgAAAIw"] [Sun Jul 12 18:10:47.090388 2026] [security2:error] [pid 960377:tid 960564] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG5gAAADg"] [Sun Jul 12 18:10:47.093076 2026] [security2:error] [pid 960377:tid 960566] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG4wAAADo"] [Sun Jul 12 18:10:47.095954 2026] [security2:error] [pid 960377:tid 960598] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG3QAAAFo"] [Sun Jul 12 18:10:47.098406 2026] [security2:error] [pid 940777:tid 941012] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnFgAAAOQ"] [Sun Jul 12 18:10:47.104381 2026] [security2:error] [pid 940777:tid 941010] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnKwAAAOI"] [Sun Jul 12 18:10:47.142269 2026] [security2:error] [pid 960377:tid 960593] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG-wAAAFU"] [Sun Jul 12 18:10:47.147867 2026] [security2:error] [pid 960377:tid 960567] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG3gAAADs"] [Sun Jul 12 18:10:47.188319 2026] [security2:error] [pid 940777:tid 940922] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnGAAAAIo"] [Sun Jul 12 18:10:47.188451 2026] [security2:error] [pid 960377:tid 960608] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG-QAAAGQ"] [Sun Jul 12 18:10:47.188650 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtBRMANaV5i2_BLQoHbgAAABU"], referer: http://67.222.38.115/api2/json/cluster/status [Sun Jul 12 18:10:47.194068 2026] [security2:error] [pid 940777:tid 940997] [client 159.223.211.139:34274] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnMgAAANU"] [Sun Jul 12 18:10:47.199143 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtBV_56DeKknhy7sPqSgAAAUg"] [Sun Jul 12 18:10:47.204135 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:47.204937 2026] [authz_core:error] [pid 940777:tid 940947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:47.206493 2026] [security2:error] [pid 940777:tid 940963] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnLAAAALM"] [Sun Jul 12 18:10:47.400715 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtBhMANaV5i2_BLQoHfQAAABE"] [Sun Jul 12 18:10:47.462978 2026] [security2:error] [pid 940777:tid 941029] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtBpihQxksrpCflyFoAwAA9Rw"] [Sun Jul 12 18:10:47.569972 2026] [security2:error] [pid 940777:tid 941005] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0yMjA5LXYvMzI3MDEtZQ=="] [unique_id "alQtB5ihQxksrpCflyFoGAAAAN0"] [Sun Jul 12 18:10:47.623831 2026] [security2:error] [pid 940777:tid 940903] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env.bak"] [unique_id "alQtB5ihQxksrpCflyFoGgAAnHM"] [Sun Jul 12 18:10:47.644190 2026] [security2:error] [pid 960377:tid 960620] [client 125.167.21.72:63177] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtBxMANaV5i2_BLQoHhQAAAHA"] [Sun Jul 12 18:10:47.644457 2026] [security2:error] [pid 960377:tid 960620] [client 125.167.21.72:63177] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtBxMANaV5i2_BLQoHhQAAAHA"] [Sun Jul 12 18:10:47.710654 2026] [autoindex:error] [pid 967714:tid 967868] [client 130.33.96.40:0] AH01276: Cannot serve directory /home1/xyqwnpmy/public_html/mmdservices/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sun Jul 12 18:10:47.865272 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtB5ihQxksrpCflyFoGQAAALA"] [Sun Jul 12 18:10:47.905458 2026] [security2:error] [pid 967714:tid 967880] [client 168.100.149.229:41298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3185/bargainor/2308_metalogical.jsp"] [unique_id "alQtB1_56DeKknhy7sPqawAAASM"] [Sun Jul 12 18:10:48.078785 2026] [security2:error] [pid 940777:tid 940919] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnLgAAAIc"] [Sun Jul 12 18:10:48.094052 2026] [security2:error] [pid 960377:tid 960590] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoG_wAAAFI"] [Sun Jul 12 18:10:48.094276 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:48.095247 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:48.121846 2026] [security2:error] [pid 940777:tid 941039] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnOQAAAP8"] [Sun Jul 12 18:10:48.331879 2026] [security2:error] [pid 960377:tid 960616] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHBwAAAGw"] [Sun Jul 12 18:10:48.332211 2026] [security2:error] [pid 960377:tid 960560] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHCQAAADQ"] [Sun Jul 12 18:10:48.343514 2026] [security2:error] [pid 960377:tid 960563] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHBAAAADc"] [Sun Jul 12 18:10:48.347792 2026] [security2:error] [pid 940777:tid 941037] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFnQgAAAP0"] [Sun Jul 12 18:10:48.354228 2026] [security2:error] [pid 967714:tid 967919] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQtBV_56DeKknhy7sPqTAAAAUo"] [Sun Jul 12 18:10:48.368547 2026] [security2:error] [pid 960377:tid 960513] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHAgAAAAU"] [Sun Jul 12 18:10:48.472684 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtBxMANaV5i2_BLQoHggAAACo"] [Sun Jul 12 18:10:48.477863 2026] [security2:error] [pid 967714:tid 967884] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCF_56DeKknhy7sPqbwAAASc"] [Sun Jul 12 18:10:48.584331 2026] [security2:error] [pid 960377:tid 960601] [client 57.141.18.22:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "thepeachypassport.com"] [uri "/index.php"] [unique_id "alQs-hMANaV5i2_BLQoGhgAAAF0"] [Sun Jul 12 18:10:48.620295 2026] [security2:error] [pid 967714:tid 967973] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtB1_56DeKknhy7sPqZwAAAYA"], referer: http://67.222.38.115/api2/json/cluster/tasks [Sun Jul 12 18:10:48.700880 2026] [security2:error] [pid 960377:tid 960510] [client 161.118.238.173:60829] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.socodevi.com"] [uri "/wp-login.php"] [unique_id "alQtCBMANaV5i2_BLQoHjQAAAAI"], referer: https://www.facebook.com/ [Sun Jul 12 18:10:48.725787 2026] [security2:error] [pid 940777:tid 940928] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtB5ihQxksrpCflyFoHAAAkCQ"] [Sun Jul 12 18:10:48.854779 2026] [security2:error] [pid 967714:tid 967885] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtCF_56DeKknhy7sPqcQAAASg"] [Sun Jul 12 18:10:48.854833 2026] [security2:error] [pid 967714:tid 967885] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtCF_56DeKknhy7sPqcQAAASg"] [Sun Jul 12 18:10:48.866708 2026] [security2:error] [pid 967714:tid 967879] [client 65.21.113.206:38078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0yMjA5LXYvMzI3MDEtZQ=="] [unique_id "alQtCF_56DeKknhy7sPqcAAAASI"] [Sun Jul 12 18:10:48.879256 2026] [security2:error] [pid 960377:tid 960629] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCBMANaV5i2_BLQoHjAAAAHk"] [Sun Jul 12 18:10:48.945801 2026] [authz_core:error] [pid 960377:tid 960544] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:48.946335 2026] [authz_core:error] [pid 960377:tid 960544] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:49.079422 2026] [security2:error] [pid 960377:tid 960584] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHCAAAAEw"] [Sun Jul 12 18:10:49.091435 2026] [security2:error] [pid 967714:tid 967891] [client 161.118.238.173:61050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.socodevi.com"] [uri "/wp-login.php"] [unique_id "alQtCV_56DeKknhy7sPqewAAAS4"], referer: https://www.google.com/ [Sun Jul 12 18:10:49.096396 2026] [security2:error] [pid 960377:tid 960574] [client 159.223.211.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "workshop.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQs_RMANaV5i2_BLQoHBgAAAEI"] [Sun Jul 12 18:10:49.266622 2026] [authz_core:error] [pid 967714:tid 967901] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sun Jul 12 18:10:49.386180 2026] [security2:error] [pid 967714:tid 967915] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCV_56DeKknhy7sPqegAAAUY"] [Sun Jul 12 18:10:49.632958 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCF_56DeKknhy7sPqcwAAAR0"] [Sun Jul 12 18:10:49.697465 2026] [authz_core:error] [pid 960377:tid 960596] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:49.698123 2026] [authz_core:error] [pid 960377:tid 960596] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:49.807052 2026] [security2:error] [pid 940777:tid 940990] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCZihQxksrpCflyFoLAAAAM4"] [Sun Jul 12 18:10:49.807154 2026] [security2:error] [pid 940777:tid 940877] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtCJihQxksrpCflyFoJwAAs1k"] [Sun Jul 12 18:10:49.910721 2026] [security2:error] [pid 940777:tid 940974] [client 168.100.149.82:22710] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3250/bargainor/2308_psychoreflex.jsp"] [unique_id "alQtCZihQxksrpCflyFoMAAAAL4"] [Sun Jul 12 18:10:49.928961 2026] [security2:error] [pid 967714:tid 967903] [client 54.236.1.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCV_56DeKknhy7sPqiAAAATo"] [Sun Jul 12 18:10:49.967214 2026] [security2:error] [pid 940777:tid 940904] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "%2e.%2e%2e" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1522"] [id "900917"] [msg "temporary CVE-2021-41773 logging rule"] [hostname "crackerjackcom.com"] [uri "/pms"] [unique_id "alQtCZihQxksrpCflyFoMgAA7HQ"] [Sun Jul 12 18:10:49.969621 2026] [security2:error] [pid 940777:tid 940879] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/includes/.env.bak"] [unique_id "alQtCZihQxksrpCflyFoMQAAoVs"] [Sun Jul 12 18:10:49.969843 2026] [security2:error] [pid 940777:tid 940904] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at ARGS:file_name. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "198"] [id "340007"] [rev "47"] [msg "Atomicorp.com WAF Rules: Generic Path Recursion denied"] [data "/../,ARGS:file_name"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/pms"] [unique_id "alQtCZihQxksrpCflyFoMgAA7HQ"] [Sun Jul 12 18:10:50.111568 2026] [security2:error] [pid 967714:tid 967871] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAl_56DeKknhy7sPqKQAAARo"] [Sun Jul 12 18:10:50.135587 2026] [security2:error] [pid 940777:tid 940827] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/k8s/.env"] [unique_id "alQtCpihQxksrpCflyFoNAAAsCk"] [Sun Jul 12 18:10:50.137619 2026] [security2:error] [pid 940777:tid 940859] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/payment/.env"] [unique_id "alQtCpihQxksrpCflyFoNQAAzEg"] [Sun Jul 12 18:10:50.241974 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCBMANaV5i2_BLQoHiwAAAAs"] [Sun Jul 12 18:10:50.345407 2026] [security2:error] [pid 940777:tid 940876] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/config/.env"] [unique_id "alQtCpihQxksrpCflyFoNwAApFg"] [Sun Jul 12 18:10:50.373440 2026] [security2:error] [pid 940777:tid 940919] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0yMjg3LXMvNDQ5MzctOQ=="] [unique_id "alQtCpihQxksrpCflyFoOQAAAIc"] [Sun Jul 12 18:10:50.468191 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:50.468817 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:50.549762 2026] [security2:error] [pid 940777:tid 940913] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/.env"] [unique_id "alQtCpihQxksrpCflyFoOwAA2H0"] [Sun Jul 12 18:10:50.634253 2026] [security2:error] [pid 967714:tid 967952] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCl_56DeKknhy7sPqlAAAAWs"] [Sun Jul 12 18:10:50.841885 2026] [security2:error] [pid 940777:tid 940883] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/api/.env"] [unique_id "alQtCpihQxksrpCflyFoQAAA_V8"] [Sun Jul 12 18:10:50.943558 2026] [security2:error] [pid 960377:tid 960521] [client 167.172.84.184:57233] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 184.84.172.167.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nty.zks.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQtChMANaV5i2_BLQoHqwAAAA0"], referer: https://www.google.com [Sun Jul 12 18:10:51.002507 2026] [security2:error] [pid 940777:tid 940826] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/backend/.env"] [unique_id "alQtCpihQxksrpCflyFoQgAA4Cg"] [Sun Jul 12 18:10:51.059289 2026] [security2:error] [pid 940777:tid 940998] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCpihQxksrpCflyFoPwAAANY"] [Sun Jul 12 18:10:51.088084 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHUwAAAGo"] [Sun Jul 12 18:10:51.154780 2026] [security2:error] [pid 940777:tid 940912] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs55ihQxksrpCflyFntwAAknw"] [Sun Jul 12 18:10:51.163118 2026] [security2:error] [pid 940777:tid 940842] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/src/.env"] [unique_id "alQtC5ihQxksrpCflyFoRAAA0zc"] [Sun Jul 12 18:10:51.195247 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCRMANaV5i2_BLQoHmwAAAHY"] [Sun Jul 12 18:10:51.222624 2026] [security2:error] [pid 940777:tid 940910] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/windows/tests/9.2.x/.env"] [unique_id "alQtC5ihQxksrpCflyFoSQAA-no"] [Sun Jul 12 18:10:51.335528 2026] [authz_core:error] [pid 967714:tid 967972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:51.336068 2026] [authz_core:error] [pid 967714:tid 967972] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:51.359374 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCl_56DeKknhy7sPqjwAAAVo"], referer: http://67.222.38.115/apis/rbac.authorization.k8s.io/v1/clusterroles [Sun Jul 12 18:10:51.387340 2026] [security2:error] [pid 940777:tid 940796] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "alQtC5ihQxksrpCflyFoSwAA5Ao"] [Sun Jul 12 18:10:51.473953 2026] [security2:error] [pid 967714:tid 967856] [client 20.210.108.71:56643] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-block-templates-registry.php"] [unique_id "alQtC1_56DeKknhy7sPqpwAAAQs"], referer: binance.com [Sun Jul 12 18:10:51.492659 2026] [security2:error] [pid 967714:tid 967969] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtCl_56DeKknhy7sPqmwAAAXw"] [Sun Jul 12 18:10:51.492749 2026] [security2:error] [pid 967714:tid 967969] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtCl_56DeKknhy7sPqmwAAAXw"] [Sun Jul 12 18:10:51.493899 2026] [security2:error] [pid 967714:tid 967955] [client 65.21.113.206:38092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0yMjg3LXMvNDQ5MzctOQ=="] [unique_id "alQtCl_56DeKknhy7sPqmQAAAW4"] [Sun Jul 12 18:10:51.764958 2026] [security2:error] [pid 967714:tid 967862] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtC1_56DeKknhy7sPqqQAAARE"] [Sun Jul 12 18:10:52.051120 2026] [security2:error] [pid 940777:tid 940973] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtC5ihQxksrpCflyFoSgAAvVc"] [Sun Jul 12 18:10:52.102485 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:52.103208 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:52.144098 2026] [security2:error] [pid 940777:tid 941040] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtApihQxksrpCflyFn0QAAAQA"], referer: http://67.222.40.58/.config [Sun Jul 12 18:10:52.169475 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtCxMANaV5i2_BLQoHugAAAHs"] [Sun Jul 12 18:10:52.211577 2026] [security2:error] [pid 940777:tid 940906] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/public/.env"] [unique_id "alQtDJihQxksrpCflyFoUQAA73Y"] [Sun Jul 12 18:10:52.212833 2026] [security2:error] [pid 967714:tid 967973] [client 116.179.37.2:62411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 2.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtDF_56DeKknhy7sPqrgAAAYA"], referer: https://idreamofjeannemarie.com/we-have-a-winner-for-the-black-sweater/comment-page-1/ [Sun Jul 12 18:10:52.339120 2026] [security2:error] [pid 940777:tid 940914] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/postgres.php.old"] [unique_id "alQtDJihQxksrpCflyFoUgAA1X4"] [Sun Jul 12 18:10:52.370824 2026] [security2:error] [pid 940777:tid 940853] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/web/.env"] [unique_id "alQtDJihQxksrpCflyFoUwAA50I"] [Sun Jul 12 18:10:52.460501 2026] [security2:error] [pid 967714:tid 967907] [client 197.48.221.253:62857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtDF_56DeKknhy7sPqsAAAAT4"] [Sun Jul 12 18:10:52.460746 2026] [security2:error] [pid 967714:tid 967907] [client 197.48.221.253:62857] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtDF_56DeKknhy7sPqsAAAAT4"] [Sun Jul 12 18:10:52.530523 2026] [security2:error] [pid 940777:tid 940900] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/server/.env"] [unique_id "alQtDJihQxksrpCflyFoVgAAwHA"] [Sun Jul 12 18:10:52.531589 2026] [security2:error] [pid 940777:tid 940939] [client 168.100.149.195:27592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3315/bargainor/2308_mailable.jsp"] [unique_id "alQtDJihQxksrpCflyFoVwAAAJs"] [Sun Jul 12 18:10:52.689293 2026] [security2:error] [pid 940777:tid 940848] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/client/.env"] [unique_id "alQtDJihQxksrpCflyFoWQAAwT0"] [Sun Jul 12 18:10:52.718493 2026] [security2:error] [pid 940777:tid 940991] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDJihQxksrpCflyFoVQAAAM8"] [Sun Jul 12 18:10:52.847965 2026] [security2:error] [pid 940777:tid 940791] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/frontend/.env"] [unique_id "alQtDJihQxksrpCflyFoXAAAsQU"] [Sun Jul 12 18:10:52.892933 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:52.893519 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:53.090284 2026] [security2:error] [pid 940777:tid 941009] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtApihQxksrpCflyFn0wAAAOE"], referer: http://67.222.40.58/config/aws.yml [Sun Jul 12 18:10:53.103057 2026] [security2:error] [pid 967714:tid 967892] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDF_56DeKknhy7sPqtwAAAS8"] [Sun Jul 12 18:10:53.148293 2026] [security2:error] [pid 940777:tid 940967] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0zMTQ5LXUvMTEzOTMtYg=="] [unique_id "alQtDZihQxksrpCflyFoXwAAALc"] [Sun Jul 12 18:10:53.154284 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs8ZihQxksrpCflyFnzwAAkhk"], referer: http://67.222.40.58/config.json [Sun Jul 12 18:10:53.244327 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtC1_56DeKknhy7sPqogAAAX4"] [Sun Jul 12 18:10:53.524339 2026] [security2:error] [pid 940777:tid 940982] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDZihQxksrpCflyFoZQAAAMY"] [Sun Jul 12 18:10:53.672514 2026] [authz_core:error] [pid 967714:tid 967931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:53.673025 2026] [authz_core:error] [pid 967714:tid 967931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:53.704555 2026] [security2:error] [pid 967714:tid 967934] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/build/info.php"] [unique_id "alQtDV_56DeKknhy7sPqwAAAAVk"] [Sun Jul 12 18:10:53.878129 2026] [security2:error] [pid 940777:tid 941004] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtDZihQxksrpCflyFoXgAA3DI"] [Sun Jul 12 18:10:53.881190 2026] [security2:error] [pid 960377:tid 960548] [client 181.52.89.77:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtDRMANaV5i2_BLQoHzAAAACg"] [Sun Jul 12 18:10:54.046637 2026] [security2:error] [pid 960377:tid 960533] [client 94.187.171.125:64241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtDhMANaV5i2_BLQoH1gAAABk"] [Sun Jul 12 18:10:54.046943 2026] [security2:error] [pid 960377:tid 960533] [client 94.187.171.125:64241] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtDhMANaV5i2_BLQoH1gAAABk"] [Sun Jul 12 18:10:54.069686 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCxMANaV5i2_BLQoHtAAAAFI"] [Sun Jul 12 18:10:54.072452 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHUAAAAGU"] [Sun Jul 12 18:10:54.073280 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAl_56DeKknhy7sPqKgAAARs"], referer: http://67.222.40.58/phpinfo [Sun Jul 12 18:10:54.093347 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDRMANaV5i2_BLQoH1AAAABs"] [Sun Jul 12 18:10:54.096531 2026] [security2:error] [pid 940777:tid 940902] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs7pihQxksrpCflyFnxwAAknI"], referer: http://67.222.40.58/.json [Sun Jul 12 18:10:54.097375 2026] [security2:error] [pid 940777:tid 940794] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs7pihQxksrpCflyFnxQAAkgg"] [Sun Jul 12 18:10:54.149586 2026] [security2:error] [pid 967714:tid 967904] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtDV_56DeKknhy7sPqvwAAATs"] [Sun Jul 12 18:10:54.149691 2026] [security2:error] [pid 967714:tid 967904] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtDV_56DeKknhy7sPqvwAAATs"] [Sun Jul 12 18:10:54.151455 2026] [security2:error] [pid 940777:tid 940929] [client 65.21.113.206:59808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0zMTQ5LXUvMTEzOTMtYg=="] [unique_id "alQtDZihQxksrpCflyFoaAAAAJE"] [Sun Jul 12 18:10:54.155539 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAl_56DeKknhy7sPqLAAAASE"] [Sun Jul 12 18:10:54.168405 2026] [security2:error] [pid 940777:tid 940937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtApihQxksrpCflyFn0gAAAJk"] [Sun Jul 12 18:10:54.172995 2026] [security2:error] [pid 940777:tid 940944] [client 57.141.18.79:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtDZihQxksrpCflyFobQAAAKA"] [Sun Jul 12 18:10:54.192870 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtC1_56DeKknhy7sPqowAAAQo"], referer: http://67.222.38.115/apis/serving.knative.dev/v1/services [Sun Jul 12 18:10:54.198161 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHVAAAAFc"], referer: http://67.222.40.58/config.yaml [Sun Jul 12 18:10:54.214276 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFocwAAkiY"] [Sun Jul 12 18:10:54.218878 2026] [security2:error] [pid 960377:tid 960594] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAhMANaV5i2_BLQoHUQAAAFY"], referer: http://67.222.40.58/user/.git/config [Sun Jul 12 18:10:54.243523 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtCxMANaV5i2_BLQoHsQAAAC8"] [Sun Jul 12 18:10:54.447487 2026] [authz_core:error] [pid 967714:tid 967954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:54.447997 2026] [authz_core:error] [pid 967714:tid 967954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:54.525520 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDhMANaV5i2_BLQoH2QAAAGc"] [Sun Jul 12 18:10:54.614190 2026] [security2:error] [pid 967714:tid 967961] [client 168.100.149.124:32770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3380/bargainor/2308_epidemiology.jsp"] [unique_id "alQtDl_56DeKknhy7sPqzQAAAXQ"] [Sun Jul 12 18:10:54.893528 2026] [security2:error] [pid 967714:tid 967956] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtDl_56DeKknhy7sPqzwAAAW8"] [Sun Jul 12 18:10:54.972345 2026] [security2:error] [pid 940777:tid 940882] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtDpihQxksrpCflyFocAAAj14"] [Sun Jul 12 18:10:55.296142 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:55.296716 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:55.372243 2026] [security2:error] [pid 967714:tid 967970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtD1_56DeKknhy7sPq0wAAAX0"] [Sun Jul 12 18:10:55.590478 2026] [security2:error] [pid 940777:tid 940917] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0zNTI4LTEvMTUyMDEtZA=="] [unique_id "alQtD5ihQxksrpCflyFohAAAAIU"] [Sun Jul 12 18:10:55.746944 2026] [security2:error] [pid 967714:tid 967965] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtD1_56DeKknhy7sPq2AAAAXg"] [Sun Jul 12 18:10:55.975692 2026] [security2:error] [pid 940777:tid 940926] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtD5ihQxksrpCflyFogQAAjiA"] [Sun Jul 12 18:10:56.077229 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:56.077751 2026] [authz_core:error] [pid 940777:tid 940998] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:56.190304 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtD1_56DeKknhy7sPq5wAAASw"] [Sun Jul 12 18:10:56.585429 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtEBMANaV5i2_BLQoH6AAAAAo"] [Sun Jul 12 18:10:56.585487 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtEBMANaV5i2_BLQoH6AAAAAo"] [Sun Jul 12 18:10:56.588042 2026] [security2:error] [pid 967714:tid 967981] [client 65.21.113.206:59816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0zNTI4LTEvMTUyMDEtZA=="] [unique_id "alQtEF_56DeKknhy7sPq6gAAAYg"] [Sun Jul 12 18:10:56.598824 2026] [security2:error] [pid 940777:tid 941021] [client 168.100.149.2:56878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3445/bargainor/2308_secque.jsp"] [unique_id "alQtEJihQxksrpCflyFokQAAAO0"] [Sun Jul 12 18:10:56.636909 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtEF_56DeKknhy7sPq8AAAATc"] [Sun Jul 12 18:10:56.849289 2026] [authz_core:error] [pid 967714:tid 967941] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:56.849792 2026] [authz_core:error] [pid 967714:tid 967941] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:56.945544 2026] [security2:error] [pid 940777:tid 941027] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtEJihQxksrpCflyFoigAA808"] [Sun Jul 12 18:10:57.017600 2026] [security2:error] [pid 940777:tid 940918] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtEJihQxksrpCflyFolwAAAIY"] [Sun Jul 12 18:10:57.182919 2026] [security2:error] [pid 940777:tid 940802] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.circleci/config.yml.bak"] [unique_id "alQtEZihQxksrpCflyFomgAAihA"] [Sun Jul 12 18:10:57.199937 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtDRMANaV5i2_BLQoHygAAAHk"], referer: http://67.222.38.115/apis/tekton.dev/v1/pipelineruns [Sun Jul 12 18:10:57.283414 2026] [security2:error] [pid 967714:tid 967978] [client 20.210.108.71:50070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-classic-to-block-menu-converter.php"] [unique_id "alQtEV_56DeKknhy7sPrDAAAAYU"], referer: binance.com [Sun Jul 12 18:10:57.292809 2026] [security2:error] [pid 940777:tid 940833] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFocQAAki8"] [Sun Jul 12 18:10:57.566914 2026] [security2:error] [pid 967714:tid 967963] [client 24.203.79.110:63202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtEV_56DeKknhy7sPrEwAAAXY"] [Sun Jul 12 18:10:57.567278 2026] [security2:error] [pid 967714:tid 967963] [client 24.203.79.110:63202] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtEV_56DeKknhy7sPrEwAAAXY"] [Sun Jul 12 18:10:57.585644 2026] [security2:error] [pid 967714:tid 967929] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtEV_56DeKknhy7sPrEAAAAVQ"] [Sun Jul 12 18:10:57.615238 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:57.615944 2026] [authz_core:error] [pid 940777:tid 940931] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:57.909989 2026] [security2:error] [pid 940777:tid 940980] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtEZihQxksrpCflyFomQAAxB8"] [Sun Jul 12 18:10:57.986530 2026] [security2:error] [pid 960377:tid 960553] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtERMANaV5i2_BLQoH-QAAAC0"] [Sun Jul 12 18:10:58.017101 2026] [core:error] [pid 967714:tid 967762] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.019851 2026] [core:error] [pid 967714:tid 967760] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.020328 2026] [core:error] [pid 967714:tid 967745] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.026928 2026] [core:error] [pid 967714:tid 967762] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.029883 2026] [core:error] [pid 967714:tid 967760] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.031976 2026] [core:error] [pid 967714:tid 967761] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.044952 2026] [core:error] [pid 967714:tid 967745] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.045062 2026] [core:error] [pid 967714:tid 967761] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.078644 2026] [security2:error] [pid 960377:tid 960591] [client 104.156.225.167:59859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whatworld.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtEhMANaV5i2_BLQoH_QAAAFM"] [Sun Jul 12 18:10:58.110974 2026] [security2:error] [pid 940777:tid 941006] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtDZihQxksrpCflyFoYgAAAN4"] [Sun Jul 12 18:10:58.155849 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtDV_56DeKknhy7sPqugAAAUU"], referer: http://67.222.38.115/apis/tekton.dev/v1/taskruns [Sun Jul 12 18:10:58.158420 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtDV_56DeKknhy7sPqvAAAARM"] [Sun Jul 12 18:10:58.175826 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtDV_56DeKknhy7sPquwAAAUw"] [Sun Jul 12 18:10:58.190483 2026] [core:error] [pid 967714:tid 967766] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.235400 2026] [security2:error] [pid 940777:tid 940894] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFodwAAkmo"] [Sun Jul 12 18:10:58.253617 2026] [core:error] [pid 967714:tid 967747] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.256423 2026] [security2:error] [pid 967714:tid 967887] [client 104.156.225.167:56817] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whatworldassembly.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtEl_56DeKknhy7sPrKAAAASo"] [Sun Jul 12 18:10:58.258888 2026] [core:error] [pid 967714:tid 967770] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.258969 2026] [core:error] [pid 967714:tid 967776] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.259352 2026] [core:error] [pid 967714:tid 967765] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.274597 2026] [core:error] [pid 967714:tid 967767] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.279619 2026] [core:error] [pid 967714:tid 967747] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.261767 2026] [core:error] [pid 967714:tid 967766] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.284245 2026] [core:error] [pid 967714:tid 967765] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.287304 2026] [security2:error] [pid 940777:tid 940874] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs85ihQxksrpCflyFoeAAAklY"] [Sun Jul 12 18:10:58.292349 2026] [core:error] [pid 967714:tid 967767] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.300387 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "alQs9JihQxksrpCflyFopgAAkiY"] [Sun Jul 12 18:10:58.302139 2026] [security2:error] [pid 940777:tid 940874] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/etc/env.php"] [unique_id "alQs9pihQxksrpCflyFopwAAklY"] [Sun Jul 12 18:10:58.304711 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtDhMANaV5i2_BLQoH2wAAACw"] [Sun Jul 12 18:10:58.306058 2026] [security2:error] [pid 940777:tid 940860] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/secured/phpinfo.php"] [unique_id "alQs95ihQxksrpCflyFoqgAAkkk"] [Sun Jul 12 18:10:58.308282 2026] [core:error] [pid 967714:tid 967770] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.318552 2026] [core:error] [pid 967714:tid 967776] [remote 12.75.211.17:27889] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:10:58.346158 2026] [security2:error] [pid 960377:tid 960605] [client 125.167.21.72:61646] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtEhMANaV5i2_BLQoICAAAAGE"] [Sun Jul 12 18:10:58.346734 2026] [security2:error] [pid 960377:tid 960605] [client 125.167.21.72:61646] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtEhMANaV5i2_BLQoICAAAAGE"] [Sun Jul 12 18:10:58.413953 2026] [security2:error] [pid 940777:tid 940946] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0zNzY3LWEvMzM4Nzctdw=="] [unique_id "alQtEpihQxksrpCflyForQAAAKI"] [Sun Jul 12 18:10:58.456245 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:58.456761 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:58.470477 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtEhMANaV5i2_BLQoIAQAAAHg"] [Sun Jul 12 18:10:58.584919 2026] [security2:error] [pid 967714:tid 967876] [client 168.100.149.185:41126] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3510/bargainor/2308_dislevelment.jsp"] [unique_id "alQtEl_56DeKknhy7sPrMgAAAR8"] [Sun Jul 12 18:10:58.685577 2026] [security2:error] [pid 940777:tid 940954] [client 185.117.225.16:54450] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "mail.ccnjobfairservices.com"] [uri "/robots.txt"] [unique_id "alQtEpihQxksrpCflyFosQAAAKo"] [Sun Jul 12 18:10:58.733572 2026] [security2:error] [pid 960377:tid 960533] [client 104.156.225.167:51926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "whatworldstrategies.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtEhMANaV5i2_BLQoIDQAAABk"] [Sun Jul 12 18:10:58.872116 2026] [security2:error] [pid 940777:tid 941001] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtEpihQxksrpCflyFosAAAANk"] [Sun Jul 12 18:10:58.935582 2026] [security2:error] [pid 940777:tid 940967] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtEpihQxksrpCflyFoowAAtyc"] [Sun Jul 12 18:10:59.225772 2026] [security2:error] [pid 960377:tid 960619] [client 185.117.225.16:39644] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "mail.ccnjobfairservices.com"] [uri "/robots.txt"] [unique_id "alQtExMANaV5i2_BLQoIDgAAAG8"] [Sun Jul 12 18:10:59.271024 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:10:59.271817 2026] [authz_core:error] [pid 940777:tid 940969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:10:59.323567 2026] [authz_core:error] [pid 960377:tid 960602] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sun Jul 12 18:10:59.369314 2026] [security2:error] [pid 967714:tid 967927] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtE1_56DeKknhy7sPrQwAAAVI"] [Sun Jul 12 18:10:59.402304 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtEhMANaV5i2_BLQoIAwAAACE"], referer: http://67.222.38.115/apisix/admin/secrets [Sun Jul 12 18:10:59.433189 2026] [security2:error] [pid 960377:tid 960583] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtEhMANaV5i2_BLQoIAgAAAEs"] [Sun Jul 12 18:10:59.472987 2026] [security2:error] [pid 967714:tid 967911] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtEl_56DeKknhy7sPrPwAAAUI"] [Sun Jul 12 18:10:59.473056 2026] [security2:error] [pid 967714:tid 967911] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtEl_56DeKknhy7sPrPwAAAUI"] [Sun Jul 12 18:10:59.474139 2026] [security2:error] [pid 967714:tid 967922] [client 65.21.113.206:59820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0zNzY3LWEvMzM4Nzctdw=="] [unique_id "alQtEl_56DeKknhy7sPrPgAAAU0"] [Sun Jul 12 18:10:59.739138 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtExMANaV5i2_BLQoIGgAAAC8"] [Sun Jul 12 18:10:59.906348 2026] [security2:error] [pid 967714:tid 967749] [remote 98.156.100.191:37256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.100.156.98.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bintechsys.net"] [uri "/wp-login.php"] [unique_id "alQtE1_56DeKknhy7sPrTwABChc"] [Sun Jul 12 18:11:00.014225 2026] [security2:error] [pid 940777:tid 940972] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtE5ihQxksrpCflyFouQAAvBo"] [Sun Jul 12 18:11:00.030249 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:00.030794 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:00.162364 2026] [security2:error] [pid 960377:tid 960567] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtExMANaV5i2_BLQoIIQAAADs"] [Sun Jul 12 18:11:00.248894 2026] [security2:error] [pid 960377:tid 960593] [client 45.205.1.223:34676] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "ifpdirect.hsaconnect.com"] [uri "/400.shtml"] [unique_id "alQtFBMANaV5i2_BLQoIIgAAAFU"] [Sun Jul 12 18:11:00.257183 2026] [security2:error] [pid 940777:tid 940905] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/config.php"] [unique_id "alQs-pihQxksrpCflyFoywAAknU"] [Sun Jul 12 18:11:00.257341 2026] [security2:error] [pid 940777:tid 940881] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/index.php/phpinfo"] [unique_id "alQs_JihQxksrpCflyFozAAAkl0"] [Sun Jul 12 18:11:00.351618 2026] [security2:error] [pid 967714:tid 967978] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/private/info.php"] [unique_id "alQtFF_56DeKknhy7sPrUwAAAYU"] [Sun Jul 12 18:11:00.545913 2026] [security2:error] [pid 967714:tid 967917] [client 168.100.149.4:48942] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3575/bargainor/2308_limnoria.jsp"] [unique_id "alQtFF_56DeKknhy7sPrVwAAAUg"] [Sun Jul 12 18:11:00.688886 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFF_56DeKknhy7sPrVgAAAYY"] [Sun Jul 12 18:11:00.807811 2026] [authz_core:error] [pid 967714:tid 967975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:00.808294 2026] [authz_core:error] [pid 967714:tid 967975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:01.013295 2026] [security2:error] [pid 940777:tid 940948] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtFJihQxksrpCflyFoxwAApDw"] [Sun Jul 12 18:11:01.059759 2026] [security2:error] [pid 967714:tid 967963] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFF_56DeKknhy7sPrXwAAAXY"] [Sun Jul 12 18:11:01.122608 2026] [security2:error] [pid 960377:tid 960625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtEhMANaV5i2_BLQoICgAAAHU"], referer: http://67.222.40.58/application.properties [Sun Jul 12 18:11:01.168497 2026] [security2:error] [pid 967714:tid 967875] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtEl_56DeKknhy7sPrLgAAAR4"] [Sun Jul 12 18:11:01.466032 2026] [security2:error] [pid 940777:tid 940970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFZihQxksrpCflyFo4gAAALo"] [Sun Jul 12 18:11:01.579314 2026] [authz_core:error] [pid 940777:tid 941012] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:01.579843 2026] [authz_core:error] [pid 940777:tid 941012] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:01.851922 2026] [security2:error] [pid 967714:tid 967913] [client 20.210.108.71:63650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-dependencies.php"] [unique_id "alQtFV_56DeKknhy7sPragAAAUQ"], referer: binance.com [Sun Jul 12 18:11:01.921278 2026] [security2:error] [pid 940777:tid 940918] [client 168.100.149.67:45928] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3640/bargainor/2308_milksopism.jsp"] [unique_id "alQtFZihQxksrpCflyFo7gAAAIY"] [Sun Jul 12 18:11:01.932515 2026] [security2:error] [pid 940777:tid 940987] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFZihQxksrpCflyFo6QAAAMs"] [Sun Jul 12 18:11:02.028385 2026] [security2:error] [pid 940777:tid 941023] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0zODEzLWkvMjAwNzMtOA=="] [unique_id "alQtFpihQxksrpCflyFo7wAAAO8"] [Sun Jul 12 18:11:02.102283 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtExMANaV5i2_BLQoIFgAAAFc"] [Sun Jul 12 18:11:02.123795 2026] [security2:error] [pid 940777:tid 940985] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtFZihQxksrpCflyFo2gAAyUk"] [Sun Jul 12 18:11:02.180735 2026] [security2:error] [pid 940777:tid 940963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtE5ihQxksrpCflyFowAAAALM"], referer: http://67.222.38.115/apisix/admin/services [Sun Jul 12 18:11:02.238948 2026] [security2:error] [pid 960377:tid 960571] [client 74.210.222.239:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtFRMANaV5i2_BLQoIMQAAAD8"] [Sun Jul 12 18:11:02.324802 2026] [security2:error] [pid 960377:tid 960387] [remote 98.70.32.248:34514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 248.32.70.98.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gnsai.com"] [uri "/wp-login.php"] [unique_id "alQtFhMANaV5i2_BLQoINwAAfgk"], referer: https://dotaiconsultingteam.org/ [Sun Jul 12 18:11:02.331409 2026] [security2:error] [pid 940777:tid 941007] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtE5ihQxksrpCflyFovwAAAN8"], referer: http://67.222.38.115/apisix/admin/ssl [Sun Jul 12 18:11:02.371473 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtExMANaV5i2_BLQoIGQAAAEU"] [Sun Jul 12 18:11:02.394455 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:02.395040 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:02.438473 2026] [security2:error] [pid 960377:tid 960517] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFhMANaV5i2_BLQoINQAAAAk"] [Sun Jul 12 18:11:02.863195 2026] [security2:error] [pid 967714:tid 967934] [client 92.191.33.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtFl_56DeKknhy7sPrcwAAAVk"] [Sun Jul 12 18:11:02.904894 2026] [security2:error] [pid 940777:tid 940971] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFpihQxksrpCflyFo9wAAALs"] [Sun Jul 12 18:11:02.974380 2026] [security2:error] [pid 960377:tid 960526] [client 197.48.221.253:63445] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtFhMANaV5i2_BLQoIPwAAABI"] [Sun Jul 12 18:11:02.974754 2026] [security2:error] [pid 960377:tid 960526] [client 197.48.221.253:63445] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtFhMANaV5i2_BLQoIPwAAABI"] [Sun Jul 12 18:11:03.006473 2026] [security2:error] [pid 967714:tid 967911] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtFl_56DeKknhy7sPregAAAUI"] [Sun Jul 12 18:11:03.006523 2026] [security2:error] [pid 967714:tid 967911] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtFl_56DeKknhy7sPregAAAUI"] [Sun Jul 12 18:11:03.007495 2026] [security2:error] [pid 960377:tid 960589] [client 65.21.113.206:59834] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0zODEzLWkvMjAwNzMtOA=="] [unique_id "alQtFhMANaV5i2_BLQoIOgAAAFE"] [Sun Jul 12 18:11:03.063513 2026] [security2:error] [pid 960377:tid 960550] [client 202.46.62.35:25929] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtFxMANaV5i2_BLQoIQQAAACo"], referer: https://www.stephenspublishing.com/economy-tote-custom-p-695.html?osCsid=51s56ah89ou26sl1k6pg5pk393 [Sun Jul 12 18:11:03.067106 2026] [security2:error] [pid 940777:tid 940829] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.ssh/id_dsa.pub.bak"] [unique_id "alQtF5ihQxksrpCflyFo_gAAwys"] [Sun Jul 12 18:11:03.141635 2026] [security2:error] [pid 940777:tid 940977] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtFpihQxksrpCflyFo8wAAwXs"] [Sun Jul 12 18:11:03.222949 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:03.223431 2026] [authz_core:error] [pid 940777:tid 940957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:03.445944 2026] [security2:error] [pid 960377:tid 960585] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFxMANaV5i2_BLQoIRAAAAE0"] [Sun Jul 12 18:11:03.454440 2026] [security2:error] [pid 967714:tid 967900] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtFl_56DeKknhy7sPreAAAATc"] [Sun Jul 12 18:11:03.489823 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtFl_56DeKknhy7sPrdgAAATE"], referer: http://67.222.38.115/apisix/admin/upstreams [Sun Jul 12 18:11:03.813532 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtFxMANaV5i2_BLQoISwAAADg"] [Sun Jul 12 18:11:03.975850 2026] [authz_core:error] [pid 967714:tid 967978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:03.976372 2026] [authz_core:error] [pid 967714:tid 967978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:04.050995 2026] [security2:error] [pid 940777:tid 941035] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtF5ihQxksrpCflyFpBAAA-y0"] [Sun Jul 12 18:11:04.213287 2026] [security2:error] [pid 940777:tid 940805] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "crackerjackcom.com"] [uri "/config/mail.php"] [unique_id "alQtGJihQxksrpCflyFpDwAA6RM"] [Sun Jul 12 18:11:04.213355 2026] [security2:error] [pid 940777:tid 940805] [remote 185.177.72.52:36754] ModSecurity: Access denied with code 409 (phase 2). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1552"] [id "900424"] [msg "Transparent Bot Detection for Contact Forms"] [hostname "crackerjackcom.com"] [uri "/config/mail.php"] [unique_id "alQtGJihQxksrpCflyFpDwAA6RM"] [Sun Jul 12 18:11:04.225377 2026] [security2:error] [pid 940777:tid 940969] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtF5ihQxksrpCflyFpDgAAALk"] [Sun Jul 12 18:11:04.286408 2026] [security2:error] [pid 967714:tid 967959] [client 74.7.175.143:35916] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.defencefec.com"] [uri "/robots.txt"] [unique_id "alQtGF_56DeKknhy7sPrhgAAAXI"] [Sun Jul 12 18:11:04.331579 2026] [security2:error] [pid 940777:tid 940937] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YS0zOTcyLWwvMTcxODktNg=="] [unique_id "alQtGJihQxksrpCflyFpEQAAAJk"] [Sun Jul 12 18:11:04.385206 2026] [security2:error] [pid 940777:tid 940835] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sqlite/.env"] [unique_id "alQtGJihQxksrpCflyFpEwAA8TE"] [Sun Jul 12 18:11:04.544750 2026] [security2:error] [pid 940777:tid 941020] [client 168.100.149.87:60852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3705/bargainor/2308_capnoides.jsp"] [unique_id "alQtGJihQxksrpCflyFpFAAAAOw"] [Sun Jul 12 18:11:04.706992 2026] [security2:error] [pid 960377:tid 960551] [client 94.187.171.125:64720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtGBMANaV5i2_BLQoIVQAAACs"] [Sun Jul 12 18:11:04.707282 2026] [security2:error] [pid 960377:tid 960551] [client 94.187.171.125:64720] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtGBMANaV5i2_BLQoIVQAAACs"] [Sun Jul 12 18:11:04.714495 2026] [security2:error] [pid 960377:tid 960557] [client 74.7.175.143:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.defencefec.com"] [uri "/index.php"] [unique_id "alQtGBMANaV5i2_BLQoIUgAAADE"], referer: http://mail.defencefec.com/robots.txt [Sun Jul 12 18:11:04.715919 2026] [security2:error] [pid 960377:tid 960556] [client 74.7.175.143:55840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.defencefec.com"] [uri "/robots.txt"] [unique_id "alQtGBMANaV5i2_BLQoIUQAAMBI"], referer: http://mail.defencefec.com/robots.txt [Sun Jul 12 18:11:04.766916 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:04.767413 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:04.785379 2026] [security2:error] [pid 940777:tid 940960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGJihQxksrpCflyFpGAAAALA"] [Sun Jul 12 18:11:05.069980 2026] [security2:error] [pid 940777:tid 941004] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtGJihQxksrpCflyFpEgAA3Cg"] [Sun Jul 12 18:11:05.186526 2026] [security2:error] [pid 967714:tid 967863] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGF_56DeKknhy7sPrlAAAARI"] [Sun Jul 12 18:11:05.199000 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtFF_56DeKknhy7sPrUAAAAWA"] [Sun Jul 12 18:11:05.236027 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFozwAAkl0"] [Sun Jul 12 18:11:05.260970 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_JihQxksrpCflyFozgAAknU"] [Sun Jul 12 18:11:05.297194 2026] [security2:error] [pid 967714:tid 967980] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtGF_56DeKknhy7sPrkgAAAYc"] [Sun Jul 12 18:11:05.297249 2026] [security2:error] [pid 967714:tid 967980] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtGF_56DeKknhy7sPrkgAAAYc"] [Sun Jul 12 18:11:05.300845 2026] [security2:error] [pid 960377:tid 960600] [client 65.21.113.206:53966] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YS0zOTcyLWwvMTcxODktNg=="] [unique_id "alQtGBMANaV5i2_BLQoIVgAAAFw"] [Sun Jul 12 18:11:05.312028 2026] [security2:error] [pid 967714:tid 967932] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtF1_56DeKknhy7sPrfgAAAVc"] [Sun Jul 12 18:11:05.560877 2026] [security2:error] [pid 967714:tid 967861] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sProAAAARA"] [Sun Jul 12 18:11:05.562793 2026] [authz_core:error] [pid 967714:tid 967902] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:05.563275 2026] [authz_core:error] [pid 967714:tid 967902] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:05.913568 2026] [security2:error] [pid 940777:tid 940984] [client 168.100.149.237:61464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3770/bargainor/2308_deft.jsp"] [unique_id "alQtGZihQxksrpCflyFpLAAAAMg"] [Sun Jul 12 18:11:05.988255 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGRMANaV5i2_BLQoIbwAAAHA"] [Sun Jul 12 18:11:06.049918 2026] [security2:error] [pid 940777:tid 940986] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtGZihQxksrpCflyFpIgAAyks"] [Sun Jul 12 18:11:06.137713 2026] [security2:error] [pid 940777:tid 940886] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFo2QAAkmI"] [Sun Jul 12 18:11:06.141584 2026] [authz_core:error] [pid 960377:tid 960626] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/widgets/error_log, referer: binance.com [Sun Jul 12 18:11:06.173727 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtFBMANaV5i2_BLQoIKAAAAAs"], referer: http://67.222.40.58/config.ini [Sun Jul 12 18:11:06.174954 2026] [security2:error] [pid 940777:tid 940964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtF5ihQxksrpCflyFpCAAAALQ"], referer: http://67.222.38.115/apisix/control/v1/healthcheck [Sun Jul 12 18:11:06.191105 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_ZihQxksrpCflyFo2wAAkiI"], referer: http://67.222.40.58/public/js/main.js [Sun Jul 12 18:11:06.207131 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtFF_56DeKknhy7sPrUQAAATI"], referer: http://67.222.40.58/.profile [Sun Jul 12 18:11:06.232316 2026] [security2:error] [pid 960377:tid 960608] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtFBMANaV5i2_BLQoIJwAAAGQ"] [Sun Jul 12 18:11:06.316029 2026] [security2:error] [pid 940777:tid 941021] [client 114.10.121.230:41460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.121.10.114.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cecillinois.org"] [uri "/wp-login.php"] [unique_id "alQtGpihQxksrpCflyFpMgAAAO0"] [Sun Jul 12 18:11:06.422692 2026] [authz_core:error] [pid 960377:tid 960630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:06.423210 2026] [authz_core:error] [pid 960377:tid 960630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:06.484504 2026] [security2:error] [pid 940777:tid 940994] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGpihQxksrpCflyFpMwAAANI"] [Sun Jul 12 18:11:06.622974 2026] [security2:error] [pid 940777:tid 940942] [client 62.171.167.118:53370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dev/phpinfo.php"] [unique_id "alQtGpihQxksrpCflyFpPwAAAJ4"] [Sun Jul 12 18:11:06.649398 2026] [security2:error] [pid 940777:tid 940853] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/db/debug.bak"] [unique_id "alQtGpihQxksrpCflyFpQQAA1EI"] [Sun Jul 12 18:11:06.833335 2026] [security2:error] [pid 960377:tid 960536] [client 57.141.18.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtGhMANaV5i2_BLQoIfQAAABw"] [Sun Jul 12 18:11:07.004388 2026] [security2:error] [pid 940777:tid 940952] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTAtNjY0Ni8wZWMvNDUyNS1lYzVn"] [unique_id "alQtG5ihQxksrpCflyFpSAAAAKg"] [Sun Jul 12 18:11:07.029306 2026] [security2:error] [pid 967714:tid 967901] [client 102.159.194.7:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrpQAAATg"] [Sun Jul 12 18:11:07.044387 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtGl_56DeKknhy7sPrqQAAATA"] [Sun Jul 12 18:11:07.089452 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtF1_56DeKknhy7sPrfQAAAWg"] [Sun Jul 12 18:11:07.195081 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtF1_56DeKknhy7sPrgQAAAXE"], referer: http://67.222.38.115/apisix/control/v1/schema [Sun Jul 12 18:11:07.281435 2026] [authz_core:error] [pid 960377:tid 960526] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:07.281996 2026] [authz_core:error] [pid 960377:tid 960526] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:07.492097 2026] [security2:error] [pid 967714:tid 967912] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtG1_56DeKknhy7sPrrQAAAUM"] [Sun Jul 12 18:11:07.634369 2026] [security2:error] [pid 940777:tid 940992] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtGpihQxksrpCflyFpQgAA0HA"] [Sun Jul 12 18:11:07.654729 2026] [security2:error] [pid 940777:tid 940815] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/favs/.env"] [unique_id "alQtG5ihQxksrpCflyFpUAAAtx0"] [Sun Jul 12 18:11:07.819574 2026] [security2:error] [pid 940777:tid 940915] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test.php.swp"] [unique_id "alQtG5ihQxksrpCflyFpUwAAtX8"] [Sun Jul 12 18:11:07.920860 2026] [security2:error] [pid 960377:tid 960533] [client 168.100.149.155:19998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3835/bargainor/2308_did.jsp"] [unique_id "alQtGxMANaV5i2_BLQoIigAAABk"] [Sun Jul 12 18:11:08.025888 2026] [security2:error] [pid 967714:tid 967900] [client 216.244.66.249:37966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.ophtek.com"] [uri "/robots.txt"] [unique_id "alQtHF_56DeKknhy7sPrtgAAATc"] [Sun Jul 12 18:11:08.026122 2026] [security2:error] [pid 967714:tid 967900] [client 216.244.66.249:37966] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.ophtek.com"] [uri "/robots.txt"] [unique_id "alQtHF_56DeKknhy7sPrtgAAATc"] [Sun Jul 12 18:11:08.138551 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:08.139094 2026] [authz_core:error] [pid 940777:tid 940944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:08.151807 2026] [security2:error] [pid 960377:tid 960612] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtGxMANaV5i2_BLQoIhwAAAGg"] [Sun Jul 12 18:11:08.151899 2026] [security2:error] [pid 960377:tid 960612] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtGxMANaV5i2_BLQoIhwAAAGg"] [Sun Jul 12 18:11:08.156312 2026] [security2:error] [pid 960377:tid 960548] [client 65.21.113.206:53970] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTAtNjY0Ni8wZWMvNDUyNS1lYzVn"] [unique_id "alQtGxMANaV5i2_BLQoIhQAAACg"] [Sun Jul 12 18:11:08.263076 2026] [security2:error] [pid 960377:tid 960508] [client 24.203.79.110:63725] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtHBMANaV5i2_BLQoIjgAAAAA"] [Sun Jul 12 18:11:08.263391 2026] [security2:error] [pid 960377:tid 960508] [client 24.203.79.110:63725] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtHBMANaV5i2_BLQoIjgAAAAA"] [Sun Jul 12 18:11:08.306265 2026] [security2:error] [pid 960377:tid 960609] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHBMANaV5i2_BLQoIjQAAAGU"] [Sun Jul 12 18:11:08.362203 2026] [security2:error] [pid 940777:tid 940988] [client 20.210.108.71:61447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "alQtHJihQxksrpCflyFpXQAAAMw"], referer: binance.com [Sun Jul 12 18:11:08.492482 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/public/settings.php"] [unique_id "alQtHF_56DeKknhy7sPruwAAAWI"] [Sun Jul 12 18:11:08.653810 2026] [security2:error] [pid 940777:tid 940790] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/inbox/.env"] [unique_id "alQtHJihQxksrpCflyFpYAAA_gQ"] [Sun Jul 12 18:11:08.799276 2026] [security2:error] [pid 940777:tid 941028] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtG5ihQxksrpCflyFpUgAA9Bk"] [Sun Jul 12 18:11:08.992652 2026] [security2:error] [pid 960377:tid 960527] [client 62.171.167.118:53382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php_info.php"] [unique_id "alQtHBMANaV5i2_BLQoIkgAAABM"] [Sun Jul 12 18:11:08.992660 2026] [security2:error] [pid 960377:tid 960566] [client 125.167.21.72:62096] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtHBMANaV5i2_BLQoIkQAAADo"] [Sun Jul 12 18:11:08.992974 2026] [security2:error] [pid 960377:tid 960566] [client 125.167.21.72:62096] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtHBMANaV5i2_BLQoIkQAAADo"] [Sun Jul 12 18:11:09.022497 2026] [authz_core:error] [pid 940777:tid 940960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:09.023230 2026] [authz_core:error] [pid 940777:tid 940960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:09.203717 2026] [security2:error] [pid 967714:tid 967897] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHF_56DeKknhy7sPrwAAAATQ"] [Sun Jul 12 18:11:09.397840 2026] [security2:error] [pid 940777:tid 940838] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/painel/.env"] [unique_id "alQtHZihQxksrpCflyFpaQAA_zQ"] [Sun Jul 12 18:11:09.438968 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFpNgAAkiY"] [Sun Jul 12 18:11:09.479464 2026] [security2:error] [pid 940777:tid 940820] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_pihQxksrpCflyFpNAAAkiI"], referer: http://67.222.40.58/config/config.js [Sun Jul 12 18:11:09.559114 2026] [security2:error] [pid 940777:tid 940892] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/certificates/gcp_key.pem"] [unique_id "alQtHZihQxksrpCflyFpbAAA3Gg"] [Sun Jul 12 18:11:09.596443 2026] [security2:error] [pid 940777:tid 941024] [client 62.171.167.118:57820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/i.php"] [unique_id "alQtHZihQxksrpCflyFpbQAAAPA"] [Sun Jul 12 18:11:09.801441 2026] [security2:error] [pid 940777:tid 941000] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtHJihQxksrpCflyFpZQAA2AE"] [Sun Jul 12 18:11:09.864502 2026] [authz_core:error] [pid 960377:tid 960555] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:09.865067 2026] [authz_core:error] [pid 960377:tid 960555] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:09.962308 2026] [security2:error] [pid 967714:tid 967923] [client 43.173.182.223:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "undameta.com"] [uri "/index.php"] [unique_id "alQtG1_56DeKknhy7sPrsAAAAU4"] [Sun Jul 12 18:11:09.980414 2026] [security2:error] [pid 960377:tid 960554] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHRMANaV5i2_BLQoImQAAAC4"] [Sun Jul 12 18:11:10.147024 2026] [security2:error] [pid 940777:tid 940882] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/laravel/.env.bak"] [unique_id "alQtHpihQxksrpCflyFpcwAAr14"] [Sun Jul 12 18:11:10.180883 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrnQAAASI"], referer: http://67.222.38.115/apisix/status [Sun Jul 12 18:11:10.233806 2026] [security2:error] [pid 967714:tid 967982] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrmwAAAYk"] [Sun Jul 12 18:11:10.235438 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrnwAAAS4"] [Sun Jul 12 18:11:10.336995 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrnAAAAQ8"], referer: http://67.222.38.115/apisix/prometheus/metrics [Sun Jul 12 18:11:10.378068 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtGV_56DeKknhy7sPrngAAAT4"] [Sun Jul 12 18:11:10.390573 2026] [security2:error] [pid 940777:tid 941021] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTB3LzIzMzI3LzB3LzE0OTMvd2Ey.asp"] [unique_id "alQtHpihQxksrpCflyFpfgAAAO0"] [Sun Jul 12 18:11:10.569243 2026] [security2:error] [pid 940777:tid 941007] [client 168.100.149.186:44272] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3900/bargainor/2308_delphian.jsp"] [unique_id "alQtHpihQxksrpCflyFpgwAAAN8"] [Sun Jul 12 18:11:10.621973 2026] [security2:error] [pid 940777:tid 941040] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHpihQxksrpCflyFpewAAAQA"] [Sun Jul 12 18:11:10.653043 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:10.653788 2026] [authz_core:error] [pid 940777:tid 941031] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:10.670238 2026] [security2:error] [pid 940777:tid 940820] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtAJihQxksrpCflyFpawAAkiI"] [Sun Jul 12 18:11:10.817579 2026] [security2:error] [pid 940777:tid 940971] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/live/phpinfo.php"] [unique_id "alQtHpihQxksrpCflyFpjgAAALs"] [Sun Jul 12 18:11:10.915474 2026] [security2:error] [pid 940777:tid 940870] [remote 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtHZihQxksrpCflyFpcQAAx1I"] [Sun Jul 12 18:11:11.078811 2026] [security2:error] [pid 940777:tid 940824] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQs_5ihQxksrpCflyFpagAAkiY"] [Sun Jul 12 18:11:11.307263 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHxMANaV5i2_BLQoIpQAAAA8"] [Sun Jul 12 18:11:11.487763 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:11.488464 2026] [authz_core:error] [pid 940777:tid 940981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:11.494695 2026] [authz_core:error] [pid 940777:tid 940993] [client 20.244.27.100:0] AH01630: client denied by server configuration: /home4/kaiyades/public_html/marcybudwick/wp-includes/widgets/error_log, referer: binance.com [Sun Jul 12 18:11:11.623710 2026] [security2:error] [pid 960377:tid 960592] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtHhMANaV5i2_BLQoIpAAAAFQ"] [Sun Jul 12 18:11:11.624499 2026] [security2:error] [pid 960377:tid 960592] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtHhMANaV5i2_BLQoIpAAAAFQ"] [Sun Jul 12 18:11:11.625517 2026] [security2:error] [pid 960377:tid 960570] [client 65.21.113.206:53982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTB3LzIzMzI3LzB3LzE0OTMvd2Ey.asp"] [unique_id "alQtHhMANaV5i2_BLQoIowAAAD4"] [Sun Jul 12 18:11:11.655458 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:53422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/php_info.php"] [unique_id "alQtH1_56DeKknhy7sPr1AAAAVw"] [Sun Jul 12 18:11:11.808348 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtHxMANaV5i2_BLQoIqQAAADU"] [Sun Jul 12 18:11:11.835563 2026] [proxy:warn] [pid 967714:tid 967973] [client 45.205.1.223:48316] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be premiumscentingtools.airqtools.com for uri /400.shtml [Sun Jul 12 18:11:11.871237 2026] [core:error] [pid 967714:tid 967915] [client 45.205.1.223:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:11.871292 2026] [core:error] [pid 967714:tid 967915] [client 45.205.1.223:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:11.871730 2026] [security2:error] [pid 967714:tid 967915] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "premiumscentingtools.airqtools.com"] [uri "/index.php"] [unique_id "alQtH1_56DeKknhy7sPr2QAAAUY"] [Sun Jul 12 18:11:11.872569 2026] [security2:error] [pid 967714:tid 967973] [client 45.205.1.223:48316] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "premiumscentingtools.airqtools.com"] [uri "/400.shtml"] [unique_id "alQtH1_56DeKknhy7sPr1gAAAYA"] [Sun Jul 12 18:11:12.071068 2026] [security2:error] [pid 940777:tid 940946] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtH5ihQxksrpCflyFplAAAonk"] [Sun Jul 12 18:11:12.203268 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtHl_56DeKknhy7sPryQAAAYM"] [Sun Jul 12 18:11:12.328382 2026] [security2:error] [pid 940777:tid 940988] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtH5ihQxksrpCflyFpqQAAAMw"] [Sun Jul 12 18:11:12.360900 2026] [security2:error] [pid 940777:tid 941016] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtH5ihQxksrpCflyFplwAAAOg"] [Sun Jul 12 18:11:12.370005 2026] [security2:error] [pid 940777:tid 941011] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtHpihQxksrpCflyFpfQAAAOM"], referer: http://67.222.38.115/apollo/signin [Sun Jul 12 18:11:12.416864 2026] [security2:error] [pid 940777:tid 940985] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtHpihQxksrpCflyFpfwAAAMk"] [Sun Jul 12 18:11:12.428071 2026] [autoindex:error] [pid 967714:tid 967867] [client 114.10.121.230:0] AH01276: Cannot serve directory /home2/cecillin/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:11:12.447709 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:12.448246 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:12.628193 2026] [security2:error] [pid 967714:tid 967904] [client 168.100.149.112:53178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/3965/bargainor/2308_anisodactyli.jsp"] [unique_id "alQtIF_56DeKknhy7sPr5wAAATs"] [Sun Jul 12 18:11:12.696754 2026] [security2:error] [pid 960377:tid 960635] [client 223.181.96.86:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtIBMANaV5i2_BLQoIrQAAAH8"] [Sun Jul 12 18:11:12.805341 2026] [security2:error] [pid 940777:tid 941024] [client 65.21.113.206:58002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTEzOXpyLTg2NTcvMTMtMzg2OS8zOXpy"] [unique_id "alQtIJihQxksrpCflyFpuAAAAPA"] [Sun Jul 12 18:11:12.820441 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtIBMANaV5i2_BLQoIuwAAAE4"] [Sun Jul 12 18:11:12.988940 2026] [security2:error] [pid 940777:tid 940861] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/report.php.old"] [unique_id "alQtIJihQxksrpCflyFpvAAA5ko"] [Sun Jul 12 18:11:13.217911 2026] [security2:error] [pid 940777:tid 940919] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtIJihQxksrpCflyFpsAAAhy4"] [Sun Jul 12 18:11:13.282486 2026] [authz_core:error] [pid 940777:tid 940936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:13.283002 2026] [authz_core:error] [pid 940777:tid 940936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:13.283012 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtA5ihQxksrpCflyFprgAAkiI"], referer: http://67.222.40.58/dist/config.js [Sun Jul 12 18:11:13.285544 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/config.old"] [unique_id "alQtBZihQxksrpCflyFpwgAAkkE"] [Sun Jul 12 18:11:13.285707 2026] [security2:error] [pid 940777:tid 940820] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/config.old"] [unique_id "alQtBJihQxksrpCflyFpwQAAkiI"], referer: http://67.222.40.58/config.old [Sun Jul 12 18:11:13.289074 2026] [security2:error] [pid 940777:tid 940852] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/config.backup"] [unique_id "alQtBZihQxksrpCflyFpxAAAkkE"], referer: http://67.222.40.58/config.backup [Sun Jul 12 18:11:13.292549 2026] [security2:error] [pid 940777:tid 940858] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/config.backup"] [unique_id "alQtBZihQxksrpCflyFpwwAAkkc"] [Sun Jul 12 18:11:13.419392 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtA5ihQxksrpCflyFpswAAkiY"] [Sun Jul 12 18:11:13.474061 2026] [security2:error] [pid 940777:tid 940926] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtIZihQxksrpCflyFpwAAAAI4"] [Sun Jul 12 18:11:13.507068 2026] [security2:error] [pid 967714:tid 967939] [client 197.48.221.253:64031] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtIV_56DeKknhy7sPr-AAAAV4"] [Sun Jul 12 18:11:13.507407 2026] [security2:error] [pid 967714:tid 967939] [client 197.48.221.253:64031] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtIV_56DeKknhy7sPr-AAAAV4"] [Sun Jul 12 18:11:13.857199 2026] [security2:error] [pid 967714:tid 967855] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtIV_56DeKknhy7sPr8gAAAQo"] [Sun Jul 12 18:11:13.857254 2026] [security2:error] [pid 967714:tid 967855] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtIV_56DeKknhy7sPr8gAAAQo"] [Sun Jul 12 18:11:13.861005 2026] [security2:error] [pid 967714:tid 967952] [client 65.21.113.206:40528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTEzOXpyLTg2NTcvMTMtMzg2OS8zOXpy"] [unique_id "alQtIV_56DeKknhy7sPr7QAAAWs"] [Sun Jul 12 18:11:13.905948 2026] [security2:error] [pid 960377:tid 960601] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtIRMANaV5i2_BLQoIxQAAAF0"] [Sun Jul 12 18:11:13.922883 2026] [security2:error] [pid 960377:tid 960578] [client 168.100.149.71:28048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4030/bargainor/2308_birefraction.jsp"] [unique_id "alQtIRMANaV5i2_BLQoIywAAAEY"] [Sun Jul 12 18:11:14.063507 2026] [authz_core:error] [pid 967714:tid 967962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:14.064045 2026] [authz_core:error] [pid 967714:tid 967962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:14.082582 2026] [security2:error] [pid 960377:tid 960531] [client 20.210.108.71:52897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-exception.php"] [unique_id "alQtIhMANaV5i2_BLQoIzQAAABc"], referer: binance.com [Sun Jul 12 18:11:14.105594 2026] [security2:error] [pid 967714:tid 967923] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/private/settings.php"] [unique_id "alQtIl_56DeKknhy7sPsFAAAAU4"] [Sun Jul 12 18:11:14.412588 2026] [security2:error] [pid 940777:tid 940970] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtIZihQxksrpCflyFpyQAAum0"] [Sun Jul 12 18:11:14.455521 2026] [security2:error] [pid 960377:tid 960554] [client 62.171.167.118:53396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test2.php"] [unique_id "alQtIhMANaV5i2_BLQoI1QAAAC4"] [Sun Jul 12 18:11:14.647678 2026] [security2:error] [pid 940777:tid 940922] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtIpihQxksrpCflyFp1wAAAIo"] [Sun Jul 12 18:11:14.661171 2026] [security2:error] [pid 967714:tid 967862] [client 62.171.167.118:38774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test1.php"] [unique_id "alQtIl_56DeKknhy7sPsHAAAARE"] [Sun Jul 12 18:11:14.936808 2026] [authz_core:error] [pid 960377:tid 960573] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:14.937323 2026] [authz_core:error] [pid 960377:tid 960573] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:15.164204 2026] [security2:error] [pid 940777:tid 940979] [client 107.10.157.77:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtIpihQxksrpCflyFp3wAAAMM"], referer: https://smellytele.com/category/online-lessons/jazz-lessons/ [Sun Jul 12 18:11:15.190490 2026] [proxy:warn] [pid 960377:tid 960632] [client 45.205.1.223:48326] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be premiumscentingtools.airqtools.com for uri /400.shtml [Sun Jul 12 18:11:15.193928 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtIF_56DeKknhy7sPr5QAAAR0"], referer: http://67.222.38.115/app/kibana [Sun Jul 12 18:11:15.208946 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtIhMANaV5i2_BLQoI3AAAAEg"] [Sun Jul 12 18:11:15.226984 2026] [core:error] [pid 960377:tid 960550] [client 45.205.1.223:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:15.227039 2026] [core:error] [pid 960377:tid 960550] [client 45.205.1.223:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:15.227478 2026] [security2:error] [pid 960377:tid 960550] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "premiumscentingtools.airqtools.com"] [uri "/index.php"] [unique_id "alQtIxMANaV5i2_BLQoI4AAAACo"] [Sun Jul 12 18:11:15.229513 2026] [security2:error] [pid 960377:tid 960632] [client 45.205.1.223:48326] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "premiumscentingtools.airqtools.com"] [uri "/400.shtml"] [unique_id "alQtIxMANaV5i2_BLQoI3wAAAHw"] [Sun Jul 12 18:11:15.247116 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtIBMANaV5i2_BLQoIuAAAAAU"] [Sun Jul 12 18:11:15.254238 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtIBMANaV5i2_BLQoIuQAAACU"], referer: http://67.222.38.115/app/rest/agents [Sun Jul 12 18:11:15.368036 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtBpihQxksrpCflyFpxQAAkiI"] [Sun Jul 12 18:11:15.377341 2026] [security2:error] [pid 960377:tid 960558] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtIBMANaV5i2_BLQoIugAAADI"], referer: http://67.222.38.115/app/rest/builds [Sun Jul 12 18:11:15.381898 2026] [security2:error] [pid 940777:tid 940844] [remote 185.177.72.12:52138] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/help/.env"] [unique_id "alQtI5ihQxksrpCflyFp7wAAiTk"] [Sun Jul 12 18:11:15.392699 2026] [security2:error] [pid 960377:tid 960590] [client 152.232.80.168:60072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/web/.env"] [unique_id "alQtIxMANaV5i2_BLQoI4wAAAFI"] [Sun Jul 12 18:11:15.396955 2026] [security2:error] [pid 940777:tid 940930] [client 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtBpihQxksrpCflyFpxwAAkkc"], referer: http://67.222.40.58/src/config/aws.js [Sun Jul 12 18:11:15.434847 2026] [cgid:error] [pid 960377:tid 960560] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:15.434925 2026] [security2:error] [pid 960377:tid 960574] [client 94.187.171.125:65212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtIxMANaV5i2_BLQoI5QAAAEI"] [Sun Jul 12 18:11:15.435212 2026] [security2:error] [pid 960377:tid 960574] [client 94.187.171.125:65212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtIxMANaV5i2_BLQoI5QAAAEI"] [Sun Jul 12 18:11:15.486403 2026] [security2:error] [pid 967714:tid 967893] [client 20.244.27.100:51744] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "alQtI1_56DeKknhy7sPsPQAAATA"], referer: binance.com [Sun Jul 12 18:11:15.493966 2026] [cgid:error] [pid 940777:tid 940937] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:15.686469 2026] [security2:error] [pid 940777:tid 940951] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtIpihQxksrpCflyFp3AAApzM"] [Sun Jul 12 18:11:15.788366 2026] [security2:error] [pid 967714:tid 967954] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsPwAAAW0"] [Sun Jul 12 18:11:15.870273 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:15.870811 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:16.169024 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtIV_56DeKknhy7sPr8QAAAWc"] [Sun Jul 12 18:11:16.226838 2026] [security2:error] [pid 967714:tid 967900] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTF1LTM2NDY5LTF1MHN3LTg1NDgtdTBz.cgi"] [unique_id "alQtJF_56DeKknhy7sPsTQAAATc"] [Sun Jul 12 18:11:16.369517 2026] [security2:error] [pid 967714:tid 967834] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.ssh/private.crt.bak"] [unique_id "alQtJF_56DeKknhy7sPsTgABRGw"] [Sun Jul 12 18:11:16.459613 2026] [security2:error] [pid 940777:tid 941013] [client 74.7.175.158:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "yourfriendscametoseeme.thepinkbridge.com"] [uri "/index.php"] [unique_id "alQtIJihQxksrpCflyFpuwAAAOU"] [Sun Jul 12 18:11:16.461247 2026] [security2:error] [pid 960377:tid 960621] [client 74.7.175.158:44626] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "yourfriendscametoseeme.thepinkbridge.com"] [uri "/robots.txt"] [unique_id "alQtIBMANaV5i2_BLQoIvgAAcRw"] [Sun Jul 12 18:11:16.528870 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsLwAAATM"] [Sun Jul 12 18:11:16.568477 2026] [security2:error] [pid 960377:tid 960584] [client 168.100.149.18:56542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4095/bargainor/2308_mediator.jsp"] [unique_id "alQtJBMANaV5i2_BLQoJAwAAAEw"] [Sun Jul 12 18:11:16.570946 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/test/config.php"] [unique_id "alQtJBMANaV5i2_BLQoJBAAAADg"] [Sun Jul 12 18:11:16.705776 2026] [authz_core:error] [pid 967714:tid 967906] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:16.706474 2026] [authz_core:error] [pid 967714:tid 967906] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:16.752951 2026] [security2:error] [pid 967714:tid 967835] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/public/uploads/.env"] [unique_id "alQtJF_56DeKknhy7sPsVgABZm0"] [Sun Jul 12 18:11:16.905041 2026] [security2:error] [pid 940777:tid 940944] [client 185.177.72.52:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtI5ihQxksrpCflyFp-wAAoEY"] [Sun Jul 12 18:11:17.096889 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtIV_56DeKknhy7sPr9QAAAVU"], referer: http://67.222.40.58/.env.production [Sun Jul 12 18:11:17.123077 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtIxMANaV5i2_BLQoI5wAAAFU"], referer: http://67.222.38.115/app/rest/buildTypes [Sun Jul 12 18:11:17.138654 2026] [security2:error] [pid 967714:tid 967870] [client 57.141.18.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsPAAAARk"] [Sun Jul 12 18:11:17.246110 2026] [access_compat:error] [pid 960377:tid 960587] [client 62.171.167.118:0] AH01797: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/wc-logs/, referer: http://67.222.40.58/wp-content/uploads/ [Sun Jul 12 18:11:17.301751 2026] [security2:error] [pid 967714:tid 967923] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJF_56DeKknhy7sPsWwAAAU4"] [Sun Jul 12 18:11:17.397071 2026] [access_compat:error] [pid 960377:tid 960587] [client 62.171.167.118:0] AH01797: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/woocommerce_uploads/, referer: http://67.222.40.58/wp-content/uploads/ [Sun Jul 12 18:11:17.457164 2026] [security2:error] [pid 967714:tid 967964] [client 14.169.142.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQtIV_56DeKknhy7sPr_gAAAXc"] [Sun Jul 12 18:11:17.470269 2026] [authz_core:error] [pid 960377:tid 960587] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/wpcf7_uploads/, referer: http://67.222.40.58/wp-content/uploads/ [Sun Jul 12 18:11:17.471007 2026] [authz_core:error] [pid 960377:tid 960587] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/error_log, referer: http://67.222.40.58/wp-content/uploads/ [Sun Jul 12 18:11:17.571894 2026] [access_compat:error] [pid 967714:tid 967888] [client 62.171.167.118:0] AH01797: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/wc-logs/ [Sun Jul 12 18:11:17.573399 2026] [authz_core:error] [pid 967714:tid 967969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:17.574087 2026] [authz_core:error] [pid 967714:tid 967969] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:17.611784 2026] [security2:error] [pid 967714:tid 967968] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtJF_56DeKknhy7sPsVQAAAXs"] [Sun Jul 12 18:11:17.611845 2026] [security2:error] [pid 967714:tid 967968] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtJF_56DeKknhy7sPsVQAAAXs"] [Sun Jul 12 18:11:17.618685 2026] [security2:error] [pid 967714:tid 967963] [client 65.21.113.206:40536] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTF1LTM2NDY5LTF1MHN3LTg1NDgtdTBz.cgi"] [unique_id "alQtJF_56DeKknhy7sPsVAAAAXY"] [Sun Jul 12 18:11:17.717900 2026] [access_compat:error] [pid 967714:tid 967888] [client 62.171.167.118:0] AH01797: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/woocommerce_uploads/ [Sun Jul 12 18:11:17.752236 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:38794] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.bak"] [unique_id "alQtJRMANaV5i2_BLQoJGgAAACU"] [Sun Jul 12 18:11:17.768399 2026] [authz_core:error] [pid 967714:tid 967888] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/wpcf7_uploads/ [Sun Jul 12 18:11:17.781540 2026] [authz_core:error] [pid 967714:tid 967888] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/wp-content/uploads/error_log [Sun Jul 12 18:11:17.921521 2026] [security2:error] [pid 967714:tid 967874] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJV_56DeKknhy7sPsbAAAAR0"] [Sun Jul 12 18:11:18.265074 2026] [security2:error] [pid 967714:tid 967843] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ftpmaster/.env"] [unique_id "alQtJl_56DeKknhy7sPscgABUXU"] [Sun Jul 12 18:11:18.380437 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtJRMANaV5i2_BLQoJFwAAOSY"] [Sun Jul 12 18:11:18.436197 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:18.436731 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:18.603496 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.bak"] [unique_id "alQtJl_56DeKknhy7sPseQABSHk"] [Sun Jul 12 18:11:18.605375 2026] [security2:error] [pid 960377:tid 960529] [client 168.100.149.85:42362] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4160/bargainor/2308_gurian.jsp"] [unique_id "alQtJhMANaV5i2_BLQoJIgAAABU"] [Sun Jul 12 18:11:18.680228 2026] [security2:error] [pid 960377:tid 960570] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJhMANaV5i2_BLQoJIQAAAD4"] [Sun Jul 12 18:11:18.876657 2026] [security2:error] [pid 967714:tid 967951] [client 24.203.79.110:64254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtJl_56DeKknhy7sPsgAAAAWo"] [Sun Jul 12 18:11:18.876905 2026] [security2:error] [pid 967714:tid 967951] [client 24.203.79.110:64254] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtJl_56DeKknhy7sPsgAAAAWo"] [Sun Jul 12 18:11:19.122603 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:38788] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.save"] [unique_id "alQtJ1_56DeKknhy7sPshQAAATQ"] [Sun Jul 12 18:11:19.146107 2026] [security2:error] [pid 960377:tid 960517] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJhMANaV5i2_BLQoJJQAAAAk"] [Sun Jul 12 18:11:19.156500 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.save"] [unique_id "alQtJ1_56DeKknhy7sPshgABSH4"] [Sun Jul 12 18:11:19.189431 2026] [security2:error] [pid 967714:tid 967942] [client 62.171.167.118:38816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/app.php"] [unique_id "alQtJ1_56DeKknhy7sPshwAAAWE"] [Sun Jul 12 18:11:19.253522 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJBMANaV5i2_BLQoJBQAAAEs"] [Sun Jul 12 18:11:19.256736 2026] [cgid:error] [pid 967714:tid 967901] [client 202.46.62.35:11832] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/finder-window-clings-stock-p-863.html?osCsid=ofsggsietvl087p7o3pchbpoo2 [Sun Jul 12 18:11:19.264332 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:19.264918 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:19.278336 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJRMANaV5i2_BLQoJEQAAAGc"] [Sun Jul 12 18:11:19.312220 2026] [security2:error] [pid 967714:tid 967938] [client 114.10.121.230:2888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.121.10.114.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bhcfe.org"] [uri "/wp-login.php"] [unique_id "alQtJ1_56DeKknhy7sPsjAAAAV0"] [Sun Jul 12 18:11:19.375501 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/app.php"] [unique_id "alQtJ1_56DeKknhy7sPskwABSAA"] [Sun Jul 12 18:11:19.664551 2026] [security2:error] [pid 960377:tid 960634] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtJhMANaV5i2_BLQoJJAAAfns"] [Sun Jul 12 18:11:19.706499 2026] [security2:error] [pid 967714:tid 967860] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTF1LTM2NDY5LTF1MHN3LTk2NTAtdTBz.cgi"] [unique_id "alQtJ1_56DeKknhy7sPspgAAAQ8"] [Sun Jul 12 18:11:19.709174 2026] [security2:error] [pid 967714:tid 967929] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPslwAAAVQ"] [Sun Jul 12 18:11:19.786374 2026] [security2:error] [pid 960377:tid 960635] [client 125.167.21.72:61740] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtJxMANaV5i2_BLQoJNwAAAH8"] [Sun Jul 12 18:11:19.786701 2026] [security2:error] [pid 960377:tid 960635] [client 125.167.21.72:61740] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtJxMANaV5i2_BLQoJNwAAAH8"] [Sun Jul 12 18:11:19.827138 2026] [security2:error] [pid 960377:tid 960432] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/private/.env"] [unique_id "alQtJxMANaV5i2_BLQoJOAAAWTU"] [Sun Jul 12 18:11:19.932358 2026] [security2:error] [pid 967714:tid 967884] [client 168.100.149.56:31608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4225/bargainor/2308_monkey.jsp"] [unique_id "alQtJ1_56DeKknhy7sPssQAAASc"] [Sun Jul 12 18:11:19.990613 2026] [security2:error] [pid 960377:tid 960392] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/backup/.env"] [unique_id "alQtJxMANaV5i2_BLQoJOQAAbw4"] [Sun Jul 12 18:11:20.093873 2026] [security2:error] [pid 967714:tid 967955] [client 31.171.136.89:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPsmQAAAW4"] [Sun Jul 12 18:11:20.130789 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:20.131470 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:20.156814 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/test/.env"] [unique_id "alQtKBMANaV5i2_BLQoJPgAAcXE"] [Sun Jul 12 18:11:20.234484 2026] [security2:error] [pid 967714:tid 967919] [client 103.59.161.168:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "gnsai.com"] [uri "/index.php"] [unique_id "alQtIl_56DeKknhy7sPsEwAAAUo"] [Sun Jul 12 18:11:20.295581 2026] [proxy:error] [pid 967714:tid 967922] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:20.295849 2026] [proxy_http:error] [pid 967714:tid 967922] [client 74.7.244.61:34490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:20.298898 2026] [proxy:error] [pid 967714:tid 967922] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:20.299147 2026] [proxy_http:error] [pid 967714:tid 967922] [client 74.7.244.61:34490] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:20.299462 2026] [security2:error] [pid 967714:tid 967922] [client 74.7.244.61:34490] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcalendars.irataucoaching.com"] [uri "/___proxy_subdomain_cpcalendars/cgi-sys/503.html"] [unique_id "alQtKF_56DeKknhy7sPsvAAAAU0"] [Sun Jul 12 18:11:20.323688 2026] [security2:error] [pid 967714:tid 967880] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPssAAAASM"] [Sun Jul 12 18:11:20.327093 2026] [security2:error] [pid 960377:tid 960497] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dev/.env"] [unique_id "alQtKBMANaV5i2_BLQoJQgAAd3Y"] [Sun Jul 12 18:11:20.368078 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/.config/mail.php"] [unique_id "alQtKF_56DeKknhy7sPsvgABSBI"] [Sun Jul 12 18:11:20.427441 2026] [security2:error] [pid 967714:tid 967921] [client 20.210.108.71:64669] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-http.php"] [unique_id "alQtKF_56DeKknhy7sPswQAAAUw"], referer: binance.com [Sun Jul 12 18:11:20.486313 2026] [security2:error] [pid 960377:tid 960471] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/staging/.env"] [unique_id "alQtKBMANaV5i2_BLQoJRwAAMVw"] [Sun Jul 12 18:11:20.488208 2026] [security2:error] [pid 960377:tid 960511] [client 62.171.167.118:38810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/.config/mail.php"] [unique_id "alQtKBMANaV5i2_BLQoJSAAAAAM"] [Sun Jul 12 18:11:20.650420 2026] [security2:error] [pid 960377:tid 960487] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/production/.env"] [unique_id "alQtKBMANaV5i2_BLQoJTAAALmw"] [Sun Jul 12 18:11:20.683474 2026] [proxy:error] [pid 960377:tid 960527] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:20.683993 2026] [proxy_http:error] [pid 960377:tid 960527] [client 74.7.244.61:54980] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:20.686800 2026] [proxy:error] [pid 960377:tid 960527] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:20.687049 2026] [proxy_http:error] [pid 960377:tid 960527] [client 74.7.244.61:54980] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:20.687413 2026] [security2:error] [pid 960377:tid 960527] [client 74.7.244.61:54980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcalendars.irataucoaching.com"] [uri "/___proxy_subdomain_cpcalendars/cgi-sys/503.html"] [unique_id "alQtKBMANaV5i2_BLQoJTQAAABM"] [Sun Jul 12 18:11:20.779832 2026] [security2:error] [pid 967714:tid 967966] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKF_56DeKknhy7sPsyQAAAXk"] [Sun Jul 12 18:11:20.811070 2026] [security2:error] [pid 960377:tid 960499] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/laravel/.env"] [unique_id "alQtKBMANaV5i2_BLQoJTwAAXHg"] [Sun Jul 12 18:11:20.962999 2026] [security2:error] [pid 960377:tid 960548] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtKBMANaV5i2_BLQoJQQAAACg"] [Sun Jul 12 18:11:20.963075 2026] [security2:error] [pid 960377:tid 960548] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtKBMANaV5i2_BLQoJQQAAACg"] [Sun Jul 12 18:11:20.964636 2026] [security2:error] [pid 967714:tid 967877] [client 65.21.113.206:40548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTF1LTM2NDY5LTF1MHN3LTk2NTAtdTBz.cgi"] [unique_id "alQtKF_56DeKknhy7sPsugAAASA"] [Sun Jul 12 18:11:21.006156 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:21.006748 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:21.213686 2026] [security2:error] [pid 940777:tid 941033] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI5ihQxksrpCflyFp8wAAAPk"] [Sun Jul 12 18:11:21.221873 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJRMANaV5i2_BLQoJEgAAAC8"], referer: http://67.222.38.115/app/rest/projects [Sun Jul 12 18:11:21.253883 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsOwAAAUA"] [Sun Jul 12 18:11:21.415359 2026] [security2:error] [pid 960377:tid 960602] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKBMANaV5i2_BLQoJUgAAAF4"] [Sun Jul 12 18:11:21.493052 2026] [security2:error] [pid 960377:tid 960626] [client 96.61.206.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQtKBMANaV5i2_BLQoJSwAAAHY"], referer: https://www.youtube.com/ [Sun Jul 12 18:11:21.861445 2026] [security2:error] [pid 960377:tid 960629] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKRMANaV5i2_BLQoJWgAAAHk"] [Sun Jul 12 18:11:21.887023 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:21.887658 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:22.051429 2026] [security2:error] [pid 967714:tid 967947] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/includes/settings.php"] [unique_id "alQtKl_56DeKknhy7sPs9gAAAWY"] [Sun Jul 12 18:11:22.091234 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJRMANaV5i2_BLQoJEwAAABY"], referer: http://67.222.38.115/app/rest/server [Sun Jul 12 18:11:22.121888 2026] [security2:error] [pid 940777:tid 940967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI5ihQxksrpCflyFp9QAAALc"], referer: http://67.222.40.58/.env.development [Sun Jul 12 18:11:22.213933 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsOgAAATo"], referer: http://67.222.40.58/.env.staging [Sun Jul 12 18:11:22.376296 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtKRMANaV5i2_BLQoJUwAAQW0"] [Sun Jul 12 18:11:22.503818 2026] [security2:error] [pid 960377:tid 960517] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKhMANaV5i2_BLQoJYAAAAAk"] [Sun Jul 12 18:11:22.572048 2026] [security2:error] [pid 960377:tid 960536] [client 168.100.149.3:26314] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4290/bargainor/2308_impeccance.jsp"] [unique_id "alQtKhMANaV5i2_BLQoJZwAAABw"] [Sun Jul 12 18:11:22.648796 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:22.649284 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:22.878610 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKhMANaV5i2_BLQoJaQAAAHM"] [Sun Jul 12 18:11:22.908475 2026] [cgid:error] [pid 967714:tid 967968] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:22.999958 2026] [security2:error] [pid 967714:tid 967857] [client 82.102.18.116:47160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQtKl_56DeKknhy7sPtCAAAAQw"] [Sun Jul 12 18:11:23.011801 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env.old"] [unique_id "alQtK1_56DeKknhy7sPtCQABSDU"] [Sun Jul 12 18:11:23.071589 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.env.old"] [unique_id "alQtK1_56DeKknhy7sPtDgABSDg"], referer: http://67.222.40.58/.env.old [Sun Jul 12 18:11:23.161023 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtJF_56DeKknhy7sPsTAAAAXA"] [Sun Jul 12 18:11:23.177884 2026] [security2:error] [pid 940777:tid 941035] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI5ihQxksrpCflyFp9gAAAPs"] [Sun Jul 12 18:11:23.202818 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtI1_56DeKknhy7sPsOQAAATY"], referer: http://67.222.40.58/.env.local [Sun Jul 12 18:11:23.292762 2026] [cgid:error] [pid 967714:tid 967920] [client 152.232.80.168:49857] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.314136 2026] [cgid:error] [pid 967714:tid 967960] [client 152.232.80.168:50129] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.328864 2026] [security2:error] [pid 967714:tid 967883] [client 82.102.18.116:47170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 116.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "freejobsearchchecklist.com"] [uri "/xmlrpc.php"] [unique_id "alQtK1_56DeKknhy7sPtGQAAASY"] [Sun Jul 12 18:11:23.342424 2026] [cgid:error] [pid 967714:tid 967922] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.359867 2026] [security2:error] [pid 960377:tid 960561] [client 152.232.80.168:50118] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/.env.old"] [unique_id "alQtKxMANaV5i2_BLQoJdQAAADU"] [Sun Jul 12 18:11:23.361398 2026] [security2:error] [pid 960377:tid 960603] [client 152.232.80.168:51798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/app/config/mail.php"] [unique_id "alQtKxMANaV5i2_BLQoJdAAAAF8"] [Sun Jul 12 18:11:23.378921 2026] [cgid:error] [pid 967714:tid 967933] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.394723 2026] [cgid:error] [pid 960377:tid 960576] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.410988 2026] [cgid:error] [pid 967714:tid 967978] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.414911 2026] [cgid:error] [pid 967714:tid 967892] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.431683 2026] [security2:error] [pid 960377:tid 960635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKxMANaV5i2_BLQoJawAAAH8"] [Sun Jul 12 18:11:23.443727 2026] [authz_core:error] [pid 967714:tid 967902] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:23.502263 2026] [cgid:error] [pid 960377:tid 960601] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:23.507871 2026] [authz_core:error] [pid 967714:tid 967902] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:23.580695 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtKhMANaV5i2_BLQoJZgAAeA0"] [Sun Jul 12 18:11:23.613031 2026] [security2:error] [pid 967714:tid 967870] [client 82.102.18.116:47180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQtK1_56DeKknhy7sPtMQAAARk"] [Sun Jul 12 18:11:23.863846 2026] [security2:error] [pid 960377:tid 960600] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtKxMANaV5i2_BLQoJegAAAFw"] [Sun Jul 12 18:11:23.901213 2026] [security2:error] [pid 960377:tid 960566] [client 82.102.18.116:47186] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQtKxMANaV5i2_BLQoJfwAAADo"] [Sun Jul 12 18:11:23.906975 2026] [security2:error] [pid 967714:tid 967905] [client 197.48.221.253:64623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtK1_56DeKknhy7sPtOgAAATw"] [Sun Jul 12 18:11:23.945652 2026] [security2:error] [pid 967714:tid 967905] [client 197.48.221.253:64623] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtK1_56DeKknhy7sPtOgAAATw"] [Sun Jul 12 18:11:24.204013 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtJF_56DeKknhy7sPsXAABSG8"] [Sun Jul 12 18:11:24.250289 2026] [security2:error] [pid 960377:tid 960520] [client 82.102.18.116:47200] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQtLBMANaV5i2_BLQoJiAAAAAw"] [Sun Jul 12 18:11:24.253469 2026] [security2:error] [pid 967714:tid 967877] [client 152.232.80.168:50129] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/core/.env"] [unique_id "alQtLF_56DeKknhy7sPtRQAAASA"] [Sun Jul 12 18:11:24.320107 2026] [cgid:error] [pid 960377:tid 960550] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:24.367335 2026] [cgid:error] [pid 960377:tid 960565] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:24.376418 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:24.376937 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:24.412449 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLF_56DeKknhy7sPtPgAAAWI"] [Sun Jul 12 18:11:24.506041 2026] [security2:error] [pid 967714:tid 967962] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTF1bGZkLTQzMDMvMXUtMTg3NjUvdWxmZA=="] [unique_id "alQtLF_56DeKknhy7sPtTQAAAXU"] [Sun Jul 12 18:11:24.532983 2026] [security2:error] [pid 967714:tid 967895] [client 82.102.18.116:47210] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQtLF_56DeKknhy7sPtTgAAATI"] [Sun Jul 12 18:11:24.655389 2026] [security2:error] [pid 967714:tid 967939] [client 168.100.149.104:26716] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4355/bargainor/2308_gunz.jsp"] [unique_id "alQtLF_56DeKknhy7sPtUwAAAV4"] [Sun Jul 12 18:11:24.675706 2026] [security2:error] [pid 960377:tid 960570] [client 114.119.150.5:52473] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "yesbossclothing.com"] [uri "/product-category/men/page/2"] [unique_id "alQtLBMANaV5i2_BLQoJmAAAAD4"], referer: https://yesbossclothing.com/product-category/men/page/2 [Sun Jul 12 18:11:24.819306 2026] [security2:error] [pid 960377:tid 960516] [client 82.102.18.116:47222] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "alQtLBMANaV5i2_BLQoJmwAAAAg"] [Sun Jul 12 18:11:24.843084 2026] [security2:error] [pid 967714:tid 967907] [client 57.141.18.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtOwAAAT4"] [Sun Jul 12 18:11:24.848552 2026] [security2:error] [pid 960377:tid 960609] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtKxMANaV5i2_BLQoJfgAAZXU"] [Sun Jul 12 18:11:24.880749 2026] [security2:error] [pid 967714:tid 967884] [client 152.232.80.168:51659] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/config/.env"] [unique_id "alQtLF_56DeKknhy7sPtVwAAASc"] [Sun Jul 12 18:11:24.933616 2026] [security2:error] [pid 967714:tid 967957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLF_56DeKknhy7sPtUgAAAXA"] [Sun Jul 12 18:11:24.938106 2026] [security2:error] [pid 960377:tid 960621] [client 152.232.80.168:53459] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.238.10"] [uri "/wp-config.php.old"] [unique_id "alQtLBMANaV5i2_BLQoJoAAAAHE"] [Sun Jul 12 18:11:24.963246 2026] [security2:error] [pid 967714:tid 967935] [client 152.232.80.168:53429] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/src/.env"] [unique_id "alQtLF_56DeKknhy7sPtXgAAAVo"] [Sun Jul 12 18:11:25.107334 2026] [security2:error] [pid 967714:tid 967862] [client 152.232.80.168:52618] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/config/.env"] [unique_id "alQtLV_56DeKknhy7sPtZQAAARE"] [Sun Jul 12 18:11:25.148251 2026] [security2:error] [pid 967714:tid 967971] [client 82.102.18.116:47224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQtLV_56DeKknhy7sPtawAAAX4"] [Sun Jul 12 18:11:25.197275 2026] [authz_core:error] [pid 967714:tid 967918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:25.197970 2026] [authz_core:error] [pid 967714:tid 967918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:25.213601 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPsiQAAARc"] [Sun Jul 12 18:11:25.233850 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPsjwAAARU"] [Sun Jul 12 18:11:25.310509 2026] [cgid:error] [pid 967714:tid 967955] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:25.449439 2026] [security2:error] [pid 960377:tid 960584] [client 82.102.18.116:47238] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "alQtLRMANaV5i2_BLQoJrgAAAEw"] [Sun Jul 12 18:11:25.532948 2026] [security2:error] [pid 967714:tid 967944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLV_56DeKknhy7sPtbwAAAWM"] [Sun Jul 12 18:11:25.725123 2026] [security2:error] [pid 960377:tid 960539] [client 20.210.108.71:53405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-navigation-fallback.php"] [unique_id "alQtLRMANaV5i2_BLQoJsAAAAB8"], referer: binance.com [Sun Jul 12 18:11:25.744611 2026] [security2:error] [pid 960377:tid 960511] [client 82.102.18.116:47240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "alQtLRMANaV5i2_BLQoJsgAAAAM"] [Sun Jul 12 18:11:25.870539 2026] [security2:error] [pid 967714:tid 967860] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtLV_56DeKknhy7sPtYwAAAQ8"] [Sun Jul 12 18:11:25.870592 2026] [security2:error] [pid 967714:tid 967860] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtLV_56DeKknhy7sPtYwAAAQ8"] [Sun Jul 12 18:11:25.872283 2026] [security2:error] [pid 967714:tid 967960] [client 65.21.113.206:48188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTF1bGZkLTQzMDMvMXUtMTg3NjUvdWxmZA=="] [unique_id "alQtLF_56DeKknhy7sPtYAAAAXM"] [Sun Jul 12 18:11:25.972774 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLRMANaV5i2_BLQoJsQAAACQ"] [Sun Jul 12 18:11:26.029381 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:26.030090 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:26.041097 2026] [security2:error] [pid 967714:tid 967971] [client 82.102.18.116:47242] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQtLl_56DeKknhy7sPthAAAAX4"] [Sun Jul 12 18:11:26.090265 2026] [security2:error] [pid 960377:tid 960628] [client 94.187.171.125:49312] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtLhMANaV5i2_BLQoJtwAAAHg"] [Sun Jul 12 18:11:26.090598 2026] [security2:error] [pid 960377:tid 960628] [client 94.187.171.125:49312] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtLhMANaV5i2_BLQoJtwAAAHg"] [Sun Jul 12 18:11:26.146299 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPsjgAAAVU"], referer: http://67.222.38.115/app/rest/users [Sun Jul 12 18:11:26.179043 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtLRMANaV5i2_BLQoJogAAc1U"] [Sun Jul 12 18:11:26.245488 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPsjQAAASU"], referer: http://67.222.38.115/app/setup-wizard [Sun Jul 12 18:11:26.341340 2026] [security2:error] [pid 967714:tid 967918] [client 82.102.18.116:47258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQtLl_56DeKknhy7sPtiwAAAUk"] [Sun Jul 12 18:11:26.511136 2026] [security2:error] [pid 967714:tid 967955] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLl_56DeKknhy7sPtiQAAAW4"] [Sun Jul 12 18:11:26.608052 2026] [security2:error] [pid 967714:tid 967915] [client 168.100.149.75:34904] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4420/bargainor/2308_monadically.jsp"] [unique_id "alQtLl_56DeKknhy7sPtmgAAAUY"] [Sun Jul 12 18:11:26.632818 2026] [security2:error] [pid 967714:tid 967908] [client 82.102.18.116:47262] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQtLl_56DeKknhy7sPtnAAAAT8"] [Sun Jul 12 18:11:26.681261 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.gitlab-ci/.env"] [unique_id "alQtLl_56DeKknhy7sPtnQABSE8"], referer: http://67.222.40.58/.gitlab-ci/.env [Sun Jul 12 18:11:26.872167 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:26.872678 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:26.915968 2026] [security2:error] [pid 960377:tid 960606] [client 82.102.18.116:47278] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "freejobsearchchecklist.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "alQtLhMANaV5i2_BLQoJvQAAAGI"] [Sun Jul 12 18:11:27.129646 2026] [security2:error] [pid 967714:tid 967883] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtLl_56DeKknhy7sPtqAAAASY"] [Sun Jul 12 18:11:27.189960 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPskAAAASg"], referer: http://67.222.38.115/app/rest/vcs-roots [Sun Jul 12 18:11:27.257091 2026] [security2:error] [pid 967714:tid 967965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtJ1_56DeKknhy7sPskQAAAXg"] [Sun Jul 12 18:11:27.313154 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtLhMANaV5i2_BLQoJuQAAWAQ"] [Sun Jul 12 18:11:27.319053 2026] [security2:error] [pid 960377:tid 960542] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtKRMANaV5i2_BLQoJWAAAACI"] [Sun Jul 12 18:11:27.417961 2026] [security2:error] [pid 960377:tid 960401] [remote 62.171.167.118:37444] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtEBMANaV5i2_BLQoJXgAAdBc"] [Sun Jul 12 18:11:27.560427 2026] [security2:error] [pid 967714:tid 967899] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtL1_56DeKknhy7sPtswAAATY"] [Sun Jul 12 18:11:27.622224 2026] [security2:error] [pid 967714:tid 967949] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTFfMzEzMjdfMWMzYS9jXzQ5OF8zYXA=.html"] [unique_id "alQtL1_56DeKknhy7sPtvwAAAWg"] [Sun Jul 12 18:11:27.629694 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/.gitlab-ci/.env"] [unique_id "alQtL1_56DeKknhy7sPtwAABSF0"] [Sun Jul 12 18:11:27.640845 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:27.641402 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:27.730727 2026] [security2:error] [pid 967714:tid 967822] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/restaurant-app/server/.env"] [unique_id "alQtL1_56DeKknhy7sPtxQABiGA"] [Sun Jul 12 18:11:27.792609 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/API/.env.bak"] [unique_id "alQtL1_56DeKknhy7sPtzAABSGM"] [Sun Jul 12 18:11:27.795239 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Helmetjs/.env"] [unique_id "alQtL1_56DeKknhy7sPtzQABSGU"] [Sun Jul 12 18:11:27.835312 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Imagebord/.env"] [unique_id "alQtL1_56DeKknhy7sPtzgABSGY"] [Sun Jul 12 18:11:27.920652 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/API/.env.bak"] [unique_id "alQtL1_56DeKknhy7sPt2AABSGk"], referer: http://67.222.40.58/API/.env.bak [Sun Jul 12 18:11:28.037222 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Helmetjs/.env"] [unique_id "alQtMF_56DeKknhy7sPt2gABSGg"], referer: http://67.222.40.58/Helmetjs/.env [Sun Jul 12 18:11:28.050054 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Imagebord/.env"] [unique_id "alQtMF_56DeKknhy7sPt2wABSGI"], referer: http://67.222.40.58/Imagebord/.env [Sun Jul 12 18:11:28.193748 2026] [security2:error] [pid 967714:tid 967895] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtL1_56DeKknhy7sPt2QAAATI"] [Sun Jul 12 18:11:28.508356 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJ0AAAUXQ"] [Sun Jul 12 18:11:28.544263 2026] [authz_core:error] [pid 967714:tid 967913] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:28.545155 2026] [authz_core:error] [pid 967714:tid 967913] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:28.563008 2026] [security2:error] [pid 960377:tid 960520] [client 168.100.149.49:17066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4485/bargainor/2308_enhalo.jsp"] [unique_id "alQtMBMANaV5i2_BLQoJ6QAAAAw"] [Sun Jul 12 18:11:28.626374 2026] [fcgid:warn] [pid 960377:tid 960544] (70014)End of file found: [client 18.218.118.203:18076] mod_fcgid: can't get data from http client [Sun Jul 12 18:11:28.664688 2026] [security2:error] [pid 967714:tid 967931] [client 149.28.225.231:62856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ellethehandycat.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtMF_56DeKknhy7sPt7QAAAVY"] [Sun Jul 12 18:11:28.667235 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/InstantCV/server/.env"] [unique_id "alQtMF_56DeKknhy7sPt7gABSG4"] [Sun Jul 12 18:11:28.668088 2026] [security2:error] [pid 960377:tid 960623] [client 82.102.18.188:54542] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQtMBMANaV5i2_BLQoJ7gAAAHM"] [Sun Jul 12 18:11:28.696976 2026] [fcgid:warn] [pid 960377:tid 960614] (70014)End of file found: [client 66.132.172.207:8714] mod_fcgid: can't get data from http client [Sun Jul 12 18:11:28.700470 2026] [security2:error] [pid 967714:tid 967907] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMF_56DeKknhy7sPt6QAAAT4"] [Sun Jul 12 18:11:28.736694 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/InstantCV/server/.env"] [unique_id "alQtMF_56DeKknhy7sPt7wABSEU"], referer: http://67.222.40.58/InstantCV/server/.env [Sun Jul 12 18:11:28.742250 2026] [security2:error] [pid 960377:tid 960548] [client 57.141.18.65:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtMBMANaV5i2_BLQoJ5AAAACg"] [Sun Jul 12 18:11:28.847852 2026] [cgid:error] [pid 967714:tid 967881] [client 152.232.80.168:50129] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:28.872267 2026] [security2:error] [pid 967714:tid 967838] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/:8080/.env"] [unique_id "alQtMF_56DeKknhy7sPt8wABbnA"] [Sun Jul 12 18:11:28.888872 2026] [security2:error] [pid 967714:tid 967962] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtMF_56DeKknhy7sPt3gAAAXU"] [Sun Jul 12 18:11:28.888942 2026] [security2:error] [pid 967714:tid 967962] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtMF_56DeKknhy7sPt3gAAAXU"] [Sun Jul 12 18:11:28.890398 2026] [security2:error] [pid 960377:tid 960607] [client 65.21.113.206:48196] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTFfMzEzMjdfMWMzYS9jXzQ5OF8zYXA=.html"] [unique_id "alQtMBMANaV5i2_BLQoJ2wAAAGM"] [Sun Jul 12 18:11:28.908568 2026] [security2:error] [pid 967714:tid 967921] [client 81.162.246.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtMF_56DeKknhy7sPt3wAAAUw"] [Sun Jul 12 18:11:29.081325 2026] [security2:error] [pid 967714:tid 967902] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/database.php"] [unique_id "alQtMV_56DeKknhy7sPt-gAAATk"] [Sun Jul 12 18:11:29.258315 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJzAAAAHE"] [Sun Jul 12 18:11:29.263505 2026] [security2:error] [pid 960377:tid 960570] [client 82.102.18.188:54546] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtMRMANaV5i2_BLQoJ9AAAAD4"] [Sun Jul 12 18:11:29.342576 2026] [security2:error] [pid 967714:tid 967856] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtL1_56DeKknhy7sPttQAAAQs"], referer: http://67.222.38.115/asynqmon/api/queues [Sun Jul 12 18:11:29.398147 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:29.398694 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:29.568363 2026] [security2:error] [pid 960377:tid 960632] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMRMANaV5i2_BLQoJ-AAAAHw"] [Sun Jul 12 18:11:29.575096 2026] [security2:error] [pid 960377:tid 960557] [client 24.203.79.110:64777] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtMRMANaV5i2_BLQoJ_QAAADE"] [Sun Jul 12 18:11:29.575323 2026] [security2:error] [pid 960377:tid 960557] [client 24.203.79.110:64777] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtMRMANaV5i2_BLQoJ_QAAADE"] [Sun Jul 12 18:11:29.667513 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtMBMANaV5i2_BLQoJ7QAAKXw"] [Sun Jul 12 18:11:29.772473 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/archive/phpinfo.php"] [unique_id "alQtMRMANaV5i2_BLQoKBAAAADw"] [Sun Jul 12 18:11:29.924869 2026] [security2:error] [pid 960377:tid 960529] [client 125.167.21.72:62184] ModSecurity: Access denied with code 406 (phase 2). Operator GT matched 0 at USER:bf_block. [file "/opt/mod_security/hg_rules.conf"] [line "1482"] [id "909121"] [msg "IP address blocked, too many xmlrpc.php failures"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtMRMANaV5i2_BLQoKCAAAABU"] [Sun Jul 12 18:11:29.925167 2026] [security2:error] [pid 960377:tid 960529] [client 125.167.21.72:62184] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "406"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtMRMANaV5i2_BLQoKCAAAABU"] [Sun Jul 12 18:11:29.951936 2026] [security2:error] [pid 967714:tid 967930] [client 168.100.149.127:22998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4550/bargainor/2308_metalogical.jsp"] [unique_id "alQtMV_56DeKknhy7sPuDwAAAVU"] [Sun Jul 12 18:11:30.017281 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Kubernetes/.env"] [unique_id "alQtMl_56DeKknhy7sPuEQABSH4"] [Sun Jul 12 18:11:30.099093 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Kubernetes/.env"] [unique_id "alQtMl_56DeKknhy7sPuEgABSHs"], referer: http://67.222.40.58/Kubernetes/.env [Sun Jul 12 18:11:30.224622 2026] [cgid:error] [pid 967714:tid 967881] [client 152.232.80.168:50129] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:30.331232 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMRMANaV5i2_BLQoKCgAAAAw"] [Sun Jul 12 18:11:30.397208 2026] [authz_core:error] [pid 960377:tid 960619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:30.398046 2026] [authz_core:error] [pid 960377:tid 960619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:30.455181 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Serve_time_server/.env"] [unique_id "alQtMl_56DeKknhy7sPuFgABSH0"] [Sun Jul 12 18:11:30.577323 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Serve_time_server/.env"] [unique_id "alQtMl_56DeKknhy7sPuHAABSAM"], referer: http://67.222.40.58/Serve_time_server/.env [Sun Jul 12 18:11:30.609438 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtMRMANaV5i2_BLQoJ9wAAAGU"] [Sun Jul 12 18:11:30.803690 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMhMANaV5i2_BLQoKHQAAABA"] [Sun Jul 12 18:11:30.879566 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtMRMANaV5i2_BLQoKBQAAGj4"] [Sun Jul 12 18:11:30.892571 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Server_with_db/.env"] [unique_id "alQtMl_56DeKknhy7sPuJAABSAI"] [Sun Jul 12 18:11:31.025078 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Server_with_db/.env"] [unique_id "alQtM1_56DeKknhy7sPuKAABSH8"], referer: http://67.222.40.58/Server_with_db/.env [Sun Jul 12 18:11:31.088623 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Simple_server/.env"] [unique_id "alQtM1_56DeKknhy7sPuKQABSBE"], referer: http://67.222.40.58/Simple_server/.env [Sun Jul 12 18:11:31.151477 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtMRMANaV5i2_BLQoJ-wAAACA"], referer: http://67.222.38.115/asynqmon/api/redis-info [Sun Jul 12 18:11:31.286182 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMxMANaV5i2_BLQoKKAAAAA8"] [Sun Jul 12 18:11:31.349154 2026] [authz_core:error] [pid 960377:tid 960568] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:31.349864 2026] [authz_core:error] [pid 960377:tid 960568] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:31.393340 2026] [security2:error] [pid 960377:tid 960604] [client 89.37.63.150:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQtLhMANaV5i2_BLQoJwAAAAGA"] [Sun Jul 12 18:11:31.453076 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Simple_server/.env"] [unique_id "alQtM1_56DeKknhy7sPuNQABSBI"] [Sun Jul 12 18:11:31.464654 2026] [security2:error] [pid 967714:tid 967741] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rust-app/backend/.env"] [unique_id "alQtM1_56DeKknhy7sPuNgABJQ8"] [Sun Jul 12 18:11:31.717317 2026] [security2:error] [pid 967714:tid 967976] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTFiaGRzZl8xNDc3LzFiLzQ3NzYxL2I=.html"] [unique_id "alQtM1_56DeKknhy7sPuPAAAAYM"] [Sun Jul 12 18:11:31.882928 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtMxMANaV5i2_BLQoKOgAAAAw"] [Sun Jul 12 18:11:31.933063 2026] [security2:error] [pid 960377:tid 960596] [client 168.100.149.193:20534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4615/bargainor/2308_psychoreflex.jsp"] [unique_id "alQtMxMANaV5i2_BLQoKPQAAAFg"] [Sun Jul 12 18:11:32.153725 2026] [security2:error] [pid 960377:tid 960527] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtMxMANaV5i2_BLQoKKgAAExs"] [Sun Jul 12 18:11:32.159910 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:32.160689 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:32.169133 2026] [security2:error] [pid 967714:tid 967933] [client 152.232.80.168:58260] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/storage/app/public/.env"] [unique_id "alQtNF_56DeKknhy7sPuRgAAAVg"] [Sun Jul 12 18:11:32.312955 2026] [cgid:error] [pid 960377:tid 960517] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:32.444867 2026] [security2:error] [pid 967714:tid 967939] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuRwAAAV4"] [Sun Jul 12 18:11:32.468707 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtMxMANaV5i2_BLQoKMAAAAG4"], referer: http://67.222.38.115/attach [Sun Jul 12 18:11:32.505386 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtMhMANaV5i2_BLQoKIgAAAEU"] [Sun Jul 12 18:11:32.614440 2026] [security2:error] [pid 967714:tid 967763] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/server/laravel/config/.env"] [unique_id "alQtNF_56DeKknhy7sPuUwABayU"] [Sun Jul 12 18:11:32.812714 2026] [cgid:error] [pid 967714:tid 967866] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:32.840313 2026] [security2:error] [pid 967714:tid 967886] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuSwAAASk"] [Sun Jul 12 18:11:32.840367 2026] [security2:error] [pid 967714:tid 967886] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuSwAAASk"] [Sun Jul 12 18:11:32.841456 2026] [security2:error] [pid 967714:tid 967926] [client 65.21.113.206:48200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTFiaGRzZl8xNDc3LzFiLzQ3NzYxL2I=.html"] [unique_id "alQtNF_56DeKknhy7sPuSQAAAVE"] [Sun Jul 12 18:11:32.927851 2026] [security2:error] [pid 967714:tid 967869] [client 45.198.224.53:51822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.185.110"] [uri "/"] [unique_id "alQtNF_56DeKknhy7sPuXwAAARg"] [Sun Jul 12 18:11:33.003872 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:33.004381 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:33.021360 2026] [security2:error] [pid 967714:tid 967899] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuWwAAATY"] [Sun Jul 12 18:11:33.167348 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKV_56DeKknhy7sPs7AAAASM"] [Sun Jul 12 18:11:33.197224 2026] [security2:error] [pid 967714:tid 967747] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/env/settings.bak"] [unique_id "alQtNV_56DeKknhy7sPuYgABPBU"] [Sun Jul 12 18:11:33.347588 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtNBMANaV5i2_BLQoKRgAAU1M"] [Sun Jul 12 18:11:33.367733 2026] [security2:error] [pid 967714:tid 967779] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/php-app/server/.env"] [unique_id "alQtNV_56DeKknhy7sPuaQABFjU"] [Sun Jul 12 18:11:33.415344 2026] [security2:error] [pid 967714:tid 967859] [client 82.102.18.188:54554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNV_56DeKknhy7sPuagAAAQ4"] [Sun Jul 12 18:11:33.415700 2026] [security2:error] [pid 967714:tid 967859] [client 82.102.18.188:54554] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNV_56DeKknhy7sPuagAAAQ4"] [Sun Jul 12 18:11:33.548790 2026] [cgid:error] [pid 967714:tid 967979] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:33.592780 2026] [security2:error] [pid 960377:tid 960407] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/administrator/.env"] [unique_id "alQtNRMANaV5i2_BLQoKWgAARx0"] [Sun Jul 12 18:11:33.631543 2026] [security2:error] [pid 967714:tid 967962] [client 152.232.80.168:51431] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/django/.env"] [unique_id "alQtNV_56DeKknhy7sPucgAAAXU"] [Sun Jul 12 18:11:33.754869 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cms/.env"] [unique_id "alQtNRMANaV5i2_BLQoKYAAAazE"] [Sun Jul 12 18:11:33.792262 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNRMANaV5i2_BLQoKXQAAAFI"] [Sun Jul 12 18:11:33.819844 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:33.820541 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:33.855501 2026] [security2:error] [pid 967714:tid 967882] [client 20.210.108.71:64056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-phpmailer.php"] [unique_id "alQtNV_56DeKknhy7sPugAAAASU"], referer: binance.com [Sun Jul 12 18:11:33.913341 2026] [security2:error] [pid 960377:tid 960418] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/portal/.env"] [unique_id "alQtNRMANaV5i2_BLQoKYgAAEyc"] [Sun Jul 12 18:11:33.978445 2026] [cgid:error] [pid 960377:tid 960573] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:33.989846 2026] [security2:error] [pid 967714:tid 967956] [client 82.102.18.188:37456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNV_56DeKknhy7sPujQAAAW8"] [Sun Jul 12 18:11:33.990156 2026] [security2:error] [pid 967714:tid 967956] [client 82.102.18.188:37456] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNV_56DeKknhy7sPujQAAAW8"] [Sun Jul 12 18:11:34.077738 2026] [security2:error] [pid 960377:tid 960442] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dashboard/.env"] [unique_id "alQtNhMANaV5i2_BLQoKaQAAST8"] [Sun Jul 12 18:11:34.142108 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKF_56DeKknhy7sPs0AABSBQ"], referer: http://67.222.40.58/.cordova/config.json [Sun Jul 12 18:11:34.193180 2026] [core:error] [pid 967714:tid 967901] [client 66.187.5.104:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:34.193236 2026] [core:error] [pid 967714:tid 967901] [client 66.187.5.104:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:34.204855 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuUAAAAS4"], referer: http://67.222.38.115/attributes/restSearch [Sun Jul 12 18:11:34.229796 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNF_56DeKknhy7sPuUQAAAUo"] [Sun Jul 12 18:11:34.237789 2026] [security2:error] [pid 960377:tid 960410] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/crm/.env"] [unique_id "alQtNhMANaV5i2_BLQoKcAAAeSA"] [Sun Jul 12 18:11:34.283399 2026] [security2:error] [pid 967714:tid 967976] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNV_56DeKknhy7sPujgAAAYM"] [Sun Jul 12 18:11:34.385275 2026] [security2:error] [pid 967714:tid 967899] [client 197.48.221.253:65205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtNl_56DeKknhy7sPupQAAATY"] [Sun Jul 12 18:11:34.385601 2026] [security2:error] [pid 967714:tid 967899] [client 197.48.221.253:65205] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtNl_56DeKknhy7sPupQAAATY"] [Sun Jul 12 18:11:34.396618 2026] [security2:error] [pid 960377:tid 960457] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mail/.env"] [unique_id "alQtNhMANaV5i2_BLQoKdgAAGk4"] [Sun Jul 12 18:11:34.554415 2026] [security2:error] [pid 960377:tid 960472] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mailer/.env"] [unique_id "alQtNhMANaV5i2_BLQoKfAAAVV0"] [Sun Jul 12 18:11:34.566451 2026] [security2:error] [pid 967714:tid 967945] [client 168.100.149.85:50136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4680/bargainor/2308_mailable.jsp"] [unique_id "alQtNl_56DeKknhy7sPuqwAAAWQ"] [Sun Jul 12 18:11:34.579603 2026] [security2:error] [pid 967714:tid 967970] [client 82.102.18.188:37468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNl_56DeKknhy7sPurAAAAX0"] [Sun Jul 12 18:11:34.579878 2026] [security2:error] [pid 967714:tid 967970] [client 82.102.18.188:37468] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQtNl_56DeKknhy7sPurAAAAX0"] [Sun Jul 12 18:11:34.604486 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:34.607356 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:34.694441 2026] [security2:error] [pid 967714:tid 967856] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNl_56DeKknhy7sPuqgAAAQs"] [Sun Jul 12 18:11:34.711978 2026] [security2:error] [pid 960377:tid 960473] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/deployment/.env"] [unique_id "alQtNhMANaV5i2_BLQoKfgAAMV4"] [Sun Jul 12 18:11:34.768659 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Socketio/.env"] [unique_id "alQtNl_56DeKknhy7sPurgABSEI"], referer: http://67.222.40.58/Socketio/.env [Sun Jul 12 18:11:34.870763 2026] [security2:error] [pid 960377:tid 960498] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/.env"] [unique_id "alQtNhMANaV5i2_BLQoKfwAASnc"] [Sun Jul 12 18:11:34.920719 2026] [core:error] [pid 960377:tid 960531] [client 65.49.1.80:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:34.920764 2026] [core:error] [pid 960377:tid 960531] [client 65.49.1.80:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:11:35.029254 2026] [security2:error] [pid 960377:tid 960384] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/helm/.env"] [unique_id "alQtNxMANaV5i2_BLQoKggAAPQY"] [Sun Jul 12 18:11:35.095138 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNhMANaV5i2_BLQoKgQAAAFk"] [Sun Jul 12 18:11:35.107005 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKF_56DeKknhy7sPsyAAAAQo"], referer: http://67.222.40.58/%c0 [Sun Jul 12 18:11:35.188360 2026] [security2:error] [pid 960377:tid 960430] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/terraform/.env"] [unique_id "alQtNxMANaV5i2_BLQoKgwAAXTM"] [Sun Jul 12 18:11:35.277571 2026] [security2:error] [pid 967714:tid 967808] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/backup/api_keys.sql"] [unique_id "alQtN1_56DeKknhy7sPuuQABF1I"] [Sun Jul 12 18:11:35.351702 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:35.352192 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:35.365758 2026] [security2:error] [pid 960377:tid 960443] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ansible/.env"] [unique_id "alQtNxMANaV5i2_BLQoKhAAAVEA"] [Sun Jul 12 18:11:35.471311 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/public/phpinfo.php"] [unique_id "alQtNxMANaV5i2_BLQoKiwAAAHg"] [Sun Jul 12 18:11:35.518530 2026] [security2:error] [pid 967714:tid 967922] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTFqMWljLzEwMzgvMWovNDgxNjkvag=="] [unique_id "alQtN1_56DeKknhy7sPuvQAAAU0"] [Sun Jul 12 18:11:35.626322 2026] [security2:error] [pid 967714:tid 967982] [client 152.232.80.168:50129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/services.php"] [unique_id "alQtN1_56DeKknhy7sPuvgAAAYk"] [Sun Jul 12 18:11:35.649352 2026] [security2:error] [pid 960377:tid 960535] [client 202.46.62.44:60463] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtNxMANaV5i2_BLQoKkgAAABs"], referer: https://www.stephenspublishing.com/flip-pencil-sharpeners-custom-p-1107.html?osCsid=2scvm820vm8edqet6etlrhpk07 [Sun Jul 12 18:11:35.908102 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtNxMANaV5i2_BLQoKlAAAAFE"] [Sun Jul 12 18:11:35.938205 2026] [security2:error] [pid 960377:tid 960547] [client 168.100.149.162:63584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4745/bargainor/2308_epidemiology.jsp"] [unique_id "alQtNxMANaV5i2_BLQoKmAAAACc"] [Sun Jul 12 18:11:36.106200 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:36.107561 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:36.258396 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Socketio/.env"] [unique_id "alQtOF_56DeKknhy7sPuyAABSEo"] [Sun Jul 12 18:11:36.403511 2026] [security2:error] [pid 967714:tid 967976] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtOF_56DeKknhy7sPuxgAAAYM"] [Sun Jul 12 18:11:36.434563 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Sources/API/.env"] [unique_id "alQtOF_56DeKknhy7sPuzAABSE8"], referer: http://67.222.40.58/Sources/API/.env [Sun Jul 12 18:11:36.440559 2026] [security2:error] [pid 960377:tid 960409] [remote 57.141.18.106:28376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/BH58YESeEUY.lWez"] [unique_id "alQtOBMANaV5i2_BLQoKnwAAcR8"] [Sun Jul 12 18:11:36.505032 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtNxMANaV5i2_BLQoKjAAACks"] [Sun Jul 12 18:11:36.615982 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/Sources/API/.env"] [unique_id "alQtOF_56DeKknhy7sPu0gABSE4"] [Sun Jul 12 18:11:36.616371 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:38824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/__info.php"] [unique_id "alQtOF_56DeKknhy7sPu0wAAARU"] [Sun Jul 12 18:11:36.669875 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/__info.php"] [unique_id "alQtOF_56DeKknhy7sPu1AABSEA"] [Sun Jul 12 18:11:36.692102 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtOF_56DeKknhy7sPuxAAAAR0"] [Sun Jul 12 18:11:36.692160 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtOF_56DeKknhy7sPuxAAAAR0"] [Sun Jul 12 18:11:36.700250 2026] [security2:error] [pid 960377:tid 960614] [client 65.21.113.206:43632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTFqMWljLzEwMzgvMWovNDgxNjkvag=="] [unique_id "alQtNxMANaV5i2_BLQoKmQAAAGo"] [Sun Jul 12 18:11:36.777854 2026] [security2:error] [pid 960377:tid 960600] [client 94.187.171.125:49797] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtOBMANaV5i2_BLQoKpAAAAFw"] [Sun Jul 12 18:11:36.778091 2026] [security2:error] [pid 960377:tid 960600] [client 94.187.171.125:49797] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtOBMANaV5i2_BLQoKpAAAAFw"] [Sun Jul 12 18:11:36.839789 2026] [security2:error] [pid 967714:tid 967882] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtOF_56DeKknhy7sPu0QAAASU"] [Sun Jul 12 18:11:36.913808 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/__tests__/test-become/.env"] [unique_id "alQtOF_56DeKknhy7sPu5QABSD8"] [Sun Jul 12 18:11:36.921312 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/__tests__/test-become/.env"] [unique_id "alQtOF_56DeKknhy7sPu5wABSF0"], referer: http://67.222.40.58/__tests__/test-become/.env [Sun Jul 12 18:11:36.924872 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:36.926293 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:37.169096 2026] [security2:error] [pid 967714:tid 967922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNl_56DeKknhy7sPunAAAATI"] [Sun Jul 12 18:11:37.177341 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNhMANaV5i2_BLQoKcgAAABw"], referer: http://67.222.38.115/auth_keys/index [Sun Jul 12 18:11:37.189112 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNl_56DeKknhy7sPuoAAAAVg"], referer: http://67.222.38.115/auth/admin/master/console/ [Sun Jul 12 18:11:37.215524 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtNl_56DeKknhy7sPuoQAAAYY"] [Sun Jul 12 18:11:37.248949 2026] [security2:error] [pid 967714:tid 967825] [remote 113.160.142.119:40602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.142.160.113.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "smellytele.com"] [uri "/wp-login.php"] [unique_id "alQtOV_56DeKknhy7sPu7QABh2M"] [Sun Jul 12 18:11:37.336220 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKqgAAADg"] [Sun Jul 12 18:11:37.650375 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtOBMANaV5i2_BLQoKoQAAGCE"] [Sun Jul 12 18:11:37.761594 2026] [authz_core:error] [pid 967714:tid 967918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:37.762106 2026] [authz_core:error] [pid 967714:tid 967918] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:37.819358 2026] [security2:error] [pid 960377:tid 960571] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKuQAAAD8"] [Sun Jul 12 18:11:37.899955 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme-challenge/.env"] [unique_id "alQtOV_56DeKknhy7sPu_gABSGs"], referer: http://67.222.40.58/acme-challenge/.env [Sun Jul 12 18:11:37.940791 2026] [security2:error] [pid 960377:tid 960609] [client 168.100.149.93:36988] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4810/bargainor/2308_secque.jsp"] [unique_id "alQtORMANaV5i2_BLQoKyAAAAGU"] [Sun Jul 12 18:11:37.983615 2026] [security2:error] [pid 960377:tid 960551] [client 152.232.80.168:64560] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/cache/.env"] [unique_id "alQtORMANaV5i2_BLQoKyQAAACs"] [Sun Jul 12 18:11:38.097105 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtNwAAARM"], referer: http://67.222.40.58/.env.save [Sun Jul 12 18:11:38.229871 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme-challenge/.env"] [unique_id "alQtOl_56DeKknhy7sPvCAABSEU"] [Sun Jul 12 18:11:38.331476 2026] [security2:error] [pid 960377:tid 960602] [client 70.81.13.172:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKuwAAAF4"] [Sun Jul 12 18:11:38.454076 2026] [security2:error] [pid 960377:tid 960581] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtOhMANaV5i2_BLQoKywAAAEk"] [Sun Jul 12 18:11:38.492333 2026] [security2:error] [pid 967714:tid 967860] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTFqMWljLzIyNTcvMWovNDgxNjkvag=="] [unique_id "alQtOl_56DeKknhy7sPvDAAAAQ8"] [Sun Jul 12 18:11:38.591409 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:38.592015 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:38.708616 2026] [security2:error] [pid 960377:tid 960554] [client 74.7.230.8:54526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "justfeelgood.com"] [uri "/robots.txt"] [unique_id "alQtOhMANaV5i2_BLQoK2QAAAC4"] [Sun Jul 12 18:11:38.833247 2026] [cgid:error] [pid 960377:tid 960544] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:38.900813 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtOhMANaV5i2_BLQoK2AAAADI"] [Sun Jul 12 18:11:38.918624 2026] [security2:error] [pid 960377:tid 960566] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKxAAAOgg"] [Sun Jul 12 18:11:39.108840 2026] [cgid:error] [pid 967714:tid 967980] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:39.116199 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKRMANaV5i2_BLQoJXAAAAAY"], referer: http://67.222.40.58/.env.docker.dev [Sun Jul 12 18:11:39.121964 2026] [security2:error] [pid 967714:tid 967834] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/setup/.env"] [unique_id "alQtO1_56DeKknhy7sPvGQABcGw"] [Sun Jul 12 18:11:39.130057 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKF_56DeKknhy7sPsvwAAASE"] [Sun Jul 12 18:11:39.130422 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKsAAAABQ"] [Sun Jul 12 18:11:39.157293 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKsgAAAF0"], referer: http://67.222.38.115/auth/realms/master/clients-registrations/openid-connect [Sun Jul 12 18:11:39.365367 2026] [security2:error] [pid 960377:tid 960565] [client 152.232.80.168:54763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/auth.php"] [unique_id "alQtOxMANaV5i2_BLQoK7AAAADk"] [Sun Jul 12 18:11:39.487623 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:39.488263 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:39.614328 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvIgAAAUU"] [Sun Jul 12 18:11:39.710218 2026] [security2:error] [pid 967714:tid 967972] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvFwAAAX8"] [Sun Jul 12 18:11:39.710292 2026] [security2:error] [pid 967714:tid 967972] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvFwAAAX8"] [Sun Jul 12 18:11:39.722850 2026] [security2:error] [pid 967714:tid 967909] [client 65.21.113.206:43646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTFqMWljLzIyNTcvMWovNDgxNjkvag=="] [unique_id "alQtOl_56DeKknhy7sPvFgAAAUA"] [Sun Jul 12 18:11:39.906052 2026] [core:error] [pid 960377:tid 960628] [client 111.9.42.36:34400] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:11:39.972322 2026] [proxy:error] [pid 967714:tid 967945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:39.972554 2026] [proxy_http:error] [pid 967714:tid 967945] [client 3.18.186.238:51716] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:39.975051 2026] [proxy:error] [pid 967714:tid 967945] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:11:39.975277 2026] [proxy_http:error] [pid 967714:tid 967945] [client 3.18.186.238:51716] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:11:40.048057 2026] [security2:error] [pid 967714:tid 967940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvKQAAAV8"] [Sun Jul 12 18:11:40.150949 2026] [security2:error] [pid 967714:tid 967898] [client 24.203.79.110:65302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtPF_56DeKknhy7sPvMwAAATU"] [Sun Jul 12 18:11:40.151235 2026] [security2:error] [pid 967714:tid 967898] [client 24.203.79.110:65302] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtPF_56DeKknhy7sPvMwAAATU"] [Sun Jul 12 18:11:40.152120 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:37742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/help/info.php"] [unique_id "alQtPBMANaV5i2_BLQoK8gAAAGo"] [Sun Jul 12 18:11:40.171918 2026] [security2:error] [pid 960377:tid 960618] [client 114.10.121.230:23951] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "bhcfe.org"] [uri "/wp-content/plugins/super-forms/readme.txt"] [unique_id "alQtPBMANaV5i2_BLQoK8wAAAG4"] [Sun Jul 12 18:11:40.291336 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtOxMANaV5i2_BLQoK5AAASCI"] [Sun Jul 12 18:11:40.302845 2026] [security2:error] [pid 967714:tid 967922] [client 62.171.167.118:37740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/infophp.php"] [unique_id "alQtPF_56DeKknhy7sPvOQAAAU0"] [Sun Jul 12 18:11:40.346374 2026] [authz_core:error] [pid 960377:tid 960600] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:40.346927 2026] [authz_core:error] [pid 960377:tid 960600] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:40.426579 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvHAAAAVE"] [Sun Jul 12 18:11:40.569192 2026] [security2:error] [pid 960377:tid 960557] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPBMANaV5i2_BLQoK9gAAADE"] [Sun Jul 12 18:11:40.583866 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtO1_56DeKknhy7sPvHQAAAW4"] [Sun Jul 12 18:11:40.613375 2026] [security2:error] [pid 967714:tid 967878] [client 168.100.149.67:41422] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4875/bargainor/2308_dislevelment.jsp"] [unique_id "alQtPF_56DeKknhy7sPvQwAAASE"] [Sun Jul 12 18:11:40.974541 2026] [security2:error] [pid 960377:tid 960582] [client 74.7.230.8:41224] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "justfeelgood.com"] [uri "/index.php"] [unique_id "alQtOhMANaV5i2_BLQoK3AAAShM"], referer: http://justfeelgood.com/robots.txt [Sun Jul 12 18:11:40.974651 2026] [security2:error] [pid 960377:tid 960582] [client 74.7.230.8:41224] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "justfeelgood.com"] [uri "/index.php"] [unique_id "alQtOhMANaV5i2_BLQoK3AAAShM"], referer: http://justfeelgood.com/robots.txt [Sun Jul 12 18:11:41.021120 2026] [security2:error] [pid 960377:tid 960529] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPBMANaV5i2_BLQoK_gAAABU"] [Sun Jul 12 18:11:41.147623 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKxMANaV5i2_BLQoJfQAAAAE"] [Sun Jul 12 18:11:41.148863 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtFQAAAVI"] [Sun Jul 12 18:11:41.150036 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKV_56DeKknhy7sPs6wAAAYE"] [Sun Jul 12 18:11:41.150422 2026] [security2:error] [pid 940777:tid 940858] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/i.php"] [unique_id "alQtH5ihQxksrpCflyFqAQAAkkc"] [Sun Jul 12 18:11:41.158465 2026] [security2:error] [pid 940777:tid 940858] [remote 62.171.167.118:34534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/php_info.php"] [unique_id "alQtIJihQxksrpCflyFqAgAAkkc"] [Sun Jul 12 18:11:41.197217 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLF_56DeKknhy7sPtXAAAASs"], referer: http://67.222.40.58/.env.uat [Sun Jul 12 18:11:41.223508 2026] [security2:error] [pid 967714:tid 967970] [client 20.244.27.100:52330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/css/dist/registry.php"] [unique_id "alQtPV_56DeKknhy7sPvVQAAAX0"], referer: binance.com [Sun Jul 12 18:11:41.237460 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:41.238411 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:41.470940 2026] [security2:error] [pid 967714:tid 967855] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPV_56DeKknhy7sPvWAAAAQo"] [Sun Jul 12 18:11:41.604826 2026] [security2:error] [pid 967714:tid 967898] [client 20.210.108.71:60175] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-plugin-dependencies.php"] [unique_id "alQtPV_56DeKknhy7sPvZQAAATU"], referer: binance.com [Sun Jul 12 18:11:41.632111 2026] [security2:error] [pid 960377:tid 960481] [remote 74.7.230.8:41236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.justfeelgood.com"] [uri "/index.php"] [unique_id "alQtPRMANaV5i2_BLQoLCQAAP2Y"], referer: https://justfeelgood.com/robots.txt [Sun Jul 12 18:11:41.669919 2026] [security2:error] [pid 967714:tid 967870] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sites/default/settings.php"] [unique_id "alQtPV_56DeKknhy7sPvaAAAARk"] [Sun Jul 12 18:11:41.728808 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtPBMANaV5i2_BLQoK-gAAVy4"] [Sun Jul 12 18:11:41.970095 2026] [security2:error] [pid 967714:tid 967867] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJ0LTQzMzI5LTJ0NXRkLTE4NTUtdDV0.cgi"] [unique_id "alQtPV_56DeKknhy7sPvcgAAARY"] [Sun Jul 12 18:11:42.018792 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:42.019308 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:42.109017 2026] [security2:error] [pid 967714:tid 967975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPV_56DeKknhy7sPvbQAAAYI"] [Sun Jul 12 18:11:42.126031 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKF_56DeKknhy7sPswgABSAk"] [Sun Jul 12 18:11:42.152028 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKl_56DeKknhy7sPs8wAAAVs"], referer: http://67.222.40.58/.env.mailer_dsn [Sun Jul 12 18:11:42.200860 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:34818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/services/phpinfo.php"] [unique_id "alQtPhMANaV5i2_BLQoLDwAAAD4"] [Sun Jul 12 18:11:42.240549 2026] [security2:error] [pid 967714:tid 967916] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtPF_56DeKknhy7sPvPwAAAUc"] [Sun Jul 12 18:11:42.410121 2026] [security2:error] [pid 967714:tid 967858] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtPF_56DeKknhy7sPvRAAAAQ0"], referer: http://67.222.38.115/auth/v1/admin/users [Sun Jul 12 18:11:42.488151 2026] [security2:error] [pid 967714:tid 967744] [remote 171.244.34.240:42726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.34.244.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQtPl_56DeKknhy7sPvfwABbhI"] [Sun Jul 12 18:11:42.584862 2026] [security2:error] [pid 967714:tid 967943] [client 168.100.149.176:23730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/4940/bargainor/2308_limnoria.jsp"] [unique_id "alQtPl_56DeKknhy7sPvhQAAAWI"] [Sun Jul 12 18:11:42.633573 2026] [security2:error] [pid 960377:tid 960524] [client 62.171.167.118:34820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/temp.php"] [unique_id "alQtPhMANaV5i2_BLQoLGwAAABA"] [Sun Jul 12 18:11:42.646486 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPhMANaV5i2_BLQoLFQAAAFQ"] [Sun Jul 12 18:11:42.681789 2026] [security2:error] [pid 967714:tid 967953] [client 34.56.168.230:48992] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.islandoaksmedia.com"] [uri "/index.php"] [unique_id "alQtPl_56DeKknhy7sPvdgABbBE"] [Sun Jul 12 18:11:42.818847 2026] [security2:error] [pid 967714:tid 967732] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/nestjs-app/client/.env"] [unique_id "alQtPl_56DeKknhy7sPvigABEAY"] [Sun Jul 12 18:11:42.886648 2026] [cgid:error] [pid 960377:tid 960557] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:42.906510 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:42.907369 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:43.076042 2026] [security2:error] [pid 960377:tid 960526] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtPRMANaV5i2_BLQoLDQAAEi8"] [Sun Jul 12 18:11:43.089386 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLBMANaV5i2_BLQoJhwAAAC8"] [Sun Jul 12 18:11:43.090451 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtFgAAAW0"], referer: http://67.222.40.58/docs [Sun Jul 12 18:11:43.113441 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLV_56DeKknhy7sPteQAAAVw"] [Sun Jul 12 18:11:43.174995 2026] [security2:error] [pid 967714:tid 967982] [client 125.167.21.72:62625] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtP1_56DeKknhy7sPvjgAAAYk"] [Sun Jul 12 18:11:43.175366 2026] [security2:error] [pid 967714:tid 967982] [client 125.167.21.72:62625] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtP1_56DeKknhy7sPvjgAAAYk"] [Sun Jul 12 18:11:43.245268 2026] [security2:error] [pid 960377:tid 960432] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/core/.env"] [unique_id "alQtPxMANaV5i2_BLQoLLgAAdTU"] [Sun Jul 12 18:11:43.297549 2026] [security2:error] [pid 960377:tid 960529] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPxMANaV5i2_BLQoLLAAAABU"] [Sun Jul 12 18:11:43.451732 2026] [security2:error] [pid 960377:tid 960619] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtPhMANaV5i2_BLQoLGQAAAG8"] [Sun Jul 12 18:11:43.451804 2026] [security2:error] [pid 960377:tid 960619] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtPhMANaV5i2_BLQoLGQAAAG8"] [Sun Jul 12 18:11:43.460138 2026] [security2:error] [pid 960377:tid 960593] [client 65.21.113.206:43654] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJ0LTQzMzI5LTJ0NXRkLTE4NTUtdDV0.cgi"] [unique_id "alQtPhMANaV5i2_BLQoLGAAAAFU"] [Sun Jul 12 18:11:43.465278 2026] [security2:error] [pid 960377:tid 960629] [client 152.232.80.168:54917] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/app/server/.env"] [unique_id "alQtPxMANaV5i2_BLQoLMwAAAHk"] [Sun Jul 12 18:11:43.552295 2026] [security2:error] [pid 960377:tid 960586] [client 3.18.186.238:40392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.186.18.3.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "julie.putterman.net"] [uri "/wordpress/index.php"] [unique_id "alQtPxMANaV5i2_BLQoLOAAAAE4"] [Sun Jul 12 18:11:43.583205 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtPhMANaV5i2_BLQoLEwAAAEk"] [Sun Jul 12 18:11:43.838639 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:34832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/api/info.php"] [unique_id "alQtPxMANaV5i2_BLQoLPAAAADk"] [Sun Jul 12 18:11:43.839445 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:43.840138 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:43.900428 2026] [security2:error] [pid 960377:tid 960510] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtPxMANaV5i2_BLQoLNwAAAAI"] [Sun Jul 12 18:11:43.935272 2026] [security2:error] [pid 960377:tid 960511] [client 62.171.167.118:34828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/asdf.php"] [unique_id "alQtPxMANaV5i2_BLQoLPQAAAAM"] [Sun Jul 12 18:11:43.950638 2026] [security2:error] [pid 967714:tid 967931] [client 152.232.80.168:55511] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/wp-config.bak"] [unique_id "alQtP1_56DeKknhy7sPvogAAAVY"] [Sun Jul 12 18:11:43.954468 2026] [security2:error] [pid 960377:tid 960519] [client 168.100.149.232:34260] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5005/bargainor/2308_milksopism.jsp"] [unique_id "alQtPxMANaV5i2_BLQoLPgAAAAs"] [Sun Jul 12 18:11:43.960882 2026] [cgid:error] [pid 967714:tid 967950] [client 152.232.80.168:51096] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:44.031945 2026] [cgid:error] [pid 960377:tid 960585] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:44.116213 2026] [cgid:error] [pid 967714:tid 967858] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:44.121116 2026] [security2:error] [pid 960377:tid 960567] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLBMANaV5i2_BLQoJmgAAADs"] [Sun Jul 12 18:11:44.125511 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLF_56DeKknhy7sPtSQAAAYQ"], referer: http://67.222.40.58/.env.sendgrid [Sun Jul 12 18:11:44.134092 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtJgAAATA"] [Sun Jul 12 18:11:44.179301 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtKV_56DeKknhy7sPs8AAAAU8"] [Sun Jul 12 18:11:44.220282 2026] [security2:error] [pid 960377:tid 960579] [client 62.171.167.118:34840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/backend/info.php"] [unique_id "alQtQBMANaV5i2_BLQoLRQAAAEc"] [Sun Jul 12 18:11:44.224151 2026] [security2:error] [pid 967714:tid 967913] [client 152.232.80.168:63030] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/current/.env"] [unique_id "alQtQF_56DeKknhy7sPvrAAAAUQ"] [Sun Jul 12 18:11:44.237990 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLRMANaV5i2_BLQoJqgAAAF8"], referer: http://67.222.40.58/.env_1 [Sun Jul 12 18:11:44.327653 2026] [security2:error] [pid 967714:tid 967762] [remote 47.128.121.137:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "daniellesdayoff.com"] [uri "/robots.txt"] [unique_id "alQtQF_56DeKknhy7sPvrgABQSQ"] [Sun Jul 12 18:11:44.397177 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtPhMANaV5i2_BLQoLFwAAAGs"], referer: http://67.222.38.115/authentik/api/v3/ [Sun Jul 12 18:11:44.605729 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQF_56DeKknhy7sPvrQAAAVo"] [Sun Jul 12 18:11:44.740284 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:44.740827 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:44.784992 2026] [security2:error] [pid 967714:tid 967747] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/src/__tests__/__fixtures__/instanceWithDependentSteps/.env"] [unique_id "alQtQF_56DeKknhy7sPvtQABaBU"] [Sun Jul 12 18:11:44.811403 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtPxMANaV5i2_BLQoLMgAAUA4"] [Sun Jul 12 18:11:44.992172 2026] [fcgid:warn] [pid 960377:tid 960566] (70014)End of file found: [client 199.45.155.89:42020] mod_fcgid: can't get data from http client [Sun Jul 12 18:11:44.992911 2026] [security2:error] [pid 967714:tid 967952] [client 197.48.221.253:49409] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtQF_56DeKknhy7sPvuwAAAWs"] [Sun Jul 12 18:11:44.993203 2026] [security2:error] [pid 967714:tid 967952] [client 197.48.221.253:49409] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtQF_56DeKknhy7sPvuwAAAWs"] [Sun Jul 12 18:11:45.097205 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLl_56DeKknhy7sPtjwAAAS8"] [Sun Jul 12 18:11:45.137549 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:49726] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/backend/phpinfo.php"] [unique_id "alQtQRMANaV5i2_BLQoLUwAAAD0"] [Sun Jul 12 18:11:45.213473 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLBMANaV5i2_BLQoJhAAAACE"] [Sun Jul 12 18:11:45.262763 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQF_56DeKknhy7sPvvgAAARY"] [Sun Jul 12 18:11:45.395141 2026] [cgid:error] [pid 967714:tid 967963] [client 152.232.80.168:54038] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:45.426566 2026] [security2:error] [pid 967714:tid 967940] [client 152.232.80.168:49767] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/storage/framework/cache/.env"] [unique_id "alQtQV_56DeKknhy7sPvxQAAAV8"] [Sun Jul 12 18:11:45.482339 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtPxMANaV5i2_BLQoLOgAAAD8"], referer: http://67.222.38.115/autodiscover/ [Sun Jul 12 18:11:45.625209 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:45.625998 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:45.756946 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQRMANaV5i2_BLQoLVgAAAEo"] [Sun Jul 12 18:11:45.822127 2026] [security2:error] [pid 967714:tid 967895] [client 50.87.253.215:39418] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2020/05/TSS-logo.png"] [unique_id "alQtQV_56DeKknhy7sPvzgAAATI"] [Sun Jul 12 18:11:45.843310 2026] [security2:error] [pid 960377:tid 960605] [client 62.171.167.118:49740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/crm/info.php"] [unique_id "alQtQRMANaV5i2_BLQoLZAAAAGE"] [Sun Jul 12 18:11:45.914876 2026] [security2:error] [pid 967714:tid 967893] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJ0LTQzMzI5LTJ0NXRkLTgxNDEtdDV0.cgi"] [unique_id "alQtQV_56DeKknhy7sPv2wAAATA"] [Sun Jul 12 18:11:46.070002 2026] [security2:error] [pid 967714:tid 967973] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtK1_56DeKknhy7sPtLAAAAYA"], referer: http://67.222.40.58/.env.production.local [Sun Jul 12 18:11:46.090339 2026] [security2:error] [pid 960377:tid 960613] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLBMANaV5i2_BLQoJjAAAAGk"], referer: http://67.222.40.58/.env.sparkpost [Sun Jul 12 18:11:46.256542 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtQBMANaV5i2_BLQoLTwAAODA"] [Sun Jul 12 18:11:46.266202 2026] [security2:error] [pid 960377:tid 960584] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQRMANaV5i2_BLQoLaQAAAEw"] [Sun Jul 12 18:11:46.309313 2026] [security2:error] [pid 967714:tid 967861] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtQF_56DeKknhy7sPvsQAAARA"] [Sun Jul 12 18:11:46.417554 2026] [security2:error] [pid 960377:tid 960449] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/local/.env"] [unique_id "alQtQhMANaV5i2_BLQoLdQAAZUY"] [Sun Jul 12 18:11:46.436889 2026] [security2:error] [pid 967714:tid 967805] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rust-backend/dao/.env"] [unique_id "alQtQl_56DeKknhy7sPv8wABbE8"] [Sun Jul 12 18:11:46.525381 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:46.525915 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:46.587843 2026] [security2:error] [pid 967714:tid 967961] [client 168.100.149.225:59660] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5070/bargainor/2308_capnoides.jsp"] [unique_id "alQtQl_56DeKknhy7sPv_AAAAXQ"] [Sun Jul 12 18:11:46.589152 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/application/.env"] [unique_id "alQtQhMANaV5i2_BLQoLeQAAXH0"] [Sun Jul 12 18:11:46.783589 2026] [security2:error] [pid 967714:tid 967948] [client 114.10.121.230:2890] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "bhcfe.org"] [uri "/wp-content/plugins/super-forms-pro/readme.txt"] [unique_id "alQtQl_56DeKknhy7sPwAQAAAWc"] [Sun Jul 12 18:11:46.881405 2026] [security2:error] [pid 960377:tid 960601] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQhMANaV5i2_BLQoLegAAAF0"] [Sun Jul 12 18:11:47.068975 2026] [security2:error] [pid 967714:tid 967978] [client 65.21.113.206:55822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJ0LTQzMzI5LTJ0NXRkLTgxNDEtdDV0.cgi"] [unique_id "alQtQl_56DeKknhy7sPv8AAAAYU"] [Sun Jul 12 18:11:47.068979 2026] [security2:error] [pid 967714:tid 967954] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtQl_56DeKknhy7sPv9AAAAW0"] [Sun Jul 12 18:11:47.069067 2026] [security2:error] [pid 967714:tid 967954] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtQl_56DeKknhy7sPv9AAAAW0"] [Sun Jul 12 18:11:47.083107 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLl_56DeKknhy7sPtkwAAATQ"], referer: http://67.222.40.58/.environment [Sun Jul 12 18:11:47.176096 2026] [security2:error] [pid 967714:tid 967970] [client 2.80.55.142:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtQl_56DeKknhy7sPv-wAAAX0"] [Sun Jul 12 18:11:47.377562 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:47.378285 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:47.422866 2026] [security2:error] [pid 967714:tid 967982] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQ1_56DeKknhy7sPwBwAAAYk"] [Sun Jul 12 18:11:47.431219 2026] [security2:error] [pid 960377:tid 960557] [client 94.187.171.125:50276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtQxMANaV5i2_BLQoLiwAAADE"] [Sun Jul 12 18:11:47.431489 2026] [security2:error] [pid 960377:tid 960557] [client 94.187.171.125:50276] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtQxMANaV5i2_BLQoLiwAAADE"] [Sun Jul 12 18:11:47.483297 2026] [security2:error] [pid 967714:tid 967974] [client 20.210.108.71:53350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-script-modules.php"] [unique_id "alQtQ1_56DeKknhy7sPwDgAAAYE"], referer: binance.com [Sun Jul 12 18:11:47.522363 2026] [security2:error] [pid 967714:tid 967908] [client 57.141.18.105:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtQl_56DeKknhy7sPwAwAAAT8"] [Sun Jul 12 18:11:47.905318 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtQhMANaV5i2_BLQoLfAAAWTI"] [Sun Jul 12 18:11:47.928716 2026] [security2:error] [pid 967714:tid 967876] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtQ1_56DeKknhy7sPwEAAAAR8"] [Sun Jul 12 18:11:47.945928 2026] [security2:error] [pid 967714:tid 967973] [client 168.100.149.55:15828] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5135/bargainor/2308_deft.jsp"] [unique_id "alQtQ1_56DeKknhy7sPwGwAAAYA"] [Sun Jul 12 18:11:47.972123 2026] [security2:error] [pid 967714:tid 967815] [remote 54.39.203.7:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "storageatcoldspring.com"] [uri "/page-sitemap.xml"] [unique_id "alQtQ1_56DeKknhy7sPwHQABN1k"] [Sun Jul 12 18:11:47.972566 2026] [security2:error] [pid 967714:tid 967900] [client 54.39.203.7:0] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "storageatcoldspring.com"] [uri "/page-sitemap.xml"] [unique_id "alQtQ1_56DeKknhy7sPwHQABN1k"] [Sun Jul 12 18:11:47.988209 2026] [security2:error] [pid 967714:tid 967874] [client 167.148.117.54:16448] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtQ1_56DeKknhy7sPwGAAAAR0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:47.990094 2026] [security2:error] [pid 960377:tid 960514] [client 167.148.117.94:29848] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtQxMANaV5i2_BLQoLkgAAAAY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:48.032180 2026] [security2:error] [pid 967714:tid 967936] [client 167.148.117.149:63834] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtQ1_56DeKknhy7sPwGQAAAVs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:48.036066 2026] [security2:error] [pid 967714:tid 967981] [client 167.148.117.94:29854] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtQ1_56DeKknhy7sPwGgAAAYg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:48.109014 2026] [security2:error] [pid 960377:tid 960582] [client 155.117.163.105:17962] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtQxMANaV5i2_BLQoLlgAAAEo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:48.196502 2026] [authz_core:error] [pid 967714:tid 967904] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:48.197052 2026] [authz_core:error] [pid 967714:tid 967904] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:48.247645 2026] [security2:error] [pid 967714:tid 967886] [client 167.148.117.54:16462] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtRF_56DeKknhy7sPwIgAAASk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:48.423305 2026] [authz_core:error] [pid 967714:tid 967873] [client 152.232.80.168:0] AH01630: client denied by server configuration: /home1/zoeyblue/public_html/.htaccess [Sun Jul 12 18:11:48.427554 2026] [security2:error] [pid 967714:tid 967873] [client 152.232.80.168:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.238.10"] [uri "/index.php"] [unique_id "alQtRF_56DeKknhy7sPwLQAAARw"] [Sun Jul 12 18:11:48.446798 2026] [security2:error] [pid 967714:tid 967862] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRF_56DeKknhy7sPwJAAAARE"] [Sun Jul 12 18:11:48.456967 2026] [cgid:error] [pid 967714:tid 967980] [client 152.232.80.168:63642] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:48.611529 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:49750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/help/info.php"] [unique_id "alQtRF_56DeKknhy7sPwMQAAAXM"] [Sun Jul 12 18:11:48.645258 2026] [cgid:error] [pid 960377:tid 960585] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:48.828559 2026] [security2:error] [pid 960377:tid 960476] [remote 57.141.18.58:53470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 58.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/uUdoAn8N1W.lWez"] [unique_id "alQtRBMANaV5i2_BLQoLnwAAQ2E"] [Sun Jul 12 18:11:48.857259 2026] [security2:error] [pid 960377:tid 960570] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRBMANaV5i2_BLQoLnQAAAD4"] [Sun Jul 12 18:11:48.873732 2026] [security2:error] [pid 967714:tid 967940] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfMzQxMV8yYTFxL2FfOTg4N18xcXI=.html"] [unique_id "alQtRF_56DeKknhy7sPwOwAAAV8"] [Sun Jul 12 18:11:48.916460 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:49762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/helper/info.php"] [unique_id "alQtRBMANaV5i2_BLQoLogAAAGc"] [Sun Jul 12 18:11:48.973388 2026] [security2:error] [pid 960377:tid 960540] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtRBMANaV5i2_BLQoLlwAAIGU"] [Sun Jul 12 18:11:49.022697 2026] [authz_core:error] [pid 960377:tid 960584] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:49.023212 2026] [authz_core:error] [pid 960377:tid 960584] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:49.027018 2026] [security2:error] [pid 967714:tid 967755] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/apps/config/.env"] [unique_id "alQtRV_56DeKknhy7sPwPwABgR0"] [Sun Jul 12 18:11:49.106328 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLhMANaV5i2_BLQoJugAAAHY"] [Sun Jul 12 18:11:49.107728 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtQRMANaV5i2_BLQoLXQAAAG0"] [Sun Jul 12 18:11:49.107778 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtQRMANaV5i2_BLQoLXgAAAG8"], referer: http://67.222.38.115/avo/dashboards [Sun Jul 12 18:11:49.161653 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLl_56DeKknhy7sPtlwAAAXc"], referer: http://67.222.40.58/.envs [Sun Jul 12 18:11:49.166576 2026] [security2:error] [pid 967714:tid 967875] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtQV_56DeKknhy7sPvygAAAR4"], referer: http://67.222.38.115/avo/ [Sun Jul 12 18:11:49.277871 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:49772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/infos.php"] [unique_id "alQtRRMANaV5i2_BLQoLswAAABw"] [Sun Jul 12 18:11:49.425293 2026] [security2:error] [pid 967714:tid 967903] [client 152.232.80.168:61674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/config/environments/.env"] [unique_id "alQtRV_56DeKknhy7sPwUAAAATo"] [Sun Jul 12 18:11:49.488389 2026] [security2:error] [pid 967714:tid 967928] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwTAAAAVM"] [Sun Jul 12 18:11:49.539022 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:49780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/lara/info.php"] [unique_id "alQtRRMANaV5i2_BLQoLtgAAAEU"] [Sun Jul 12 18:11:49.558212 2026] [security2:error] [pid 967714:tid 967795] [remote 167.114.139.185:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "storageatcoldspring.com"] [uri "/mailpoet_page-sitemap.xml"] [unique_id "alQtRV_56DeKknhy7sPwUwABE0U"] [Sun Jul 12 18:11:49.558600 2026] [security2:error] [pid 967714:tid 967864] [client 167.114.139.185:0] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "storageatcoldspring.com"] [uri "/mailpoet_page-sitemap.xml"] [unique_id "alQtRV_56DeKknhy7sPwUwABE0U"] [Sun Jul 12 18:11:49.688976 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:49796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/laravel/phpinfo.php"] [unique_id "alQtRV_56DeKknhy7sPwWQAAATU"] [Sun Jul 12 18:11:49.691530 2026] [security2:error] [pid 967714:tid 967909] [client 187.190.38.102:21137] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtRV_56DeKknhy7sPwVAAAAUA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:49.744919 2026] [authz_core:error] [pid 967714:tid 967870] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:49.745486 2026] [authz_core:error] [pid 967714:tid 967870] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:49.869872 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRRMANaV5i2_BLQoLuAAAADw"] [Sun Jul 12 18:11:49.924005 2026] [security2:error] [pid 967714:tid 967900] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwTwAAATc"] [Sun Jul 12 18:11:49.924052 2026] [security2:error] [pid 967714:tid 967900] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwTwAAATc"] [Sun Jul 12 18:11:49.925479 2026] [security2:error] [pid 967714:tid 967868] [client 65.21.113.206:55836] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfMzQxMV8yYTFxL2FfOTg4N18xcXI=.html"] [unique_id "alQtRV_56DeKknhy7sPwTQAAARc"] [Sun Jul 12 18:11:49.956440 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:49798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/linusadmin-phpinfo.php"] [unique_id "alQtRV_56DeKknhy7sPwXgAAAWc"] [Sun Jul 12 18:11:49.991376 2026] [security2:error] [pid 967714:tid 967895] [client 147.235.217.100:44949] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtRV_56DeKknhy7sPwXAAAATI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:50.022035 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtRRMANaV5i2_BLQoLrQAAK2o"] [Sun Jul 12 18:11:50.134846 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJ1gAAAHc"] [Sun Jul 12 18:11:50.168464 2026] [security2:error] [pid 967714:tid 967872] [client 181.97.205.28:47268] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtRl_56DeKknhy7sPwYQAAARs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:50.203578 2026] [security2:error] [pid 960377:tid 960503] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env/.env"] [unique_id "alQtRhMANaV5i2_BLQoLuwAAKXw"] [Sun Jul 12 18:11:50.279303 2026] [security2:error] [pid 967714:tid 967874] [client 92.241.37.105:43967] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtRl_56DeKknhy7sPwZgAAAR0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:50.351926 2026] [security2:error] [pid 967714:tid 967883] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRl_56DeKknhy7sPwZAAAASY"] [Sun Jul 12 18:11:50.370498 2026] [security2:error] [pid 960377:tid 960408] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/new/.env"] [unique_id "alQtRhMANaV5i2_BLQoLvAAABR4"] [Sun Jul 12 18:11:50.562931 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:50.563730 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:50.658557 2026] [security2:error] [pid 960377:tid 960533] [client 168.100.149.243:53302] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5200/bargainor/2308_did.jsp"] [unique_id "alQtRhMANaV5i2_BLQoLwAAAABk"] [Sun Jul 12 18:11:50.679076 2026] [security2:error] [pid 967714:tid 967982] [client 152.232.80.168:61987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/app/config/services.php"] [unique_id "alQtRl_56DeKknhy7sPweAAAAYk"] [Sun Jul 12 18:11:50.755228 2026] [security2:error] [pid 967714:tid 967875] [client 24.203.79.110:49446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtRl_56DeKknhy7sPweQAAAR4"] [Sun Jul 12 18:11:50.755464 2026] [security2:error] [pid 967714:tid 967875] [client 24.203.79.110:49446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtRl_56DeKknhy7sPweQAAAR4"] [Sun Jul 12 18:11:50.797949 2026] [security2:error] [pid 967714:tid 967934] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRl_56DeKknhy7sPwdAAAAVk"] [Sun Jul 12 18:11:50.873437 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:49806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/mail.php"] [unique_id "alQtRl_56DeKknhy7sPwewAAAVU"] [Sun Jul 12 18:11:50.905230 2026] [security2:error] [pid 967714:tid 967839] [remote 54.39.0.181:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "storageatcoldspring.com"] [uri "/bricks_template-sitemap.xml"] [unique_id "alQtRl_56DeKknhy7sPwfAABaHE"] [Sun Jul 12 18:11:50.905600 2026] [security2:error] [pid 967714:tid 967949] [client 54.39.0.181:0] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "storageatcoldspring.com"] [uri "/bricks_template-sitemap.xml"] [unique_id "alQtRl_56DeKknhy7sPwfAABaHE"] [Sun Jul 12 18:11:51.071087 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJ2gAAAGw"], referer: http://67.222.40.58/.msmtprc [Sun Jul 12 18:11:51.100399 2026] [security2:error] [pid 960377:tid 960579] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtQhMANaV5i2_BLQoLdAAAAEc"] [Sun Jul 12 18:11:51.110710 2026] [cgid:error] [pid 960377:tid 960587] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:51.131866 2026] [security2:error] [pid 960377:tid 960583] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJ2AAAAEs"] [Sun Jul 12 18:11:51.187102 2026] [security2:error] [pid 967714:tid 967973] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfNDQyNy8ybmQvNzcwMV9uZA==.htm"] [unique_id "alQtR1_56DeKknhy7sPwhQAAAYA"] [Sun Jul 12 18:11:51.187746 2026] [security2:error] [pid 940777:tid 940858] [remote 62.171.167.118:34534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtIJihQxksrpCflyFqBwAAkkc"], referer: http://67.222.40.58/server.js [Sun Jul 12 18:11:51.197328 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtLxMANaV5i2_BLQoJ1wAAAFo"], referer: http://67.222.40.58/.mailgun/config [Sun Jul 12 18:11:51.204621 2026] [security2:error] [pid 967714:tid 967876] [client 125.167.21.72:63218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtR1_56DeKknhy7sPwhwAAAR8"] [Sun Jul 12 18:11:51.204881 2026] [security2:error] [pid 967714:tid 967876] [client 125.167.21.72:63218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtR1_56DeKknhy7sPwhwAAAR8"] [Sun Jul 12 18:11:51.209965 2026] [cgid:error] [pid 967714:tid 967968] [client 152.232.80.168:56883] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:51.236206 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKrgAAAH8"], referer: http://67.222.40.58/account/.git/config [Sun Jul 12 18:11:51.240733 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme/.env"] [unique_id "alQtOl_56DeKknhy7sPwiQABSFo"], referer: http://67.222.40.58/acme/.env [Sun Jul 12 18:11:51.244813 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme/.env"] [unique_id "alQtOl_56DeKknhy7sPwigABSFo"] [Sun Jul 12 18:11:51.244853 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme_challenges/.env"] [unique_id "alQtOl_56DeKknhy7sPwiwABSHY"], referer: http://67.222.40.58/acme_challenges/.env [Sun Jul 12 18:11:51.244858 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/acme_challenges/.env"] [unique_id "alQtOl_56DeKknhy7sPwjAABSHQ"] [Sun Jul 12 18:11:51.246214 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtORMANaV5i2_BLQoKwQAAAFg"] [Sun Jul 12 18:11:51.248126 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/actions-server/.env"] [unique_id "alQtOl_56DeKknhy7sPwjQABSFo"] [Sun Jul 12 18:11:51.248727 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/actions-server/.env"] [unique_id "alQtO1_56DeKknhy7sPwjgABSHQ"], referer: http://67.222.40.58/actions-server/.env [Sun Jul 12 18:11:51.249028 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adm/.env"] [unique_id "alQtO1_56DeKknhy7sPwjwABSHk"], referer: http://67.222.40.58/adm/.env [Sun Jul 12 18:11:51.251589 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/help/info.php"] [unique_id "alQtPF_56DeKknhy7sPwlwABSHc"] [Sun Jul 12 18:11:51.251744 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adm/.env"] [unique_id "alQtO1_56DeKknhy7sPwkAABSGk"] [Sun Jul 12 18:11:51.252942 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/infophp.php"] [unique_id "alQtPV_56DeKknhy7sPwmAABSHc"] [Sun Jul 12 18:11:51.253438 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/services/phpinfo.php"] [unique_id "alQtPl_56DeKknhy7sPwmQABSGk"] [Sun Jul 12 18:11:51.255020 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/adm/temp.php"] [unique_id "alQtPl_56DeKknhy7sPwmgABSHc"] [Sun Jul 12 18:11:51.255020 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adm/.env.bak"] [unique_id "alQtO1_56DeKknhy7sPwkgABSFo"] [Sun Jul 12 18:11:51.255153 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adm/.env.bak"] [unique_id "alQtO1_56DeKknhy7sPwkQABSHQ"], referer: http://67.222.40.58/adm/.env.bak [Sun Jul 12 18:11:51.256790 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/admin-app/.env"] [unique_id "alQtPl_56DeKknhy7sPwmwABSGk"] [Sun Jul 12 18:11:51.270235 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/admin/.env.bak"] [unique_id "alQtPl_56DeKknhy7sPwnQABSFo"] [Sun Jul 12 18:11:51.281306 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtRl_56DeKknhy7sPwgAAAAVo"] [Sun Jul 12 18:11:51.301698 2026] [cgid:error] [pid 967714:tid 967909] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:51.323163 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtPV_56DeKknhy7sPvVgAAASc"] [Sun Jul 12 18:11:51.408179 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:51.408889 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:51.425531 2026] [security2:error] [pid 967714:tid 967940] [client 62.171.167.118:49822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/php-info.php"] [unique_id "alQtR1_56DeKknhy7sPwsgAAAV8"] [Sun Jul 12 18:11:51.457485 2026] [security2:error] [pid 967714:tid 967744] [remote 185.177.72.12:46360] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/User_info/.env"] [unique_id "alQtR1_56DeKknhy7sPwswABNhI"] [Sun Jul 12 18:11:51.489451 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:49824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/phpversion.php"] [unique_id "alQtR1_56DeKknhy7sPwtwAAAS0"] [Sun Jul 12 18:11:51.489898 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtRhMANaV5i2_BLQoLvwAAGj4"] [Sun Jul 12 18:11:51.591117 2026] [cgid:error] [pid 960377:tid 960510] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:51.737187 2026] [security2:error] [pid 967714:tid 967867] [client 57.141.18.119:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwrwAAARY"] [Sun Jul 12 18:11:51.835528 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:49832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/services/info.php"] [unique_id "alQtR1_56DeKknhy7sPwxgAAAUw"] [Sun Jul 12 18:11:51.866388 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwwgAAAUo"] [Sun Jul 12 18:11:52.026709 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:49840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/settings.php"] [unique_id "alQtSBMANaV5i2_BLQoL3wAAAAQ"] [Sun Jul 12 18:11:52.085869 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:49846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/smtp.php"] [unique_id "alQtSF_56DeKknhy7sPw0wAAARk"] [Sun Jul 12 18:11:52.274288 2026] [security2:error] [pid 967714:tid 967920] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwxQAAAUs"] [Sun Jul 12 18:11:52.274359 2026] [security2:error] [pid 967714:tid 967920] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwxQAAAUs"] [Sun Jul 12 18:11:52.275736 2026] [security2:error] [pid 967714:tid 967880] [client 65.21.113.206:55852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfNDQyNy8ybmQvNzcwMV9uZA==.htm"] [unique_id "alQtR1_56DeKknhy7sPwwwAAASM"] [Sun Jul 12 18:11:52.328269 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:52.357345 2026] [security2:error] [pid 967714:tid 967865] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtSF_56DeKknhy7sPw0QAAARQ"] [Sun Jul 12 18:11:52.380087 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:52.590256 2026] [security2:error] [pid 967714:tid 967975] [client 168.100.149.248:24794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5265/bargainor/2308_delphian.jsp"] [unique_id "alQtSF_56DeKknhy7sPw4wAAAYI"] [Sun Jul 12 18:11:52.610387 2026] [security2:error] [pid 960377:tid 960606] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtRxMANaV5i2_BLQoL2AAAYlE"] [Sun Jul 12 18:11:52.749412 2026] [security2:error] [pid 967714:tid 967859] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtSF_56DeKknhy7sPw4QAAAQ4"] [Sun Jul 12 18:11:52.771911 2026] [security2:error] [pid 960377:tid 960564] [client 196.39.207.124:33902] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtSBMANaV5i2_BLQoL7wAAADg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:11:52.927043 2026] [security2:error] [pid 967714:tid 967881] [client 187.214.69.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwuAAAASQ"] [Sun Jul 12 18:11:53.113019 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtPRMANaV5i2_BLQoLBAAAABg"], referer: http://67.222.40.58/admin/api-config.ini [Sun Jul 12 18:11:53.171106 2026] [security2:error] [pid 967714:tid 967915] [client 185.177.72.12:46360] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/theme-editor.php"] [unique_id "alQtSF_56DeKknhy7sPw6wABRgw"] [Sun Jul 12 18:11:53.186705 2026] [authz_core:error] [pid 960377:tid 960571] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:53.187537 2026] [authz_core:error] [pid 960377:tid 960571] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:53.368449 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:49852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/time.php"] [unique_id "alQtSV_56DeKknhy7sPw8gAAAWQ"] [Sun Jul 12 18:11:53.657991 2026] [security2:error] [pid 960377:tid 960508] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtSBMANaV5i2_BLQoL8AAAAFM"] [Sun Jul 12 18:11:53.766135 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.12:4480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQtSRMANaV5i2_BLQoL_AAAZDE"] [Sun Jul 12 18:11:53.949817 2026] [security2:error] [pid 960377:tid 960522] [client 168.100.149.174:51622] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5330/bargainor/2308_anisodactyli.jsp"] [unique_id "alQtSRMANaV5i2_BLQoL_wAAAA4"] [Sun Jul 12 18:11:53.982087 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:54.034095 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:54.054488 2026] [security2:error] [pid 967714:tid 967965] [client 152.232.80.168:61493] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/database.sql"] [unique_id "alQtSl_56DeKknhy7sPw-wAAAXg"] [Sun Jul 12 18:11:54.091323 2026] [cgid:error] [pid 967714:tid 967896] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:54.183751 2026] [security2:error] [pid 967714:tid 967892] [client 114.10.121.230:2891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 230.121.10.114.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bhcfe.org"] [uri "/wp-content/plugins/super-forms-pro/super-forms.php"] [unique_id "alQtSl_56DeKknhy7sPw_gAAAS8"] [Sun Jul 12 18:11:54.487056 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:44046] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/xampp/info.php"] [unique_id "alQtSl_56DeKknhy7sPxBAAAARU"] [Sun Jul 12 18:11:54.568289 2026] [cgid:error] [pid 967714:tid 967935] [client 152.232.80.168:58145] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:54.575587 2026] [security2:error] [pid 960377:tid 960548] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtShMANaV5i2_BLQoMAgAAACg"] [Sun Jul 12 18:11:54.585887 2026] [security2:error] [pid 967714:tid 967962] [client 202.46.62.77:9962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtSl_56DeKknhy7sPxCQAAAXU"], referer: https://www.stephenspublishing.com/shopping-tote-bags-custom-p-908.html?osCsid=qqureeug9jcft9oaj3leor60i2 [Sun Jul 12 18:11:54.733851 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtSRMANaV5i2_BLQoL_gAAHj8"] [Sun Jul 12 18:11:54.838504 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:54.839006 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:54.901208 2026] [security2:error] [pid 967714:tid 967759] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/whatsapp-bot/src/.env"] [unique_id "alQtSl_56DeKknhy7sPxGAABfCE"] [Sun Jul 12 18:11:54.910521 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:44052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/xampp/phpinfo.php"] [unique_id "alQtShMANaV5i2_BLQoMEQAAADk"] [Sun Jul 12 18:11:54.946534 2026] [security2:error] [pid 967714:tid 967957] [client 57.141.18.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQtSF_56DeKknhy7sPw6AAAAXA"] [Sun Jul 12 18:11:55.214328 2026] [security2:error] [pid 967714:tid 967809] [remote 154.61.75.100:50344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.75.61.154.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eaglesnestprojectswisconsin.com"] [uri "/wp-login.php"] [unique_id "alQtS1_56DeKknhy7sPxHwABXVM"] [Sun Jul 12 18:11:55.353150 2026] [security2:error] [pid 960377:tid 960584] [client 20.210.108.71:64948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-scripts.php"] [unique_id "alQtSxMANaV5i2_BLQoMGQAAAEw"], referer: binance.com [Sun Jul 12 18:11:55.355753 2026] [security2:error] [pid 960377:tid 960512] [client 197.48.221.253:50008] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtSxMANaV5i2_BLQoMGgAAAAQ"] [Sun Jul 12 18:11:55.356045 2026] [security2:error] [pid 960377:tid 960512] [client 197.48.221.253:50008] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtSxMANaV5i2_BLQoMGgAAAAQ"] [Sun Jul 12 18:11:55.435279 2026] [security2:error] [pid 967714:tid 967930] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfNzk3NV8yNTM1LzVfMzI0MF8zNWQ=.html"] [unique_id "alQtS1_56DeKknhy7sPxJQAAAVU"] [Sun Jul 12 18:11:55.443357 2026] [security2:error] [pid 967714:tid 967879] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtS1_56DeKknhy7sPxHgAAASI"] [Sun Jul 12 18:11:55.460089 2026] [security2:error] [pid 960377:tid 960614] [client 190.143.253.27:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtShMANaV5i2_BLQoMDwAAAGo"] [Sun Jul 12 18:11:55.589500 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:55.627140 2026] [security2:error] [pid 967714:tid 967876] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/app/api/bzycs.php"] [unique_id "alQtS1_56DeKknhy7sPxLgAAAR8"] [Sun Jul 12 18:11:55.652538 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:55.902182 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtShMANaV5i2_BLQoMEAAAJEc"] [Sun Jul 12 18:11:55.943089 2026] [security2:error] [pid 967714:tid 967974] [client 168.100.149.134:54962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5395/bargainor/2308_birefraction.jsp"] [unique_id "alQtS1_56DeKknhy7sPxNQAAAYE"] [Sun Jul 12 18:11:56.074027 2026] [security2:error] [pid 967714:tid 967978] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtS1_56DeKknhy7sPxMAAAAYU"] [Sun Jul 12 18:11:56.153548 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwRQAAAQo"], referer: http://67.222.38.115/backend.tf [Sun Jul 12 18:11:56.189340 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwRgAAAQ0"], referer: http://67.222.38.115/avo/resources [Sun Jul 12 18:11:56.229563 2026] [cgid:error] [pid 967714:tid 967963] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:11:56.363333 2026] [authz_core:error] [pid 967714:tid 967940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:56.363853 2026] [authz_core:error] [pid 967714:tid 967940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:56.491947 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPxSAAAARY"] [Sun Jul 12 18:11:56.510813 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtS1_56DeKknhy7sPxNAAAAR0"] [Sun Jul 12 18:11:56.510867 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtS1_56DeKknhy7sPxNAAAAR0"] [Sun Jul 12 18:11:56.512236 2026] [security2:error] [pid 967714:tid 967924] [client 65.21.113.206:47082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfNzk3NV8yNTM1LzVfMzI0MF8zNWQ=.html"] [unique_id "alQtS1_56DeKknhy7sPxMgAAAU8"] [Sun Jul 12 18:11:56.547130 2026] [security2:error] [pid 967714:tid 967915] [client 62.171.167.118:44080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/administrator/info.php"] [unique_id "alQtTF_56DeKknhy7sPxUAAAAUY"] [Sun Jul 12 18:11:56.560841 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:44086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/administrator/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPxUwAAAUw"] [Sun Jul 12 18:11:56.606569 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:44140] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/api/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPxVQAAAUo"] [Sun Jul 12 18:11:56.616469 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:44156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/dashboard/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPxVwAAASg"] [Sun Jul 12 18:11:56.651078 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:44170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/info.php"] [unique_id "alQtTF_56DeKknhy7sPxWgAAATg"] [Sun Jul 12 18:11:56.880932 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:44180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/old_phpinfo.php"] [unique_id "alQtTBMANaV5i2_BLQoMLgAAAFU"] [Sun Jul 12 18:11:56.950824 2026] [security2:error] [pid 967714:tid 967887] [client 172.252.209.117:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPxUQAAASo"] [Sun Jul 12 18:11:56.971121 2026] [security2:error] [pid 967714:tid 967907] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPxXgAAAT4"] [Sun Jul 12 18:11:57.028801 2026] [security2:error] [pid 960377:tid 960396] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtTBMANaV5i2_BLQoMIQAAKxI"] [Sun Jul 12 18:11:57.107083 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRRMANaV5i2_BLQoLsgAAACw"] [Sun Jul 12 18:11:57.117146 2026] [security2:error] [pid 960377:tid 960567] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRRMANaV5i2_BLQoLsQAAADs"] [Sun Jul 12 18:11:57.131560 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwRAAAAWU"], referer: http://67.222.38.115/backstage/api/catalog/entities [Sun Jul 12 18:11:57.182531 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:57.183418 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:57.192425 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwSgAAAS4"], referer: http://67.222.38.115/backup [Sun Jul 12 18:11:57.245736 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwrQAAARs"] [Sun Jul 12 18:11:57.252529 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/admin-app/.env"] [unique_id "alQtPl_56DeKknhy7sPxZgABSDM"], referer: http://67.222.40.58/admin-app/.env [Sun Jul 12 18:11:57.254252 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/api/info.php"] [unique_id "alQtP1_56DeKknhy7sPxbAABSDM"] [Sun Jul 12 18:11:57.255923 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/backend/info.php"] [unique_id "alQtQF_56DeKknhy7sPxbwABSC4"] [Sun Jul 12 18:11:57.257369 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/admin/.env.bak"] [unique_id "alQtPl_56DeKknhy7sPxZwABSD0"], referer: http://67.222.40.58/admin/.env.bak [Sun Jul 12 18:11:57.258069 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/asdf.php"] [unique_id "alQtP1_56DeKknhy7sPxbgABSDM"] [Sun Jul 12 18:11:57.259334 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/backend/phpinfo.php"] [unique_id "alQtQV_56DeKknhy7sPxcAABSC4"] [Sun Jul 12 18:11:57.259831 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/backup/info.php"] [unique_id "alQtQV_56DeKknhy7sPxcQABSD0"] [Sun Jul 12 18:11:57.261287 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/crm/info.php"] [unique_id "alQtQV_56DeKknhy7sPxcwABSC4"] [Sun Jul 12 18:11:57.261489 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/current/info.php"] [unique_id "alQtQl_56DeKknhy7sPxdAABSD0"] [Sun Jul 12 18:11:57.263039 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/dashboard/info.php"] [unique_id "alQtQ1_56DeKknhy7sPxdQABSC4"] [Sun Jul 12 18:11:57.265747 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/database.php"] [unique_id "alQtQ1_56DeKknhy7sPxdwABSCo"] [Sun Jul 12 18:11:57.486309 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMOQAAAFE"] [Sun Jul 12 18:11:57.885397 2026] [security2:error] [pid 967714:tid 967969] [client 20.244.27.100:54363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts/class-wp-font-collection.php"] [unique_id "alQtTV_56DeKknhy7sPxjgAAAXw"], referer: binance.com [Sun Jul 12 18:11:57.921223 2026] [security2:error] [pid 967714:tid 967888] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTV_56DeKknhy7sPxigAAASs"] [Sun Jul 12 18:11:57.943989 2026] [security2:error] [pid 960377:tid 960526] [client 168.100.149.42:28054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5460/bargainor/2308_mediator.jsp"] [unique_id "alQtTRMANaV5i2_BLQoMTwAAABI"] [Sun Jul 12 18:11:57.955472 2026] [authz_core:error] [pid 967714:tid 967964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:57.956073 2026] [authz_core:error] [pid 967714:tid 967964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:58.103003 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMOAAAWjc"] [Sun Jul 12 18:11:58.104448 2026] [security2:error] [pid 967714:tid 967966] [client 94.187.171.125:50765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtTl_56DeKknhy7sPxkgAAAXk"] [Sun Jul 12 18:11:58.104839 2026] [security2:error] [pid 967714:tid 967966] [client 94.187.171.125:50765] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtTl_56DeKknhy7sPxkgAAAXk"] [Sun Jul 12 18:11:58.124079 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRV_56DeKknhy7sPwSQAAAWk"] [Sun Jul 12 18:11:58.152084 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwrAAAAYQ"] [Sun Jul 12 18:11:58.165115 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/help/info.php"] [unique_id "alQtRF_56DeKknhy7sPxlAABSFo"] [Sun Jul 12 18:11:58.167701 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/helper/info.php"] [unique_id "alQtRV_56DeKknhy7sPxlQABSFo"] [Sun Jul 12 18:11:58.168732 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/infos.php"] [unique_id "alQtRV_56DeKknhy7sPxlgABSBY"] [Sun Jul 12 18:11:58.169231 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/lara/info.php"] [unique_id "alQtRV_56DeKknhy7sPxmQABSFo"] [Sun Jul 12 18:11:58.172413 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/laravel/info.php"] [unique_id "alQtRV_56DeKknhy7sPxmgABSFc"] [Sun Jul 12 18:11:58.174037 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/laravel/phpinfo.php"] [unique_id "alQtRV_56DeKknhy7sPxmwABSFQ"] [Sun Jul 12 18:11:58.176694 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/pinfo.php"] [unique_id "alQtR1_56DeKknhy7sPxogABSF0"] [Sun Jul 12 18:11:58.178337 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/phpversion.php"] [unique_id "alQtR1_56DeKknhy7sPxoQABSFc"] [Sun Jul 12 18:11:58.179394 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/service/info.php"] [unique_id "alQtR1_56DeKknhy7sPxpQABSGM"] [Sun Jul 12 18:11:58.179734 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/old_phpinfo.php"] [unique_id "alQtR1_56DeKknhy7sPxngABSFs"] [Sun Jul 12 18:11:58.179910 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/smtp.php"] [unique_id "alQtSF_56DeKknhy7sPxqgABSFc"] [Sun Jul 12 18:11:58.180105 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/temp.php"] [unique_id "alQtSF_56DeKknhy7sPxqwABSD8"] [Sun Jul 12 18:11:58.181447 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/mail.php"] [unique_id "alQtR1_56DeKknhy7sPxnQABSEA"] [Sun Jul 12 18:11:58.181642 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/phpinfo.php"] [unique_id "alQtR1_56DeKknhy7sPxoAABSE4"] [Sun Jul 12 18:11:58.182019 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/server/info.php"] [unique_id "alQtR1_56DeKknhy7sPxpAABSF0"] [Sun Jul 12 18:11:58.186233 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/settings.php"] [unique_id "alQtR1_56DeKknhy7sPxqQABSGY"] [Sun Jul 12 18:11:58.187929 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/time.php"] [unique_id "alQtSV_56DeKknhy7sPxrQABSGM"] [Sun Jul 12 18:11:58.188041 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/xampp/info.php"] [unique_id "alQtSl_56DeKknhy7sPxsAABSD8"] [Sun Jul 12 18:11:58.188309 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/xampp/phpinfo.php"] [unique_id "alQtSl_56DeKknhy7sPxsgABSEA"] [Sun Jul 12 18:11:58.185073 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/service/phpinfo.php"] [unique_id "alQtR1_56DeKknhy7sPxpgABSFU"] [Sun Jul 12 18:11:58.184319 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/services/info.php"] [unique_id "alQtR1_56DeKknhy7sPxqAABSFw"] [Sun Jul 12 18:11:58.190711 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/php-info.php"] [unique_id "alQtR1_56DeKknhy7sPxnwABSEs"] [Sun Jul 12 18:11:58.191103 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admin/linusadmin-phpinfo.php"] [unique_id "alQtRl_56DeKknhy7sPxnAABSFo"] [Sun Jul 12 18:11:58.198928 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwqQAAAW4"], referer: http://67.222.40.58/adm/.env.dev [Sun Jul 12 18:11:58.198948 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwpgAAASE"] [Sun Jul 12 18:11:58.208606 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adminer/.env"] [unique_id "alQtS1_56DeKknhy7sPxswABSEM"] [Sun Jul 12 18:11:58.220321 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/administrator/.env"] [unique_id "alQtTF_56DeKknhy7sPxuwABSAA"] [Sun Jul 12 18:11:58.222151 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/administrator/info.php"] [unique_id "alQtTF_56DeKknhy7sPxvQABSDw"] [Sun Jul 12 18:11:58.249171 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/administrator/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPxwgABSEM"] [Sun Jul 12 18:11:58.234139 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/adminer/.env"] [unique_id "alQtS1_56DeKknhy7sPxtAABSF4"], referer: http://67.222.40.58/adminer/.env [Sun Jul 12 18:11:58.272814 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/api/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPxywABSEM"] [Sun Jul 12 18:11:58.276838 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/dashboard/phpinfo.php"] [unique_id "alQtTF_56DeKknhy7sPx0QABSHo"] [Sun Jul 12 18:11:58.277709 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/info.php"] [unique_id "alQtTF_56DeKknhy7sPx0wABSCI"] [Sun Jul 12 18:11:58.281326 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/old_phpinfo.php"] [unique_id "alQtTV_56DeKknhy7sPx2QABSDY"] [Sun Jul 12 18:11:58.282298 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/administrator/.env"] [unique_id "alQtTF_56DeKknhy7sPx0gABSEk"], referer: http://67.222.40.58/administrator/.env [Sun Jul 12 18:11:58.497330 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMUgAAAHU"] [Sun Jul 12 18:11:58.557075 2026] [fcgid:warn] [pid 967714:tid 967943] (70014)End of file found: [client 18.218.118.203:11166] mod_fcgid: can't get data from http client [Sun Jul 12 18:11:58.622784 2026] [security2:error] [pid 967714:tid 967872] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfNzk3NV8yNTM1LzVfODQ1M18zNWQ=.html"] [unique_id "alQtTl_56DeKknhy7sPx8gAAARs"] [Sun Jul 12 18:11:58.774062 2026] [authz_core:error] [pid 967714:tid 967975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:58.774534 2026] [authz_core:error] [pid 967714:tid 967975] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:58.940431 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx-QAAAVo"] [Sun Jul 12 18:11:59.035097 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:44152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/test.php"] [unique_id "alQtT1_56DeKknhy7sPx_QAAAQo"] [Sun Jul 12 18:11:59.074162 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtRxMANaV5i2_BLQoL0gAAAFI"] [Sun Jul 12 18:11:59.097965 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtRxMANaV5i2_BLQoLzQAAABQ"], referer: http://67.222.40.58/adm/_profiler/phpinfo [Sun Jul 12 18:11:59.108325 2026] [security2:error] [pid 960377:tid 960607] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtRxMANaV5i2_BLQoL0QAAAGM"] [Sun Jul 12 18:11:59.371909 2026] [security2:error] [pid 960377:tid 960569] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMWwAAPSU"] [Sun Jul 12 18:11:59.405617 2026] [security2:error] [pid 967714:tid 967972] [client 74.7.228.14:36506] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.www.cpanel.smellytele.com"] [uri "/robots.txt"] [unique_id "alQtT1_56DeKknhy7sPyBwAAAX8"] [Sun Jul 12 18:11:59.530834 2026] [security2:error] [pid 960377:tid 960433] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/awstats/.env"] [unique_id "alQtTxMANaV5i2_BLQoMhAAAdjY"] [Sun Jul 12 18:11:59.562985 2026] [security2:error] [pid 967714:tid 967964] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtT1_56DeKknhy7sPyBAAAAXc"] [Sun Jul 12 18:11:59.572357 2026] [authz_core:error] [pid 960377:tid 960565] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:11:59.572866 2026] [authz_core:error] [pid 960377:tid 960565] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:11:59.650133 2026] [security2:error] [pid 967714:tid 967881] [client 90.221.142.205:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtT1_56DeKknhy7sPx_gAAASQ"] [Sun Jul 12 18:11:59.696863 2026] [security2:error] [pid 960377:tid 960446] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/conf/.env"] [unique_id "alQtTxMANaV5i2_BLQoMhwAATUM"] [Sun Jul 12 18:11:59.794789 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtT1_56DeKknhy7sPyAwAAAS0"] [Sun Jul 12 18:11:59.794844 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtT1_56DeKknhy7sPyAwAAAS0"] [Sun Jul 12 18:11:59.795905 2026] [security2:error] [pid 967714:tid 967941] [client 65.21.113.206:47096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfNzk3NV8yNTM1LzVfODQ1M18zNWQ=.html"] [unique_id "alQtT1_56DeKknhy7sPyAQAAAWA"] [Sun Jul 12 18:11:59.855782 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cron/.env"] [unique_id "alQtTxMANaV5i2_BLQoMjAAAHFg"] [Sun Jul 12 18:11:59.957405 2026] [security2:error] [pid 967714:tid 967887] [client 168.100.149.189:20208] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5525/bargainor/2308_gurian.jsp"] [unique_id "alQtT1_56DeKknhy7sPyCwAAASo"] [Sun Jul 12 18:12:00.014181 2026] [security2:error] [pid 960377:tid 960431] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/www/.env"] [unique_id "alQtUBMANaV5i2_BLQoMjQAAZTQ"] [Sun Jul 12 18:12:00.021850 2026] [security2:error] [pid 960377:tid 960572] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtTxMANaV5i2_BLQoMiwAAAEA"] [Sun Jul 12 18:12:00.089430 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtR1_56DeKknhy7sPwpQAAAW0"] [Sun Jul 12 18:12:00.204063 2026] [security2:error] [pid 960377:tid 960466] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/app/.env"] [unique_id "alQtUBMANaV5i2_BLQoMkAAAJ1c"] [Sun Jul 12 18:12:00.228875 2026] [security2:error] [pid 960377:tid 960527] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtRxMANaV5i2_BLQoLyQAAABM"] [Sun Jul 12 18:12:00.258119 2026] [security2:error] [pid 960377:tid 960601] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/live/test.php"] [unique_id "alQtUBMANaV5i2_BLQoMkwAAAF0"] [Sun Jul 12 18:12:00.332032 2026] [security2:error] [pid 967714:tid 967970] [client 57.141.18.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx_AAAAX0"] [Sun Jul 12 18:12:00.364828 2026] [security2:error] [pid 960377:tid 960459] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env.backup"] [unique_id "alQtUBMANaV5i2_BLQoMlAAAd1A"] [Sun Jul 12 18:12:00.370241 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:00.408704 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:00.423227 2026] [security2:error] [pid 967714:tid 967812] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ldap.php.old"] [unique_id "alQtUF_56DeKknhy7sPyEwABDFY"] [Sun Jul 12 18:12:00.612403 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:44130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/xampp/info.php"] [unique_id "alQtUBMANaV5i2_BLQoMmAAAAB8"] [Sun Jul 12 18:12:00.891514 2026] [security2:error] [pid 967714:tid 967905] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtUF_56DeKknhy7sPyGQAAATw"] [Sun Jul 12 18:12:00.950745 2026] [security2:error] [pid 967714:tid 967966] [client 20.210.108.71:64795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-speculation-rules.php"] [unique_id "alQtUF_56DeKknhy7sPyHwAAAXk"], referer: binance.com [Sun Jul 12 18:12:01.356307 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:01.356843 2026] [authz_core:error] [pid 967714:tid 967957] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:01.377071 2026] [security2:error] [pid 960377:tid 960590] [client 24.203.79.110:49981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtURMANaV5i2_BLQoMnwAAAFI"] [Sun Jul 12 18:12:01.377334 2026] [security2:error] [pid 960377:tid 960590] [client 24.203.79.110:49981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtURMANaV5i2_BLQoMnwAAAFI"] [Sun Jul 12 18:12:01.536508 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtURMANaV5i2_BLQoMnAAAAEo"] [Sun Jul 12 18:12:01.674511 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtUBMANaV5i2_BLQoMlgAAdVQ"] [Sun Jul 12 18:12:02.000092 2026] [cgid:error] [pid 967714:tid 967908] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:12:02.080798 2026] [security2:error] [pid 967714:tid 967943] [client 152.232.80.168:58288] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/postgres.sql"] [unique_id "alQtUl_56DeKknhy7sPyOgAAAWI"] [Sun Jul 12 18:12:02.109542 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtURMANaV5i2_BLQoMogAAAE8"] [Sun Jul 12 18:12:02.156006 2026] [security2:error] [pid 967714:tid 967904] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtSl_56DeKknhy7sPxFAAAAUI"] [Sun Jul 12 18:12:02.215002 2026] [authz_core:error] [pid 960377:tid 960522] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:02.215767 2026] [authz_core:error] [pid 960377:tid 960522] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:02.280940 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtShMANaV5i2_BLQoMDQAAAGc"], referer: http://67.222.38.115/cluster/healthcheck [Sun Jul 12 18:12:02.312585 2026] [security2:error] [pid 967714:tid 967741] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/emails/.env"] [unique_id "alQtUl_56DeKknhy7sPySAABCg8"] [Sun Jul 12 18:12:02.398393 2026] [proxy:error] [pid 967714:tid 967952] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:02.398659 2026] [proxy_http:error] [pid 967714:tid 967952] [client 74.7.244.56:57508] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:02.401250 2026] [proxy:error] [pid 967714:tid 967952] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:02.401522 2026] [proxy_http:error] [pid 967714:tid 967952] [client 74.7.244.56:57508] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:02.401878 2026] [security2:error] [pid 967714:tid 967952] [client 74.7.244.56:57508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.cscmco.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQtUl_56DeKknhy7sPySgAAAWs"] [Sun Jul 12 18:12:02.581485 2026] [security2:error] [pid 967714:tid 967921] [client 168.100.149.31:34696] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5590/bargainor/2308_monkey.jsp"] [unique_id "alQtUl_56DeKknhy7sPyVQAAAUw"] [Sun Jul 12 18:12:02.638575 2026] [security2:error] [pid 967714:tid 967948] [client 125.167.21.72:62540] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtUl_56DeKknhy7sPyVgAAAWc"] [Sun Jul 12 18:12:02.682660 2026] [security2:error] [pid 967714:tid 967948] [client 125.167.21.72:62540] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtUl_56DeKknhy7sPyVgAAAWc"] [Sun Jul 12 18:12:02.692180 2026] [security2:error] [pid 960377:tid 960525] [client 57.141.18.58:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtUhMANaV5i2_BLQoMrQAAABE"] [Sun Jul 12 18:12:02.775582 2026] [proxy:error] [pid 967714:tid 967874] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:02.775882 2026] [proxy_http:error] [pid 967714:tid 967874] [client 74.7.244.56:57352] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:02.780585 2026] [proxy:error] [pid 967714:tid 967874] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:02.780904 2026] [proxy_http:error] [pid 967714:tid 967874] [client 74.7.244.56:57352] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:02.781340 2026] [security2:error] [pid 967714:tid 967874] [client 74.7.244.56:57352] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.cscmco.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQtUl_56DeKknhy7sPyWQAAAR0"] [Sun Jul 12 18:12:02.846751 2026] [security2:error] [pid 960377:tid 960614] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtUhMANaV5i2_BLQoMwwAAAGo"] [Sun Jul 12 18:12:02.872636 2026] [security2:error] [pid 967714:tid 967969] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfMzE5Ml91M28=.html"] [unique_id "alQtUl_56DeKknhy7sPyXQAAAXw"] [Sun Jul 12 18:12:02.904924 2026] [security2:error] [pid 960377:tid 960586] [client 114.10.121.230:2892] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQtURMANaV5i2_BLQoMoQAAAE4"] [Sun Jul 12 18:12:02.964594 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtURMANaV5i2_BLQoMowAAYTw"] [Sun Jul 12 18:12:03.018204 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:44114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/apache/phpinfo.php"] [unique_id "alQtU1_56DeKknhy7sPyYgAAAWg"] [Sun Jul 12 18:12:03.023564 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:03.098731 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:03.189201 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPxRAAAAYM"] [Sun Jul 12 18:12:03.222591 2026] [security2:error] [pid 960377:tid 960597] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtTBMANaV5i2_BLQoMKQAAABk"] [Sun Jul 12 18:12:03.431998 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtUxMANaV5i2_BLQoMzAAAADI"] [Sun Jul 12 18:12:03.516146 2026] [security2:error] [pid 967714:tid 967872] [client 20.244.27.100:54401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts/class-wp-font-face-resolver.php"] [unique_id "alQtU1_56DeKknhy7sPybwAAARs"], referer: binance.com [Sun Jul 12 18:12:03.635810 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:44202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/crm/info.php"] [unique_id "alQtU1_56DeKknhy7sPydAAAAT4"] [Sun Jul 12 18:12:03.644500 2026] [security2:error] [pid 967714:tid 967910] [client 62.171.167.118:44192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/info.php"] [unique_id "alQtU1_56DeKknhy7sPydQAAAUE"] [Sun Jul 12 18:12:03.767122 2026] [security2:error] [pid 967714:tid 967856] [client 62.171.167.118:44218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/php-info.php"] [unique_id "alQtU1_56DeKknhy7sPydgAAAQs"] [Sun Jul 12 18:12:03.921018 2026] [security2:error] [pid 967714:tid 967904] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtU1_56DeKknhy7sPycwAAATs"] [Sun Jul 12 18:12:03.945851 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:03.946406 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:03.968728 2026] [security2:error] [pid 960377:tid 960529] [client 168.100.149.87:51798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5655/bargainor/2308_impeccance.jsp"] [unique_id "alQtUxMANaV5i2_BLQoM2wAAABU"] [Sun Jul 12 18:12:03.998650 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtU1_56DeKknhy7sPyagAAARw"] [Sun Jul 12 18:12:03.998743 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtU1_56DeKknhy7sPyagAAARw"] [Sun Jul 12 18:12:03.999872 2026] [security2:error] [pid 960377:tid 960509] [client 65.21.113.206:59962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfMzE5Ml91M28=.html"] [unique_id "alQtUxMANaV5i2_BLQoM0gAAAAE"] [Sun Jul 12 18:12:04.113009 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPxQwAAATE"] [Sun Jul 12 18:12:04.190136 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtShMANaV5i2_BLQoMDgAAACA"], referer: http://67.222.38.115/cluster/config [Sun Jul 12 18:12:04.296893 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtUxMANaV5i2_BLQoMzwAAMCY"] [Sun Jul 12 18:12:04.499470 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVBMANaV5i2_BLQoM4QAAAGs"] [Sun Jul 12 18:12:04.739481 2026] [security2:error] [pid 967714:tid 967920] [client 152.32.168.34:60832] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "versatileintelligence.com"] [uri "/400.shtml"] [unique_id "alQtVF_56DeKknhy7sPykgAAAUs"] [Sun Jul 12 18:12:04.809964 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:44220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/temp.php"] [unique_id "alQtVF_56DeKknhy7sPylAAAASI"] [Sun Jul 12 18:12:04.813836 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:04.814495 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:04.843190 2026] [security2:error] [pid 967714:tid 967982] [client 62.171.167.118:45318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/apis/test.php"] [unique_id "alQtVF_56DeKknhy7sPymgAAAYk"] [Sun Jul 12 18:12:04.979116 2026] [security2:error] [pid 967714:tid 967976] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sPykAAAAYM"] [Sun Jul 12 18:12:05.026756 2026] [security2:error] [pid 960377:tid 960572] [client 114.10.121.230:2892] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bhcfe.org"] [uri "/index.php"] [unique_id "alQtVBMANaV5i2_BLQoM3AAAAEA"] [Sun Jul 12 18:12:05.459266 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtVBMANaV5i2_BLQoM5QAAKys"] [Sun Jul 12 18:12:05.509516 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVV_56DeKknhy7sPyogAAAUU"] [Sun Jul 12 18:12:05.601518 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:05.602061 2026] [authz_core:error] [pid 960377:tid 960569] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:05.603761 2026] [security2:error] [pid 967714:tid 967884] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfMzQxOF91M28=.html"] [unique_id "alQtVV_56DeKknhy7sPypwAAASc"] [Sun Jul 12 18:12:05.616425 2026] [security2:error] [pid 960377:tid 960489] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/js/.env"] [unique_id "alQtVRMANaV5i2_BLQoM9gAAMm4"] [Sun Jul 12 18:12:05.755427 2026] [security2:error] [pid 967714:tid 967874] [client 20.210.108.71:50995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-styles.php"] [unique_id "alQtVV_56DeKknhy7sPyrAAAAR0"], referer: binance.com [Sun Jul 12 18:12:05.774875 2026] [security2:error] [pid 960377:tid 960487] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/laravel/core/.env"] [unique_id "alQtVRMANaV5i2_BLQoM-gAAJWw"] [Sun Jul 12 18:12:05.796177 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:45372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/config/parameters.php"] [unique_id "alQtVRMANaV5i2_BLQoM-wAAAA4"] [Sun Jul 12 18:12:05.897700 2026] [security2:error] [pid 960377:tid 960567] [client 197.48.221.253:50601] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtVRMANaV5i2_BLQoM_AAAADs"] [Sun Jul 12 18:12:05.897941 2026] [security2:error] [pid 960377:tid 960567] [client 197.48.221.253:50601] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtVRMANaV5i2_BLQoM_AAAADs"] [Sun Jul 12 18:12:05.947343 2026] [security2:error] [pid 960377:tid 960607] [client 103.131.59.0:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtVRMANaV5i2_BLQoM8AAAAGM"] [Sun Jul 12 18:12:05.961438 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVV_56DeKknhy7sPyqwAAAR4"] [Sun Jul 12 18:12:05.988726 2026] [security2:error] [pid 960377:tid 960474] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/nginx/.env"] [unique_id "alQtVRMANaV5i2_BLQoM_gAAIF8"] [Sun Jul 12 18:12:06.110899 2026] [security2:error] [pid 967714:tid 967909] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQtVl_56DeKknhy7sPyswAAAUA"] [Sun Jul 12 18:12:06.122369 2026] [security2:error] [pid 960377:tid 960609] [client 65.21.113.253:56164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQtVhMANaV5i2_BLQoM_wAAAGU"] [Sun Jul 12 18:12:06.168776 2026] [security2:error] [pid 960377:tid 960391] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/site/.env"] [unique_id "alQtVhMANaV5i2_BLQoNBQAAdw0"] [Sun Jul 12 18:12:06.328411 2026] [security2:error] [pid 960377:tid 960381] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/xampp/.env"] [unique_id "alQtVhMANaV5i2_BLQoNCwAAdAM"] [Sun Jul 12 18:12:06.411152 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:06.411675 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:06.490599 2026] [security2:error] [pid 960377:tid 960484] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.docker/laravel/app/.env"] [unique_id "alQtVhMANaV5i2_BLQoNEgAATmk"] [Sun Jul 12 18:12:06.579854 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVhMANaV5i2_BLQoNCAAAABE"] [Sun Jul 12 18:12:06.600320 2026] [security2:error] [pid 960377:tid 960533] [client 168.100.149.209:62232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5720/bargainor/2308_gunz.jsp"] [unique_id "alQtVhMANaV5i2_BLQoNFQAAABk"] [Sun Jul 12 18:12:06.629599 2026] [security2:error] [pid 967714:tid 967927] [client 147.185.132.144:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtUV_56DeKknhy7sPyKgAAAVI"] [Sun Jul 12 18:12:06.631120 2026] [security2:error] [pid 960377:tid 960519] [client 147.185.132.144:61890] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/shell.php"] [unique_id "alQtURMANaV5i2_BLQoMnQAAAAs"] [Sun Jul 12 18:12:06.793044 2026] [security2:error] [pid 967714:tid 967891] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtVl_56DeKknhy7sPyugAAAS4"] [Sun Jul 12 18:12:06.793107 2026] [security2:error] [pid 967714:tid 967891] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtVl_56DeKknhy7sPyugAAAS4"] [Sun Jul 12 18:12:06.795214 2026] [security2:error] [pid 960377:tid 960577] [client 65.21.113.206:59978] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfMzQxOF91M28=.html"] [unique_id "alQtVhMANaV5i2_BLQoNAQAAAEU"] [Sun Jul 12 18:12:06.914506 2026] [access_compat:error] [pid 960377:tid 960550] [client 45.165.202.237:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/sony-laptop-battery [Sun Jul 12 18:12:06.917211 2026] [access_compat:error] [pid 960377:tid 960550] [client 45.165.202.237:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/401.shtml [Sun Jul 12 18:12:07.124266 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVhMANaV5i2_BLQoNFwAAAGc"] [Sun Jul 12 18:12:07.327286 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:07.327789 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:07.597303 2026] [security2:error] [pid 960377:tid 960602] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtVxMANaV5i2_BLQoNJQAAAF4"] [Sun Jul 12 18:12:07.624098 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtVhMANaV5i2_BLQoNFgAASjk"] [Sun Jul 12 18:12:07.784108 2026] [security2:error] [pid 960377:tid 960573] [client 198.235.24.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtVhMANaV5i2_BLQoNBAAAAEE"] [Sun Jul 12 18:12:07.889534 2026] [security2:error] [pid 967714:tid 967963] [client 198.235.24.247:61474] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/webshell.php"] [unique_id "alQtVV_56DeKknhy7sPyrwAAAXY"] [Sun Jul 12 18:12:08.078318 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:08.078934 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:08.110259 2026] [security2:error] [pid 967714:tid 967863] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtV1_56DeKknhy7sPy1AAAARI"] [Sun Jul 12 18:12:08.520223 2026] [security2:error] [pid 967714:tid 967961] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNDU2OF91M28=.html"] [unique_id "alQtWF_56DeKknhy7sPy5AAAAXQ"] [Sun Jul 12 18:12:08.663823 2026] [security2:error] [pid 967714:tid 967912] [client 168.100.149.228:35778] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5785/bargainor/2308_monadically.jsp"] [unique_id "alQtWF_56DeKknhy7sPy6wAAAUM"] [Sun Jul 12 18:12:08.672746 2026] [security2:error] [pid 967714:tid 967975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtWF_56DeKknhy7sPy4wAAAYI"] [Sun Jul 12 18:12:08.752384 2026] [cgid:error] [pid 960377:tid 960522] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:12:08.826435 2026] [security2:error] [pid 967714:tid 967888] [client 94.187.171.125:51244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtWF_56DeKknhy7sPy8AAAASs"] [Sun Jul 12 18:12:08.826727 2026] [security2:error] [pid 967714:tid 967888] [client 94.187.171.125:51244] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtWF_56DeKknhy7sPy8AAAASs"] [Sun Jul 12 18:12:08.842234 2026] [security2:error] [pid 967714:tid 967795] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/data/readme.bak"] [unique_id "alQtWF_56DeKknhy7sPy8wABb0U"] [Sun Jul 12 18:12:08.869560 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtVxMANaV5i2_BLQoNKAAAdXk"] [Sun Jul 12 18:12:08.883556 2026] [security2:error] [pid 960377:tid 960622] [client 20.244.27.100:50811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts/class-wp-font-face.php"] [unique_id "alQtWBMANaV5i2_BLQoNPQAAAHI"], referer: binance.com [Sun Jul 12 18:12:08.898164 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:08.898878 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:08.900066 2026] [security2:error] [pid 960377:tid 960545] [client 51.77.211.39:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQtWBMANaV5i2_BLQoNMwAAACU"] [Sun Jul 12 18:12:09.107757 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:45368] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/helper/phpinfo.php"] [unique_id "alQtWRMANaV5i2_BLQoNQwAAAHw"] [Sun Jul 12 18:12:09.259100 2026] [security2:error] [pid 960377:tid 960566] [client 147.185.132.66:61184] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.132.185.147.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/webshell.php"] [unique_id "alQtWRMANaV5i2_BLQoNRAAAADo"] [Sun Jul 12 18:12:09.413839 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtWRMANaV5i2_BLQoNQQAAAGs"] [Sun Jul 12 18:12:09.520386 2026] [security2:error] [pid 967714:tid 967952] [client 62.171.167.118:45384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/info.php"] [unique_id "alQtWV_56DeKknhy7sPzBwAAAWs"] [Sun Jul 12 18:12:09.538213 2026] [cgid:error] [pid 960377:tid 960525] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:12:09.589054 2026] [security2:error] [pid 960377:tid 960511] [client 62.171.167.118:45356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/lara/phpinfo.php"] [unique_id "alQtWRMANaV5i2_BLQoNTgAAAAM"] [Sun Jul 12 18:12:09.653507 2026] [security2:error] [pid 960377:tid 960626] [client 20.210.108.71:61503] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-textdomain-registry.php"] [unique_id "alQtWRMANaV5i2_BLQoNUAAAAHY"], referer: binance.com [Sun Jul 12 18:12:09.675552 2026] [authz_core:error] [pid 960377:tid 960604] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:09.676078 2026] [authz_core:error] [pid 960377:tid 960604] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:09.767945 2026] [security2:error] [pid 967714:tid 967924] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtWV_56DeKknhy7sPy_AAAAU8"] [Sun Jul 12 18:12:09.768017 2026] [security2:error] [pid 967714:tid 967924] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtWV_56DeKknhy7sPy_AAAAU8"] [Sun Jul 12 18:12:09.769980 2026] [security2:error] [pid 960377:tid 960623] [client 65.21.113.206:59994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNDU2OF91M28=.html"] [unique_id "alQtWBMANaV5i2_BLQoNPgAAAHM"] [Sun Jul 12 18:12:09.873745 2026] [security2:error] [pid 967714:tid 967948] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtWV_56DeKknhy7sPzDAAAAWc"] [Sun Jul 12 18:12:10.019400 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtWRMANaV5i2_BLQoNQAAAMG8"] [Sun Jul 12 18:12:10.362783 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:45396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/old_phpinfo.php"] [unique_id "alQtWhMANaV5i2_BLQoNWQAAAA4"] [Sun Jul 12 18:12:10.363382 2026] [security2:error] [pid 967714:tid 967943] [client 57.129.135.175:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQtWV_56DeKknhy7sPzFAAAAWI"] [Sun Jul 12 18:12:10.457704 2026] [security2:error] [pid 960377:tid 960569] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtWhMANaV5i2_BLQoNVQAAAD0"] [Sun Jul 12 18:12:10.492589 2026] [authz_core:error] [pid 960377:tid 960509] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:10.493125 2026] [authz_core:error] [pid 960377:tid 960509] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:10.499047 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:45408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/service/phpinfo.php"] [unique_id "alQtWl_56DeKknhy7sPzHwAAAWU"] [Sun Jul 12 18:12:10.587131 2026] [security2:error] [pid 960377:tid 960632] [client 62.171.167.118:45410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/services/phpinfo.php"] [unique_id "alQtWhMANaV5i2_BLQoNYQAAAHw"] [Sun Jul 12 18:12:10.610378 2026] [security2:error] [pid 960377:tid 960602] [client 168.100.149.91:58950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5850/bargainor/2308_enhalo.jsp"] [unique_id "alQtWhMANaV5i2_BLQoNZAAAAF4"] [Sun Jul 12 18:12:10.629604 2026] [security2:error] [pid 967714:tid 967829] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/old/database.bak"] [unique_id "alQtWl_56DeKknhy7sPzIgABS2c"] [Sun Jul 12 18:12:10.757872 2026] [cgid:error] [pid 960377:tid 960615] [client 74.7.228.59:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml [Sun Jul 12 18:12:10.758207 2026] [security2:error] [pid 960377:tid 960615] [client 74.7.228.59:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.xxj.lnc.mybluehost.me"] [uri "/404.shtml"] [unique_id "alQtWhMANaV5i2_BLQoNaAAAAGs"] [Sun Jul 12 18:12:10.760151 2026] [security2:error] [pid 960377:tid 960614] [client 74.7.228.59:39338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.xxj.lnc.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQtWhMANaV5i2_BLQoNZgAAags"] [Sun Jul 12 18:12:10.975809 2026] [security2:error] [pid 967714:tid 967864] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNTI4MV91M28=.html"] [unique_id "alQtWl_56DeKknhy7sPzJgAAARM"] [Sun Jul 12 18:12:11.110071 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx4AAAAXI"] [Sun Jul 12 18:12:11.176757 2026] [security2:error] [pid 960377:tid 960542] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtWhMANaV5i2_BLQoNVwAAImU"] [Sun Jul 12 18:12:11.203020 2026] [security2:error] [pid 967714:tid 967941] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtWl_56DeKknhy7sPzJQAAAWA"] [Sun Jul 12 18:12:11.388548 2026] [security2:error] [pid 967714:tid 967849] [remote 185.177.72.12:4496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/backup.sql"] [unique_id "alQtW1_56DeKknhy7sPzKgABT3s"] [Sun Jul 12 18:12:11.399924 2026] [authz_core:error] [pid 960377:tid 960587] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:11.400414 2026] [authz_core:error] [pid 960377:tid 960587] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:11.584699 2026] [security2:error] [pid 960377:tid 960528] [client 188.213.202.137:38635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tristatecrush.com"] [uri "/wp-login.php"] [unique_id "alQtWxMANaV5i2_BLQoNdgAAABQ"] [Sun Jul 12 18:12:11.795212 2026] [security2:error] [pid 967714:tid 967726] [remote 185.177.72.12:4496] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/freedoms.php"] [unique_id "alQtW1_56DeKknhy7sPzLgABbQA"] [Sun Jul 12 18:12:11.912068 2026] [security2:error] [pid 960377:tid 960591] [client 24.203.79.110:50501] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtWxMANaV5i2_BLQoNegAAAFM"] [Sun Jul 12 18:12:11.918603 2026] [security2:error] [pid 960377:tid 960591] [client 24.203.79.110:50501] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtWxMANaV5i2_BLQoNegAAAFM"] [Sun Jul 12 18:12:12.015883 2026] [security2:error] [pid 967714:tid 967910] [client 102.66.183.244:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "lizatterbury.com"] [uri "/index.php"] [unique_id "alQtWV_56DeKknhy7sPzAgAAAUE"] [Sun Jul 12 18:12:12.090508 2026] [security2:error] [pid 967714:tid 967855] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtW1_56DeKknhy7sPzLwAAAQo"] [Sun Jul 12 18:12:12.090591 2026] [security2:error] [pid 967714:tid 967855] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtW1_56DeKknhy7sPzLwAAAQo"] [Sun Jul 12 18:12:12.116285 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTV_56DeKknhy7sPxfgAAAUk"] [Sun Jul 12 18:12:12.118945 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTV_56DeKknhy7sPxfQAAAXU"], referer: http://67.222.40.58/admin/.env.local [Sun Jul 12 18:12:12.127972 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtTF_56DeKknhy7sPyQgABVik"] [Sun Jul 12 18:12:12.189487 2026] [security2:error] [pid 967714:tid 967922] [client 65.21.113.206:60004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNTI4MV91M28=.html"] [unique_id "alQtW1_56DeKknhy7sPzLAAAAU0"] [Sun Jul 12 18:12:12.202146 2026] [cgid:error] [pid 960377:tid 960619] [client 152.232.80.168:51387] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:12:12.226956 2026] [security2:error] [pid 967714:tid 967862] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sPyRwAAARE"] [Sun Jul 12 18:12:12.248608 2026] [security2:error] [pid 960377:tid 960553] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUhMANaV5i2_BLQoMsgAAAC0"] [Sun Jul 12 18:12:12.258581 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:12.259650 2026] [authz_core:error] [pid 960377:tid 960592] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:12.353585 2026] [security2:error] [pid 967714:tid 967766] [remote 185.177.72.12:53666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQtXF_56DeKknhy7sPzWwABEig"] [Sun Jul 12 18:12:12.371588 2026] [security2:error] [pid 967714:tid 967921] [client 125.167.21.72:62981] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtXF_56DeKknhy7sPzXAAAAUw"] [Sun Jul 12 18:12:12.371865 2026] [security2:error] [pid 967714:tid 967921] [client 125.167.21.72:62981] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtXF_56DeKknhy7sPzXAAAAUw"] [Sun Jul 12 18:12:12.389832 2026] [security2:error] [pid 960377:tid 960533] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtWxMANaV5i2_BLQoNcgAAGXM"] [Sun Jul 12 18:12:12.609320 2026] [security2:error] [pid 967714:tid 967949] [client 168.100.149.198:17384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5915/bargainor/2308_metalogical.jsp"] [unique_id "alQtXF_56DeKknhy7sPzZAAAAWg"] [Sun Jul 12 18:12:12.825475 2026] [security2:error] [pid 967714:tid 967812] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/login.bak"] [unique_id "alQtXF_56DeKknhy7sPzZQABKVY"] [Sun Jul 12 18:12:13.013445 2026] [security2:error] [pid 967714:tid 967860] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/views/config.php"] [unique_id "alQtXV_56DeKknhy7sPzawAAAQ8"] [Sun Jul 12 18:12:13.035152 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:13.035625 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:13.080177 2026] [security2:error] [pid 967714:tid 967869] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxzwAAARg"] [Sun Jul 12 18:12:13.114728 2026] [security2:error] [pid 960377:tid 960538] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMQwAAAB4"] [Sun Jul 12 18:12:13.162423 2026] [security2:error] [pid 960377:tid 960564] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMXAAAADg"] [Sun Jul 12 18:12:13.224448 2026] [security2:error] [pid 960377:tid 960626] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/config.php"] [unique_id "alQtXRMANaV5i2_BLQoNlQAAAHY"] [Sun Jul 12 18:12:13.471099 2026] [security2:error] [pid 960377:tid 960603] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNiwAAX3A"] [Sun Jul 12 18:12:13.630866 2026] [security2:error] [pid 960377:tid 960405] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/main/.env"] [unique_id "alQtXRMANaV5i2_BLQoNlwAAUhs"] [Sun Jul 12 18:12:13.681991 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtXV_56DeKknhy7sPzbwAAAQ0"] [Sun Jul 12 18:12:13.813697 2026] [security2:error] [pid 960377:tid 960573] [client 52.167.144.213:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_battery.php"] [unique_id "alQtXRMANaV5i2_BLQoNmAAAQWg"] [Sun Jul 12 18:12:13.884006 2026] [authz_core:error] [pid 967714:tid 967921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:13.885115 2026] [authz_core:error] [pid 967714:tid 967921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:13.958759 2026] [security2:error] [pid 960377:tid 960587] [client 168.100.149.1:57478] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/5980/bargainor/2308_psychoreflex.jsp"] [unique_id "alQtXRMANaV5i2_BLQoNoQAAAE8"] [Sun Jul 12 18:12:14.000347 2026] [security2:error] [pid 967714:tid 967759] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/routes/console/.env"] [unique_id "alQtXV_56DeKknhy7sPzeAABWiE"] [Sun Jul 12 18:12:14.021269 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNzc1Ml91M28=.html"] [unique_id "alQtXl_56DeKknhy7sPzeQAAARw"] [Sun Jul 12 18:12:14.082549 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMQQAAAD4"], referer: http://67.222.40.58/admin/dashboard/phpinfo [Sun Jul 12 18:12:14.093090 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtU1_56DeKknhy7sPyaQAAAYE"] [Sun Jul 12 18:12:14.150117 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTV_56DeKknhy7sPxfwAAAYU"] [Sun Jul 12 18:12:14.187989 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxxgAAAVc"] [Sun Jul 12 18:12:14.188368 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sPyRgAAATQ"] [Sun Jul 12 18:12:14.471253 2026] [security2:error] [pid 960377:tid 960575] [client 20.244.27.100:58805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts/class-wp-font-library.php"] [unique_id "alQtXhMANaV5i2_BLQoNqgAAAEM"], referer: binance.com [Sun Jul 12 18:12:14.487507 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtXl_56DeKknhy7sPzfQAAAR4"] [Sun Jul 12 18:12:14.688474 2026] [authz_core:error] [pid 960377:tid 960552] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:14.689039 2026] [authz_core:error] [pid 960377:tid 960552] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:14.802384 2026] [security2:error] [pid 960377:tid 960460] [remote 180.153.197.67:55620] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.acedev.net"] [uri "/usercp.php"] [unique_id "alQtXhMANaV5i2_BLQoNtgAAIVE"] [Sun Jul 12 18:12:14.825947 2026] [cgid:error] [pid 960377:tid 960618] [client 202.46.62.90:26096] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/mini-vinyl-footballs-custom-p-49.html?osCsid=2qclk3fnrq0bgotaue8u9ncsp0 [Sun Jul 12 18:12:14.910402 2026] [security2:error] [pid 960377:tid 960542] [client 202.46.62.49:31994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtXhMANaV5i2_BLQoNvAAAACI"], referer: https://www.stephenspublishing.com/mini-vinyl-footballs-custom-p-49.html?osCsid=2qclk3fnrq0bgotaue8u9ncsp0 [Sun Jul 12 18:12:14.912831 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtXRMANaV5i2_BLQoNmwAAKxE"] [Sun Jul 12 18:12:14.962557 2026] [security2:error] [pid 960377:tid 960511] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtXhMANaV5i2_BLQoNtQAAAAM"] [Sun Jul 12 18:12:15.076792 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/storage/app/private/.env"] [unique_id "alQtXxMANaV5i2_BLQoNwwAAOzE"] [Sun Jul 12 18:12:15.094646 2026] [security2:error] [pid 960377:tid 960634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUhMANaV5i2_BLQoMswAAAH4"] [Sun Jul 12 18:12:15.112149 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sPySQAAASM"] [Sun Jul 12 18:12:15.264770 2026] [security2:error] [pid 960377:tid 960566] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtXhMANaV5i2_BLQoNrgAAADo"] [Sun Jul 12 18:12:15.264854 2026] [security2:error] [pid 960377:tid 960566] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtXhMANaV5i2_BLQoNrgAAADo"] [Sun Jul 12 18:12:15.270399 2026] [security2:error] [pid 967714:tid 967872] [client 65.21.113.206:33166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTJfODQ1MV8ycHUzL3BfNzc1Ml91M28=.html"] [unique_id "alQtXl_56DeKknhy7sPzhAAAARs"] [Sun Jul 12 18:12:15.357143 2026] [security2:error] [pid 960377:tid 960564] [client 198.235.24.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtXhMANaV5i2_BLQoNsgAAADg"] [Sun Jul 12 18:12:15.493399 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:15.493968 2026] [authz_core:error] [pid 960377:tid 960605] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:15.509600 2026] [security2:error] [pid 967714:tid 967890] [client 20.210.108.71:62217] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-theme-json-data.php"] [unique_id "alQtX1_56DeKknhy7sPzlQAAAS0"], referer: binance.com [Sun Jul 12 18:12:15.610537 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtX1_56DeKknhy7sPzkQAAATA"] [Sun Jul 12 18:12:15.891608 2026] [security2:error] [pid 967714:tid 967963] [client 57.141.18.101:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtXl_56DeKknhy7sPzfwAAAXY"] [Sun Jul 12 18:12:15.977494 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:45412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/xampp/phpinfo.php"] [unique_id "alQtXxMANaV5i2_BLQoN2AAAAHY"] [Sun Jul 12 18:12:15.998947 2026] [security2:error] [pid 960377:tid 960512] [client 193.56.116.61:26687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.116.56.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "faithfulvows.com"] [uri "/wp-login.php"] [unique_id "alQtXxMANaV5i2_BLQoN1wAAAAQ"] [Sun Jul 12 18:12:16.122264 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMZwAAAEY"] [Sun Jul 12 18:12:16.147992 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxxQAAAWM"], referer: http://67.222.40.58/admin/jenkinsFile [Sun Jul 12 18:12:16.150598 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUhMANaV5i2_BLQoMtAAAAAk"] [Sun Jul 12 18:12:16.186331 2026] [security2:error] [pid 967714:tid 967911] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtX1_56DeKknhy7sPzngAAAUI"] [Sun Jul 12 18:12:16.192104 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtU1_56DeKknhy7sPyZwAAAT8"] [Sun Jul 12 18:12:16.233019 2026] [security2:error] [pid 960377:tid 960420] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtXxMANaV5i2_BLQoNxwAAbSk"] [Sun Jul 12 18:12:16.235702 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxxAAAATg"] [Sun Jul 12 18:12:16.376749 2026] [security2:error] [pid 967714:tid 967969] [client 197.48.221.253:51228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtYF_56DeKknhy7sPzrQAAAXw"] [Sun Jul 12 18:12:16.377029 2026] [security2:error] [pid 967714:tid 967969] [client 197.48.221.253:51228] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtYF_56DeKknhy7sPzrQAAAXw"] [Sun Jul 12 18:12:16.394927 2026] [security2:error] [pid 967714:tid 967973] [client 74.7.241.139:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "qc.zcaa.ae"] [uri "/index.php"] [unique_id "alQtVV_56DeKknhy7sPyowAAAYA"] [Sun Jul 12 18:12:16.408252 2026] [authz_core:error] [pid 960377:tid 960607] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:16.454456 2026] [authz_core:error] [pid 960377:tid 960607] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:16.612578 2026] [security2:error] [pid 967714:tid 967857] [client 168.100.149.104:57684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6045/bargainor/2308_mailable.jsp"] [unique_id "alQtYF_56DeKknhy7sPzswAAAQw"] [Sun Jul 12 18:12:16.649032 2026] [security2:error] [pid 960377:tid 960524] [client 66.132.172.223:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQtYBMANaV5i2_BLQoN3wAAABA"] [Sun Jul 12 18:12:16.713294 2026] [security2:error] [pid 960377:tid 960424] [remote 180.153.197.67:55632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQtYBMANaV5i2_BLQoN6AAAZC0"], referer: https://www.cidclan.acedev.net/ [Sun Jul 12 18:12:16.727586 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtYBMANaV5i2_BLQoN5AAAAEE"] [Sun Jul 12 18:12:16.772469 2026] [security2:error] [pid 967714:tid 967921] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTM5LTMyMjQxLTM5cTJ6LTcwMzAtOXEy.cgi"] [unique_id "alQtYF_56DeKknhy7sPztAAAAUw"] [Sun Jul 12 18:12:17.170146 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMZAAAABg"] [Sun Jul 12 18:12:17.232066 2026] [security2:error] [pid 960377:tid 960568] [client 152.232.80.168:51694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/hashing.php"] [unique_id "alQtYRMANaV5i2_BLQoN7AAAADw"] [Sun Jul 12 18:12:17.232569 2026] [security2:error] [pid 960377:tid 960430] [remote 180.153.197.67:55632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQtYRMANaV5i2_BLQoN7QAAXjM"], referer: https://www.cidclan.net/discord/gamer/gamer.php [Sun Jul 12 18:12:17.293859 2026] [security2:error] [pid 967714:tid 967897] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtYF_56DeKknhy7sPztwAAATQ"] [Sun Jul 12 18:12:17.408332 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:17.409394 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:17.483270 2026] [security2:error] [pid 960377:tid 960570] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtYBMANaV5i2_BLQoN4wAAPnc"] [Sun Jul 12 18:12:17.647111 2026] [security2:error] [pid 960377:tid 960533] [client 152.232.80.168:49515] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/project/.env"] [unique_id "alQtYRMANaV5i2_BLQoN_AAAABk"] [Sun Jul 12 18:12:17.767614 2026] [security2:error] [pid 967714:tid 967956] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtYV_56DeKknhy7sPzwwAAAW8"] [Sun Jul 12 18:12:17.885440 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtYV_56DeKknhy7sPzvwAAAR0"] [Sun Jul 12 18:12:17.885494 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtYV_56DeKknhy7sPzvwAAAR0"] [Sun Jul 12 18:12:17.886590 2026] [security2:error] [pid 960377:tid 960553] [client 65.21.113.206:33178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTM5LTMyMjQxLTM5cTJ6LTcwMzAtOXEy.cgi"] [unique_id "alQtYRMANaV5i2_BLQoN8AAAAC0"] [Sun Jul 12 18:12:17.959074 2026] [security2:error] [pid 960377:tid 960434] [remote 98.156.100.191:54802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.100.156.98.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.com"] [uri "/wp-login.php"] [unique_id "alQtYRMANaV5i2_BLQoOAAAAbzc"] [Sun Jul 12 18:12:18.138942 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMRAAAAFA"], referer: http://67.222.40.58/admin/.gitlab-ci.yml [Sun Jul 12 18:12:18.168929 2026] [security2:error] [pid 960377:tid 960563] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMXgAAAHs"], referer: http://67.222.40.58/administration/.env.dist [Sun Jul 12 18:12:18.171124 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxxwAAAVU"], referer: http://67.222.40.58/admin/web.config [Sun Jul 12 18:12:18.199121 2026] [security2:error] [pid 960377:tid 960518] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMQgAAAAg"] [Sun Jul 12 18:12:18.212785 2026] [security2:error] [pid 967714:tid 967939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sPyUwAAAYQ"] [Sun Jul 12 18:12:18.260795 2026] [cgid:error] [pid 967714:tid 967859] [client 152.232.80.168:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:12:18.333374 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:18.334084 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:18.351483 2026] [security2:error] [pid 967714:tid 967976] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtYV_56DeKknhy7sPzywAAAYM"] [Sun Jul 12 18:12:18.598863 2026] [security2:error] [pid 967714:tid 967855] [client 168.100.149.52:46770] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6110/bargainor/2308_epidemiology.jsp"] [unique_id "alQtYl_56DeKknhy7sPz3AAAAQo"] [Sun Jul 12 18:12:18.661028 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtYRMANaV5i2_BLQoN-wAAax8"] [Sun Jul 12 18:12:18.823957 2026] [security2:error] [pid 967714:tid 967949] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtYl_56DeKknhy7sPz2wAAAWg"] [Sun Jul 12 18:12:18.999367 2026] [security2:error] [pid 967714:tid 967862] [client 20.244.27.100:63513] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 100.27.244.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "marcybudwick.com"] [uri "/wp-includes/fonts/class-wp-font-utils.php"] [unique_id "alQtYl_56DeKknhy7sPz6AAAARE"], referer: binance.com [Sun Jul 12 18:12:19.091777 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxzgAAARk"] [Sun Jul 12 18:12:19.149455 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:19.150229 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:19.158095 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTV_56DeKknhy7sPxgAAAAXM"], referer: http://67.222.40.58/admin/_profiler/phpinfo [Sun Jul 12 18:12:19.179153 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sPygQAAAYY"] [Sun Jul 12 18:12:19.226270 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMagAAAEk"], referer: http://67.222.40.58/admins/.env.dev [Sun Jul 12 18:12:19.254152 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMZgAAAFs"] [Sun Jul 12 18:12:19.344936 2026] [security2:error] [pid 960377:tid 960565] [client 43.135.140.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQtYxMANaV5i2_BLQoOGQAAADk"] [Sun Jul 12 18:12:19.403435 2026] [security2:error] [pid 967714:tid 967887] [client 57.141.18.69:32527] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.europeangranite.com"] [uri "/index.php"] [unique_id "alQtYV_56DeKknhy7sPzuwABKis"] [Sun Jul 12 18:12:19.416711 2026] [security2:error] [pid 967714:tid 967891] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtY1_56DeKknhy7sPz6gAAAS4"] [Sun Jul 12 18:12:19.500760 2026] [security2:error] [pid 967714:tid 967958] [client 94.187.171.125:51734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtY1_56DeKknhy7sPz7QAAAXE"] [Sun Jul 12 18:12:19.500977 2026] [security2:error] [pid 967714:tid 967958] [client 94.187.171.125:51734] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtY1_56DeKknhy7sPz7QAAAXE"] [Sun Jul 12 18:12:19.580212 2026] [security2:error] [pid 967714:tid 967806] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/infra/id_dsa"] [unique_id "alQtY1_56DeKknhy7sPz7wABfFA"] [Sun Jul 12 18:12:19.781104 2026] [security2:error] [pid 967714:tid 967884] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTMtMjY4Ni8zdjQvMTk0OS12NGJh"] [unique_id "alQtY1_56DeKknhy7sPz9QAAASc"] [Sun Jul 12 18:12:19.836563 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtYhMANaV5i2_BLQoOCwAAVCw"] [Sun Jul 12 18:12:20.027057 2026] [authz_core:error] [pid 967714:tid 967864] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:20.027583 2026] [authz_core:error] [pid 967714:tid 967864] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:20.103834 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtY1_56DeKknhy7sPz9AAAAVo"] [Sun Jul 12 18:12:20.591656 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZBMANaV5i2_BLQoOJwAAACs"] [Sun Jul 12 18:12:20.653075 2026] [security2:error] [pid 967714:tid 967874] [client 168.100.149.153:15072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6175/bargainor/2308_secque.jsp"] [unique_id "alQtZF_56DeKknhy7sP0CgAAAR0"] [Sun Jul 12 18:12:20.860262 2026] [security2:error] [pid 960377:tid 960525] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtZBMANaV5i2_BLQoOJgAAABE"] [Sun Jul 12 18:12:20.860333 2026] [security2:error] [pid 960377:tid 960525] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtZBMANaV5i2_BLQoOJgAAABE"] [Sun Jul 12 18:12:20.862403 2026] [security2:error] [pid 960377:tid 960598] [client 65.21.113.206:33182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTMtMjY4Ni8zdjQvMTk0OS12NGJh"] [unique_id "alQtZBMANaV5i2_BLQoOJAAAAFo"] [Sun Jul 12 18:12:20.907390 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:20.907939 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:20.986955 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtYxMANaV5i2_BLQoOIgAAJEM"] [Sun Jul 12 18:12:21.051955 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZBMANaV5i2_BLQoOLgAAAA8"] [Sun Jul 12 18:12:21.075162 2026] [security2:error] [pid 960377:tid 960613] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTRMANaV5i2_BLQoMPwAAAGk"] [Sun Jul 12 18:12:21.115978 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sPyggAAAXA"] [Sun Jul 12 18:12:21.121498 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMaQAAAAU"] [Sun Jul 12 18:12:21.176870 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/config.php.bak"] [unique_id "alQtZRMANaV5i2_BLQoOMAAALAg"] [Sun Jul 12 18:12:21.419782 2026] [security2:error] [pid 967714:tid 967941] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQtZV_56DeKknhy7sP0GAAAAWA"] [Sun Jul 12 18:12:21.420720 2026] [security2:error] [pid 960377:tid 960581] [client 65.21.113.253:32932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "sfurology.com"] [uri "/robots.txt"] [unique_id "alQtZRMANaV5i2_BLQoOOQAAAEk"] [Sun Jul 12 18:12:21.466854 2026] [security2:error] [pid 967714:tid 967884] [client 216.244.66.249:36094] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lcmha.org"] [uri "/robots.txt"] [unique_id "alQtZV_56DeKknhy7sP0GgAAASc"] [Sun Jul 12 18:12:21.468134 2026] [security2:error] [pid 967714:tid 967884] [client 216.244.66.249:36094] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "lcmha.org"] [uri "/robots.txt"] [unique_id "alQtZV_56DeKknhy7sP0GgAAASc"] [Sun Jul 12 18:12:21.515164 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:33676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/application/config/constants.php/"] [unique_id "alQtZV_56DeKknhy7sP0HAAAAYE"] [Sun Jul 12 18:12:21.522531 2026] [security2:error] [pid 967714:tid 967894] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZV_56DeKknhy7sP0FAAAATE"] [Sun Jul 12 18:12:21.722552 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:21.723163 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:21.964951 2026] [security2:error] [pid 967714:tid 967872] [client 168.100.149.79:52632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6240/bargainor/2308_dislevelment.jsp"] [unique_id "alQtZV_56DeKknhy7sP0KwAAARs"] [Sun Jul 12 18:12:22.027122 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZV_56DeKknhy7sP0JgAAAQ0"] [Sun Jul 12 18:12:22.144506 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPxzQAAAVs"], referer: http://67.222.40.58/admin/server.xml [Sun Jul 12 18:12:22.252582 2026] [security2:error] [pid 967714:tid 967960] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/testenv.php"] [unique_id "alQtZl_56DeKknhy7sP0MgAAAXM"] [Sun Jul 12 18:12:22.525983 2026] [security2:error] [pid 960377:tid 960566] [client 24.203.79.110:51029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtZhMANaV5i2_BLQoOaQAAADo"] [Sun Jul 12 18:12:22.531111 2026] [security2:error] [pid 960377:tid 960566] [client 24.203.79.110:51029] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtZhMANaV5i2_BLQoOaQAAADo"] [Sun Jul 12 18:12:22.568848 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:22.569442 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:22.573462 2026] [security2:error] [pid 967714:tid 967939] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTMtNTk2MC8zankvMTc4MjUtanlqYQ=="] [unique_id "alQtZl_56DeKknhy7sP0OwAAAV4"] [Sun Jul 12 18:12:22.586091 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtZRMANaV5i2_BLQoOOAAAHlc"] [Sun Jul 12 18:12:22.633481 2026] [security2:error] [pid 967714:tid 967967] [client 124.156.136.167:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQtZV_56DeKknhy7sP0FwABem4"] [Sun Jul 12 18:12:22.735800 2026] [security2:error] [pid 960377:tid 960519] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZhMANaV5i2_BLQoOZwAAAAs"] [Sun Jul 12 18:12:22.742795 2026] [security2:error] [pid 967714:tid 967914] [client 45.205.1.223:48186] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "tekbevy.com"] [uri "/400.shtml"] [unique_id "alQtZl_56DeKknhy7sP0PwAAAUU"] [Sun Jul 12 18:12:22.751247 2026] [security2:error] [pid 960377:tid 960449] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/server-info"] [unique_id "alQtZhMANaV5i2_BLQoObgAAJEY"] [Sun Jul 12 18:12:22.757232 2026] [security2:error] [pid 967714:tid 967940] [client 20.210.108.71:50927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-theme-json-resolver.php"] [unique_id "alQtZl_56DeKknhy7sP0QAAAAV8"], referer: binance.com [Sun Jul 12 18:12:22.917197 2026] [security2:error] [pid 967714:tid 967924] [client 125.167.21.72:61438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtZl_56DeKknhy7sP0RAAAAU8"] [Sun Jul 12 18:12:22.917612 2026] [security2:error] [pid 967714:tid 967924] [client 125.167.21.72:61438] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtZl_56DeKknhy7sP0RAAAAU8"] [Sun Jul 12 18:12:23.026013 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:40192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phptest.php"] [unique_id "alQtZ1_56DeKknhy7sP0TQAAAYc"] [Sun Jul 12 18:12:23.037659 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:40242] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php.php"] [unique_id "alQtZ1_56DeKknhy7sP0UAAAAYg"] [Sun Jul 12 18:12:23.042699 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:40216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin.php"] [unique_id "alQtZ1_56DeKknhy7sP0UQAAASw"] [Sun Jul 12 18:12:23.053364 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:40252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/vendor/autoload.php"] [unique_id "alQtZ1_56DeKknhy7sP0VgAAAYU"] [Sun Jul 12 18:12:23.065974 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:40298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php"] [unique_id "alQtZxMANaV5i2_BLQoOdAAAAF0"] [Sun Jul 12 18:12:23.148959 2026] [security2:error] [pid 960377:tid 960630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMbgAAAHo"] [Sun Jul 12 18:12:23.182003 2026] [security2:error] [pid 960377:tid 960482] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phptest.php"] [unique_id "alQtZxMANaV5i2_BLQoOgwAAD2c"] [Sun Jul 12 18:12:23.182086 2026] [authz_core:error] [pid 960377:tid 960453] [remote 62.171.167.118:45212] AH01630: client denied by server configuration: /home3/planoper/public_html/.htaccess [Sun Jul 12 18:12:23.192102 2026] [security2:error] [pid 960377:tid 960403] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin.php"] [unique_id "alQtZxMANaV5i2_BLQoOhgAADxk"] [Sun Jul 12 18:12:23.199510 2026] [security2:error] [pid 960377:tid 960464] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.ssh/id_rsa"] [unique_id "alQtZxMANaV5i2_BLQoOhwAAD1U"] [Sun Jul 12 18:12:23.201455 2026] [security2:error] [pid 960377:tid 960453] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php.php"] [unique_id "alQtZxMANaV5i2_BLQoOiQAAD0o"] [Sun Jul 12 18:12:23.204152 2026] [security2:error] [pid 960377:tid 960464] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/vendor/autoload.php"] [unique_id "alQtZxMANaV5i2_BLQoOjAAAD1U"] [Sun Jul 12 18:12:23.207046 2026] [security2:error] [pid 960377:tid 960479] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php"] [unique_id "alQtZxMANaV5i2_BLQoOkgAAD2Q"] [Sun Jul 12 18:12:23.241745 2026] [security2:error] [pid 960377:tid 960389] [remote 62.171.167.118:45212] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.ssh/id_rsa"] [unique_id "alQtZxMANaV5i2_BLQoOogAADws"], referer: http://67.222.42.11/.ssh/id_rsa [Sun Jul 12 18:12:23.298443 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZl_56DeKknhy7sP0RQAAATA"] [Sun Jul 12 18:12:23.408282 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:23.408793 2026] [authz_core:error] [pid 960377:tid 960608] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:23.625165 2026] [security2:error] [pid 960377:tid 960534] [client 47.128.20.25:22830] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.justfeelgood.com"] [uri "/robots.txt"] [unique_id "alQtZxMANaV5i2_BLQoOuwAAABo"] [Sun Jul 12 18:12:23.748691 2026] [security2:error] [pid 967714:tid 967957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZ1_56DeKknhy7sP0YQAAAXA"] [Sun Jul 12 18:12:23.808922 2026] [security2:error] [pid 960377:tid 960554] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtZxMANaV5i2_BLQoOoAAAAC4"] [Sun Jul 12 18:12:23.809006 2026] [security2:error] [pid 960377:tid 960554] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtZxMANaV5i2_BLQoOoAAAAC4"] [Sun Jul 12 18:12:23.810618 2026] [security2:error] [pid 967714:tid 967859] [client 65.21.113.206:37664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTMtNTk2MC8zankvMTc4MjUtanlqYQ=="] [unique_id "alQtZ1_56DeKknhy7sP0VQAAAQ4"] [Sun Jul 12 18:12:23.890258 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtZhMANaV5i2_BLQoOcAAAPHU"] [Sun Jul 12 18:12:24.050183 2026] [security2:error] [pid 960377:tid 960443] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/config.php.save"] [unique_id "alQtaBMANaV5i2_BLQoOxwAAdEA"] [Sun Jul 12 18:12:24.275446 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:24.276168 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:24.310775 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtZxMANaV5i2_BLQoOxAAAAFg"] [Sun Jul 12 18:12:24.443984 2026] [security2:error] [pid 960377:tid 960567] [client 2001:d08:e1:ace1:4975:387b:dc74:650f:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQtZxMANaV5i2_BLQoOtwAAOyk"] [Sun Jul 12 18:12:24.569957 2026] [security2:error] [pid 967714:tid 967966] [client 43.131.3.157:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQtZ1_56DeKknhy7sP0YwABeXA"] [Sun Jul 12 18:12:24.619216 2026] [security2:error] [pid 967714:tid 967899] [client 168.100.149.90:15604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6305/bargainor/2308_limnoria.jsp"] [unique_id "alQtaF_56DeKknhy7sP0fQAAATY"] [Sun Jul 12 18:12:24.747997 2026] [security2:error] [pid 967714:tid 967888] [client 94.208.208.18:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtZ1_56DeKknhy7sP0aQAAASs"] [Sun Jul 12 18:12:24.766039 2026] [security2:error] [pid 960377:tid 960584] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtaBMANaV5i2_BLQoO0AAAAEw"] [Sun Jul 12 18:12:24.783227 2026] [security2:error] [pid 960377:tid 960510] [client 103.134.0.7:34491] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "127.0.0.1"] [uri "/GponForm/diag_Form"] [unique_id "alQtaBMANaV5i2_BLQoO0QAAAAI"] [Sun Jul 12 18:12:24.928050 2026] [security2:error] [pid 967714:tid 967841] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/vendor/aws/.env"] [unique_id "alQtaF_56DeKknhy7sP0ggABTHM"] [Sun Jul 12 18:12:25.069249 2026] [authz_core:error] [pid 960377:tid 960601] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:25.070722 2026] [authz_core:error] [pid 960377:tid 960601] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:25.100147 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx4gAAAVw"], referer: http://67.222.40.58/admins/_profiler/phpinfo [Sun Jul 12 18:12:25.114255 2026] [security2:error] [pid 967714:tid 967844] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/srv/.ssh/aws_key.pem"] [unique_id "alQtaV_56DeKknhy7sP0hAABG3Y"] [Sun Jul 12 18:12:25.145855 2026] [security2:error] [pid 960377:tid 960583] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMcAAAAEs"], referer: http://67.222.40.58/admins/php.ini [Sun Jul 12 18:12:25.188649 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMawAAAC8"] [Sun Jul 12 18:12:25.204327 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMaAAAAD8"] [Sun Jul 12 18:12:25.226716 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMbAAAAAw"], referer: http://67.222.40.58/administrator/logs/error_log [Sun Jul 12 18:12:25.287211 2026] [security2:error] [pid 967714:tid 967861] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx5AAAARA"], referer: http://67.222.40.58/administration/phpinfo [Sun Jul 12 18:12:25.290509 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMbQAAAFU"], referer: http://67.222.40.58/admins/config.env [Sun Jul 12 18:12:25.302241 2026] [security2:error] [pid 967714:tid 967855] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/backup/config.php"] [unique_id "alQtaV_56DeKknhy7sP0iQAAAQo"] [Sun Jul 12 18:12:25.327832 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtThMANaV5i2_BLQoMbwAAAH8"], referer: http://67.222.40.58/administration/.env.dev [Sun Jul 12 18:12:25.334568 2026] [security2:error] [pid 967714:tid 967965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtTl_56DeKknhy7sPx4QAAAXg"] [Sun Jul 12 18:12:25.349989 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtaBMANaV5i2_BLQoOyQAARX4"] [Sun Jul 12 18:12:25.511314 2026] [security2:error] [pid 960377:tid 960409] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/wp-config.php.bak"] [unique_id "alQtaRMANaV5i2_BLQoO2gAAVx8"] [Sun Jul 12 18:12:25.784507 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtaV_56DeKknhy7sP0kgAAAVU"] [Sun Jul 12 18:12:25.889286 2026] [authz_core:error] [pid 960377:tid 960553] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:25.889875 2026] [authz_core:error] [pid 960377:tid 960553] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:25.938731 2026] [lsapi:warn] [pid 967714:tid 967890] [client 190.27.253.106:57900] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:12:26.024513 2026] [security2:error] [pid 967714:tid 967890] [client 190.27.253.106:57900] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "rapports-minoritaires.net"] [uri "/index.php"] [unique_id "alQtZ1_56DeKknhy7sP0ZAAAAS0"] [Sun Jul 12 18:12:26.119364 2026] [security2:error] [pid 967714:tid 967884] [client 152.232.80.168:57818] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.238.10"] [uri "/dist/.env"] [unique_id "alQtal_56DeKknhy7sP0nwAAASc"] [Sun Jul 12 18:12:26.150825 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNhAAAACU"] [Sun Jul 12 18:12:26.152090 2026] [security2:error] [pid 967714:tid 967904] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXF_56DeKknhy7sPzVQAAATs"] [Sun Jul 12 18:12:26.281427 2026] [security2:error] [pid 967714:tid 967866] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtaV_56DeKknhy7sP0nQAAARU"] [Sun Jul 12 18:12:26.452225 2026] [security2:error] [pid 967714:tid 967978] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTMxLTIwMTQ1LTMxNzhxLTM4MTMtMTc4.cgi"] [unique_id "alQtal_56DeKknhy7sP0ogAAAYU"] [Sun Jul 12 18:12:26.666080 2026] [security2:error] [pid 967714:tid 967871] [client 168.100.149.110:26476] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6370/bargainor/2308_milksopism.jsp"] [unique_id "alQtal_56DeKknhy7sP0qAAAARo"] [Sun Jul 12 18:12:26.689940 2026] [security2:error] [pid 960377:tid 960527] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtaRMANaV5i2_BLQoO3QAAEyA"] [Sun Jul 12 18:12:26.740372 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:26.740908 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:26.759916 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtal_56DeKknhy7sP0pAAAAQ0"] [Sun Jul 12 18:12:26.852371 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/wp-config.php.backup"] [unique_id "alQtahMANaV5i2_BLQoO-AAAEAg"] [Sun Jul 12 18:12:26.920408 2026] [security2:error] [pid 960377:tid 960568] [client 197.48.221.253:51962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtahMANaV5i2_BLQoO_AAAADw"] [Sun Jul 12 18:12:26.920728 2026] [security2:error] [pid 960377:tid 960568] [client 197.48.221.253:51962] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtahMANaV5i2_BLQoO_AAAADw"] [Sun Jul 12 18:12:27.077152 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaV_56DeKknhy7sP0jgAAARk"], referer: http://67.222.40.58/admins/phpinfo [Sun Jul 12 18:12:27.086269 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/test.php"] [unique_id "alQtUF_56DeKknhy7sP0qwABSGM"] [Sun Jul 12 18:12:27.092872 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/admins/xampp/info.php"] [unique_id "alQtUF_56DeKknhy7sP0rAABSFY"] [Sun Jul 12 18:12:27.100391 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/agora/.env"] [unique_id "alQtUl_56DeKknhy7sP0rwABSGM"] [Sun Jul 12 18:12:27.102350 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/apache/phpinfo.php"] [unique_id "alQtUl_56DeKknhy7sP0sQABSGM"] [Sun Jul 12 18:12:27.116736 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/agora/.env"] [unique_id "alQtU1_56DeKknhy7sP0sgABSGM"], referer: http://67.222.40.58/agora/.env [Sun Jul 12 18:12:27.123565 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/crm/info.php"] [unique_id "alQtU1_56DeKknhy7sP0tgABSH4"] [Sun Jul 12 18:12:27.126274 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/info.php"] [unique_id "alQtU1_56DeKknhy7sP0twABSH4"] [Sun Jul 12 18:12:27.131394 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/lara/phpinfo.php"] [unique_id "alQtU1_56DeKknhy7sP0uAABSDU"] [Sun Jul 12 18:12:27.146960 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNfgAAAGc"] [Sun Jul 12 18:12:27.149843 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/php-info.php"] [unique_id "alQtU1_56DeKknhy7sP0uwABSDU"] [Sun Jul 12 18:12:27.170178 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/api/src/.env"] [unique_id "alQtU1_56DeKknhy7sP0vQABSDU"] [Sun Jul 12 18:12:27.186373 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaV_56DeKknhy7sP0jwAAARQ"] [Sun Jul 12 18:12:27.190971 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/api/temp.php"] [unique_id "alQtVF_56DeKknhy7sP0wwABSGo"] [Sun Jul 12 18:12:27.400211 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtahMANaV5i2_BLQoPAAAAAEo"] [Sun Jul 12 18:12:27.556589 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:27.557272 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:27.687074 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtahMANaV5i2_BLQoPAQAAAGs"] [Sun Jul 12 18:12:27.687162 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtahMANaV5i2_BLQoPAQAAAGs"] [Sun Jul 12 18:12:27.688919 2026] [security2:error] [pid 960377:tid 960508] [client 65.21.113.206:37666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTMxLTIwMTQ1LTMxNzhxLTM4MTMtMTc4.cgi"] [unique_id "alQtahMANaV5i2_BLQoO_gAAAAA"] [Sun Jul 12 18:12:27.762015 2026] [security2:error] [pid 960377:tid 960610] [client 57.141.18.90:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPBgAAAGY"] [Sun Jul 12 18:12:27.910046 2026] [security2:error] [pid 967714:tid 967926] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQta1_56DeKknhy7sP0yQAAAVE"] [Sun Jul 12 18:12:27.987551 2026] [security2:error] [pid 967714:tid 967979] [client 168.100.149.227:56148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6435/bargainor/2308_capnoides.jsp"] [unique_id "alQta1_56DeKknhy7sP0zgAAAYY"] [Sun Jul 12 18:12:28.123871 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNiQAAAAY"] [Sun Jul 12 18:12:28.150148 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXF_56DeKknhy7sPzVgAAAYI"] [Sun Jul 12 18:12:28.171125 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXF_56DeKknhy7sPzWgAAAS8"] [Sun Jul 12 18:12:28.172504 2026] [security2:error] [pid 960377:tid 960552] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPBAAALHo"] [Sun Jul 12 18:12:28.279094 2026] [core:error] [pid 967714:tid 967952] [client 175.119.225.92:47484] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:12:28.396941 2026] [authz_core:error] [pid 967714:tid 967866] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:28.397482 2026] [authz_core:error] [pid 967714:tid 967866] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:28.522210 2026] [security2:error] [pid 967714:tid 967938] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtbF_56DeKknhy7sP00gAAAV0"] [Sun Jul 12 18:12:28.849131 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtbBMANaV5i2_BLQoPIgAATjw"] [Sun Jul 12 18:12:28.959325 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:52930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/api/info.php"] [unique_id "alQtbBMANaV5i2_BLQoPLwAAAFo"] [Sun Jul 12 18:12:29.000130 2026] [security2:error] [pid 960377:tid 960562] [client 20.210.108.71:59121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-theme-json-schema.php"] [unique_id "alQtbBMANaV5i2_BLQoPMAAAADY"], referer: binance.com [Sun Jul 12 18:12:29.026498 2026] [security2:error] [pid 967714:tid 967937] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtbF_56DeKknhy7sP05QAAAVw"] [Sun Jul 12 18:12:29.091170 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNhQAAACo"] [Sun Jul 12 18:12:29.108346 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNgQAAAD0"] [Sun Jul 12 18:12:29.155048 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNhwAAAGU"] [Sun Jul 12 18:12:29.158725 2026] [security2:error] [pid 960377:tid 960622] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNggAAAHI"] [Sun Jul 12 18:12:29.189525 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNfwAAABI"] [Sun Jul 12 18:12:29.195131 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNigAAAAE"] [Sun Jul 12 18:12:29.240995 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:29.241704 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:29.286999 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNhgAAACA"] [Sun Jul 12 18:12:29.288415 2026] [security2:error] [pid 967714:tid 967960] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTNfNDQ2OC8zb3IvMzg1NTdfb3I=.htm"] [unique_id "alQtbV_56DeKknhy7sP07gAAAXM"] [Sun Jul 12 18:12:29.589615 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtbRMANaV5i2_BLQoPMQAAKVo"] [Sun Jul 12 18:12:29.601936 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtbRMANaV5i2_BLQoPOgAAAFc"] [Sun Jul 12 18:12:29.640900 2026] [security2:error] [pid 967714:tid 967955] [client 149.28.225.231:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "erasmusimpulse.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtbV_56DeKknhy7sP08QAAAW4"] [Sun Jul 12 18:12:29.731993 2026] [security2:error] [pid 960377:tid 960615] [client 172.252.81.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQtbRMANaV5i2_BLQoPOQAAAGs"] [Sun Jul 12 18:12:29.766840 2026] [security2:error] [pid 967714:tid 967770] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/debug.sql"] [unique_id "alQtbV_56DeKknhy7sP09gABNCw"] [Sun Jul 12 18:12:29.797104 2026] [security2:error] [pid 960377:tid 960627] [client 14.191.72.154:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "shiromi.com"] [uri "/blog/index.php"] [unique_id "alQtbBMANaV5i2_BLQoPJQAAAHc"] [Sun Jul 12 18:12:29.897371 2026] [authz_core:error] [pid 960377:tid 960466] [remote 62.171.167.118:38148] AH01630: client denied by server configuration: /home3/planoper/public_html/php.ini [Sun Jul 12 18:12:29.901421 2026] [security2:error] [pid 960377:tid 960449] [remote 62.171.167.118:38148] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Web.config"] [unique_id "alQtbRMANaV5i2_BLQoPXQAADEY"] [Sun Jul 12 18:12:29.929160 2026] [security2:error] [pid 967714:tid 967788] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/first-network/.env"] [unique_id "alQtbV_56DeKknhy7sP0_gABDj4"] [Sun Jul 12 18:12:29.962044 2026] [cgid:error] [pid 960377:tid 960500] [remote 62.171.167.118:38148] AH01265: stderr from /home3/planoper/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://67.222.42.11/cgi-bin [Sun Jul 12 18:12:29.986021 2026] [security2:error] [pid 967714:tid 967916] [client 168.100.149.204:42578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6500/bargainor/2308_deft.jsp"] [unique_id "alQtbV_56DeKknhy7sP1AAAAAUc"] [Sun Jul 12 18:12:29.987054 2026] [authz_core:error] [pid 960377:tid 960479] [remote 62.171.167.118:38148] AH01630: client denied by server configuration: /home3/planoper/public_html/php.ini, referer: http://67.222.42.11/php.ini [Sun Jul 12 18:12:30.071097 2026] [security2:error] [pid 960377:tid 960625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNgwAAAHU"] [Sun Jul 12 18:12:30.077893 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtXBMANaV5i2_BLQoNgAAAAHk"] [Sun Jul 12 18:12:30.081691 2026] [cgid:error] [pid 960377:tid 960378] [remote 62.171.167.118:38148] AH01265: stderr from /home3/planoper/public_html/cgi-bin/: attempt to invoke directory as script, referer: https://67.222.42.11/cgi-bin [Sun Jul 12 18:12:30.088915 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:30.089599 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:30.174732 2026] [security2:error] [pid 960377:tid 960535] [client 94.187.171.125:52220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtbhMANaV5i2_BLQoPiQAAABs"] [Sun Jul 12 18:12:30.174998 2026] [security2:error] [pid 960377:tid 960535] [client 94.187.171.125:52220] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtbhMANaV5i2_BLQoPiQAAABs"] [Sun Jul 12 18:12:30.254168 2026] [security2:error] [pid 960377:tid 960619] [client 136.144.19.3:62465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.19.144.136.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQtbhMANaV5i2_BLQoPjQAAAG8"] [Sun Jul 12 18:12:30.296349 2026] [security2:error] [pid 967714:tid 967967] [client 94.51.162.212:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtbV_56DeKknhy7sP09QAAAXo"] [Sun Jul 12 18:12:30.354844 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:33678] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/help/phpinfo.php"] [unique_id "alQtbl_56DeKknhy7sP1GAAAAS8"] [Sun Jul 12 18:12:30.492073 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtbRMANaV5i2_BLQoPUgAAACw"] [Sun Jul 12 18:12:30.492144 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtbRMANaV5i2_BLQoPUgAAACw"] [Sun Jul 12 18:12:30.493853 2026] [security2:error] [pid 960377:tid 960590] [client 65.21.113.206:37682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTNfNDQ2OC8zb3IvMzg1NTdfb3I=.htm"] [unique_id "alQtbRMANaV5i2_BLQoPTQAAAFI"] [Sun Jul 12 18:12:30.569520 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtbl_56DeKknhy7sP1FwAAAUU"] [Sun Jul 12 18:12:30.738891 2026] [security2:error] [pid 967714:tid 967782] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env.backup~"] [unique_id "alQtbl_56DeKknhy7sP1IwABfjg"] [Sun Jul 12 18:12:31.001008 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:31.001507 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:31.038953 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:52944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/infos.php"] [unique_id "alQtbxMANaV5i2_BLQoPqwAAAAY"] [Sun Jul 12 18:12:31.040492 2026] [security2:error] [pid 967714:tid 967899] [client 35.171.41.249:56408] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.suralaconsulting.com"] [uri "/index.php"] [unique_id "alQtbl_56DeKknhy7sP1JAAAATY"] [Sun Jul 12 18:12:31.069935 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:52946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/old_phpinfo.php"] [unique_id "alQtb1_56DeKknhy7sP1MAAAAYE"] [Sun Jul 12 18:12:31.158420 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:52950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/pinfo.php"] [unique_id "alQtbxMANaV5i2_BLQoPrwAAAHc"] [Sun Jul 12 18:12:31.281899 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtbl_56DeKknhy7sP1LgAAASw"] [Sun Jul 12 18:12:31.427314 2026] [security2:error] [pid 960377:tid 960557] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtbhMANaV5i2_BLQoPjAAAMQo"] [Sun Jul 12 18:12:31.505503 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sP07AABVmk"] [Sun Jul 12 18:12:31.509099 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sP07QABVnU"] [Sun Jul 12 18:12:31.778967 2026] [security2:error] [pid 967714:tid 967937] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtb1_56DeKknhy7sP1NQAAAVw"] [Sun Jul 12 18:12:31.851853 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:31.852391 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:31.975375 2026] [security2:error] [pid 967714:tid 967878] [client 168.100.149.69:36688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6565/bargainor/2308_did.jsp"] [unique_id "alQtb1_56DeKknhy7sP1WQAAASE"] [Sun Jul 12 18:12:32.097250 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPCgAAAHY"] [Sun Jul 12 18:12:32.198155 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPDQAAABc"] [Sun Jul 12 18:12:32.200226 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPFAAAAFU"] [Sun Jul 12 18:12:32.237901 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPEgAAACQ"], referer: http://67.222.40.58/api/.env.local [Sun Jul 12 18:12:32.280775 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPCwAAAGg"], referer: http://67.222.40.58/admins/xampp/phpinfo [Sun Jul 12 18:12:32.282930 2026] [security2:error] [pid 960377:tid 960578] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaxMANaV5i2_BLQoPDwAAAEY"], referer: http://67.222.40.58/api/.env.dist [Sun Jul 12 18:12:32.290116 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/apis/development/phpinfo.php"] [unique_id "alQtVF_56DeKknhy7sP1XQABSAU"] [Sun Jul 12 18:12:32.292299 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/apis/test.php"] [unique_id "alQtVF_56DeKknhy7sP1XgABSAU"] [Sun Jul 12 18:12:32.299749 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app/.env.bak"] [unique_id "alQtVF_56DeKknhy7sP1YQABSG4"] [Sun Jul 12 18:12:32.306199 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app-order-client/.env"] [unique_id "alQtVF_56DeKknhy7sP1XwABSCM"] [Sun Jul 12 18:12:32.329283 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app/client/.env"] [unique_id "alQtVF_56DeKknhy7sP1ZQABSCM"] [Sun Jul 12 18:12:32.391783 2026] [security2:error] [pid 967714:tid 967916] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtb1_56DeKknhy7sP1WgAAAUc"] [Sun Jul 12 18:12:32.583088 2026] [security2:error] [pid 967714:tid 967873] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/jo.php"] [unique_id "alQtcF_56DeKknhy7sP1cAAAARw"] [Sun Jul 12 18:12:32.629784 2026] [authz_core:error] [pid 967714:tid 967892] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:32.630448 2026] [authz_core:error] [pid 967714:tid 967892] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:32.666447 2026] [core:error] [pid 967714:tid 967801] (13)Permission denied: [remote 43.166.178.234:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/es_amenity/water-heater/page/3/?layout=grid-3 [Sun Jul 12 18:12:32.697470 2026] [security2:error] [pid 960377:tid 960574] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtbxMANaV5i2_BLQoPtQAAQnI"] [Sun Jul 12 18:12:32.858805 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.aws/credentials.bak"] [unique_id "alQtcBMANaV5i2_BLQoPxQAARS0"] [Sun Jul 12 18:12:33.003217 2026] [fcgid:warn] [pid 967714:tid 967871] (70014)End of file found: [client 18.218.118.203:19234] mod_fcgid: can't get data from http client [Sun Jul 12 18:12:33.045237 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtcBMANaV5i2_BLQoPxAAAAFI"] [Sun Jul 12 18:12:33.071939 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQta1_56DeKknhy7sP0xAAAARs"] [Sun Jul 12 18:12:33.075870 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sP0xQABSGo"] [Sun Jul 12 18:12:33.129021 2026] [security2:error] [pid 967714:tid 967910] [client 24.203.79.110:51552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtcV_56DeKknhy7sP1dAAAAUE"] [Sun Jul 12 18:12:33.129349 2026] [security2:error] [pid 967714:tid 967910] [client 24.203.79.110:51552] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtcV_56DeKknhy7sP1dAAAAUE"] [Sun Jul 12 18:12:33.321614 2026] [security2:error] [pid 967714:tid 967974] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTNfNTM1OC8zb3IvMzg1NTdfb3I=.htm"] [unique_id "alQtcV_56DeKknhy7sP1fwAAAYE"] [Sun Jul 12 18:12:33.334651 2026] [rewrite:error] [pid 967714:tid 967911] [client 57.141.18.16:0] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:12:33.352973 2026] [security2:error] [pid 967714:tid 967858] [client 62.171.167.118:52954] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/xampp/phpinfo.php"] [unique_id "alQtcV_56DeKknhy7sP1ggAAAQ0"] [Sun Jul 12 18:12:33.447370 2026] [authz_core:error] [pid 967714:tid 967899] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:33.448112 2026] [authz_core:error] [pid 967714:tid 967899] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:33.621981 2026] [security2:error] [pid 967714:tid 967888] [client 125.167.21.72:61884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtcV_56DeKknhy7sP1igAAASs"] [Sun Jul 12 18:12:33.622305 2026] [security2:error] [pid 967714:tid 967888] [client 125.167.21.72:61884] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtcV_56DeKknhy7sP1igAAASs"] [Sun Jul 12 18:12:33.638545 2026] [security2:error] [pid 967714:tid 967921] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtcV_56DeKknhy7sP1ewAAAUw"] [Sun Jul 12 18:12:33.806532 2026] [security2:error] [pid 967714:tid 967781] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/checkout.php.copy"] [unique_id "alQtcV_56DeKknhy7sP1kQABKTc"] [Sun Jul 12 18:12:33.991896 2026] [security2:error] [pid 967714:tid 967891] [client 168.100.149.101:20848] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6630/bargainor/2308_delphian.jsp"] [unique_id "alQtcV_56DeKknhy7sP1nQAAAS4"] [Sun Jul 12 18:12:34.066788 2026] [security2:error] [pid 960377:tid 960635] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtcRMANaV5i2_BLQoPygAAf3U"] [Sun Jul 12 18:12:34.275158 2026] [security2:error] [pid 967714:tid 967975] [client 97.187.40.144:50703] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQtcF_56DeKknhy7sP1WwABgmw"], referer: https://idreamofjeannemarie.com/wp-login.php?redirect_to=https%3A%2F%2Fidreamofjeannemarie.com%2Fwp-admin%2F&reauth=1 [Sun Jul 12 18:12:34.359742 2026] [cgid:error] [pid 967714:tid 967916] [client 202.46.62.88:50171] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/ [Sun Jul 12 18:12:34.370073 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:34.370873 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:34.371740 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtcRMANaV5i2_BLQoP1wAAAAY"] [Sun Jul 12 18:12:34.672617 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtcV_56DeKknhy7sP1lAAAAS0"] [Sun Jul 12 18:12:34.672648 2026] [security2:error] [pid 967714:tid 967868] [client 65.21.113.206:53006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTNfNTM1OC8zb3IvMzg1NTdfb3I=.htm"] [unique_id "alQtcV_56DeKknhy7sP1kgAAARc"] [Sun Jul 12 18:12:34.672750 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtcV_56DeKknhy7sP1lAAAAS0"] [Sun Jul 12 18:12:34.919165 2026] [security2:error] [pid 960377:tid 960542] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtchMANaV5i2_BLQoP6gAAACI"] [Sun Jul 12 18:12:35.113416 2026] [security2:error] [pid 960377:tid 960550] [client 78.142.18.40:56715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtcxMANaV5i2_BLQoP-AAAACo"] [Sun Jul 12 18:12:35.155926 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtb1_56DeKknhy7sP1PQAAAT0"] [Sun Jul 12 18:12:35.189948 2026] [security2:error] [pid 967714:tid 967912] [client 20.210.108.71:55995] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-theme-json.php"] [unique_id "alQtc1_56DeKknhy7sP1uwAAAUM"], referer: binance.com [Sun Jul 12 18:12:35.190712 2026] [security2:error] [pid 960377:tid 960567] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtbxMANaV5i2_BLQoPtAAAADs"] [Sun Jul 12 18:12:35.216252 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtUl_56DeKknhy7sP1NgABVmk"] [Sun Jul 12 18:12:35.228437 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:35.229001 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:35.252012 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtbxMANaV5i2_BLQoPswAAACU"] [Sun Jul 12 18:12:35.377803 2026] [security2:error] [pid 967714:tid 967936] [client 78.142.18.40:57194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtc1_56DeKknhy7sP1wQAAAVs"] [Sun Jul 12 18:12:35.478019 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtchMANaV5i2_BLQoP2wAAe2s"] [Sun Jul 12 18:12:35.560425 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoP-QAAACc"] [Sun Jul 12 18:12:35.568984 2026] [security2:error] [pid 967714:tid 967962] [client 148.255.101.22:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtcl_56DeKknhy7sP1tAAAAXU"] [Sun Jul 12 18:12:35.638901 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.bak"] [unique_id "alQtcxMANaV5i2_BLQoQGgAAZFg"] [Sun Jul 12 18:12:35.638951 2026] [security2:error] [pid 960377:tid 960561] [client 78.142.18.40:57529] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtcxMANaV5i2_BLQoQGwAAADU"] [Sun Jul 12 18:12:35.897805 2026] [security2:error] [pid 967714:tid 967975] [client 152.232.80.168:49557] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.238.10"] [uri "/wp-config.php.old"] [unique_id "alQtc1_56DeKknhy7sP10wAAAYI"] [Sun Jul 12 18:12:35.901688 2026] [security2:error] [pid 967714:tid 967967] [client 78.142.18.40:57835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQtc1_56DeKknhy7sP11AAAAXo"] [Sun Jul 12 18:12:36.048828 2026] [authz_core:error] [pid 960377:tid 960583] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:36.049429 2026] [authz_core:error] [pid 960377:tid 960583] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:36.052036 2026] [security2:error] [pid 960377:tid 960530] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQHgAAABY"] [Sun Jul 12 18:12:36.136808 2026] [security2:error] [pid 960377:tid 960565] [client 185.24.11.139:55674] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "whatworld.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQBwAAOSM"] [Sun Jul 12 18:12:36.200276 2026] [security2:error] [pid 960377:tid 960519] [client 185.24.11.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "whatworld.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQDwAAAAs"] [Sun Jul 12 18:12:36.233575 2026] [security2:error] [pid 967714:tid 967760] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.circleci/.env"] [unique_id "alQtdF_56DeKknhy7sP2DAABHyI"] [Sun Jul 12 18:12:36.273068 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sP1XAABSFY"] [Sun Jul 12 18:12:36.333520 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:52122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/db/structure.sql"] [unique_id "alQtdF_56DeKknhy7sP2GgABZxk"] [Sun Jul 12 18:12:36.420581 2026] [authz_core:error] [pid 967714:tid 967796] [remote 62.171.167.118:52122] AH01630: client denied by server configuration: /home3/planoper/public_html/.user.ini [Sun Jul 12 18:12:36.467710 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52122] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/db/structure.sql"] [unique_id "alQtdF_56DeKknhy7sP2OQABbC4"], referer: http://67.222.42.11/db/structure.sql [Sun Jul 12 18:12:36.477577 2026] [authz_core:error] [pid 967714:tid 967842] [remote 62.171.167.118:52122] AH01630: client denied by server configuration: /home3/planoper/public_html/.user.ini, referer: http://67.222.42.11/.user.ini [Sun Jul 12 18:12:36.641582 2026] [security2:error] [pid 960377:tid 960549] [client 170.106.14.237:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQGAAAKUM"] [Sun Jul 12 18:12:36.675053 2026] [security2:error] [pid 967714:tid 967874] [client 152.232.80.168:51399] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/sites/default/settings.php"] [unique_id "alQtdF_56DeKknhy7sP2VgAAAR0"] [Sun Jul 12 18:12:36.702419 2026] [security2:error] [pid 967714:tid 967898] [client 168.100.149.177:30034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6695/bargainor/2308_anisodactyli.jsp"] [unique_id "alQtdF_56DeKknhy7sP2WgAAATU"] [Sun Jul 12 18:12:36.765466 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtdF_56DeKknhy7sP2LQAAASw"] [Sun Jul 12 18:12:36.880369 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQHwAAGjQ"] [Sun Jul 12 18:12:36.929543 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:36.930071 2026] [authz_core:error] [pid 960377:tid 960535] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:37.038881 2026] [security2:error] [pid 960377:tid 960439] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.bitbucket/.env"] [unique_id "alQtdRMANaV5i2_BLQoQTAAALzw"] [Sun Jul 12 18:12:37.127299 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtcBMANaV5i2_BLQoPvgAAAD0"] [Sun Jul 12 18:12:37.169166 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoQDAAAAHA"] [Sun Jul 12 18:12:37.185251 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtcBMANaV5i2_BLQoPvwAAAEo"] [Sun Jul 12 18:12:37.195148 2026] [security2:error] [pid 960377:tid 960615] [client 57.141.18.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtdBMANaV5i2_BLQoQSQAAAGs"] [Sun Jul 12 18:12:37.213530 2026] [security2:error] [pid 960377:tid 960589] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtcBMANaV5i2_BLQoPugAAAFE"] [Sun Jul 12 18:12:37.229889 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtcBMANaV5i2_BLQoPvAAAAAU"] [Sun Jul 12 18:12:37.236985 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtVF_56DeKknhy7sP1YAABSGA"] [Sun Jul 12 18:12:37.239329 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/helper/phpinfo.php"] [unique_id "alQtWV_56DeKknhy7sP2fQABSGA"] [Sun Jul 12 18:12:37.241484 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/info.php"] [unique_id "alQtWV_56DeKknhy7sP2fgABSGA"] [Sun Jul 12 18:12:37.243503 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/old_phpinfo.php"] [unique_id "alQtWl_56DeKknhy7sP2gAABSGA"] [Sun Jul 12 18:12:37.245256 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/lara/phpinfo.php"] [unique_id "alQtWV_56DeKknhy7sP2fwABSEM"] [Sun Jul 12 18:12:37.245490 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/services/phpinfo.php"] [unique_id "alQtWl_56DeKknhy7sP2ggABSGA"] [Sun Jul 12 18:12:37.248846 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/service/phpinfo.php"] [unique_id "alQtWl_56DeKknhy7sP2gQABSEE"] [Sun Jul 12 18:12:37.268832 2026] [security2:error] [pid 967714:tid 967884] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtdF_56DeKknhy7sP2cgAAASc"] [Sun Jul 12 18:12:37.277776 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtcxMANaV5i2_BLQoP_wAAAHg"] [Sun Jul 12 18:12:37.317085 2026] [security2:error] [pid 967714:tid 967981] [client 197.48.221.253:52590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtdV_56DeKknhy7sP2igAAAYg"] [Sun Jul 12 18:12:37.317341 2026] [security2:error] [pid 967714:tid 967981] [client 197.48.221.253:52590] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtdV_56DeKknhy7sP2igAAAYg"] [Sun Jul 12 18:12:37.360183 2026] [security2:error] [pid 967714:tid 967913] [client 152.232.80.168:57333] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.238.10"] [uri "/wp-config.php.bak"] [unique_id "alQtdV_56DeKknhy7sP2jAAAAUQ"] [Sun Jul 12 18:12:37.418290 2026] [security2:error] [pid 967714:tid 967738] [remote 2a03:2880:f800:1d:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQtdV_56DeKknhy7sP2iwABSww"] [Sun Jul 12 18:12:37.574564 2026] [security2:error] [pid 967714:tid 967936] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTNlNTZuLzQ0MjcvM2UvNzY4MS9l"] [unique_id "alQtdV_56DeKknhy7sP2kwAAAVs"] [Sun Jul 12 18:12:37.600516 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:52960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/helper/info.php"] [unique_id "alQtdV_56DeKknhy7sP2lwAAARk"] [Sun Jul 12 18:12:37.703463 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:37.704017 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:37.866873 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQYAAAABg"] [Sun Jul 12 18:12:37.915340 2026] [security2:error] [pid 960377:tid 960614] [client 152.232.80.168:52786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/app/config/mail.php"] [unique_id "alQtdRMANaV5i2_BLQoQZAAAAGo"] [Sun Jul 12 18:12:37.985599 2026] [security2:error] [pid 960377:tid 960616] [client 168.100.149.9:42884] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6760/bargainor/2308_birefraction.jsp"] [unique_id "alQtdRMANaV5i2_BLQoQZQAAAGw"] [Sun Jul 12 18:12:38.201094 2026] [security2:error] [pid 960377:tid 960584] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQUQAATDU"] [Sun Jul 12 18:12:38.241547 2026] [security2:error] [pid 960377:tid 960617] [client 152.232.80.168:60507] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/app/config/database.php"] [unique_id "alQtdhMANaV5i2_BLQoQawAAAG0"] [Sun Jul 12 18:12:38.325686 2026] [security2:error] [pid 967714:tid 967858] [client 185.24.11.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "whatworld.com"] [uri "/index.php"] [unique_id "alQtdV_56DeKknhy7sP2jwAAAQ0"] [Sun Jul 12 18:12:38.531857 2026] [security2:error] [pid 967714:tid 967909] [client 152.232.80.168:64276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/configuration.php"] [unique_id "alQtdl_56DeKknhy7sP2qwAAAUA"] [Sun Jul 12 18:12:38.577000 2026] [security2:error] [pid 960377:tid 960510] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtdhMANaV5i2_BLQoQZwAAAAI"] [Sun Jul 12 18:12:38.578852 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:38.579519 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:38.663043 2026] [security2:error] [pid 967714:tid 967958] [client 62.171.167.118:34696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/temp.php"] [unique_id "alQtdl_56DeKknhy7sP2swAAAXE"] [Sun Jul 12 18:12:38.684241 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:34704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/xampp/info.php"] [unique_id "alQtdhMANaV5i2_BLQoQewAAACA"] [Sun Jul 12 18:12:38.910612 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtdhMANaV5i2_BLQoQagAAAAs"] [Sun Jul 12 18:12:38.910734 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtdhMANaV5i2_BLQoQagAAAAs"] [Sun Jul 12 18:12:38.916880 2026] [security2:error] [pid 967714:tid 967898] [client 65.21.113.206:53018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTNlNTZuLzQ0MjcvM2UvNzY4MS9l"] [unique_id "alQtdl_56DeKknhy7sP2ogAAATU"] [Sun Jul 12 18:12:39.311319 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtdhMANaV5i2_BLQoQggAAAA4"] [Sun Jul 12 18:12:39.456838 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:39.457373 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:39.558027 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtdhMANaV5i2_BLQoQbgAAV0I"] [Sun Jul 12 18:12:39.567875 2026] [security2:error] [pid 967714:tid 967914] [client 152.232.80.168:64098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/info.php"] [unique_id "alQtd1_56DeKknhy7sP2xAAAAUU"] [Sun Jul 12 18:12:39.718788 2026] [security2:error] [pid 960377:tid 960487] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.c9/metadata/environment/.env"] [unique_id "alQtdxMANaV5i2_BLQoQkAAAN2w"] [Sun Jul 12 18:12:39.813168 2026] [security2:error] [pid 967714:tid 967927] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtd1_56DeKknhy7sP2wwAAAVI"] [Sun Jul 12 18:12:39.879253 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.circleci/.env"] [unique_id "alQtdxMANaV5i2_BLQoQkwAACHE"] [Sun Jul 12 18:12:39.991641 2026] [security2:error] [pid 967714:tid 967872] [client 168.100.149.162:48040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6825/bargainor/2308_mediator.jsp"] [unique_id "alQtd1_56DeKknhy7sP2zQAAARs"] [Sun Jul 12 18:12:40.122280 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtV1_56DeKknhy7sP2fAABSB0"] [Sun Jul 12 18:12:40.216770 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQWwAAABE"] [Sun Jul 12 18:12:40.264473 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQVwAAAFw"] [Sun Jul 12 18:12:40.276715 2026] [security2:error] [pid 960377:tid 960605] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQWAAAAGE"], referer: http://67.222.40.58/app/settings.txt [Sun Jul 12 18:12:40.319864 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:40.320703 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:40.332006 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtWF_56DeKknhy7sP2ewABVmw"], referer: http://67.222.38.115/debug.log [Sun Jul 12 18:12:40.334450 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQXAAAADo"], referer: http://67.222.38.115/debug/authorizationz [Sun Jul 12 18:12:40.336477 2026] [security2:error] [pid 960377:tid 960587] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtdRMANaV5i2_BLQoQUgAAAE8"], referer: http://67.222.38.115/debug [Sun Jul 12 18:12:40.358801 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtWF_56DeKknhy7sP2eQABVk0"] [Sun Jul 12 18:12:40.403621 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQteBMANaV5i2_BLQoQngAAABA"] [Sun Jul 12 18:12:40.549732 2026] [security2:error] [pid 967714:tid 967975] [client 20.210.108.71:60566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-token-map.php"] [unique_id "alQteF_56DeKknhy7sP24gAAAYI"], referer: binance.com [Sun Jul 12 18:12:40.930374 2026] [security2:error] [pid 960377:tid 960632] [client 94.187.171.125:52712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQteBMANaV5i2_BLQoQtgAAAHw"] [Sun Jul 12 18:12:40.930607 2026] [security2:error] [pid 960377:tid 960632] [client 94.187.171.125:52712] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQteBMANaV5i2_BLQoQtgAAAHw"] [Sun Jul 12 18:12:40.987999 2026] [security2:error] [pid 967714:tid 967944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQteF_56DeKknhy7sP25QAAAWM"] [Sun Jul 12 18:12:41.156648 2026] [security2:error] [pid 967714:tid 967742] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/web-app/api/.env"] [unique_id "alQteV_56DeKknhy7sP26gABMBA"] [Sun Jul 12 18:12:41.212457 2026] [security2:error] [pid 967714:tid 967866] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTQ4MGQzLzc0MS80OC8zNjgwMS84"] [unique_id "alQteV_56DeKknhy7sP2_QAAARU"] [Sun Jul 12 18:12:41.362385 2026] [security2:error] [pid 960377:tid 960539] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQteBMANaV5i2_BLQoQogAAH28"] [Sun Jul 12 18:12:41.519887 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:41.521497 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:41.542062 2026] [security2:error] [pid 960377:tid 960518] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteBMANaV5i2_BLQoQqQAAAAo"], referer: http://67.222.40.58/app/xampp/phpinfo [Sun Jul 12 18:12:41.549971 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/app/xampp/phpinfo.php"] [unique_id "alQtYF_56DeKknhy7sP3EgABSGA"] [Sun Jul 12 18:12:41.555447 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app1-static/.env"] [unique_id "alQtYV_56DeKknhy7sP3FAABSBw"], referer: http://67.222.40.58/app1-static/.env [Sun Jul 12 18:12:41.556465 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app2-static/.env"] [unique_id "alQtYV_56DeKknhy7sP3FQABSG0"] [Sun Jul 12 18:12:41.560360 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app2-static/.env"] [unique_id "alQtYV_56DeKknhy7sP3FgABSBw"], referer: http://67.222.40.58/app2-static/.env [Sun Jul 12 18:12:41.562292 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app1-static/.env"] [unique_id "alQtYF_56DeKknhy7sP3EwABSGA"] [Sun Jul 12 18:12:41.563165 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app_dir/.env"] [unique_id "alQtYl_56DeKknhy7sP3FwABSG0"], referer: http://67.222.40.58/app_dir/.env [Sun Jul 12 18:12:41.565460 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/app_dir/.env"] [unique_id "alQtY1_56DeKknhy7sP3GAABSBw"] [Sun Jul 12 18:12:41.567527 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/application/config/constants.php/"] [unique_id "alQtZV_56DeKknhy7sP3HQABSEY"] [Sun Jul 12 18:12:41.581264 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteF_56DeKknhy7sP22AAAAU4"] [Sun Jul 12 18:12:41.582442 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/apps/client/.env"] [unique_id "alQtZl_56DeKknhy7sP3IAABSDg"], referer: http://67.222.40.58/apps/client/.env [Sun Jul 12 18:12:41.590611 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/apps/client/.env"] [unique_id "alQtZl_56DeKknhy7sP3IQABSEE"] [Sun Jul 12 18:12:41.596657 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/audio/.env"] [unique_id "alQtaF_56DeKknhy7sP3IwABSEE"] [Sun Jul 12 18:12:41.596986 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/audio/.env"] [unique_id "alQtZl_56DeKknhy7sP3IgABSDg"], referer: http://67.222.40.58/audio/.env [Sun Jul 12 18:12:41.755130 2026] [security2:error] [pid 960377:tid 960512] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQwgAAAAQ"] [Sun Jul 12 18:12:41.935490 2026] [security2:error] [pid 967714:tid 967743] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/footer.php.bak"] [unique_id "alQteV_56DeKknhy7sP3ZAABKBE"] [Sun Jul 12 18:12:42.092510 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:34738] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/help/phpinfo.php"] [unique_id "alQtel_56DeKknhy7sP3gQAAAWQ"] [Sun Jul 12 18:12:42.196772 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:34736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/helper/phpinfo.php"] [unique_id "alQtehMANaV5i2_BLQoQ3AAAACM"] [Sun Jul 12 18:12:42.199780 2026] [security2:error] [pid 960377:tid 960573] [client 62.171.167.118:34720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/info.php"] [unique_id "alQtehMANaV5i2_BLQoQ3QAAAEE"] [Sun Jul 12 18:12:42.208075 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:34770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/lara/phpinfo.php"] [unique_id "alQtehMANaV5i2_BLQoQ3gAAAGg"] [Sun Jul 12 18:12:42.227261 2026] [security2:error] [pid 960377:tid 960522] [client 110.34.9.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQwAAAAA4"] [Sun Jul 12 18:12:42.250384 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:34778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/laravel/phpinfo.php"] [unique_id "alQtehMANaV5i2_BLQoQ3wAAAGo"] [Sun Jul 12 18:12:42.261324 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:34754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/backend/info.php"] [unique_id "alQtel_56DeKknhy7sP3gAAAAX0"] [Sun Jul 12 18:12:42.262803 2026] [security2:error] [pid 967714:tid 967908] [client 152.232.80.168:64104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/wp-config.php"] [unique_id "alQtel_56DeKknhy7sP3jQAAAT8"] [Sun Jul 12 18:12:42.319049 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:34764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/lara/info.php"] [unique_id "alQtel_56DeKknhy7sP3iwAAAVw"] [Sun Jul 12 18:12:42.397178 2026] [proxy:error] [pid 967714:tid 967874] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:42.398863 2026] [proxy_http:error] [pid 967714:tid 967874] [client 172.233.62.72:39106] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:42.401429 2026] [proxy:error] [pid 967714:tid 967874] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:12:42.406474 2026] [proxy_http:error] [pid 967714:tid 967874] [client 172.233.62.72:39106] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:12:42.435068 2026] [security2:error] [pid 967714:tid 967913] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3MAAAAUQ"] [Sun Jul 12 18:12:42.435137 2026] [security2:error] [pid 967714:tid 967913] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3MAAAAUQ"] [Sun Jul 12 18:12:42.438167 2026] [security2:error] [pid 967714:tid 967864] [client 65.21.113.206:53030] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTQ4MGQzLzc0MS80OC8zNjgwMS84"] [unique_id "alQteV_56DeKknhy7sP3LgAAARM"] [Sun Jul 12 18:12:42.481038 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQteF_56DeKknhy7sP23QAAATg"] [Sun Jul 12 18:12:42.525086 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQteBMANaV5i2_BLQoQrgAAACo"] [Sun Jul 12 18:12:42.533520 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:42.589545 2026] [authz_core:error] [pid 960377:tid 960567] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:42.651065 2026] [security2:error] [pid 967714:tid 967940] [client 168.100.149.160:43474] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6890/bargainor/2308_gurian.jsp"] [unique_id "alQtel_56DeKknhy7sP3rgAAAV8"] [Sun Jul 12 18:12:42.683147 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQyAAAVE8"] [Sun Jul 12 18:12:42.712854 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP3lQAAAVo"] [Sun Jul 12 18:12:42.897061 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/data/git/users/root.php"] [unique_id "alQtehMANaV5i2_BLQoQ8QAAAHM"] [Sun Jul 12 18:12:43.150794 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:34796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/linusadmin-phpinfo.php"] [unique_id "alQte1_56DeKknhy7sP3uQAAAS8"] [Sun Jul 12 18:12:43.332487 2026] [security2:error] [pid 967714:tid 967928] [client 74.7.228.11:40648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "yourwellnesscares.bintechsys.net"] [uri "/robots.txt"] [unique_id "alQte1_56DeKknhy7sP3vQABUxs"] [Sun Jul 12 18:12:43.467079 2026] [security2:error] [pid 967714:tid 967964] [client 74.7.175.166:37866] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "yourzone.codenamehippie.com"] [uri "/robots.txt"] [unique_id "alQte1_56DeKknhy7sP3wgABdzk"] [Sun Jul 12 18:12:43.504223 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:43.504941 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:43.593327 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtexMANaV5i2_BLQoQ9wAAAGc"] [Sun Jul 12 18:12:43.754388 2026] [security2:error] [pid 960377:tid 960595] [client 24.203.79.110:52077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtexMANaV5i2_BLQoRAQAAAFc"] [Sun Jul 12 18:12:43.754734 2026] [security2:error] [pid 960377:tid 960595] [client 24.203.79.110:52077] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtexMANaV5i2_BLQoRAQAAAFc"] [Sun Jul 12 18:12:43.962242 2026] [security2:error] [pid 960377:tid 960378] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/.env"] [unique_id "alQtexMANaV5i2_BLQoRGAAAYQA"] [Sun Jul 12 18:12:44.032083 2026] [security2:error] [pid 960377:tid 960393] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/laravel/.env"] [unique_id "alQtexMANaV5i2_BLQoRHgAAYQ8"] [Sun Jul 12 18:12:44.044703 2026] [security2:error] [pid 960377:tid 960428] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/api/.env"] [unique_id "alQtfBMANaV5i2_BLQoRJgAAYTE"] [Sun Jul 12 18:12:44.058721 2026] [security2:error] [pid 960377:tid 960632] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtehMANaV5i2_BLQoQ7gAAfFY"] [Sun Jul 12 18:12:44.158908 2026] [security2:error] [pid 960377:tid 960450] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/api/.env"] [unique_id "alQtfBMANaV5i2_BLQoRMQAAX0c"], referer: http://67.222.42.11/api/.env [Sun Jul 12 18:12:44.185395 2026] [security2:error] [pid 960377:tid 960400] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/.env"] [unique_id "alQtfBMANaV5i2_BLQoRNgAAXxY"], referer: http://67.222.42.11/app/.env [Sun Jul 12 18:12:44.185396 2026] [security2:error] [pid 960377:tid 960473] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/laravel/.env"] [unique_id "alQtfBMANaV5i2_BLQoRNQAAX14"], referer: http://67.222.42.11/laravel/.env [Sun Jul 12 18:12:44.203860 2026] [security2:error] [pid 967714:tid 967953] [client 125.167.21.72:62327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtfF_56DeKknhy7sP35AAAAWw"] [Sun Jul 12 18:12:44.223201 2026] [security2:error] [pid 967714:tid 967953] [client 125.167.21.72:62327] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtfF_56DeKknhy7sP35AAAAWw"] [Sun Jul 12 18:12:44.343030 2026] [security2:error] [pid 960377:tid 960430] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.env.bak"] [unique_id "alQtfBMANaV5i2_BLQoRQAAAOzM"] [Sun Jul 12 18:12:44.357414 2026] [security2:error] [pid 967714:tid 967961] [client 65.21.113.206:59054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtfF_56DeKknhy7sP36AAAAXQ"] [Sun Jul 12 18:12:44.363678 2026] [security2:error] [pid 960377:tid 960524] [client 149.28.225.231:58336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQtfBMANaV5i2_BLQoRQwAAABA"] [Sun Jul 12 18:12:44.493165 2026] [security2:error] [pid 960377:tid 960496] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.env.bak"] [unique_id "alQtfBMANaV5i2_BLQoRSgAAH3U"], referer: http://67.222.42.11/.env.bak [Sun Jul 12 18:12:44.549840 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:44.550518 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:44.621334 2026] [security2:error] [pid 960377:tid 960572] [client 62.171.167.118:53282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/info.php"] [unique_id "alQtfBMANaV5i2_BLQoRSwAAAEA"] [Sun Jul 12 18:12:44.624187 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtexMANaV5i2_BLQoRBAAAAAw"] [Sun Jul 12 18:12:44.630140 2026] [security2:error] [pid 960377:tid 960455] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/info.php"] [unique_id "alQtfBMANaV5i2_BLQoRTAAAaUw"] [Sun Jul 12 18:12:44.654351 2026] [security2:error] [pid 967714:tid 967910] [client 168.100.149.164:62296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/6955/bargainor/2308_monkey.jsp"] [unique_id "alQtfF_56DeKknhy7sP38AAAAUE"] [Sun Jul 12 18:12:44.695488 2026] [security2:error] [pid 967714:tid 967956] [client 20.210.108.71:50303] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wp-url-pattern-prefixer.php"] [unique_id "alQtfF_56DeKknhy7sP38QAAAW8"], referer: binance.com [Sun Jul 12 18:12:44.825538 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test/info.php"] [unique_id "alQtfBMANaV5i2_BLQoRWwAAAAg"] [Sun Jul 12 18:12:44.861146 2026] [security2:error] [pid 960377:tid 960558] [client 65.21.113.206:56794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtfBMANaV5i2_BLQoRXAAAADI"] [Sun Jul 12 18:12:44.892249 2026] [security2:error] [pid 960377:tid 960505] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/index.php"] [unique_id "alQtfBMANaV5i2_BLQoRYQAAPX4"] [Sun Jul 12 18:12:44.893912 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:53254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/index.php"] [unique_id "alQtfBMANaV5i2_BLQoRYgAAAHk"] [Sun Jul 12 18:12:44.901573 2026] [security2:error] [pid 960377:tid 960602] [client 66.249.70.105:52363] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQtfBMANaV5i2_BLQoRXQAAAF4"] [Sun Jul 12 18:12:45.023313 2026] [security2:error] [pid 967714:tid 967925] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTR2aTFpNF81MTg0LzR2LzExMTMvdg==.html"] [unique_id "alQtfV_56DeKknhy7sP39wAAAVA"] [Sun Jul 12 18:12:45.233946 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:56794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQtfRMANaV5i2_BLQoRbwAAACw"] [Sun Jul 12 18:12:45.377653 2026] [security2:error] [pid 967714:tid 967939] [client 193.142.147.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "66.147.249.243"] [uri "/index.php"] [unique_id "alQte1_56DeKknhy7sP3yAAAAV4"] [Sun Jul 12 18:12:45.391845 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtfRMANaV5i2_BLQoRbAAAAA8"] [Sun Jul 12 18:12:45.432808 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:45.438315 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:45.511187 2026] [security2:error] [pid 960377:tid 960527] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtfBMANaV5i2_BLQoROQAAEzs"] [Sun Jul 12 18:12:45.610381 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:53236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/db.php"] [unique_id "alQtfRMANaV5i2_BLQoRhAAAAEg"] [Sun Jul 12 18:12:45.627253 2026] [security2:error] [pid 960377:tid 960426] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/db.php"] [unique_id "alQtfRMANaV5i2_BLQoRhQAAXS8"] [Sun Jul 12 18:12:45.731337 2026] [security2:error] [pid 960377:tid 960613] [client 62.171.167.118:53256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/main.php"] [unique_id "alQtfRMANaV5i2_BLQoRjAAAAGk"] [Sun Jul 12 18:12:45.741280 2026] [security2:error] [pid 967714:tid 967790] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/status/.env"] [unique_id "alQtfV_56DeKknhy7sP4CgABMUA"] [Sun Jul 12 18:12:45.783698 2026] [security2:error] [pid 960377:tid 960419] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/main.php"] [unique_id "alQtfRMANaV5i2_BLQoRjwAAcSg"] [Sun Jul 12 18:12:45.802569 2026] [security2:error] [pid 960377:tid 960513] [client 193.142.147.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "66.147.249.243"] [uri "/index.php"] [unique_id "alQtexMANaV5i2_BLQoRAAAAAAU"] [Sun Jul 12 18:12:45.928559 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:53276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/params.php"] [unique_id "alQtfRMANaV5i2_BLQoRkwAAAAg"] [Sun Jul 12 18:12:45.932165 2026] [security2:error] [pid 960377:tid 960470] [remote 62.171.167.118:52298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/params.php"] [unique_id "alQtfRMANaV5i2_BLQoRlQAANVs"] [Sun Jul 12 18:12:45.954201 2026] [security2:error] [pid 960377:tid 960627] [client 147.185.132.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/index.php"] [unique_id "alQtexMANaV5i2_BLQoRCAAAAHc"] [Sun Jul 12 18:12:45.978384 2026] [security2:error] [pid 960377:tid 960575] [client 147.185.132.36:60662] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/webshell.php"] [unique_id "alQtexMANaV5i2_BLQoRAgAAAEM"] [Sun Jul 12 18:12:46.134916 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP3qgAAAUA"], referer: http://67.222.38.115/debug/connections [Sun Jul 12 18:12:46.188915 2026] [security2:error] [pid 967714:tid 967881] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP3qQAAAUw"], referer: http://67.222.38.115/debug/configz [Sun Jul 12 18:12:46.259317 2026] [security2:error] [pid 967714:tid 967944] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP3qAAAAWM"] [Sun Jul 12 18:12:46.268189 2026] [security2:error] [pid 967714:tid 967856] [client 47.128.111.253:53944] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bestdestinationweddingphotographers.com"] [uri "/robots.txt"] [unique_id "alQtfl_56DeKknhy7sP4JgAAAQs"] [Sun Jul 12 18:12:46.273469 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:46.274718 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:46.305490 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtehMANaV5i2_BLQoQ6gAAAG4"] [Sun Jul 12 18:12:46.394896 2026] [security2:error] [pid 967714:tid 967920] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtfV_56DeKknhy7sP4EgAAAUs"] [Sun Jul 12 18:12:46.495398 2026] [security2:error] [pid 960377:tid 960549] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtfRMANaV5i2_BLQoRjQAAACk"] [Sun Jul 12 18:12:46.495457 2026] [security2:error] [pid 960377:tid 960549] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtfRMANaV5i2_BLQoRjQAAACk"] [Sun Jul 12 18:12:46.497207 2026] [security2:error] [pid 967714:tid 967875] [client 65.21.113.206:56808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTR2aTFpNF81MTg0LzR2LzExMTMvdg==.html"] [unique_id "alQtfV_56DeKknhy7sP4CAAAAR4"] [Sun Jul 12 18:12:46.627547 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:34790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/pinfo.php"] [unique_id "alQtfl_56DeKknhy7sP4NQAAASU"] [Sun Jul 12 18:12:46.646151 2026] [security2:error] [pid 967714:tid 967946] [client 168.100.149.74:41926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7020/bargainor/2308_impeccance.jsp"] [unique_id "alQtfl_56DeKknhy7sP4NgAAAWU"] [Sun Jul 12 18:12:46.657523 2026] [security2:error] [pid 967714:tid 967845] [remote 128.199.203.39:32838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 39.203.199.128.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQtfl_56DeKknhy7sP4NwABOHc"] [Sun Jul 12 18:12:46.866648 2026] [security2:error] [pid 960377:tid 960572] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtfRMANaV5i2_BLQoRiQAAQEM"] [Sun Jul 12 18:12:46.874772 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP4MgAAAUU"] [Sun Jul 12 18:12:47.039505 2026] [security2:error] [pid 967714:tid 967749] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/config/.env"] [unique_id "alQtf1_56DeKknhy7sP4QQABiBc"] [Sun Jul 12 18:12:47.088083 2026] [security2:error] [pid 960377:tid 960551] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQ0QAAACs"] [Sun Jul 12 18:12:47.123244 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:47.123957 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:47.143427 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3JwAAAYE"] [Sun Jul 12 18:12:47.186109 2026] [security2:error] [pid 967714:tid 967869] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3KgAAARg"] [Sun Jul 12 18:12:47.224042 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3KQAAASc"], referer: http://67.222.40.58/application.conf [Sun Jul 12 18:12:47.235347 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQ0gAAABY"], referer: http://67.222.40.58/application.yml [Sun Jul 12 18:12:47.256645 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3LAAAATk"] [Sun Jul 12 18:12:47.272154 2026] [security2:error] [pid 960377:tid 960535] [client 147.185.132.97:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/index.php"] [unique_id "alQtfBMANaV5i2_BLQoRVwAAABs"] [Sun Jul 12 18:12:47.277091 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteV_56DeKknhy7sP3KwAAAWc"], referer: http://67.222.40.58/application/configs/application.ini [Sun Jul 12 18:12:47.344301 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQteRMANaV5i2_BLQoQ0wAAAFg"], referer: http://67.222.40.58/aws.env [Sun Jul 12 18:12:47.499150 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtfxMANaV5i2_BLQoRvgAAAC8"] [Sun Jul 12 18:12:47.789032 2026] [security2:error] [pid 967714:tid 967888] [client 197.48.221.253:53181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtf1_56DeKknhy7sP4UgAAASs"] [Sun Jul 12 18:12:47.789277 2026] [security2:error] [pid 967714:tid 967888] [client 197.48.221.253:53181] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtf1_56DeKknhy7sP4UgAAASs"] [Sun Jul 12 18:12:47.820980 2026] [security2:error] [pid 967714:tid 967978] [client 74.7.230.52:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.xyb.mhd.mybluehost.me"] [uri "/index.php"] [unique_id "alQtf1_56DeKknhy7sP4TwAAAYU"] [Sun Jul 12 18:12:47.822567 2026] [security2:error] [pid 967714:tid 967885] [client 74.7.230.52:47700] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.xyb.mhd.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQtf1_56DeKknhy7sP4TQAAASg"] [Sun Jul 12 18:12:47.933942 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:47.944792 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtfxMANaV5i2_BLQoRyAAAAHg"] [Sun Jul 12 18:12:47.945958 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:48.111261 2026] [security2:error] [pid 967714:tid 967829] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/environments/local/.env"] [unique_id "alQtgF_56DeKknhy7sP4WgABX2c"] [Sun Jul 12 18:12:48.274223 2026] [security2:error] [pid 967714:tid 967859] [client 20.210.108.71:61631] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/class-wpdb.php"] [unique_id "alQtgF_56DeKknhy7sP4XwAAAQ4"], referer: binance.com [Sun Jul 12 18:12:48.306429 2026] [security2:error] [pid 960377:tid 960540] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtfxMANaV5i2_BLQoRuQAAICI"] [Sun Jul 12 18:12:48.540225 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgF_56DeKknhy7sP4YgAAAR4"] [Sun Jul 12 18:12:48.619004 2026] [security2:error] [pid 967714:tid 967895] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTRfMjM2NC80Y2MvMjI0ODVfY2M=.htm"] [unique_id "alQtgF_56DeKknhy7sP4aQAAATI"] [Sun Jul 12 18:12:48.627316 2026] [security2:error] [pid 967714:tid 967960] [client 168.100.149.210:38376] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7085/bargainor/2308_gunz.jsp"] [unique_id "alQtgF_56DeKknhy7sP4agAAAXM"] [Sun Jul 12 18:12:48.741650 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:48.742249 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:48.943072 2026] [security2:error] [pid 967714:tid 967928] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgF_56DeKknhy7sP4bQAAAVM"] [Sun Jul 12 18:12:49.125807 2026] [security2:error] [pid 960377:tid 960614] [client 66.249.70.105:52363] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQtgRMANaV5i2_BLQoR3QAAAGo"] [Sun Jul 12 18:12:49.349024 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaF_56DeKknhy7sP4RQABSD8"], referer: http://67.222.40.58/aws.json [Sun Jul 12 18:12:49.353194 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQta1_56DeKknhy7sP4dwABSDA"], referer: http://67.222.40.58/babel-plugin-dotenv/test/fixtures/as-alias/.env [Sun Jul 12 18:12:49.353559 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQtbF_56DeKknhy7sP4eAABSBU"] [Sun Jul 12 18:12:49.353809 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQtbF_56DeKknhy7sP4eQABSCk"], referer: http://67.222.40.58/babel-plugin-dotenv/test/fixtures/filename/.env [Sun Jul 12 18:12:49.359233 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/help/phpinfo.php"] [unique_id "alQtbl_56DeKknhy7sP4fAABSEw"] [Sun Jul 12 18:12:49.359393 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/api/info.php"] [unique_id "alQtbV_56DeKknhy7sP4ewABSHw"] [Sun Jul 12 18:12:49.360774 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/old_phpinfo.php"] [unique_id "alQtbl_56DeKknhy7sP4fgABSHw"] [Sun Jul 12 18:12:49.361071 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/infos.php"] [unique_id "alQtbl_56DeKknhy7sP4fQABSEw"] [Sun Jul 12 18:12:49.361083 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQtbF_56DeKknhy7sP4egABSDA"] [Sun Jul 12 18:12:49.362114 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/pinfo.php"] [unique_id "alQtb1_56DeKknhy7sP4fwABSHw"] [Sun Jul 12 18:12:49.362743 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/time.php"] [unique_id "alQtcV_56DeKknhy7sP4gQABSDA"] [Sun Jul 12 18:12:49.363131 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/server/phpinfo.php"] [unique_id "alQtcV_56DeKknhy7sP4gAABSEw"] [Sun Jul 12 18:12:49.365470 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/back/xampp/phpinfo.php"] [unique_id "alQtcV_56DeKknhy7sP4ggABSHw"] [Sun Jul 12 18:12:49.366408 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/helper/info.php"] [unique_id "alQtdV_56DeKknhy7sP4iwABSE8"] [Sun Jul 12 18:12:49.366758 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/temp.php"] [unique_id "alQtdl_56DeKknhy7sP4jgABSFs"] [Sun Jul 12 18:12:49.380603 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backend/xampp/info.php"] [unique_id "alQtdl_56DeKknhy7sP4kgABSE8"] [Sun Jul 12 18:12:49.367868 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backend/.env.bak"] [unique_id "alQtcV_56DeKknhy7sP4hwABSHg"], referer: http://67.222.40.58/backend/.env.bak [Sun Jul 12 18:12:49.368116 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backend/src/.env"] [unique_id "alQtdl_56DeKknhy7sP4jQABSBY"] [Sun Jul 12 18:12:49.369471 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backend/.env.bak"] [unique_id "alQtcV_56DeKknhy7sP4hAABSDA"] [Sun Jul 12 18:12:49.387706 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backend/src/.env"] [unique_id "alQtdl_56DeKknhy7sP4lAABSE8"], referer: http://67.222.40.58/backend/src/.env [Sun Jul 12 18:12:49.390048 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backendfinaltest/.env"] [unique_id "alQtdl_56DeKknhy7sP4lwABSDA"], referer: http://67.222.40.58/backendfinaltest/.env [Sun Jul 12 18:12:49.393130 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backup/.env"] [unique_id "alQtd1_56DeKknhy7sP4mwABSE8"] [Sun Jul 12 18:12:49.394444 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/backendfinaltest/.env"] [unique_id "alQtdl_56DeKknhy7sP4lQABSHg"] [Sun Jul 12 18:12:49.474996 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR4AAAAFQ"] [Sun Jul 12 18:12:49.493413 2026] [security2:error] [pid 960377:tid 960566] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtgBMANaV5i2_BLQoR1AAAOjI"] [Sun Jul 12 18:12:49.592173 2026] [authz_core:error] [pid 960377:tid 960530] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:49.592916 2026] [authz_core:error] [pid 960377:tid 960530] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:49.663007 2026] [security2:error] [pid 960377:tid 960541] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/lara/info.php"] [unique_id "alQtgRMANaV5i2_BLQoR9gAAACE"] [Sun Jul 12 18:12:49.806884 2026] [security2:error] [pid 960377:tid 960551] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR4QAAACs"] [Sun Jul 12 18:12:49.806982 2026] [security2:error] [pid 960377:tid 960551] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR4QAAACs"] [Sun Jul 12 18:12:49.808330 2026] [security2:error] [pid 960377:tid 960557] [client 65.21.113.206:56818] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTRfMjM2NC80Y2MvMjI0ODVfY2M=.htm"] [unique_id "alQtgRMANaV5i2_BLQoR3wAAADE"] [Sun Jul 12 18:12:49.823453 2026] [security2:error] [pid 967714:tid 967766] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/node-app/.env"] [unique_id "alQtgV_56DeKknhy7sP4uAABgig"] [Sun Jul 12 18:12:49.942928 2026] [security2:error] [pid 960377:tid 960620] [client 152.232.80.168:60027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/services.php"] [unique_id "alQtgRMANaV5i2_BLQoR-QAAAHA"] [Sun Jul 12 18:12:50.000958 2026] [security2:error] [pid 967714:tid 967878] [client 168.100.149.217:15118] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7150/bargainor/2308_monadically.jsp"] [unique_id "alQtgV_56DeKknhy7sP4vwAAASE"] [Sun Jul 12 18:12:50.213777 2026] [security2:error] [pid 960377:tid 960630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtfxMANaV5i2_BLQoRwAAAACc"] [Sun Jul 12 18:12:50.282600 2026] [security2:error] [pid 967714:tid 967883] [client 152.232.80.168:59804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/view.php"] [unique_id "alQtgl_56DeKknhy7sP4zQAAASY"] [Sun Jul 12 18:12:50.398007 2026] [security2:error] [pid 967714:tid 967882] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgl_56DeKknhy7sP4wAAAASU"] [Sun Jul 12 18:12:50.426421 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:50.426944 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:50.440550 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:57790] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/backend/phpinfo.php"] [unique_id "alQtgl_56DeKknhy7sP4zwAAAXI"] [Sun Jul 12 18:12:50.591524 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:57778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/infos.php"] [unique_id "alQtgl_56DeKknhy7sP42gAAAYg"] [Sun Jul 12 18:12:50.602014 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR9AAAS3Y"] [Sun Jul 12 18:12:50.731520 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:57800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/old_phpinfo.php"] [unique_id "alQtghMANaV5i2_BLQoSCwAAACg"] [Sun Jul 12 18:12:50.733506 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:57794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/services/info.php"] [unique_id "alQtghMANaV5i2_BLQoSDAAAABg"] [Sun Jul 12 18:12:50.734925 2026] [security2:error] [pid 960377:tid 960625] [client 62.171.167.118:57808] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/temp.php"] [unique_id "alQtghMANaV5i2_BLQoSDQAAAHU"] [Sun Jul 12 18:12:50.738411 2026] [security2:error] [pid 960377:tid 960622] [client 34.56.168.230:48993] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.islandoaksmedia.com"] [uri "/index.php"] [unique_id "alQtghMANaV5i2_BLQoSAQAAcgQ"] [Sun Jul 12 18:12:50.816718 2026] [security2:error] [pid 960377:tid 960605] [client 66.249.70.105:52363] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQtghMANaV5i2_BLQoSDwAAAGE"] [Sun Jul 12 18:12:50.848052 2026] [security2:error] [pid 967714:tid 967960] [client 88.123.2.233:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtgl_56DeKknhy7sP4xgAAAXM"] [Sun Jul 12 18:12:50.885532 2026] [security2:error] [pid 967714:tid 967902] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgl_56DeKknhy7sP42QAAATk"] [Sun Jul 12 18:12:51.048307 2026] [security2:error] [pid 967714:tid 967753] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/spring-app/src/.env"] [unique_id "alQtg1_56DeKknhy7sP44QABfRs"] [Sun Jul 12 18:12:51.077983 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtaV_56DeKknhy7sP4RgABSEE"] [Sun Jul 12 18:12:51.215005 2026] [security2:error] [pid 967714:tid 967750] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phpinfo.php.copy.bak"] [unique_id "alQtg1_56DeKknhy7sP44gABMBg"] [Sun Jul 12 18:12:51.227351 2026] [authz_core:error] [pid 960377:tid 960515] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:51.239957 2026] [authz_core:error] [pid 960377:tid 960515] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:51.327209 2026] [cgid:error] [pid 960377:tid 960526] [client 202.46.62.54:22291] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/mini-vinyl-footballs-custom-p-49.html?osCsid=51s56ah89ou26sl1k6pg5pk393 [Sun Jul 12 18:12:51.398982 2026] [security2:error] [pid 967714:tid 967943] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTRmZHRlLTcwMzAvNGYtMzIxNDkvZmR0ZQ=="] [unique_id "alQtg1_56DeKknhy7sP45QAAAWI"] [Sun Jul 12 18:12:51.476128 2026] [security2:error] [pid 967714:tid 967921] [client 202.46.62.97:1676] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQtg1_56DeKknhy7sP46AAAAUw"], referer: https://www.stephenspublishing.com/mini-vinyl-footballs-custom-p-49.html?osCsid=51s56ah89ou26sl1k6pg5pk393 [Sun Jul 12 18:12:51.563570 2026] [security2:error] [pid 960377:tid 960527] [client 34.56.168.230:48993] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.islandoaksmedia.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSGgAAE08"] [Sun Jul 12 18:12:51.624314 2026] [security2:error] [pid 960377:tid 960574] [client 94.187.171.125:53218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtgxMANaV5i2_BLQoSJQAAAEI"] [Sun Jul 12 18:12:51.624612 2026] [security2:error] [pid 960377:tid 960574] [client 94.187.171.125:53218] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtgxMANaV5i2_BLQoSJQAAAEI"] [Sun Jul 12 18:12:51.628897 2026] [security2:error] [pid 960377:tid 960585] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSHwAAAE0"] [Sun Jul 12 18:12:51.716843 2026] [http2:warn] [pid 960377:tid 960633] [client 103.82.20.130:52726] h2_stream(960377-411-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0 [Sun Jul 12 18:12:51.770331 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtghMANaV5i2_BLQoSEAAAT2A"] [Sun Jul 12 18:12:51.817338 2026] [security2:error] [pid 960377:tid 960534] [client 185.223.152.61:33089] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.152.223.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "randw.ie"] [uri "/wp-login.php"] [unique_id "alQtgxMANaV5i2_BLQoSJwAAABo"] [Sun Jul 12 18:12:52.056551 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSKQAAADA"] [Sun Jul 12 18:12:52.129386 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:52.130148 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:52.219022 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtf1_56DeKknhy7sP4SgAAAVs"], referer: http://67.222.40.58/aws.yml [Sun Jul 12 18:12:52.487851 2026] [security2:error] [pid 967714:tid 967873] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthF_56DeKknhy7sP4_gAAARw"] [Sun Jul 12 18:12:52.557478 2026] [security2:error] [pid 960377:tid 960621] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSMAAAAHE"] [Sun Jul 12 18:12:52.557527 2026] [security2:error] [pid 960377:tid 960621] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSMAAAAHE"] [Sun Jul 12 18:12:52.559461 2026] [security2:error] [pid 960377:tid 960620] [client 65.21.113.206:56824] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTRmZHRlLTcwMzAvNGYtMzIxNDkvZmR0ZQ=="] [unique_id "alQtgxMANaV5i2_BLQoSLAAAAHA"] [Sun Jul 12 18:12:52.664473 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:53298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "alQthBMANaV5i2_BLQoSRQAAAG4"] [Sun Jul 12 18:12:52.703933 2026] [security2:error] [pid 960377:tid 960591] [client 168.100.149.202:30530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7215/bargainor/2308_enhalo.jsp"] [unique_id "alQthBMANaV5i2_BLQoSRwAAAFM"] [Sun Jul 12 18:12:52.796125 2026] [security2:error] [pid 967714:tid 967944] [client 62.171.167.118:53288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/etc/env.php"] [unique_id "alQthF_56DeKknhy7sP5DgAAAWM"] [Sun Jul 12 18:12:52.909874 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtgxMANaV5i2_BLQoSMgAAN3M"] [Sun Jul 12 18:12:52.914765 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthBMANaV5i2_BLQoSRgAAACQ"] [Sun Jul 12 18:12:52.937253 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:52.937763 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:53.064693 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "alQthV_56DeKknhy7sP5GgABKms"] [Sun Jul 12 18:12:53.065811 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/etc/env.php"] [unique_id "alQthV_56DeKknhy7sP5GQABKlU"] [Sun Jul 12 18:12:53.085854 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:53284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/secured/phpinfo.php"] [unique_id "alQthV_56DeKknhy7sP5HQAAATQ"] [Sun Jul 12 18:12:53.096593 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/secured/phpinfo.php"] [unique_id "alQthV_56DeKknhy7sP5HgABKks"] [Sun Jul 12 18:12:53.124176 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/config.php"] [unique_id "alQthV_56DeKknhy7sP5IgABKmQ"] [Sun Jul 12 18:12:53.124577 2026] [security2:error] [pid 967714:tid 967745] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/index.php/phpinfo"] [unique_id "alQthV_56DeKknhy7sP5IwABKhM"] [Sun Jul 12 18:12:53.130200 2026] [security2:error] [pid 960377:tid 960511] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfhMANaV5i2_BLQoRoQAAABw"] [Sun Jul 12 18:12:53.149593 2026] [security2:error] [pid 967714:tid 967956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP4JAAAAW8"] [Sun Jul 12 18:12:53.231234 2026] [security2:error] [pid 967714:tid 967878] [client 20.210.108.71:58470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/compat-utf8.php"] [unique_id "alQthV_56DeKknhy7sP5LQAAASE"], referer: binance.com [Sun Jul 12 18:12:53.243656 2026] [security2:error] [pid 960377:tid 960594] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfhMANaV5i2_BLQoRogAAAFY"], referer: http://67.222.38.115/debug/endpointz [Sun Jul 12 18:12:53.245040 2026] [security2:error] [pid 967714:tid 967968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP4KgAAAXs"] [Sun Jul 12 18:12:53.255263 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP4IwAAAX8"], referer: http://67.222.38.115/debug/meshconfig [Sun Jul 12 18:12:53.259371 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:53328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/config.php"] [unique_id "alQthRMANaV5i2_BLQoSTwAAAGo"] [Sun Jul 12 18:12:53.274087 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:53344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/index.php/phpinfo"] [unique_id "alQthRMANaV5i2_BLQoSUQAAABE"] [Sun Jul 12 18:12:53.286592 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/wp-config.php"] [unique_id "alQthV_56DeKknhy7sP5OAABRxc"] [Sun Jul 12 18:12:53.290787 2026] [security2:error] [pid 967714:tid 967867] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP4IgAAARY"], referer: http://67.222.38.115/debug/featurez [Sun Jul 12 18:12:53.304005 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfhMANaV5i2_BLQoRpAAAAGw"], referer: http://67.222.38.115/debug/pipelinez [Sun Jul 12 18:12:53.346080 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/config.old"] [unique_id "alQthV_56DeKknhy7sP5PgABHhw"] [Sun Jul 12 18:12:53.364569 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/config.backup"] [unique_id "alQthV_56DeKknhy7sP5QgABUGU"] [Sun Jul 12 18:12:53.422962 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:53356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/wp-config.php"] [unique_id "alQthRMANaV5i2_BLQoSYQAAABY"] [Sun Jul 12 18:12:53.537441 2026] [security2:error] [pid 967714:tid 967978] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthV_56DeKknhy7sP5KAAAAYU"] [Sun Jul 12 18:12:53.563038 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/config.old"] [unique_id "alQthV_56DeKknhy7sP5ZQABFwc"], referer: http://67.222.42.11/config.old [Sun Jul 12 18:12:53.563905 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:58472] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/config.backup"] [unique_id "alQthV_56DeKknhy7sP5ZgABFzQ"], referer: http://67.222.42.11/config.backup [Sun Jul 12 18:12:53.702909 2026] [security2:error] [pid 967714:tid 967741] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/vault/.env"] [unique_id "alQthV_56DeKknhy7sP5dgABOQ8"] [Sun Jul 12 18:12:53.713580 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:53.714380 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:53.810748 2026] [security2:error] [pid 960377:tid 960518] [client 152.232.80.168:53825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/app/config/services.php"] [unique_id "alQthRMANaV5i2_BLQoScQAAAAo"] [Sun Jul 12 18:12:53.883965 2026] [security2:error] [pid 967714:tid 967881] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/bootstrap/cache/config.php"] [unique_id "alQthV_56DeKknhy7sP5gAAAASQ"] [Sun Jul 12 18:12:53.973824 2026] [security2:error] [pid 960377:tid 960461] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQthRMANaV5i2_BLQoSTAAADlI"] [Sun Jul 12 18:12:53.992058 2026] [security2:error] [pid 960377:tid 960551] [client 168.100.149.207:25940] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7280/bargainor/2308_metalogical.jsp"] [unique_id "alQthRMANaV5i2_BLQoSdwAAACs"] [Sun Jul 12 18:12:54.076294 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfhMANaV5i2_BLQoRpQAAACw"] [Sun Jul 12 18:12:54.140253 2026] [security2:error] [pid 967714:tid 967920] [client 95.108.213.219:65470] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/robots.txt"] [unique_id "alQthl_56DeKknhy7sP5iwAAAUs"] [Sun Jul 12 18:12:54.342969 2026] [security2:error] [pid 967714:tid 967905] [client 24.203.79.110:52605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQthl_56DeKknhy7sP5lAAAATw"] [Sun Jul 12 18:12:54.343234 2026] [security2:error] [pid 967714:tid 967905] [client 24.203.79.110:52605] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQthl_56DeKknhy7sP5lAAAATw"] [Sun Jul 12 18:12:54.408569 2026] [security2:error] [pid 960377:tid 960554] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthhMANaV5i2_BLQoSewAAAC4"] [Sun Jul 12 18:12:54.418510 2026] [security2:error] [pid 967714:tid 967856] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTU3ZHo2LTIzNjQvNTctMjIzNDkvN2R6Ng=="] [unique_id "alQthl_56DeKknhy7sP5mAAAAQs"] [Sun Jul 12 18:12:54.470285 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:54.470911 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:54.632900 2026] [security2:error] [pid 967714:tid 967736] [remote 103.171.88.220:34024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 220.88.171.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "catherineandrewscoaching.co.uk"] [uri "/wp-login.php"] [unique_id "alQthl_56DeKknhy7sP5oAABbwo"] [Sun Jul 12 18:12:54.717506 2026] [security2:error] [pid 967714:tid 967958] [client 125.167.21.72:62766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQthl_56DeKknhy7sP5ogAAAXE"] [Sun Jul 12 18:12:54.717845 2026] [security2:error] [pid 967714:tid 967958] [client 125.167.21.72:62766] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQthl_56DeKknhy7sP5ogAAAXE"] [Sun Jul 12 18:12:54.830922 2026] [security2:error] [pid 960377:tid 960602] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthhMANaV5i2_BLQoSjgAAAF4"] [Sun Jul 12 18:12:54.929353 2026] [security2:error] [pid 960377:tid 960630] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQthhMANaV5i2_BLQoSegAAelY"] [Sun Jul 12 18:12:55.178882 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:57820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/develop/info.php"] [unique_id "alQthxMANaV5i2_BLQoSmAAAADY"] [Sun Jul 12 18:12:55.273503 2026] [authz_core:error] [pid 960377:tid 960510] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:55.274181 2026] [authz_core:error] [pid 960377:tid 960510] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:55.289525 2026] [security2:error] [pid 967714:tid 967862] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQth1_56DeKknhy7sP5rgAAARE"] [Sun Jul 12 18:12:55.453116 2026] [security2:error] [pid 967714:tid 967782] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/staging/.env.bak"] [unique_id "alQth1_56DeKknhy7sP5tgABGDg"] [Sun Jul 12 18:12:55.586240 2026] [security2:error] [pid 967714:tid 967892] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQthl_56DeKknhy7sP5qAAAAS8"] [Sun Jul 12 18:12:55.586300 2026] [security2:error] [pid 967714:tid 967892] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQthl_56DeKknhy7sP5qAAAAS8"] [Sun Jul 12 18:12:55.588173 2026] [security2:error] [pid 967714:tid 967879] [client 65.21.113.206:55442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTU3ZHo2LTIzNjQvNTctMjIzNDkvN2R6Ng=="] [unique_id "alQthl_56DeKknhy7sP5pgAAASI"] [Sun Jul 12 18:12:55.631341 2026] [security2:error] [pid 960377:tid 960601] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/php52/phpinfo.php"] [unique_id "alQthxMANaV5i2_BLQoSoQAAAF0"] [Sun Jul 12 18:12:55.700191 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:57836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/infos.php"] [unique_id "alQth1_56DeKknhy7sP5uwAAATA"] [Sun Jul 12 18:12:55.839143 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQthxMANaV5i2_BLQoSlQAAH0c"] [Sun Jul 12 18:12:56.007938 2026] [security2:error] [pid 960377:tid 960380] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env.swp"] [unique_id "alQthxMANaV5i2_BLQoSqAAAdwI"] [Sun Jul 12 18:12:56.064965 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:56.065683 2026] [authz_core:error] [pid 960377:tid 960589] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:56.084177 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQthxMANaV5i2_BLQoSogAAAAo"] [Sun Jul 12 18:12:56.167155 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQthRMANaV5i2_BLQoSVwAAAEo"] [Sun Jul 12 18:12:56.183444 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQthRMANaV5i2_BLQoSUgAAAFw"] [Sun Jul 12 18:12:56.244331 2026] [security2:error] [pid 960377:tid 960634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQthRMANaV5i2_BLQoSVgAAAH4"] [Sun Jul 12 18:12:56.463286 2026] [security2:error] [pid 960377:tid 960552] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtiBMANaV5i2_BLQoSrAAAACw"] [Sun Jul 12 18:12:56.545773 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:33314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/php-info.php"] [unique_id "alQtiF_56DeKknhy7sP5zQAAAUo"] [Sun Jul 12 18:12:56.593488 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:33330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/pinfo.php"] [unique_id "alQtiF_56DeKknhy7sP5zgAAAVU"] [Sun Jul 12 18:12:56.630302 2026] [security2:error] [pid 967714:tid 967810] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/settings.bak"] [unique_id "alQtiF_56DeKknhy7sP50AABWlQ"] [Sun Jul 12 18:12:56.692254 2026] [security2:error] [pid 967714:tid 967883] [client 168.100.149.136:34878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7345/bargainor/2308_psychoreflex.jsp"] [unique_id "alQtiF_56DeKknhy7sP50wAAASY"] [Sun Jul 12 18:12:56.808130 2026] [security2:error] [pid 967714:tid 967880] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/app/etc/env.php.temp"] [unique_id "alQtiF_56DeKknhy7sP52wAAASM"] [Sun Jul 12 18:12:56.890323 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:56.890840 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:56.905772 2026] [security2:error] [pid 960377:tid 960440] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtiBMANaV5i2_BLQoSqQAASz0"] [Sun Jul 12 18:12:57.289376 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtiBMANaV5i2_BLQoSsgAAABg"] [Sun Jul 12 18:12:57.295122 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiF_56DeKknhy7sP5xgAAAT4"] [Sun Jul 12 18:12:57.413575 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiF_56DeKknhy7sP5yQAAATw"] [Sun Jul 12 18:12:57.440982 2026] [security2:error] [pid 967714:tid 967945] [client 20.210.108.71:64137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts.php"] [unique_id "alQtiV_56DeKknhy7sP58QAAAWQ"], referer: binance.com [Sun Jul 12 18:12:57.705473 2026] [security2:error] [pid 967714:tid 967944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtiV_56DeKknhy7sP59AAAAWM"] [Sun Jul 12 18:12:57.706078 2026] [authz_core:error] [pid 960377:tid 960572] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:57.706574 2026] [authz_core:error] [pid 960377:tid 960572] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:57.865450 2026] [security2:error] [pid 967714:tid 967924] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTU3ZHo2LTg0NS81Ny0yMjM0OS83ZHo2"] [unique_id "alQtiV_56DeKknhy7sP5_gAAAU8"] [Sun Jul 12 18:12:57.925923 2026] [security2:error] [pid 967714:tid 967920] [client 152.232.80.168:59029] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/includes/config.php"] [unique_id "alQtiV_56DeKknhy7sP6AQAAAUs"] [Sun Jul 12 18:12:57.934178 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtiRMANaV5i2_BLQoSswAAWl4"] [Sun Jul 12 18:12:58.095444 2026] [security2:error] [pid 967714:tid 967918] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtiV_56DeKknhy7sP6AAAAAUk"] [Sun Jul 12 18:12:58.363217 2026] [security2:error] [pid 967714:tid 967965] [client 197.48.221.253:53778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtil_56DeKknhy7sP6CwAAAXg"] [Sun Jul 12 18:12:58.363856 2026] [security2:error] [pid 967714:tid 967965] [client 197.48.221.253:53778] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtil_56DeKknhy7sP6CwAAAXg"] [Sun Jul 12 18:12:58.580643 2026] [authz_core:error] [pid 960377:tid 960517] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:58.581219 2026] [authz_core:error] [pid 960377:tid 960517] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:58.603623 2026] [security2:error] [pid 960377:tid 960521] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoSzQAAAA0"] [Sun Jul 12 18:12:58.689183 2026] [security2:error] [pid 967714:tid 967971] [client 168.100.149.2:34218] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7410/bargainor/2308_mailable.jsp"] [unique_id "alQtil_56DeKknhy7sP6FgAAAX4"] [Sun Jul 12 18:12:58.738151 2026] [security2:error] [pid 960377:tid 960543] [client 57.141.18.14:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtiRMANaV5i2_BLQoStQAAACM"] [Sun Jul 12 18:12:58.909502 2026] [security2:error] [pid 960377:tid 960600] [client 104.248.121.99:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoS1wAAAFw"], referer: https://smellytele.com/ [Sun Jul 12 18:12:58.968164 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:33344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/service/phpinfo.php"] [unique_id "alQtihMANaV5i2_BLQoS5QAAABw"] [Sun Jul 12 18:12:58.987906 2026] [security2:error] [pid 960377:tid 960557] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoSygAAMSQ"] [Sun Jul 12 18:12:59.004466 2026] [security2:error] [pid 967714:tid 967900] [client 62.171.167.118:33406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/client/server/phpinfo.php"] [unique_id "alQti1_56DeKknhy7sP6HAAAATc"] [Sun Jul 12 18:12:59.015891 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:33422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/backup/info.php"] [unique_id "alQti1_56DeKknhy7sP6HQAAAXM"] [Sun Jul 12 18:12:59.019250 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:33444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/current/info.php"] [unique_id "alQti1_56DeKknhy7sP6HgAAAXo"] [Sun Jul 12 18:12:59.020716 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:33432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/config.php"] [unique_id "alQti1_56DeKknhy7sP6HwAAAXM"] [Sun Jul 12 18:12:59.032243 2026] [security2:error] [pid 967714:tid 967877] [client 62.171.167.118:33452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/dev/info.php"] [unique_id "alQti1_56DeKknhy7sP6IAAAASA"] [Sun Jul 12 18:12:59.038295 2026] [security2:error] [pid 960377:tid 960508] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoS4AAAAAA"] [Sun Jul 12 18:12:59.077700 2026] [security2:error] [pid 967714:tid 967947] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4mQAAAWY"] [Sun Jul 12 18:12:59.093198 2026] [security2:error] [pid 960377:tid 960589] [client 86.24.51.207:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoS1QAAAFE"] [Sun Jul 12 18:12:59.128170 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgl_56DeKknhy7sP4ywAAARU"], referer: http://67.222.40.58/backup/.env.production [Sun Jul 12 18:12:59.149644 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoS0QAAAAo"] [Sun Jul 12 18:12:59.149744 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtihMANaV5i2_BLQoS0QAAAAo"] [Sun Jul 12 18:12:59.171435 2026] [security2:error] [pid 967714:tid 967884] [client 65.21.113.206:55458] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTU3ZHo2LTg0NS81Ny0yMjM0OS83ZHo2"] [unique_id "alQtil_56DeKknhy7sP6CgAAASc"] [Sun Jul 12 18:12:59.198566 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR7QAAAG0"] [Sun Jul 12 18:12:59.461850 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:12:59.462549 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:12:59.515314 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtixMANaV5i2_BLQoS7wAAAHs"] [Sun Jul 12 18:12:59.681268 2026] [security2:error] [pid 967714:tid 967836] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/database~"] [unique_id "alQti1_56DeKknhy7sP6LAABDm4"] [Sun Jul 12 18:12:59.852210 2026] [security2:error] [pid 967714:tid 967935] [client 152.232.80.168:58268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/includes/configure.php"] [unique_id "alQti1_56DeKknhy7sP6MAAAAVo"] [Sun Jul 12 18:12:59.927182 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:33396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/develop/info.php"] [unique_id "alQti1_56DeKknhy7sP6MwAAAXc"] [Sun Jul 12 18:12:59.998941 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtixMANaV5i2_BLQoS6wAAazg"] [Sun Jul 12 18:13:00.071097 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4ogAAAUQ"] [Sun Jul 12 18:13:00.082428 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4pgAAAYQ"] [Sun Jul 12 18:13:00.109781 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR7wAAAGY"] [Sun Jul 12 18:13:00.151893 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtixMANaV5i2_BLQoS-QAAAFU"] [Sun Jul 12 18:13:00.154438 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR8AAAACo"], referer: http://67.222.40.58/backup/.env.local [Sun Jul 12 18:13:00.180425 2026] [security2:error] [pid 967714:tid 967973] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4qAAAAYA"], referer: http://67.222.40.58/backend/xampp/phpinfo [Sun Jul 12 18:13:00.181298 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4oAAAAT8"] [Sun Jul 12 18:13:00.188129 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiRMANaV5i2_BLQoSuwAAAD8"] [Sun Jul 12 18:13:00.194149 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4rAAAAQw"] [Sun Jul 12 18:13:00.218607 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiRMANaV5i2_BLQoSuAAAAGg"] [Sun Jul 12 18:13:00.228318 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4pwAAAQ8"] [Sun Jul 12 18:13:00.257577 2026] [security2:error] [pid 960377:tid 960607] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiRMANaV5i2_BLQoSuQAAAGM"] [Sun Jul 12 18:13:00.282042 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4qwAAARM"] [Sun Jul 12 18:13:00.301170 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgRMANaV5i2_BLQoR6wAAAGU"], referer: http://67.222.40.58/aws/access_key_id.txt [Sun Jul 12 18:13:00.301205 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtgV_56DeKknhy7sP4pAAAAWw"], referer: http://67.222.40.58/backend/_profiler/phpinfo [Sun Jul 12 18:13:00.315128 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtiV_56DeKknhy7sP57wAAAR0"] [Sun Jul 12 18:13:00.323832 2026] [authz_core:error] [pid 967714:tid 967970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:00.324764 2026] [authz_core:error] [pid 967714:tid 967970] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:00.393515 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:33390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/develop/phpinfo.php"] [unique_id "alQtjF_56DeKknhy7sP6RgAAAT0"] [Sun Jul 12 18:13:00.522589 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:33380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/help/info.php"] [unique_id "alQtjBMANaV5i2_BLQoTFAAAABg"] [Sun Jul 12 18:13:00.530242 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:33374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/helper/info.php"] [unique_id "alQtjF_56DeKknhy7sP6RwAAAVQ"] [Sun Jul 12 18:13:00.643983 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTEgAAACk"] [Sun Jul 12 18:13:00.647660 2026] [security2:error] [pid 960377:tid 960519] [client 168.100.149.237:28856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7475/bargainor/2308_epidemiology.jsp"] [unique_id "alQtjBMANaV5i2_BLQoTGAAAAAs"] [Sun Jul 12 18:13:00.954249 2026] [security2:error] [pid 967714:tid 967967] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTU5Lzg3OTUvNTkvNzA4Ny85Zmw=.asp"] [unique_id "alQtjF_56DeKknhy7sP6TAAAAXo"] [Sun Jul 12 18:13:01.012498 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoS_wAAcGs"] [Sun Jul 12 18:13:01.099358 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtjF_56DeKknhy7sP6SwAAATc"] [Sun Jul 12 18:13:01.106558 2026] [security2:error] [pid 967714:tid 967893] [client 20.210.108.71:53569] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/global-styles-and-settings.php"] [unique_id "alQtjV_56DeKknhy7sP6UQAAATA"], referer: binance.com [Sun Jul 12 18:13:01.192852 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:01.193487 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:01.259729 2026] [security2:error] [pid 967714:tid 967742] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/facebook-bot/src/.env"] [unique_id "alQtjV_56DeKknhy7sP6VwABFhA"] [Sun Jul 12 18:13:01.823979 2026] [security2:error] [pid 967714:tid 967950] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtjV_56DeKknhy7sP6YAAAAWk"] [Sun Jul 12 18:13:01.987264 2026] [security2:error] [pid 967714:tid 967737] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/release/.env"] [unique_id "alQtjV_56DeKknhy7sP6bQABcAs"] [Sun Jul 12 18:13:02.017538 2026] [security2:error] [pid 967714:tid 967863] [client 168.100.149.59:22358] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7540/bargainor/2308_secque.jsp"] [unique_id "alQtjl_56DeKknhy7sP6bgAAARI"] [Sun Jul 12 18:13:02.052613 2026] [authz_core:error] [pid 967714:tid 967871] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:02.064243 2026] [authz_core:error] [pid 967714:tid 967871] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:02.148043 2026] [security2:error] [pid 967714:tid 967865] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtjV_56DeKknhy7sP6YgAAARQ"] [Sun Jul 12 18:13:02.148138 2026] [security2:error] [pid 967714:tid 967865] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtjV_56DeKknhy7sP6YgAAARQ"] [Sun Jul 12 18:13:02.155000 2026] [security2:error] [pid 967714:tid 967897] [client 65.21.113.206:55464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTU5Lzg3OTUvNTkvNzA4Ny85Zmw=.asp"] [unique_id "alQtjV_56DeKknhy7sP6XgAAATQ"] [Sun Jul 12 18:13:02.163921 2026] [security2:error] [pid 967714:tid 967883] [client 140.248.75.186:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "lisalandrum.com"] [uri "/index.php"] [unique_id "alQtil_56DeKknhy7sP6DgAAASY"] [Sun Jul 12 18:13:02.164299 2026] [security2:error] [pid 967714:tid 967966] [client 140.248.75.186:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "lisalandrum.com"] [uri "/index.php"] [unique_id "alQtil_56DeKknhy7sP6DwAAAXk"] [Sun Jul 12 18:13:02.229293 2026] [security2:error] [pid 967714:tid 967935] [client 94.187.171.125:53724] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtjl_56DeKknhy7sP6dAAAAVo"] [Sun Jul 12 18:13:02.263648 2026] [security2:error] [pid 967714:tid 967935] [client 94.187.171.125:53724] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtjl_56DeKknhy7sP6dAAAAVo"] [Sun Jul 12 18:13:02.314993 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtjRMANaV5i2_BLQoTIAAAOUQ"] [Sun Jul 12 18:13:02.333381 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTEAAAAHk"] [Sun Jul 12 18:13:02.340808 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/backend/info.php"] [unique_id "alQtel_56DeKknhy7sP6dwABSF0"] [Sun Jul 12 18:13:02.342721 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/help/phpinfo.php"] [unique_id "alQtel_56DeKknhy7sP6eAABSF0"] [Sun Jul 12 18:13:02.345138 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/helper/phpinfo.php"] [unique_id "alQtel_56DeKknhy7sP6eQABSF0"] [Sun Jul 12 18:13:02.359165 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/info.php"] [unique_id "alQtel_56DeKknhy7sP6ewABSF0"] [Sun Jul 12 18:13:02.363216 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/lara/info.php"] [unique_id "alQtel_56DeKknhy7sP6fAABSF0"] [Sun Jul 12 18:13:02.365350 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/lara/phpinfo.php"] [unique_id "alQtel_56DeKknhy7sP6fQABSF0"] [Sun Jul 12 18:13:02.366870 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/linusadmin-phpinfo.php"] [unique_id "alQte1_56DeKknhy7sP6gQABSGo"] [Sun Jul 12 18:13:02.367033 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/laravel/phpinfo.php"] [unique_id "alQtel_56DeKknhy7sP6gAABSCw"] [Sun Jul 12 18:13:02.368453 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/backup/pinfo.php"] [unique_id "alQtfl_56DeKknhy7sP6hQABSCw"] [Sun Jul 12 18:13:02.371819 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/base/.env"] [unique_id "alQtfl_56DeKknhy7sP6hgABSCw"] [Sun Jul 12 18:13:02.380580 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/base_dir/.env"] [unique_id "alQtfl_56DeKknhy7sP6hwABSCw"] [Sun Jul 12 18:13:02.389203 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/base_dir/.env"] [unique_id "alQtfl_56DeKknhy7sP6iAABSCw"], referer: http://67.222.40.58/base_dir/.env [Sun Jul 12 18:13:02.393368 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/basic-network/.env"] [unique_id "alQtf1_56DeKknhy7sP6iQABSCw"] [Sun Jul 12 18:13:02.399331 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/basic-network/.env"] [unique_id "alQtf1_56DeKknhy7sP6igABSCw"], referer: http://67.222.40.58/basic-network/.env [Sun Jul 12 18:13:02.404706 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/backend/phpinfo.php"] [unique_id "alQtgl_56DeKknhy7sP6kgABSG8"] [Sun Jul 12 18:13:02.418922 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/services/info.php"] [unique_id "alQtgl_56DeKknhy7sP6lgABSG8"] [Sun Jul 12 18:13:02.421143 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/temp.php"] [unique_id "alQtgl_56DeKknhy7sP6lwABSG8"] [Sun Jul 12 18:13:02.405933 2026] [security2:error] [pid 967714:tid 967757] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/infos.php"] [unique_id "alQtgl_56DeKknhy7sP6kwABSB8"] [Sun Jul 12 18:13:02.407179 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/linusadmin-phpinfo.php"] [unique_id "alQtgl_56DeKknhy7sP6lAABSA8"] [Sun Jul 12 18:13:02.410592 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTDgAAAFw"], referer: http://67.222.40.58/backup/.env.staging [Sun Jul 12 18:13:02.414201 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/beta/old_phpinfo.php"] [unique_id "alQtgl_56DeKknhy7sP6lQABSD8"] [Sun Jul 12 18:13:02.465911 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:53528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dev/phpinfo.php"] [unique_id "alQtjl_56DeKknhy7sP6ngAAAV0"] [Sun Jul 12 18:13:02.472234 2026] [security2:error] [pid 960377:tid 960624] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTMwAAAHQ"] [Sun Jul 12 18:13:02.531338 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:53544] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php_info.php"] [unique_id "alQtjl_56DeKknhy7sP6qQAAAXw"] [Sun Jul 12 18:13:02.534710 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/i.php"] [unique_id "alQtjhMANaV5i2_BLQoTSQAAHFA"] [Sun Jul 12 18:13:02.535635 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php_info.php"] [unique_id "alQtjhMANaV5i2_BLQoTSAAAHHo"] [Sun Jul 12 18:13:02.547420 2026] [security2:error] [pid 960377:tid 960468] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/php_info.php"] [unique_id "alQtjhMANaV5i2_BLQoTTQAAHFk"] [Sun Jul 12 18:13:02.587111 2026] [security2:error] [pid 960377:tid 960399] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/test2.php"] [unique_id "alQtjhMANaV5i2_BLQoTUwAAVxU"] [Sun Jul 12 18:13:02.647793 2026] [security2:error] [pid 960377:tid 960452] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/test1.php"] [unique_id "alQtjhMANaV5i2_BLQoTVQAAMUk"] [Sun Jul 12 18:13:02.676150 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:58108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/test2.php"] [unique_id "alQtjhMANaV5i2_BLQoTXAAAACk"] [Sun Jul 12 18:13:02.703958 2026] [security2:error] [pid 960377:tid 960483] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.11"] [uri "/wp-config.php.bak"] [unique_id "alQtjhMANaV5i2_BLQoTYQAAbWg"] [Sun Jul 12 18:13:02.717503 2026] [security2:error] [pid 960377:tid 960392] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.11"] [uri "/wp-config.php.save"] [unique_id "alQtjhMANaV5i2_BLQoTYgAAAA4"] [Sun Jul 12 18:13:02.720694 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:58122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/test1.php"] [unique_id "alQtjl_56DeKknhy7sP6sQAAAVM"] [Sun Jul 12 18:13:02.738173 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:53516] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.11"] [uri "/wp-config.php.bak"] [unique_id "alQtjl_56DeKknhy7sP6tQAAATE"] [Sun Jul 12 18:13:02.738643 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:53534] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.11"] [uri "/wp-config.php.save"] [unique_id "alQtjl_56DeKknhy7sP6tgAAAVw"] [Sun Jul 12 18:13:02.739510 2026] [security2:error] [pid 960377:tid 960432] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/app.php"] [unique_id "alQtjhMANaV5i2_BLQoTYwAAVjU"] [Sun Jul 12 18:13:02.759049 2026] [security2:error] [pid 960377:tid 960471] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/.config/mail.php"] [unique_id "alQtjhMANaV5i2_BLQoTagAAVlw"] [Sun Jul 12 18:13:02.795854 2026] [security2:error] [pid 960377:tid 960420] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.env.old"] [unique_id "alQtjhMANaV5i2_BLQoTbwAAVik"] [Sun Jul 12 18:13:02.798652 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:58172] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/app.php"] [unique_id "alQtjl_56DeKknhy7sP6uwAAAWo"] [Sun Jul 12 18:13:02.833514 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:58176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/.config/mail.php"] [unique_id "alQtjl_56DeKknhy7sP6vgAAATI"] [Sun Jul 12 18:13:02.906350 2026] [security2:error] [pid 960377:tid 960451] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.gitlab-ci/.env"] [unique_id "alQtjhMANaV5i2_BLQoThQAAcEg"] [Sun Jul 12 18:13:02.952544 2026] [authz_core:error] [pid 967714:tid 967893] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:02.953171 2026] [authz_core:error] [pid 967714:tid 967893] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:03.002202 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTXgAAAB4"] [Sun Jul 12 18:13:03.034900 2026] [security2:error] [pid 960377:tid 960437] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.env.old"] [unique_id "alQtjxMANaV5i2_BLQoTkAAAejo"], referer: http://67.222.42.11/.env.old [Sun Jul 12 18:13:03.041770 2026] [security2:error] [pid 960377:tid 960453] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/.gitlab-ci/.env"] [unique_id "alQtjxMANaV5i2_BLQoTmQAAeko"], referer: http://67.222.42.11/.gitlab-ci/.env [Sun Jul 12 18:13:03.086881 2026] [security2:error] [pid 960377:tid 960390] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/API/.env.bak"] [unique_id "alQtjxMANaV5i2_BLQoTnAAAEgw"] [Sun Jul 12 18:13:03.124586 2026] [security2:error] [pid 960377:tid 960482] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Helmetjs/.env"] [unique_id "alQtjxMANaV5i2_BLQoToAAAKGc"] [Sun Jul 12 18:13:03.175937 2026] [security2:error] [pid 960377:tid 960478] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Imagebord/.env"] [unique_id "alQtjxMANaV5i2_BLQoTogAAc2M"] [Sun Jul 12 18:13:03.200400 2026] [security2:error] [pid 960377:tid 960421] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/API/.env.bak"] [unique_id "alQtjxMANaV5i2_BLQoTowAAbCo"], referer: http://67.222.42.11/API/.env.bak [Sun Jul 12 18:13:03.218746 2026] [security2:error] [pid 960377:tid 960405] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/InstantCV/server/.env"] [unique_id "alQtjxMANaV5i2_BLQoTpQAAVBs"] [Sun Jul 12 18:13:03.268603 2026] [security2:error] [pid 960377:tid 960500] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Helmetjs/.env"] [unique_id "alQtjxMANaV5i2_BLQoTqAAASXk"], referer: http://67.222.42.11/Helmetjs/.env [Sun Jul 12 18:13:03.289691 2026] [security2:error] [pid 960377:tid 960461] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Imagebord/.env"] [unique_id "alQtjxMANaV5i2_BLQoTqQAAGlI"], referer: http://67.222.42.11/Imagebord/.env [Sun Jul 12 18:13:03.345278 2026] [security2:error] [pid 960377:tid 960503] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/InstantCV/server/.env"] [unique_id "alQtjxMANaV5i2_BLQoTrQAAb3w"], referer: http://67.222.42.11/InstantCV/server/.env [Sun Jul 12 18:13:03.349154 2026] [security2:error] [pid 960377:tid 960428] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Kubernetes/.env"] [unique_id "alQtjxMANaV5i2_BLQoTrgAAbzE"] [Sun Jul 12 18:13:03.399369 2026] [security2:error] [pid 960377:tid 960402] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Kubernetes/.env"] [unique_id "alQtjxMANaV5i2_BLQoTrwAATRg"], referer: http://67.222.42.11/Kubernetes/.env [Sun Jul 12 18:13:03.461532 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTRAAASjs"] [Sun Jul 12 18:13:03.474742 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtj1_56DeKknhy7sP60QAAAVU"] [Sun Jul 12 18:13:03.476110 2026] [security2:error] [pid 960377:tid 960480] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Serve_time_server/.env"] [unique_id "alQtjxMANaV5i2_BLQoTsAAARGU"] [Sun Jul 12 18:13:03.517207 2026] [security2:error] [pid 960377:tid 960457] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Server_with_db/.env"] [unique_id "alQtjxMANaV5i2_BLQoTsgAAZk4"] [Sun Jul 12 18:13:03.534326 2026] [security2:error] [pid 960377:tid 960444] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Serve_time_server/.env"] [unique_id "alQtjxMANaV5i2_BLQoTtAAAIkE"], referer: http://67.222.42.11/Serve_time_server/.env [Sun Jul 12 18:13:03.591202 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:33362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/lara/info.php"] [unique_id "alQtj1_56DeKknhy7sP62wAAASM"] [Sun Jul 12 18:13:03.622374 2026] [security2:error] [pid 960377:tid 960460] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.env~"] [unique_id "alQtjxMANaV5i2_BLQoTtwAAflE"] [Sun Jul 12 18:13:03.635108 2026] [security2:error] [pid 967714:tid 967794] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/groups/.env"] [unique_id "alQtj1_56DeKknhy7sP63AABNEQ"] [Sun Jul 12 18:13:03.650905 2026] [security2:error] [pid 960377:tid 960462] [remote 62.171.167.118:50166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Server_with_db/.env"] [unique_id "alQtjxMANaV5i2_BLQoTuAAAR1M"], referer: http://67.222.42.11/Server_with_db/.env [Sun Jul 12 18:13:03.814143 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:03.814655 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:03.953291 2026] [security2:error] [pid 967714:tid 967935] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTUyOGNmLzE1ODcvNTIvMjkwNDUvMg=="] [unique_id "alQtj1_56DeKknhy7sP65wAAAVo"] [Sun Jul 12 18:13:04.044160 2026] [security2:error] [pid 967714:tid 967949] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtj1_56DeKknhy7sP65AAAAWg"] [Sun Jul 12 18:13:04.208386 2026] [security2:error] [pid 967714:tid 967753] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ADMIN/.env"] [unique_id "alQtkF_56DeKknhy7sP67QABhxs"] [Sun Jul 12 18:13:04.264761 2026] [security2:error] [pid 960377:tid 960549] [client 20.63.87.152:19316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/.dj/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTxQAAACk"] [Sun Jul 12 18:13:04.310171 2026] [security2:error] [pid 967714:tid 967882] [client 152.232.80.168:59838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/app.php"] [unique_id "alQtkF_56DeKknhy7sP67gAAASU"] [Sun Jul 12 18:13:04.637853 2026] [security2:error] [pid 967714:tid 967928] [client 20.63.87.152:4196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/.trash7206/index.php"] [unique_id "alQtkF_56DeKknhy7sP6-gAAAVM"] [Sun Jul 12 18:13:04.639412 2026] [security2:error] [pid 960377:tid 960603] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTxwAAAF8"] [Sun Jul 12 18:13:04.657812 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:04.659270 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:04.661296 2026] [security2:error] [pid 960377:tid 960622] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtjxMANaV5i2_BLQoTvAAAcgo"] [Sun Jul 12 18:13:04.664277 2026] [security2:error] [pid 967714:tid 967967] [client 168.100.149.152:19588] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7605/bargainor/2308_dislevelment.jsp"] [unique_id "alQtkF_56DeKknhy7sP6-wAAAXo"] [Sun Jul 12 18:13:04.712742 2026] [security2:error] [pid 967714:tid 967900] [client 151.243.11.245:41610] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "versatileintelligence.com"] [uri "/400.shtml"] [unique_id "alQtkF_56DeKknhy7sP6_QAAATc"] [Sun Jul 12 18:13:04.917262 2026] [security2:error] [pid 960377:tid 960545] [client 24.203.79.110:53129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtkBMANaV5i2_BLQoTzwAAACU"] [Sun Jul 12 18:13:04.922051 2026] [security2:error] [pid 960377:tid 960545] [client 24.203.79.110:53129] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtkBMANaV5i2_BLQoTzwAAACU"] [Sun Jul 12 18:13:04.997928 2026] [security2:error] [pid 967714:tid 967944] [client 62.171.167.118:56348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/laravel/info.php"] [unique_id "alQtkF_56DeKknhy7sP7BQAAAWM"] [Sun Jul 12 18:13:05.072553 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTyQAAAAs"] [Sun Jul 12 18:13:05.072623 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTyQAAAAs"] [Sun Jul 12 18:13:05.086106 2026] [security2:error] [pid 967714:tid 967904] [client 20.63.87.152:19117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQtkV_56DeKknhy7sP7BwAAATs"] [Sun Jul 12 18:13:05.095544 2026] [security2:error] [pid 967714:tid 967970] [client 65.21.113.206:41462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTUyOGNmLzE1ODcvNTIvMjkwNDUvMg=="] [unique_id "alQtkF_56DeKknhy7sP68QAAAX0"] [Sun Jul 12 18:13:05.104712 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTzgAAAHA"] [Sun Jul 12 18:13:05.168075 2026] [security2:error] [pid 960377:tid 960518] [client 125.167.21.72:63212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtkRMANaV5i2_BLQoT1AAAAAo"] [Sun Jul 12 18:13:05.168357 2026] [security2:error] [pid 960377:tid 960518] [client 125.167.21.72:63212] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtkRMANaV5i2_BLQoT1AAAAAo"] [Sun Jul 12 18:13:05.240380 2026] [security2:error] [pid 960377:tid 960599] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTAwAAAFs"] [Sun Jul 12 18:13:05.281490 2026] [security2:error] [pid 960377:tid 960616] [client 20.63.87.152:19118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQtkRMANaV5i2_BLQoT2AAAAGw"] [Sun Jul 12 18:13:05.305214 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:56358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/temp.php"] [unique_id "alQtkRMANaV5i2_BLQoT2wAAACE"] [Sun Jul 12 18:13:05.427214 2026] [security2:error] [pid 967714:tid 967968] [client 104.248.149.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtj1_56DeKknhy7sP64gAAAXs"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:05.439897 2026] [security2:error] [pid 967714:tid 967963] [client 143.20.253.150:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtkF_56DeKknhy7sP66gAAAXY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:05.463957 2026] [authz_core:error] [pid 967714:tid 967914] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:05.464757 2026] [authz_core:error] [pid 967714:tid 967914] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:05.475143 2026] [security2:error] [pid 967714:tid 967919] [client 128.199.138.251:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtj1_56DeKknhy7sP64QAAAUo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:05.538534 2026] [security2:error] [pid 967714:tid 967955] [client 20.63.87.152:19302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQtkV_56DeKknhy7sP7QwAAAW4"] [Sun Jul 12 18:13:05.610502 2026] [security2:error] [pid 967714:tid 967855] [client 152.232.80.168:55061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/parameters.php"] [unique_id "alQtkV_56DeKknhy7sP7TQAAAQo"] [Sun Jul 12 18:13:05.634077 2026] [security2:error] [pid 960377:tid 960548] [client 20.65.193.168:33738] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "67.20.104.22"] [uri "/cgi-sys/404.html"] [unique_id "alQtkRMANaV5i2_BLQoT4AAAACg"] [Sun Jul 12 18:13:05.651977 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtkRMANaV5i2_BLQoT3AAAABA"] [Sun Jul 12 18:13:05.732109 2026] [security2:error] [pid 967714:tid 967949] [client 20.63.87.152:26943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/0.kb-v3.php"] [unique_id "alQtkV_56DeKknhy7sP7UAAAAWg"] [Sun Jul 12 18:13:05.741241 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtkBMANaV5i2_BLQoTzQAAKyc"] [Sun Jul 12 18:13:05.900161 2026] [security2:error] [pid 960377:tid 960400] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.github/.env"] [unique_id "alQtkRMANaV5i2_BLQoT5AAAZhY"] [Sun Jul 12 18:13:05.972214 2026] [security2:error] [pid 960377:tid 960542] [client 20.63.87.152:26910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/0.php"] [unique_id "alQtkRMANaV5i2_BLQoT5QAAACI"] [Sun Jul 12 18:13:06.044756 2026] [security2:error] [pid 960377:tid 960576] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtkRMANaV5i2_BLQoT4wAAAEQ"] [Sun Jul 12 18:13:06.133247 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTBgAAACM"] [Sun Jul 12 18:13:06.244791 2026] [security2:error] [pid 967714:tid 967894] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/log/info.php"] [unique_id "alQtkl_56DeKknhy7sP7WgAAATE"] [Sun Jul 12 18:13:06.275910 2026] [security2:error] [pid 967714:tid 967967] [client 20.63.87.152:24211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/002.php"] [unique_id "alQtkl_56DeKknhy7sP7WwAAAXo"] [Sun Jul 12 18:13:06.400112 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:06.400901 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:06.526811 2026] [security2:error] [pid 960377:tid 960532] [client 20.63.87.152:19274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/01.php"] [unique_id "alQtkhMANaV5i2_BLQoT9gAAABg"] [Sun Jul 12 18:13:06.701913 2026] [security2:error] [pid 967714:tid 967893] [client 168.100.149.90:26352] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7670/bargainor/2308_limnoria.jsp"] [unique_id "alQtkl_56DeKknhy7sP7aAAAATA"] [Sun Jul 12 18:13:06.748859 2026] [security2:error] [pid 967714:tid 967970] [client 20.63.87.152:38360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/0x.php"] [unique_id "alQtkl_56DeKknhy7sP7agAAAX0"] [Sun Jul 12 18:13:06.754733 2026] [security2:error] [pid 967714:tid 967975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtkl_56DeKknhy7sP7YAAAAYI"] [Sun Jul 12 18:13:06.941038 2026] [security2:error] [pid 967714:tid 967977] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/build.php"] [unique_id "alQtkl_56DeKknhy7sP7dQAAAYQ"] [Sun Jul 12 18:13:06.950386 2026] [security2:error] [pid 967714:tid 967968] [client 20.63.87.152:24210] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.sfurology.com"] [uri "/1.php"] [unique_id "alQtkl_56DeKknhy7sP7dgAAAXs"] [Sun Jul 12 18:13:06.950705 2026] [security2:error] [pid 967714:tid 967968] [client 20.63.87.152:24210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/1.php"] [unique_id "alQtkl_56DeKknhy7sP7dgAAAXs"] [Sun Jul 12 18:13:06.985266 2026] [security2:error] [pid 967714:tid 967912] [client 74.7.241.155:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/robots.txt"] [unique_id "alQtkl_56DeKknhy7sP7eQAAAUM"] [Sun Jul 12 18:13:06.986500 2026] [security2:error] [pid 967714:tid 967908] [client 74.7.241.155:43346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/robots.txt"] [unique_id "alQtkl_56DeKknhy7sP7dwABP3E"] [Sun Jul 12 18:13:06.995106 2026] [security2:error] [pid 967714:tid 967863] [client 20.210.108.71:55307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/https-detection.php"] [unique_id "alQtkl_56DeKknhy7sP7ewAAARI"], referer: binance.com [Sun Jul 12 18:13:07.105867 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtkhMANaV5i2_BLQoT6AAAOXI"] [Sun Jul 12 18:13:07.106991 2026] [security2:error] [pid 967714:tid 967840] [remote 57.141.18.32:35390] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 32.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/wAEnHK5Qqb.lWez"] [unique_id "alQtk1_56DeKknhy7sP7iAABRXI"] [Sun Jul 12 18:13:07.114265 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTBQAAACw"] [Sun Jul 12 18:13:07.129961 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTCAAAABQ"] [Sun Jul 12 18:13:07.137235 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjF_56DeKknhy7sP6QwAAAYU"] [Sun Jul 12 18:13:07.143984 2026] [security2:error] [pid 967714:tid 967942] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTV3LzE5NTE5LzV3Lzk0Mzcvd3Br.asp"] [unique_id "alQtk1_56DeKknhy7sP7jAAAAWE"] [Sun Jul 12 18:13:07.164138 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTCQAAADA"] [Sun Jul 12 18:13:07.194852 2026] [security2:error] [pid 967714:tid 967914] [client 20.63.87.152:26886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/100.php"] [unique_id "alQtk1_56DeKknhy7sP7jwAAAUU"] [Sun Jul 12 18:13:07.215392 2026] [security2:error] [pid 960377:tid 960560] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTBwAAADQ"] [Sun Jul 12 18:13:07.261764 2026] [authz_core:error] [pid 967714:tid 967935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:07.262425 2026] [authz_core:error] [pid 967714:tid 967935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:07.275253 2026] [security2:error] [pid 967714:tid 967879] [client 74.7.241.155:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.bellesprit.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "alQtk1_56DeKknhy7sP7hgAAASI"], referer: https://www.bellesprit.com/robots.txt [Sun Jul 12 18:13:07.276981 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtjBMANaV5i2_BLQoTEwAAAEI"], referer: http://67.222.38.115/debug/pprof [Sun Jul 12 18:13:07.281573 2026] [security2:error] [pid 967714:tid 967865] [client 74.7.241.155:43346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.bellesprit.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "alQtk1_56DeKknhy7sP7gwABFDQ"], referer: https://www.bellesprit.com/robots.txt [Sun Jul 12 18:13:07.317125 2026] [security2:error] [pid 967714:tid 967946] [client 57.141.18.115:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtkl_56DeKknhy7sP7ZwAAAWU"] [Sun Jul 12 18:13:07.359037 2026] [security2:error] [pid 967714:tid 967887] [client 152.232.80.168:64276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/hashing.php"] [unique_id "alQtk1_56DeKknhy7sP7nAAAASo"] [Sun Jul 12 18:13:07.434894 2026] [security2:error] [pid 960377:tid 960599] [client 20.63.87.152:19224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/122.php"] [unique_id "alQtkxMANaV5i2_BLQoT_wAAAFs"] [Sun Jul 12 18:13:07.477445 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7kAAAAWI"] [Sun Jul 12 18:13:07.639781 2026] [security2:error] [pid 967714:tid 967756] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/nestjs-app/frontend/.env"] [unique_id "alQtk1_56DeKknhy7sP7qwABXh4"] [Sun Jul 12 18:13:07.679507 2026] [security2:error] [pid 967714:tid 967964] [client 20.63.87.152:41157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/123.php"] [unique_id "alQtk1_56DeKknhy7sP7rQAAAXc"] [Sun Jul 12 18:13:07.713795 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:56370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/common/backend/phpinfo.php"] [unique_id "alQtkxMANaV5i2_BLQoUAwAAABo"] [Sun Jul 12 18:13:07.722493 2026] [security2:error] [pid 967714:tid 967912] [client 62.171.167.118:56372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/common/backup/phpinfo.php"] [unique_id "alQtk1_56DeKknhy7sP7rgAAAUM"] [Sun Jul 12 18:13:07.752098 2026] [core:error] [pid 967714:tid 967933] [client 31.132.90.3:56780] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:13:07.779132 2026] [security2:error] [pid 967714:tid 967908] [client 152.232.80.168:65469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/phpinfo.php"] [unique_id "alQtk1_56DeKknhy7sP7sgAAAT8"] [Sun Jul 12 18:13:07.799465 2026] [security2:error] [pid 967714:tid 967760] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/october/.env"] [unique_id "alQtk1_56DeKknhy7sP7swABdSI"] [Sun Jul 12 18:13:07.851440 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:56392] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/conf/api/info.php"] [unique_id "alQtkxMANaV5i2_BLQoUBQAAAG8"] [Sun Jul 12 18:13:07.891558 2026] [security2:error] [pid 967714:tid 967863] [client 20.63.87.152:6209] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/13.php"] [unique_id "alQtk1_56DeKknhy7sP7uAAAARI"] [Sun Jul 12 18:13:08.052175 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:08.052724 2026] [authz_core:error] [pid 960377:tid 960548] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:08.122731 2026] [security2:error] [pid 960377:tid 960627] [client 20.63.87.152:38379] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/133.php"] [unique_id "alQtlBMANaV5i2_BLQoUDwAAAHc"] [Sun Jul 12 18:13:08.298865 2026] [security2:error] [pid 967714:tid 967977] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7rAAAAYQ"] [Sun Jul 12 18:13:08.298935 2026] [security2:error] [pid 967714:tid 967977] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7rAAAAYQ"] [Sun Jul 12 18:13:08.301896 2026] [security2:error] [pid 967714:tid 967915] [client 65.21.113.206:41464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTV3LzE5NTE5LzV3Lzk0Mzcvd3Br.asp"] [unique_id "alQtk1_56DeKknhy7sP7qQAAAUY"] [Sun Jul 12 18:13:08.304905 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7vwAAAUU"] [Sun Jul 12 18:13:08.336828 2026] [ssl:error] [pid 967714:tid 967913] [client 66.132.172.203:10238] AH02032: Hostname box2216.bluehost.com (default host as no SNI was provided) and hostname faso.la provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:13:08.349238 2026] [security2:error] [pid 960377:tid 960635] [client 20.63.87.152:26882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/155.php"] [unique_id "alQtlBMANaV5i2_BLQoUEwAAAH8"] [Sun Jul 12 18:13:08.378933 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtkxMANaV5i2_BLQoT_gAACnQ"] [Sun Jul 12 18:13:08.387171 2026] [security2:error] [pid 960377:tid 960517] [client 65.21.113.253:52400] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQtlBMANaV5i2_BLQoUFAAAAAk"] [Sun Jul 12 18:13:08.392424 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:56398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/conf/dashboard/phpinfo.php"] [unique_id "alQtlF_56DeKknhy7sP7xwAAARQ"] [Sun Jul 12 18:13:08.472820 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7mAAAAXo"], referer: http://67.222.38.115/dev/mailbox [Sun Jul 12 18:13:08.479182 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7lAAAAVE"] [Sun Jul 12 18:13:08.548620 2026] [security2:error] [pid 967714:tid 967866] [client 20.63.87.152:38854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/177.php"] [unique_id "alQtlF_56DeKknhy7sP71wAAARU"] [Sun Jul 12 18:13:08.579275 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:56396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php"] [unique_id "alQtlBMANaV5i2_BLQoUHAAAACk"] [Sun Jul 12 18:13:08.642042 2026] [security2:error] [pid 967714:tid 967882] [client 168.100.149.178:53932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7735/bargainor/2308_milksopism.jsp"] [unique_id "alQtlF_56DeKknhy7sP72gAAASU"] [Sun Jul 12 18:13:08.644793 2026] [security2:error] [pid 960377:tid 960587] [client 131.100.94.255:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtkxMANaV5i2_BLQoUCgAAAE8"] [Sun Jul 12 18:13:08.692042 2026] [security2:error] [pid 960377:tid 960594] [client 62.171.167.118:56408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php.original"] [unique_id "alQtlBMANaV5i2_BLQoUHQAAAFY"] [Sun Jul 12 18:13:08.736282 2026] [security2:error] [pid 967714:tid 967920] [client 152.232.80.168:63811] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/production.php"] [unique_id "alQtlF_56DeKknhy7sP73AAAAUs"] [Sun Jul 12 18:13:08.763845 2026] [security2:error] [pid 967714:tid 967939] [client 20.63.87.152:5637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/1index.php"] [unique_id "alQtlF_56DeKknhy7sP73wAAAV4"] [Sun Jul 12 18:13:08.781811 2026] [security2:error] [pid 960377:tid 960527] [client 197.48.221.253:54315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 253.221.48.197.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtlBMANaV5i2_BLQoUHgAAABM"] [Sun Jul 12 18:13:08.782104 2026] [security2:error] [pid 960377:tid 960527] [client 197.48.221.253:54315] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "searchhomelongisland.com"] [uri "/xmlrpc.php"] [unique_id "alQtlBMANaV5i2_BLQoUHgAAABM"] [Sun Jul 12 18:13:08.793011 2026] [security2:error] [pid 967714:tid 967922] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlF_56DeKknhy7sP71AAAAU0"] [Sun Jul 12 18:13:08.849908 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:56376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php.zip"] [unique_id "alQtlF_56DeKknhy7sP74gAAAUo"] [Sun Jul 12 18:13:08.908723 2026] [security2:error] [pid 967714:tid 967955] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQtlF_56DeKknhy7sP75AAAAW4"] [Sun Jul 12 18:13:08.909863 2026] [security2:error] [pid 960377:tid 960603] [client 65.21.113.253:50706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQtlBMANaV5i2_BLQoUHwAAAF8"] [Sun Jul 12 18:13:08.946850 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:08.947357 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:09.006704 2026] [security2:error] [pid 967714:tid 967921] [client 20.63.87.152:14302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/2.php"] [unique_id "alQtlV_56DeKknhy7sP76QAAAUw"] [Sun Jul 12 18:13:09.173749 2026] [security2:error] [pid 960377:tid 960626] [client 66.132.172.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "machinelat.org"] [uri "/index.php"] [unique_id "alQtlBMANaV5i2_BLQoUFgAAAHY"] [Sun Jul 12 18:13:09.207906 2026] [security2:error] [pid 967714:tid 967869] [client 57.141.18.40:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7oAAAARg"] [Sun Jul 12 18:13:09.261936 2026] [security2:error] [pid 960377:tid 960557] [client 20.63.87.152:19458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/222.php"] [unique_id "alQtlRMANaV5i2_BLQoUJQAAADE"] [Sun Jul 12 18:13:09.276135 2026] [security2:error] [pid 960377:tid 960634] [client 197.202.202.205:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtlBMANaV5i2_BLQoUEAAAAH4"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:09.325986 2026] [security2:error] [pid 967714:tid 967857] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlF_56DeKknhy7sP76AAAAQw"] [Sun Jul 12 18:13:09.479931 2026] [security2:error] [pid 967714:tid 967911] [client 20.63.87.152:41153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/2p.update.php"] [unique_id "alQtlV_56DeKknhy7sP78gAAAUI"] [Sun Jul 12 18:13:09.577434 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtlBMANaV5i2_BLQoUGgAARTc"] [Sun Jul 12 18:13:09.661904 2026] [security2:error] [pid 967714:tid 967942] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTVfMzM5MDNfNTl6dS85Xzg5MTlfenVq.html"] [unique_id "alQtlV_56DeKknhy7sP7-gAAAWE"] [Sun Jul 12 18:13:09.735155 2026] [security2:error] [pid 960377:tid 960410] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.gitlab-ci/.env"] [unique_id "alQtlRMANaV5i2_BLQoULAAAFCA"] [Sun Jul 12 18:13:09.745477 2026] [security2:error] [pid 967714:tid 967972] [client 20.63.87.152:6265] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/3.php"] [unique_id "alQtlV_56DeKknhy7sP7_gAAAX8"] [Sun Jul 12 18:13:09.797340 2026] [security2:error] [pid 967714:tid 967887] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlV_56DeKknhy7sP79gAAASo"] [Sun Jul 12 18:13:09.799495 2026] [security2:error] [pid 967714:tid 967872] [client 20.226.22.37:6410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/.dj/index.php"] [unique_id "alQtlV_56DeKknhy7sP7_wAAARs"] [Sun Jul 12 18:13:09.830929 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:09.831583 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:09.900566 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.gitlab/.env"] [unique_id "alQtlRMANaV5i2_BLQoULwAANlg"] [Sun Jul 12 18:13:09.981852 2026] [security2:error] [pid 967714:tid 967967] [client 20.63.87.152:19485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQtlV_56DeKknhy7sP8BQAAAXo"] [Sun Jul 12 18:13:10.023102 2026] [security2:error] [pid 967714:tid 967958] [client 168.100.149.103:43216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7800/bargainor/2308_capnoides.jsp"] [unique_id "alQtll_56DeKknhy7sP8CAAAAXE"] [Sun Jul 12 18:13:10.047771 2026] [security2:error] [pid 967714:tid 967874] [client 57.141.18.45:54730] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mattbeyer.com"] [uri "/index.php"] [unique_id "alQtk1_56DeKknhy7sP7jQABHUo"] [Sun Jul 12 18:13:10.067237 2026] [security2:error] [pid 967714:tid 967946] [client 105.156.249.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtlV_56DeKknhy7sP78AAAAWU"] [Sun Jul 12 18:13:10.101216 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtlF_56DeKknhy7sP70wAAAWI"] [Sun Jul 12 18:13:10.124064 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtlF_56DeKknhy7sP71QAAAX0"] [Sun Jul 12 18:13:10.252054 2026] [security2:error] [pid 960377:tid 960526] [client 20.63.87.152:29057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/403.php"] [unique_id "alQtlhMANaV5i2_BLQoUOwAAABI"] [Sun Jul 12 18:13:10.323450 2026] [security2:error] [pid 967714:tid 967961] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlV_56DeKknhy7sP8BgAAAXQ"] [Sun Jul 12 18:13:10.336172 2026] [proxy:error] [pid 960377:tid 960567] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:10.336376 2026] [proxy_http:error] [pid 960377:tid 960567] [client 20.226.22.37:4447] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:10.341041 2026] [proxy:error] [pid 960377:tid 960567] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:10.341296 2026] [proxy_http:error] [pid 960377:tid 960567] [client 20.226.22.37:4447] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:10.492161 2026] [security2:error] [pid 967714:tid 967845] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/json/env.bak"] [unique_id "alQtll_56DeKknhy7sP8JAABVHc"] [Sun Jul 12 18:13:10.591205 2026] [security2:error] [pid 967714:tid 967900] [client 130.250.230.153:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtlV_56DeKknhy7sP78QAAATc"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:10.631268 2026] [security2:error] [pid 967714:tid 967956] [client 20.63.87.152:14302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.sfurology.com"] [uri "/404.php"] [unique_id "alQtll_56DeKknhy7sP8JgAAAW8"] [Sun Jul 12 18:13:10.698198 2026] [security2:error] [pid 960377:tid 960585] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/store/info.php"] [unique_id "alQtlhMANaV5i2_BLQoUQwAAAE0"] [Sun Jul 12 18:13:10.746336 2026] [security2:error] [pid 960377:tid 960576] [client 20.210.108.71:61138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/https-migration.php"] [unique_id "alQtlhMANaV5i2_BLQoURAAAAEQ"], referer: binance.com [Sun Jul 12 18:13:10.763706 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:10.764383 2026] [authz_core:error] [pid 960377:tid 960597] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:10.855930 2026] [security2:error] [pid 960377:tid 960613] [client 20.226.22.37:6402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/.trash7206/index.php"] [unique_id "alQtlhMANaV5i2_BLQoUSAAAAGk"] [Sun Jul 12 18:13:10.860120 2026] [security2:error] [pid 967714:tid 967735] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/php-app/src/.env"] [unique_id "alQtll_56DeKknhy7sP8KQABGgk"] [Sun Jul 12 18:13:10.867690 2026] [security2:error] [pid 960377:tid 960581] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtlhMANaV5i2_BLQoUOgAAAEk"] [Sun Jul 12 18:13:10.869885 2026] [security2:error] [pid 967714:tid 967905] [client 65.21.113.206:41466] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTVfMzM5MDNfNTl6dS85Xzg5MTlfenVq.html"] [unique_id "alQtll_56DeKknhy7sP8DwAAATw"] [Sun Jul 12 18:13:10.887780 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:58274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/__info.php"] [unique_id "alQtlhMANaV5i2_BLQoUSwAAACg"] [Sun Jul 12 18:13:10.940349 2026] [security2:error] [pid 960377:tid 960581] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtlhMANaV5i2_BLQoUOgAAAEk"] [Sun Jul 12 18:13:11.125072 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6gwAAAS0"] [Sun Jul 12 18:13:11.135929 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Socketio/.env"] [unique_id "alQtlxMANaV5i2_BLQoUXgAAFXo"], referer: http://67.222.42.11/Socketio/.env [Sun Jul 12 18:13:11.136655 2026] [security2:error] [pid 960377:tid 960423] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme/.env"] [unique_id "alQtlxMANaV5i2_BLQoUYgAAFSw"] [Sun Jul 12 18:13:11.140126 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQte1_56DeKknhy7sP6ggABSF0"], referer: http://67.222.40.58/backup/mailgun.json [Sun Jul 12 18:13:11.140804 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/actions-server/.env"] [unique_id "alQtlxMANaV5i2_BLQoUZQAAFXo"] [Sun Jul 12 18:13:11.140865 2026] [security2:error] [pid 960377:tid 960397] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme_challenges/.env"] [unique_id "alQtlxMANaV5i2_BLQoUYwAAFRM"] [Sun Jul 12 18:13:11.142264 2026] [security2:error] [pid 960377:tid 960456] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme-challenge/.env"] [unique_id "alQtlxMANaV5i2_BLQoUYQAAFU0"] [Sun Jul 12 18:13:11.142983 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/Simple_server/.env"] [unique_id "alQtlxMANaV5i2_BLQoUXQAAFVA"] [Sun Jul 12 18:13:11.143112 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/bookchain-client/.env"] [unique_id "alQtg1_56DeKknhy7sP8LwABSF0"] [Sun Jul 12 18:13:11.151434 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/develop/info.php"] [unique_id "alQth1_56DeKknhy7sP8NAABSGs"] [Sun Jul 12 18:13:11.153154 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/old_phpinfo.php"] [unique_id "alQtiF_56DeKknhy7sP8NgABSGs"] [Sun Jul 12 18:13:11.153837 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/bookchain-client/.env"] [unique_id "alQtg1_56DeKknhy7sP8MQABSFU"], referer: http://67.222.40.58/bookchain-client/.env [Sun Jul 12 18:13:11.155307 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/pinfo.php"] [unique_id "alQtiF_56DeKknhy7sP8OAABSEI"] [Sun Jul 12 18:13:11.156952 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/bootstrap/.env"] [unique_id "alQthF_56DeKknhy7sP8MwABSHQ"] [Sun Jul 12 18:13:11.157588 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/infos.php"] [unique_id "alQtiF_56DeKknhy7sP8NQABSHY"] [Sun Jul 12 18:13:11.157888 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/bootstrap/.env"] [unique_id "alQtg1_56DeKknhy7sP8MgABSDU"], referer: http://67.222.40.58/bootstrap/.env [Sun Jul 12 18:13:11.158609 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/client/server/phpinfo.php"] [unique_id "alQtil_56DeKknhy7sP8QAABSFQ"] [Sun Jul 12 18:13:11.158847 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/config.php"] [unique_id "alQtil_56DeKknhy7sP8QgABSGw"] [Sun Jul 12 18:13:11.159049 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/current/info.php"] [unique_id "alQtil_56DeKknhy7sP8QwABSHY"] [Sun Jul 12 18:13:11.159520 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "alQtil_56DeKknhy7sP8OgABSAA"] [Sun Jul 12 18:13:11.160452 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/dev/info.php"] [unique_id "alQti1_56DeKknhy7sP8SgABSHY"] [Sun Jul 12 18:13:11.161316 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ch6-mytodo/.env"] [unique_id "alQti1_56DeKknhy7sP8RwABSE0"], referer: http://67.222.40.58/ch6-mytodo/.env [Sun Jul 12 18:13:11.161579 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cache/.env"] [unique_id "alQti1_56DeKknhy7sP8RQABSGg"], referer: http://67.222.40.58/cache/.env [Sun Jul 12 18:13:11.161939 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/develop/phpinfo.php"] [unique_id "alQtjF_56DeKknhy7sP8TAABSHY"] [Sun Jul 12 18:13:11.162196 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/php-info.php"] [unique_id "alQtiF_56DeKknhy7sP8NwABSGs"] [Sun Jul 12 18:13:11.162610 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/bot/service/phpinfo.php"] [unique_id "alQtil_56DeKknhy7sP8OQABSFU"] [Sun Jul 12 18:13:11.163554 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cache/.env"] [unique_id "alQtil_56DeKknhy7sP8OwABSDk"] [Sun Jul 12 18:13:11.163605 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ch8-mytodo/.env"] [unique_id "alQti1_56DeKknhy7sP8SAABSFQ"], referer: http://67.222.40.58/ch8-mytodo/.env [Sun Jul 12 18:13:11.164120 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ch8-mytodo/.env"] [unique_id "alQtil_56DeKknhy7sP8PgABSH4"] [Sun Jul 12 18:13:11.167013 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/help/info.php"] [unique_id "alQtjF_56DeKknhy7sP8TQABSE0"] [Sun Jul 12 18:13:11.168402 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/backup/info.php"] [unique_id "alQtil_56DeKknhy7sP8QQABSH0"] [Sun Jul 12 18:13:11.169259 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "alQti1_56DeKknhy7sP8RAABSDU"], referer: http://67.222.40.58/boxes/oracle-vagrant-boxes/ContainerRegistry/.env [Sun Jul 12 18:13:11.171095 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cgi-bin/.env"] [unique_id "alQti1_56DeKknhy7sP8RgABSE4"], referer: http://67.222.40.58/cgi-bin/.env [Sun Jul 12 18:13:11.172364 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/collected_static/.env"] [unique_id "alQtkV_56DeKknhy7sP8UQABSFQ"], referer: http://67.222.40.58/collected_static/.env [Sun Jul 12 18:13:11.175833 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ch6-mytodo/.env"] [unique_id "alQtil_56DeKknhy7sP8PQABSDg"] [Sun Jul 12 18:13:11.176475 2026] [security2:error] [pid 960377:tid 960439] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/__tests__/test-become/.env"] [unique_id "alQtlxMANaV5i2_BLQoUZgAAFTw"], referer: http://67.222.42.11/__tests__/test-become/.env [Sun Jul 12 18:13:11.178480 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/community/.env"] [unique_id "alQtk1_56DeKknhy7sP8VwABSE4"] [Sun Jul 12 18:13:11.186409 2026] [security2:error] [pid 960377:tid 960468] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/adm/.env"] [unique_id "alQtlxMANaV5i2_BLQoUaAAAFVk"] [Sun Jul 12 18:13:11.187416 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/common/.env.bak"] [unique_id "alQtk1_56DeKknhy7sP8VgABSDk"], referer: http://67.222.40.58/common/.env.bak [Sun Jul 12 18:13:11.189946 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/develop/info.php"] [unique_id "alQtjF_56DeKknhy7sP8SwABSAA"] [Sun Jul 12 18:13:11.192359 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/temp.php"] [unique_id "alQtkV_56DeKknhy7sP8UAABSFU"] [Sun Jul 12 18:13:11.194695 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/common/backend/phpinfo.php"] [unique_id "alQtk1_56DeKknhy7sP8VAABSH4"] [Sun Jul 12 18:13:11.195694 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/common/backup/phpinfo.php"] [unique_id "alQtk1_56DeKknhy7sP8VQABSE0"] [Sun Jul 12 18:13:11.198335 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/helper/info.php"] [unique_id "alQtjV_56DeKknhy7sP8TgABSGg"] [Sun Jul 12 18:13:11.199542 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/lara/info.php"] [unique_id "alQtkF_56DeKknhy7sP8TwABSHY"] [Sun Jul 12 18:13:11.200421 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cgi-bin/.env"] [unique_id "alQtil_56DeKknhy7sP8PAABSEI"] [Sun Jul 12 18:13:11.203270 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/common/.env.bak"] [unique_id "alQtk1_56DeKknhy7sP8UwABSDU"] [Sun Jul 12 18:13:11.200728 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/collected_static/.env"] [unique_id "alQtk1_56DeKknhy7sP8UgABSH0"] [Sun Jul 12 18:13:11.202165 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cms/laravel/info.php"] [unique_id "alQtkV_56DeKknhy7sP8WAABSGs"] [Sun Jul 12 18:13:11.210306 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php.original"] [unique_id "alQtlF_56DeKknhy7sP8YQABSDA"] [Sun Jul 12 18:13:11.210866 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/conf/api/info.php"] [unique_id "alQtlF_56DeKknhy7sP8WgABSHg"] [Sun Jul 12 18:13:11.211046 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/conf/dashboard/phpinfo.php"] [unique_id "alQtlF_56DeKknhy7sP8WwABSBw"] [Sun Jul 12 18:13:11.212814 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php"] [unique_id "alQtlF_56DeKknhy7sP8XgABSBc"] [Sun Jul 12 18:13:11.212874 2026] [security2:error] [pid 960377:tid 960431] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/adm/.env.bak"] [unique_id "alQtlxMANaV5i2_BLQoUawAAFTQ"] [Sun Jul 12 18:13:11.221304 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/community/.env"] [unique_id "alQtk1_56DeKknhy7sP8WQABSFQ"], referer: http://67.222.40.58/community/.env [Sun Jul 12 18:13:11.232109 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/mail.php"] [unique_id "alQtll_56DeKknhy7sP8ZwABSBc"] [Sun Jul 12 18:13:11.233471 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config.php.zip"] [unique_id "alQtll_56DeKknhy7sP8YgABSHY"] [Sun Jul 12 18:13:11.234255 2026] [security2:error] [pid 967714:tid 967785] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/helper/phpinfo.php"] [unique_id "alQtll_56DeKknhy7sP8ZgABSDs"] [Sun Jul 12 18:13:11.241399 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/pinfo.php"] [unique_id "alQtll_56DeKknhy7sP8bAABSFU"] [Sun Jul 12 18:13:11.251785 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:58248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/services/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUcwAAAD4"] [Sun Jul 12 18:13:11.253342 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:58310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/temp.php"] [unique_id "alQtlxMANaV5i2_BLQoUdQAAAHE"] [Sun Jul 12 18:13:11.268264 2026] [security2:error] [pid 960377:tid 960452] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/help/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUegAAfEk"] [Sun Jul 12 18:13:11.270490 2026] [security2:error] [pid 960377:tid 960401] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/infophp.php"] [unique_id "alQtlxMANaV5i2_BLQoUewAAfBc"] [Sun Jul 12 18:13:11.273067 2026] [security2:error] [pid 960377:tid 960384] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/services/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUggAAfAY"] [Sun Jul 12 18:13:11.279427 2026] [security2:error] [pid 960377:tid 960406] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme-challenge/.env"] [unique_id "alQtlxMANaV5i2_BLQoUgAAAfBw"], referer: http://67.222.42.11/acme-challenge/.env [Sun Jul 12 18:13:11.282261 2026] [security2:error] [pid 960377:tid 960481] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/adm/temp.php"] [unique_id "alQtlxMANaV5i2_BLQoUgwAAfGY"] [Sun Jul 12 18:13:11.282747 2026] [security2:error] [pid 960377:tid 960469] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme_challenges/.env"] [unique_id "alQtlxMANaV5i2_BLQoUfgAAfFo"], referer: http://67.222.42.11/acme_challenges/.env [Sun Jul 12 18:13:11.282977 2026] [security2:error] [pid 960377:tid 960483] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/admin-app/.env"] [unique_id "alQtlxMANaV5i2_BLQoUhAAAfGg"] [Sun Jul 12 18:13:11.284431 2026] [security2:error] [pid 960377:tid 960425] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/actions-server/.env"] [unique_id "alQtlxMANaV5i2_BLQoUgQAAfC4"], referer: http://67.222.42.11/actions-server/.env [Sun Jul 12 18:13:11.286691 2026] [security2:error] [pid 960377:tid 960401] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/acme/.env"] [unique_id "alQtlxMANaV5i2_BLQoUfwAAfBc"], referer: http://67.222.42.11/acme/.env [Sun Jul 12 18:13:11.289328 2026] [security2:error] [pid 960377:tid 960392] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/admin/.env.bak"] [unique_id "alQtlxMANaV5i2_BLQoUhQAAfA4"] [Sun Jul 12 18:13:11.333848 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:58234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/api/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUlQAAAA4"] [Sun Jul 12 18:13:11.338176 2026] [security2:error] [pid 960377:tid 960417] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/adm/.env"] [unique_id "alQtlxMANaV5i2_BLQoUlAAAfCY"], referer: http://67.222.42.11/adm/.env [Sun Jul 12 18:13:11.341715 2026] [security2:error] [pid 960377:tid 960413] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/api/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUmQAAfCI"] [Sun Jul 12 18:13:11.343531 2026] [security2:error] [pid 960377:tid 960384] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/adm/.env.bak"] [unique_id "alQtlxMANaV5i2_BLQoUlgAAfAY"], referer: http://67.222.42.11/adm/.env.bak [Sun Jul 12 18:13:11.352257 2026] [security2:error] [pid 960377:tid 960625] [client 62.171.167.118:58240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/asdf.php"] [unique_id "alQtlxMANaV5i2_BLQoUmwAAAHU"] [Sun Jul 12 18:13:11.353864 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtlhMANaV5i2_BLQoUMgAANGs"] [Sun Jul 12 18:13:11.355777 2026] [security2:error] [pid 960377:tid 960486] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/asdf.php"] [unique_id "alQtlxMANaV5i2_BLQoUnAAAMGs"] [Sun Jul 12 18:13:11.357381 2026] [security2:error] [pid 960377:tid 960492] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backend/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUnQAAMHE"] [Sun Jul 12 18:13:11.368593 2026] [security2:error] [pid 960377:tid 960391] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backend/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUnwAATA0"] [Sun Jul 12 18:13:11.369326 2026] [security2:error] [pid 960377:tid 960497] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backup/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUoAAATHY"] [Sun Jul 12 18:13:11.389195 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:58278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backend/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUowAAAHA"] [Sun Jul 12 18:13:11.389931 2026] [proxy:error] [pid 960377:tid 960569] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:11.390170 2026] [proxy_http:error] [pid 960377:tid 960569] [client 20.226.22.37:4429] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:11.390620 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP8DQABVgM"], referer: http://67.222.38.115/Dockerrun.aws.json [Sun Jul 12 18:13:11.391287 2026] [security2:error] [pid 960377:tid 960490] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/crm/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUpAAAW28"] [Sun Jul 12 18:13:11.394002 2026] [security2:error] [pid 960377:tid 960484] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/admin-app/.env"] [unique_id "alQtlxMANaV5i2_BLQoUpgAAW2k"], referer: http://67.222.42.11/admin-app/.env [Sun Jul 12 18:13:11.397369 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtlhMANaV5i2_BLQoUNwAAACE"] [Sun Jul 12 18:13:11.399308 2026] [proxy:error] [pid 960377:tid 960569] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:11.407818 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUUgAAAAo"] [Sun Jul 12 18:13:11.429362 2026] [proxy_http:error] [pid 960377:tid 960569] [client 20.226.22.37:4429] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:11.413106 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:58262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backend/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUqwAAAE0"] [Sun Jul 12 18:13:11.416325 2026] [security2:error] [pid 960377:tid 960436] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/current/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUrAAAVDk"] [Sun Jul 12 18:13:11.430189 2026] [security2:error] [pid 960377:tid 960451] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/help/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUswAAVEg"] [Sun Jul 12 18:13:11.419368 2026] [security2:error] [pid 960377:tid 960382] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/dashboard/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUrgAAVAQ"] [Sun Jul 12 18:13:11.430404 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:58294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/backup/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUtQAAACA"] [Sun Jul 12 18:13:11.426235 2026] [security2:error] [pid 960377:tid 960466] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/admin/.env.bak"] [unique_id "alQtlxMANaV5i2_BLQoUrQAAVFc"], referer: http://67.222.42.11/admin/.env.bak [Sun Jul 12 18:13:11.427616 2026] [security2:error] [pid 960377:tid 960448] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/database.php"] [unique_id "alQtlxMANaV5i2_BLQoUsgAAVEU"] [Sun Jul 12 18:13:11.429055 2026] [security2:error] [pid 960377:tid 960504] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/helper/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUtAAAVH0"] [Sun Jul 12 18:13:11.443263 2026] [security2:error] [pid 960377:tid 960449] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/infos.php"] [unique_id "alQtlxMANaV5i2_BLQoUtwAAVEY"] [Sun Jul 12 18:13:11.462949 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:58300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/current/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUuQAAAF0"] [Sun Jul 12 18:13:11.479985 2026] [security2:error] [pid 960377:tid 960458] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/lara/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUuwAARE8"] [Sun Jul 12 18:13:11.485314 2026] [security2:error] [pid 960377:tid 960479] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/laravel/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUvAAARGQ"] [Sun Jul 12 18:13:11.495511 2026] [security2:error] [pid 960377:tid 960538] [client 62.171.167.118:53758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/laravel/info.php"] [unique_id "alQtlxMANaV5i2_BLQoUvQAAAB4"] [Sun Jul 12 18:13:11.500844 2026] [security2:error] [pid 960377:tid 960433] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/laravel/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUvgAAKjY"] [Sun Jul 12 18:13:11.504618 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:53774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/laravel/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUvwAAAFI"] [Sun Jul 12 18:13:11.511334 2026] [authz_core:error] [pid 960377:tid 960437] [remote 185.177.72.52:52402] AH01630: client denied by server configuration: /home4/cracker7/public_html/.htaccess [Sun Jul 12 18:13:11.542517 2026] [security2:error] [pid 960377:tid 960491] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/linusadmin-phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUwQAASXA"] [Sun Jul 12 18:13:11.546504 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:53782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/mail.php"] [unique_id "alQtlxMANaV5i2_BLQoUwgAAAEk"] [Sun Jul 12 18:13:11.557787 2026] [security2:error] [pid 960377:tid 960403] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/mail.php"] [unique_id "alQtlxMANaV5i2_BLQoUwwAAJBk"] [Sun Jul 12 18:13:11.593022 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:11.593499 2026] [authz_core:error] [pid 960377:tid 960551] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:11.594170 2026] [security2:error] [pid 960377:tid 960398] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/old_phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUxwAACBQ"] [Sun Jul 12 18:13:11.623897 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:53748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/php-info.php"] [unique_id "alQtl1_56DeKknhy7sP8hAAAAR8"] [Sun Jul 12 18:13:11.634683 2026] [security2:error] [pid 967714:tid 967866] [client 152.232.80.168:55484] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.238.10"] [uri "/wp-config.php.bkp"] [unique_id "alQtl1_56DeKknhy7sP8hQAAARU"] [Sun Jul 12 18:13:11.642387 2026] [security2:error] [pid 960377:tid 960441] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/php-info.php"] [unique_id "alQtlxMANaV5i2_BLQoUywAAfz4"] [Sun Jul 12 18:13:11.647815 2026] [security2:error] [pid 960377:tid 960572] [client 57.141.18.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUcAAAAEA"] [Sun Jul 12 18:13:11.658767 2026] [security2:error] [pid 960377:tid 960583] [client 62.171.167.118:53842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoUzAAAAEs"] [Sun Jul 12 18:13:11.719510 2026] [security2:error] [pid 960377:tid 960482] [remote 62.171.167.118:51674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/phpinfo.php"] [unique_id "alQtlxMANaV5i2_BLQoU0wAAEGc"] [Sun Jul 12 18:13:11.673341 2026] [security2:error] [pid 960377:tid 960453] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.idea/.env"] [unique_id "alQtlxMANaV5i2_BLQoUzgAASko"] [Sun Jul 12 18:13:11.785436 2026] [security2:error] [pid 967714:tid 967940] [client 185.238.231.62:53377] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.231.238.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQtl1_56DeKknhy7sP8jQAAAV8"] [Sun Jul 12 18:13:11.855329 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUyAAAADw"] [Sun Jul 12 18:13:11.878769 2026] [proxy:warn] [pid 967714:tid 967939] [client 43.157.67.70:41928] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be mackinstyle.com for uri /400.shtml [Sun Jul 12 18:13:11.925494 2026] [security2:error] [pid 960377:tid 960589] [client 43.157.67.70:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "mackinstyle.com"] [uri "/400.shtml"] [unique_id "alQtlxMANaV5i2_BLQoU1wAAAFE"] [Sun Jul 12 18:13:11.926756 2026] [security2:error] [pid 967714:tid 967939] [client 43.157.67.70:41928] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "mackinstyle.com"] [uri "/400.shtml"] [unique_id "alQtl1_56DeKknhy7sP8kAAAAV4"] [Sun Jul 12 18:13:11.950639 2026] [proxy:error] [pid 960377:tid 960552] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:11.950940 2026] [proxy_http:error] [pid 960377:tid 960552] [client 20.226.22.37:4448] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:11.954707 2026] [proxy:error] [pid 960377:tid 960552] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:11.954958 2026] [proxy_http:error] [pid 960377:tid 960552] [client 20.226.22.37:4448] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:12.006871 2026] [security2:error] [pid 960377:tid 960625] [client 168.100.149.110:50296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7865/bargainor/2308_deft.jsp"] [unique_id "alQtmBMANaV5i2_BLQoU2gAAAHU"] [Sun Jul 12 18:13:12.027276 2026] [security2:error] [pid 967714:tid 967841] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env.mailjet.backup"] [unique_id "alQtmF_56DeKknhy7sP8lQABWHM"] [Sun Jul 12 18:13:12.106145 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP6fwABSBU"], referer: http://67.222.40.58/backup/api_keys.json [Sun Jul 12 18:13:12.139003 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtel_56DeKknhy7sP6dgABSDM"] [Sun Jul 12 18:13:12.207561 2026] [security2:error] [pid 967714:tid 967807] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db.php.old"] [unique_id "alQtmF_56DeKknhy7sP8mQABS1E"] [Sun Jul 12 18:13:12.252354 2026] [security2:error] [pid 960377:tid 960632] [client 43.173.178.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoU2QAAAHw"] [Sun Jul 12 18:13:12.415441 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:12.416039 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:12.475607 2026] [security2:error] [pid 967714:tid 967858] [client 20.226.22.37:1506] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQtmF_56DeKknhy7sP8pQAAAQ0"] [Sun Jul 12 18:13:12.716190 2026] [security2:error] [pid 967714:tid 967869] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmF_56DeKknhy7sP8ogAAARg"] [Sun Jul 12 18:13:12.855365 2026] [security2:error] [pid 967714:tid 967927] [client 94.187.171.125:54208] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtmF_56DeKknhy7sP8qwAAAVI"] [Sun Jul 12 18:13:12.855767 2026] [security2:error] [pid 967714:tid 967927] [client 94.187.171.125:54208] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtmF_56DeKknhy7sP8qwAAAVI"] [Sun Jul 12 18:13:12.948079 2026] [security2:error] [pid 967714:tid 967937] [client 152.232.80.168:50879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/mail.php"] [unique_id "alQtmF_56DeKknhy7sP8rwAAAVw"] [Sun Jul 12 18:13:13.033157 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoU1gAAV0M"] [Sun Jul 12 18:13:13.066242 2026] [security2:error] [pid 967714:tid 967932] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTVfNDY1OS81c3kvMTY5NDFfc3k=.htm"] [unique_id "alQtmV_56DeKknhy7sP8tAAAAVc"] [Sun Jul 12 18:13:13.096259 2026] [security2:error] [pid 967714:tid 967896] [client 20.226.22.37:4460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQtmV_56DeKknhy7sP8tQAAATM"] [Sun Jul 12 18:13:13.103593 2026] [security2:error] [pid 960377:tid 960597] [client 92.96.56.16:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmBMANaV5i2_BLQoU7QAAAFk"] [Sun Jul 12 18:13:13.156852 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTNwAAAD8"], referer: http://67.222.40.58/backup/_profiler/phpinfo [Sun Jul 12 18:13:13.237549 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:13.238280 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:13.268340 2026] [security2:error] [pid 960377:tid 960593] [client 186.12.184.187:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQtmBMANaV5i2_BLQoU3AAAAFU"], referer: https://mackinstyle.com/ [Sun Jul 12 18:13:13.283264 2026] [security2:error] [pid 967714:tid 967905] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmF_56DeKknhy7sP8rgAAATw"] [Sun Jul 12 18:13:13.450052 2026] [security2:error] [pid 967714:tid 967766] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/qa/.env"] [unique_id "alQtmV_56DeKknhy7sP8vQABcSg"] [Sun Jul 12 18:13:13.698624 2026] [security2:error] [pid 960377:tid 960537] [client 20.226.22.37:6405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQtmRMANaV5i2_BLQoVSQAAAB0"] [Sun Jul 12 18:13:13.889334 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmRMANaV5i2_BLQoVSAAAAAw"] [Sun Jul 12 18:13:14.086707 2026] [security2:error] [pid 960377:tid 960518] [client 152.232.80.168:60005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/inc/config.php"] [unique_id "alQtmhMANaV5i2_BLQoVTgAAAAo"] [Sun Jul 12 18:13:14.126852 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTPwAAAEg"], referer: http://67.222.40.58/beta/.env.dev [Sun Jul 12 18:13:14.137457 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtf1_56DeKknhy7sP8ewABVgM"] [Sun Jul 12 18:13:14.160321 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6pQAAARM"], referer: http://67.222.40.58/beta/.env.staging [Sun Jul 12 18:13:14.192461 2026] [security2:error] [pid 960377:tid 960522] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtmRMANaV5i2_BLQoVRgAAAA4"] [Sun Jul 12 18:13:14.192538 2026] [security2:error] [pid 960377:tid 960522] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtmRMANaV5i2_BLQoVRgAAAA4"] [Sun Jul 12 18:13:14.221476 2026] [security2:error] [pid 967714:tid 967966] [client 65.21.113.206:36956] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTVfNDY1OS81c3kvMTY5NDFfc3k=.htm"] [unique_id "alQtmV_56DeKknhy7sP8vwAAAXk"] [Sun Jul 12 18:13:14.268543 2026] [security2:error] [pid 967714:tid 967883] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8gQAAASY"] [Sun Jul 12 18:13:14.273347 2026] [security2:error] [pid 960377:tid 960560] [client 20.226.22.37:1493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/0.kb-v3.php"] [unique_id "alQtmhMANaV5i2_BLQoVXAAAADQ"] [Sun Jul 12 18:13:14.293868 2026] [security2:error] [pid 960377:tid 960596] [client 152.232.80.168:61580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/filesystems.php"] [unique_id "alQtmhMANaV5i2_BLQoVXQAAAFg"] [Sun Jul 12 18:13:14.311944 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUqQAAAGs"] [Sun Jul 12 18:13:14.439009 2026] [authz_core:error] [pid 960377:tid 960595] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:14.439599 2026] [authz_core:error] [pid 960377:tid 960595] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:14.479798 2026] [security2:error] [pid 960377:tid 960536] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtmRMANaV5i2_BLQoU-AAAHHw"] [Sun Jul 12 18:13:14.513746 2026] [security2:error] [pid 967714:tid 967970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtml_56DeKknhy7sP8ygAAAX0"] [Sun Jul 12 18:13:14.647526 2026] [security2:error] [pid 967714:tid 967869] [client 168.100.149.172:44402] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7930/bargainor/2308_did.jsp"] [unique_id "alQtml_56DeKknhy7sP83QAAARg"] [Sun Jul 12 18:13:14.684468 2026] [security2:error] [pid 967714:tid 967750] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/smtp.xml.bak"] [unique_id "alQtml_56DeKknhy7sP83gABIRg"] [Sun Jul 12 18:13:14.786872 2026] [security2:error] [pid 960377:tid 960551] [client 20.226.22.37:6423] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/0.php"] [unique_id "alQtmhMANaV5i2_BLQoVawAAACs"] [Sun Jul 12 18:13:15.123661 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVbQAAABo"] [Sun Jul 12 18:13:15.157883 2026] [security2:error] [pid 967714:tid 967863] [client 20.210.108.71:59742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/robots-template.php"] [unique_id "alQtm1_56DeKknhy7sP86wAAARI"], referer: binance.com [Sun Jul 12 18:13:15.180026 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6qAAAATY"], referer: http://67.222.40.58/blog/.git/config [Sun Jul 12 18:13:15.192399 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtfl_56DeKknhy7sP6hAABSGo"] [Sun Jul 12 18:13:15.260145 2026] [cgid:error] [pid 960377:tid 960590] [client 169.224.36.246:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/seantari/public_html/404.shtml [Sun Jul 12 18:13:15.272062 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:15.273373 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:15.320112 2026] [security2:error] [pid 967714:tid 967859] [client 20.226.22.37:1492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/002.php"] [unique_id "alQtm1_56DeKknhy7sP88QAAAQ4"] [Sun Jul 12 18:13:15.388112 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:56434] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/temp.php"] [unique_id "alQtmxMANaV5i2_BLQoVfQAAADA"] [Sun Jul 12 18:13:15.573968 2026] [security2:error] [pid 960377:tid 960594] [client 24.203.79.110:53701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtmxMANaV5i2_BLQoVgAAAAFY"] [Sun Jul 12 18:13:15.574326 2026] [security2:error] [pid 960377:tid 960594] [client 24.203.79.110:53701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtmxMANaV5i2_BLQoVgAAAAFY"] [Sun Jul 12 18:13:15.623000 2026] [security2:error] [pid 960377:tid 960515] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtmxMANaV5i2_BLQoVfAAAAAc"] [Sun Jul 12 18:13:15.697227 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVZwAAPFw"] [Sun Jul 12 18:13:15.701203 2026] [security2:error] [pid 967714:tid 967948] [client 20.244.27.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "marcybudwick.com"] [uri "/index.php"] [unique_id "alQtkl_56DeKknhy7sP7ZQAAAWc"], referer: binance.com [Sun Jul 12 18:13:15.777021 2026] [security2:error] [pid 967714:tid 967858] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZ0Y204Lzg5OS82dC8yNTA5Ny90"] [unique_id "alQtm1_56DeKknhy7sP8_gAAAQ0"] [Sun Jul 12 18:13:15.786142 2026] [security2:error] [pid 967714:tid 967924] [client 74.7.175.157:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "youtube.monreagh.net"] [uri "/cgi-sys/404.html"] [unique_id "alQtm1_56DeKknhy7sP8_wAAAU8"] [Sun Jul 12 18:13:15.787439 2026] [security2:error] [pid 967714:tid 967892] [client 74.7.175.157:40380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "youtube.monreagh.net"] [uri "/robots.txt"] [unique_id "alQtm1_56DeKknhy7sP8-wABL3c"] [Sun Jul 12 18:13:15.789255 2026] [security2:error] [pid 967714:tid 967758] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/product.php.old"] [unique_id "alQtm1_56DeKknhy7sP9AAABDCA"] [Sun Jul 12 18:13:15.830405 2026] [security2:error] [pid 960377:tid 960544] [client 20.226.22.37:6407] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/01.php"] [unique_id "alQtmxMANaV5i2_BLQoVhwAAACQ"] [Sun Jul 12 18:13:15.888220 2026] [security2:error] [pid 967714:tid 967981] [client 125.167.21.72:61683] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtm1_56DeKknhy7sP9AQAAAYg"] [Sun Jul 12 18:13:15.888518 2026] [security2:error] [pid 967714:tid 967981] [client 125.167.21.72:61683] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtm1_56DeKknhy7sP9AQAAAYg"] [Sun Jul 12 18:13:15.939610 2026] [core:error] [pid 960377:tid 960530] [client 165.1.78.209:33440] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:13:15.982091 2026] [security2:error] [pid 960377:tid 960621] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/apache2.php"] [unique_id "alQtmxMANaV5i2_BLQoVlwAAAHE"] [Sun Jul 12 18:13:16.137659 2026] [security2:error] [pid 960377:tid 960608] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTQgAAAGQ"] [Sun Jul 12 18:13:16.179020 2026] [authz_core:error] [pid 960377:tid 960571] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:16.179781 2026] [authz_core:error] [pid 960377:tid 960571] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:16.205523 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6oQAAAWA"], referer: http://67.222.40.58/blog/.gitlab-ci.yml [Sun Jul 12 18:13:16.207879 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUsQAAAAQ"] [Sun Jul 12 18:13:16.388454 2026] [security2:error] [pid 967714:tid 967941] [client 20.226.22.37:6460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/0x.php"] [unique_id "alQtnF_56DeKknhy7sP9EwAAAWA"] [Sun Jul 12 18:13:16.479750 2026] [security2:error] [pid 967714:tid 967763] [remote 45.132.115.71:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQtnF_56DeKknhy7sP9GAABQSU"] [Sun Jul 12 18:13:16.599540 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnBMANaV5i2_BLQoVsQAAADA"] [Sun Jul 12 18:13:16.665090 2026] [security2:error] [pid 960377:tid 960544] [client 168.100.149.186:32636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/7995/bargainor/2308_delphian.jsp"] [unique_id "alQtnBMANaV5i2_BLQoVwwAAACQ"] [Sun Jul 12 18:13:16.898310 2026] [security2:error] [pid 960377:tid 960615] [client 20.226.22.37:6462] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/1.php"] [unique_id "alQtnBMANaV5i2_BLQoVyAAAAGs"] [Sun Jul 12 18:13:16.898614 2026] [security2:error] [pid 960377:tid 960615] [client 20.226.22.37:6462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/1.php"] [unique_id "alQtnBMANaV5i2_BLQoVyAAAAGs"] [Sun Jul 12 18:13:16.962517 2026] [security2:error] [pid 967714:tid 967861] [client 40.223.216.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQtnF_56DeKknhy7sP9GgAAARA"] [Sun Jul 12 18:13:17.066886 2026] [authz_core:error] [pid 967714:tid 967940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:17.067423 2026] [authz_core:error] [pid 967714:tid 967940] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:17.068512 2026] [security2:error] [pid 960377:tid 960513] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtmxMANaV5i2_BLQoViQAABQY"] [Sun Jul 12 18:13:17.085931 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6owAAAX4"] [Sun Jul 12 18:13:17.163336 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnBMANaV5i2_BLQoVxQAAAFU"] [Sun Jul 12 18:13:17.217947 2026] [security2:error] [pid 967714:tid 967866] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtnF_56DeKknhy7sP9EgAAARU"] [Sun Jul 12 18:13:17.226818 2026] [security2:error] [pid 967714:tid 967866] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtnF_56DeKknhy7sP9EgAAARU"] [Sun Jul 12 18:13:17.266268 2026] [security2:error] [pid 960377:tid 960531] [client 65.21.113.206:36970] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZ0Y204Lzg5OS82dC8yNTA5Ny90"] [unique_id "alQtnBMANaV5i2_BLQoVsgAAABc"] [Sun Jul 12 18:13:17.378402 2026] [security2:error] [pid 967714:tid 967919] [client 146.70.172.72:63150] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/.env"] [unique_id "alQtnV_56DeKknhy7sP9MwAAAUo"] [Sun Jul 12 18:13:17.381934 2026] [security2:error] [pid 960377:tid 960516] [client 146.70.172.72:63149] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/api/.env"] [unique_id "alQtnRMANaV5i2_BLQoVzgAAAAg"] [Sun Jul 12 18:13:17.382112 2026] [security2:error] [pid 960377:tid 960572] [client 146.70.172.72:63151] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/config/.env"] [unique_id "alQtnRMANaV5i2_BLQoVzwAAAEA"] [Sun Jul 12 18:13:17.400787 2026] [security2:error] [pid 967714:tid 967966] [client 146.70.172.72:63152] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/.env.backup"] [unique_id "alQtnV_56DeKknhy7sP9NgAAAXk"] [Sun Jul 12 18:13:17.444468 2026] [security2:error] [pid 960377:tid 960611] [client 146.70.172.72:63153] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/.env.bak"] [unique_id "alQtnRMANaV5i2_BLQoV0AAAAGc"] [Sun Jul 12 18:13:17.444957 2026] [security2:error] [pid 960377:tid 960525] [client 165.1.78.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.89.23.116"] [uri "/index.php"] [unique_id "alQtmxMANaV5i2_BLQoVlgAAABE"] [Sun Jul 12 18:13:17.451478 2026] [security2:error] [pid 967714:tid 967936] [client 146.70.172.72:63165] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/app/.env"] [unique_id "alQtnV_56DeKknhy7sP9OgAAAVs"] [Sun Jul 12 18:13:17.453721 2026] [security2:error] [pid 960377:tid 960584] [client 20.226.22.37:4416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/100.php"] [unique_id "alQtnRMANaV5i2_BLQoV1AAAAEw"] [Sun Jul 12 18:13:17.459541 2026] [security2:error] [pid 967714:tid 967960] [client 146.70.172.72:63164] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jeanmenezes.com"] [uri "/backend/.env"] [unique_id "alQtnV_56DeKknhy7sP9OwAAAXM"] [Sun Jul 12 18:13:17.632989 2026] [security2:error] [pid 960377:tid 960542] [client 152.232.80.168:55842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.238.10"] [uri "/config/broadcasting.php"] [unique_id "alQtnRMANaV5i2_BLQoV2AAAACI"] [Sun Jul 12 18:13:17.684259 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9MgAAATA"] [Sun Jul 12 18:13:17.860215 2026] [security2:error] [pid 967714:tid 967828] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/*.env.prod.backup"] [unique_id "alQtnV_56DeKknhy7sP9UgABC2Y"] [Sun Jul 12 18:13:17.888160 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:17.888998 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:17.974401 2026] [security2:error] [pid 967714:tid 967885] [client 20.226.22.37:11673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/122.php"] [unique_id "alQtnV_56DeKknhy7sP9VgAAASg"] [Sun Jul 12 18:13:18.039222 2026] [security2:error] [pid 967714:tid 967924] [client 78.211.134.32:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9LwAAAU8"] [Sun Jul 12 18:13:18.165931 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:53856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/phpversion.php"] [unique_id "alQtnl_56DeKknhy7sP9XAAAARM"] [Sun Jul 12 18:13:18.199786 2026] [security2:error] [pid 960377:tid 960604] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTRQAAAGA"], referer: http://67.222.40.58/beta/.env.production [Sun Jul 12 18:13:18.285224 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:53852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/pinfo.php"] [unique_id "alQtnl_56DeKknhy7sP9XQAAAXI"] [Sun Jul 12 18:13:18.287043 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:56432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/configure.php.orig"] [unique_id "alQtnhMANaV5i2_BLQoV3QAAABg"] [Sun Jul 12 18:13:18.426717 2026] [security2:error] [pid 967714:tid 967963] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP9WQAAAXY"] [Sun Jul 12 18:13:18.483572 2026] [security2:error] [pid 967714:tid 967938] [client 20.226.22.37:6164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/123.php"] [unique_id "alQtnl_56DeKknhy7sP9YQAAAV0"] [Sun Jul 12 18:13:18.499049 2026] [security2:error] [pid 960377:tid 960422] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/phpversion.php"] [unique_id "alQtnhMANaV5i2_BLQoV3wAAVCs"] [Sun Jul 12 18:13:18.499585 2026] [security2:error] [pid 960377:tid 960383] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/pinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoV4AAAVAU"] [Sun Jul 12 18:13:18.529881 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:53816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/server/info.php"] [unique_id "alQtnhMANaV5i2_BLQoV5AAAADo"] [Sun Jul 12 18:13:18.545802 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtnRMANaV5i2_BLQoVywAABjI"] [Sun Jul 12 18:13:18.640364 2026] [security2:error] [pid 967714:tid 967727] [remote 8.217.108.67:27226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 67.108.217.8.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQtnl_56DeKknhy7sP9aAABUAE"] [Sun Jul 12 18:13:18.647469 2026] [security2:error] [pid 960377:tid 960519] [client 168.100.149.172:27292] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8060/bargainor/2308_anisodactyli.jsp"] [unique_id "alQtnhMANaV5i2_BLQoV6gAAAAs"] [Sun Jul 12 18:13:18.652242 2026] [security2:error] [pid 960377:tid 960479] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/server/info.php"] [unique_id "alQtnhMANaV5i2_BLQoV6wAAEGQ"] [Sun Jul 12 18:13:18.668125 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:53830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/service/info.php"] [unique_id "alQtnl_56DeKknhy7sP9aQAAATQ"] [Sun Jul 12 18:13:18.675395 2026] [security2:error] [pid 960377:tid 960433] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/service/info.php"] [unique_id "alQtnhMANaV5i2_BLQoV7AAAATY"] [Sun Jul 12 18:13:18.709943 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:18.710734 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:18.756520 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:53804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/service/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP9agAAAXQ"] [Sun Jul 12 18:13:18.765774 2026] [security2:error] [pid 960377:tid 960491] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/service/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoV7wAAGXA"] [Sun Jul 12 18:13:18.766103 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:53796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/services/info.php"] [unique_id "alQtnl_56DeKknhy7sP9awAAASc"] [Sun Jul 12 18:13:18.771312 2026] [security2:error] [pid 960377:tid 960403] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/services/info.php"] [unique_id "alQtnhMANaV5i2_BLQoV8AAATxk"] [Sun Jul 12 18:13:18.772205 2026] [security2:error] [pid 960377:tid 960389] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/smtp.php"] [unique_id "alQtnhMANaV5i2_BLQoV8gAATws"] [Sun Jul 12 18:13:18.772419 2026] [security2:error] [pid 960377:tid 960398] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/settings.php"] [unique_id "alQtnhMANaV5i2_BLQoV8QAATxQ"] [Sun Jul 12 18:13:18.789621 2026] [security2:error] [pid 960377:tid 960441] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/temp.php"] [unique_id "alQtnhMANaV5i2_BLQoV8wAAfz4"] [Sun Jul 12 18:13:18.845393 2026] [security2:error] [pid 960377:tid 960482] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/time.php"] [unique_id "alQtnhMANaV5i2_BLQoV9wAAGmc"] [Sun Jul 12 18:13:18.849215 2026] [security2:error] [pid 960377:tid 960378] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/xampp/info.php"] [unique_id "alQtnhMANaV5i2_BLQoV-QAAGgA"] [Sun Jul 12 18:13:18.856400 2026] [security2:error] [pid 960377:tid 960421] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/xampp/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoV-wAAGio"] [Sun Jul 12 18:13:18.860265 2026] [security2:error] [pid 960377:tid 960494] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/adminer/.env"] [unique_id "alQtnhMANaV5i2_BLQoV_AAAGnM"] [Sun Jul 12 18:13:18.876855 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP9ZQAAAYY"] [Sun Jul 12 18:13:18.916314 2026] [security2:error] [pid 967714:tid 967956] [client 62.171.167.118:58786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/temp.php"] [unique_id "alQtnl_56DeKknhy7sP9dAAAAW8"] [Sun Jul 12 18:13:18.917819 2026] [security2:error] [pid 960377:tid 960588] [client 62.171.167.118:58772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admin/smtp.php"] [unique_id "alQtnhMANaV5i2_BLQoWBwAAAFA"] [Sun Jul 12 18:13:18.942566 2026] [security2:error] [pid 960377:tid 960428] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/api/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoWCwAAEzE"] [Sun Jul 12 18:13:18.945361 2026] [security2:error] [pid 960377:tid 960554] [client 62.171.167.118:52462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cron/development/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoWDQAAAC4"] [Sun Jul 12 18:13:18.946235 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:52468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/crm/info.php"] [unique_id "alQtnl_56DeKknhy7sP9egAAAWA"] [Sun Jul 12 18:13:18.947889 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:52486] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/current/crm/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP9ewAAATA"] [Sun Jul 12 18:13:18.949326 2026] [security2:error] [pid 967714:tid 967869] [client 62.171.167.118:52498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/current/develop/info.php"] [unique_id "alQtnl_56DeKknhy7sP9fAAAARg"] [Sun Jul 12 18:13:18.952305 2026] [security2:error] [pid 967714:tid 967859] [client 62.171.167.118:52454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cron/services/info.php"] [unique_id "alQtnl_56DeKknhy7sP9fQAAAQ4"] [Sun Jul 12 18:13:18.953901 2026] [security2:error] [pid 960377:tid 960435] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/dashboard/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoWDwAAEzg"] [Sun Jul 12 18:13:18.955922 2026] [security2:error] [pid 960377:tid 960434] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/info.php"] [unique_id "alQtnhMANaV5i2_BLQoWEAAAEzc"] [Sun Jul 12 18:13:18.956879 2026] [security2:error] [pid 960377:tid 960388] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/administrator/info.php"] [unique_id "alQtnhMANaV5i2_BLQoWAwAAEwo"] [Sun Jul 12 18:13:18.958604 2026] [security2:error] [pid 960377:tid 960478] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/administrator/.env"] [unique_id "alQtnhMANaV5i2_BLQoWAgAAE2M"] [Sun Jul 12 18:13:18.983640 2026] [security2:error] [pid 960377:tid 960400] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/old_phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoWFAAAExY"] [Sun Jul 12 18:13:19.001610 2026] [security2:error] [pid 960377:tid 960409] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/test.php"] [unique_id "alQtnhMANaV5i2_BLQoWFwAAEx8"] [Sun Jul 12 18:13:19.007331 2026] [security2:error] [pid 960377:tid 960493] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/administrator/phpinfo.php"] [unique_id "alQtnhMANaV5i2_BLQoWCQAAE3I"] [Sun Jul 12 18:13:19.023615 2026] [security2:error] [pid 960377:tid 960467] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/xampp/info.php"] [unique_id "alQtnxMANaV5i2_BLQoWGAAAS1g"] [Sun Jul 12 18:13:19.026415 2026] [security2:error] [pid 960377:tid 960381] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/apache/phpinfo.php"] [unique_id "alQtnxMANaV5i2_BLQoWGwAASwM"] [Sun Jul 12 18:13:19.028647 2026] [security2:error] [pid 960377:tid 960467] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/agora/.env"] [unique_id "alQtnxMANaV5i2_BLQoWGgAAS1g"] [Sun Jul 12 18:13:19.039146 2026] [security2:error] [pid 960377:tid 960430] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/crm/info.php"] [unique_id "alQtnxMANaV5i2_BLQoWHgAASzM"] [Sun Jul 12 18:13:19.047255 2026] [security2:error] [pid 967714:tid 967773] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/encrypt.php.bak"] [unique_id "alQtn1_56DeKknhy7sP9hQABEi8"] [Sun Jul 12 18:13:19.050794 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:58798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/api/phpinfo.php"] [unique_id "alQtnxMANaV5i2_BLQoWIAAAABE"] [Sun Jul 12 18:13:19.061422 2026] [security2:error] [pid 967714:tid 967856] [client 62.171.167.118:58804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/info.php"] [unique_id "alQtn1_56DeKknhy7sP9hgAAAQs"] [Sun Jul 12 18:13:19.065114 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:58834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/dashboard/phpinfo.php"] [unique_id "alQtn1_56DeKknhy7sP9hwAAARc"] [Sun Jul 12 18:13:19.068589 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:58844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/admins/old_phpinfo.php"] [unique_id "alQtnxMANaV5i2_BLQoWIgAAABY"] [Sun Jul 12 18:13:19.087187 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/info.php"] [unique_id "alQtnxMANaV5i2_BLQoWJAAAdFA"] [Sun Jul 12 18:13:19.089118 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/lara/phpinfo.php"] [unique_id "alQtnxMANaV5i2_BLQoWJgAAdFA"] [Sun Jul 12 18:13:19.090430 2026] [security2:error] [pid 960377:tid 960584] [client 62.171.167.118:58872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/crm/info.php"] [unique_id "alQtnxMANaV5i2_BLQoWJwAAAEw"] [Sun Jul 12 18:13:19.099057 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:58882] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/info.php"] [unique_id "alQtnxMANaV5i2_BLQoWKAAAACc"] [Sun Jul 12 18:13:19.110952 2026] [security2:error] [pid 960377:tid 960426] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/php-info.php"] [unique_id "alQtnxMANaV5i2_BLQoWKQAADC8"] [Sun Jul 12 18:13:19.127274 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:58898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/lara/phpinfo.php"] [unique_id "alQtnxMANaV5i2_BLQoWKwAAAD8"] [Sun Jul 12 18:13:19.134405 2026] [security2:error] [pid 960377:tid 960399] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/api/src/.env"] [unique_id "alQtnxMANaV5i2_BLQoWLAAAIhU"] [Sun Jul 12 18:13:19.148047 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTQwAAADU"] [Sun Jul 12 18:13:19.148181 2026] [security2:error] [pid 960377:tid 960559] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjhMANaV5i2_BLQoTQAAAAGU"] [Sun Jul 12 18:13:19.178954 2026] [security2:error] [pid 967714:tid 967916] [client 62.171.167.118:58828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/temp.php"] [unique_id "alQtn1_56DeKknhy7sP9igAAAUc"] [Sun Jul 12 18:13:19.187153 2026] [security2:error] [pid 960377:tid 960456] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/api/temp.php"] [unique_id "alQtnxMANaV5i2_BLQoWMQAAI00"] [Sun Jul 12 18:13:19.193653 2026] [security2:error] [pid 960377:tid 960423] [remote 62.171.167.118:39686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/administrator/.env"] [unique_id "alQtnxMANaV5i2_BLQoWLwAAIyw"], referer: http://67.222.42.11/administrator/.env [Sun Jul 12 18:13:19.222981 2026] [security2:error] [pid 967714:tid 967782] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/keys/log.bak"] [unique_id "alQtn1_56DeKknhy7sP9iwABcDg"] [Sun Jul 12 18:13:19.518147 2026] [security2:error] [pid 967714:tid 967921] [client 20.226.22.37:1480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/13.php"] [unique_id "alQtn1_56DeKknhy7sP9kgAAAUw"] [Sun Jul 12 18:13:19.587531 2026] [security2:error] [pid 967714:tid 967963] [client 20.210.108.71:56947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/script-modules.php"] [unique_id "alQtn1_56DeKknhy7sP9kwAAAXY"], referer: binance.com [Sun Jul 12 18:13:19.589156 2026] [authz_core:error] [pid 960377:tid 960595] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:19.589772 2026] [authz_core:error] [pid 960377:tid 960595] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:19.736931 2026] [security2:error] [pid 960377:tid 960610] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtnxMANaV5i2_BLQoWRQAAAGY"] [Sun Jul 12 18:13:19.903551 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtnhMANaV5i2_BLQoV7QAAazo"] [Sun Jul 12 18:13:19.912717 2026] [security2:error] [pid 967714:tid 967821] [remote 185.177.72.12:53678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-content/backup/db_backup.sql"] [unique_id "alQtn1_56DeKknhy7sP9nAABL18"] [Sun Jul 12 18:13:20.007475 2026] [security2:error] [pid 967714:tid 967857] [client 65.21.113.206:37764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZ1LzI0ODY3LzZ1LzU4NTMvdTVr.asp"] [unique_id "alQtoF_56DeKknhy7sP9nQAAAQw"] [Sun Jul 12 18:13:20.157336 2026] [security2:error] [pid 967714:tid 967933] [client 20.226.22.37:6435] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/133.php"] [unique_id "alQtoF_56DeKknhy7sP9oAAAAVg"] [Sun Jul 12 18:13:20.195093 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtjl_56DeKknhy7sP6pwAAAYM"] [Sun Jul 12 18:13:20.295456 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVWgAAAGg"], referer: http://67.222.38.115/drone/api/repos [Sun Jul 12 18:13:20.512919 2026] [authz_core:error] [pid 960377:tid 960624] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:20.513659 2026] [authz_core:error] [pid 960377:tid 960624] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:20.580068 2026] [security2:error] [pid 967714:tid 967960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtoF_56DeKknhy7sP9owAAAXM"] [Sun Jul 12 18:13:20.694216 2026] [security2:error] [pid 960377:tid 960520] [client 20.226.22.37:6413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/155.php"] [unique_id "alQtoBMANaV5i2_BLQoWXAAAAAw"] [Sun Jul 12 18:13:20.743645 2026] [security2:error] [pid 960377:tid 960605] [client 168.100.149.239:56852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8125/bargainor/2308_birefraction.jsp"] [unique_id "alQtoBMANaV5i2_BLQoWXQAAAGE"] [Sun Jul 12 18:13:21.095608 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVXwAAAA0"], referer: http://67.222.38.115/druid/coordinator/v1/metadata/datasources [Sun Jul 12 18:13:21.113172 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVWAAAACg"], referer: http://67.222.38.115/drone/api/user [Sun Jul 12 18:13:21.173004 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:52470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/default/help/phpinfo.php"] [unique_id "alQtoRMANaV5i2_BLQoWYgAAAAE"] [Sun Jul 12 18:13:21.219835 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtoF_56DeKknhy7sP9sQAAARY"] [Sun Jul 12 18:13:21.220469 2026] [security2:error] [pid 960377:tid 960530] [client 20.244.27.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.marcybudwick.com"] [uri "/index.php"] [unique_id "alQtoBMANaV5i2_BLQoWUwAAABY"], referer: binance.com [Sun Jul 12 18:13:21.251946 2026] [security2:error] [pid 960377:tid 960592] [client 20.226.22.37:6458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/177.php"] [unique_id "alQtoRMANaV5i2_BLQoWZAAAAFQ"] [Sun Jul 12 18:13:21.283927 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVWQAAAFo"], referer: http://67.222.38.115/drizzle-studio/ [Sun Jul 12 18:13:21.288960 2026] [security2:error] [pid 960377:tid 960553] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVVwAAAC0"], referer: http://67.222.38.115/domcfg.nsf [Sun Jul 12 18:13:21.404623 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtml_56DeKknhy7sP80QAAAQo"] [Sun Jul 12 18:13:21.463536 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtmhMANaV5i2_BLQoVYQAAAFw"] [Sun Jul 12 18:13:21.519067 2026] [security2:error] [pid 960377:tid 960609] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtoBMANaV5i2_BLQoWWQAAAGU"] [Sun Jul 12 18:13:21.519124 2026] [security2:error] [pid 960377:tid 960609] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtoBMANaV5i2_BLQoWWQAAAGU"] [Sun Jul 12 18:13:21.519825 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:21.520537 2026] [authz_core:error] [pid 960377:tid 960635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:21.530622 2026] [security2:error] [pid 967714:tid 967893] [client 65.21.113.206:36976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZ1LzI0ODY3LzZ1LzU4NTMvdTVr.asp"] [unique_id "alQtoF_56DeKknhy7sP9qgAAATA"] [Sun Jul 12 18:13:21.633555 2026] [security2:error] [pid 960377:tid 960572] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtoBMANaV5i2_BLQoWUAAAQFs"] [Sun Jul 12 18:13:21.789801 2026] [security2:error] [pid 960377:tid 960611] [client 20.226.22.37:4994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/1index.php"] [unique_id "alQtoRMANaV5i2_BLQoWcAAAAGc"] [Sun Jul 12 18:13:21.875443 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/sqladmin.php"] [unique_id "alQtoRMANaV5i2_BLQoWcwAAABg"] [Sun Jul 12 18:13:22.165319 2026] [security2:error] [pid 967714:tid 967886] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8cQAAASk"], referer: http://67.222.40.58/conf/phpinfo [Sun Jul 12 18:13:22.185951 2026] [fcgid:warn] [pid 960377:tid 960574] (70014)End of file found: [client 18.218.118.203:40486] mod_fcgid: can't get data from http client [Sun Jul 12 18:13:22.224756 2026] [fcgid:warn] [pid 967714:tid 967863] (70014)End of file found: [client 199.45.154.127:56240] mod_fcgid: can't get data from http client [Sun Jul 12 18:13:22.289580 2026] [core:error] [pid 960377:tid 960576] [client 165.1.78.209:46168] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) [Sun Jul 12 18:13:22.300364 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtnF_56DeKknhy7sP9EAAAATw"] [Sun Jul 12 18:13:22.308336 2026] [security2:error] [pid 967714:tid 967869] [client 20.226.22.37:1489] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/2.php"] [unique_id "alQtol_56DeKknhy7sP9zAAAARg"] [Sun Jul 12 18:13:22.316708 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtol_56DeKknhy7sP9xAAAAYY"] [Sun Jul 12 18:13:22.424688 2026] [authz_core:error] [pid 960377:tid 960614] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:22.425198 2026] [authz_core:error] [pid 960377:tid 960614] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:22.591263 2026] [security2:error] [pid 967714:tid 967867] [client 62.171.167.118:52446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/helper/info.php"] [unique_id "alQtol_56DeKknhy7sP91AAAARY"] [Sun Jul 12 18:13:22.709552 2026] [security2:error] [pid 967714:tid 967871] [client 168.100.149.133:24622] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8190/bargainor/2308_mediator.jsp"] [unique_id "alQtol_56DeKknhy7sP92QAAARo"] [Sun Jul 12 18:13:22.822299 2026] [security2:error] [pid 960377:tid 960593] [client 20.226.22.37:6428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/222.php"] [unique_id "alQtohMANaV5i2_BLQoWhgAAAFU"] [Sun Jul 12 18:13:22.891273 2026] [security2:error] [pid 960377:tid 960462] [remote 185.177.72.12:17114] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQtohMANaV5i2_BLQoWhQAAHlM"] [Sun Jul 12 18:13:22.923536 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtoRMANaV5i2_BLQoWcQAAL3o"] [Sun Jul 12 18:13:23.313652 2026] [authz_core:error] [pid 960377:tid 960626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:23.314232 2026] [authz_core:error] [pid 960377:tid 960626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:23.359892 2026] [security2:error] [pid 960377:tid 960440] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/home/*/.env"] [unique_id "alQtoxMANaV5i2_BLQoWjAAAZT0"] [Sun Jul 12 18:13:23.369319 2026] [security2:error] [pid 967714:tid 967939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtoV_56DeKknhy7sP9uQAAAV4"] [Sun Jul 12 18:13:23.384910 2026] [security2:error] [pid 960377:tid 960586] [client 20.226.22.37:4830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/2p.update.php"] [unique_id "alQtoxMANaV5i2_BLQoWjQAAAE4"] [Sun Jul 12 18:13:23.407130 2026] [security2:error] [pid 967714:tid 967964] [client 165.1.78.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.89.23.116"] [uri "/index.php"] [unique_id "alQtol_56DeKknhy7sP9zQAAAXc"] [Sun Jul 12 18:13:23.535605 2026] [security2:error] [pid 967714:tid 967911] [client 94.187.171.125:54694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQto1_56DeKknhy7sP96AAAAUI"] [Sun Jul 12 18:13:23.535933 2026] [security2:error] [pid 967714:tid 967911] [client 94.187.171.125:54694] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQto1_56DeKknhy7sP96AAAAUI"] [Sun Jul 12 18:13:23.539061 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test9.php"] [unique_id "alQtoxMANaV5i2_BLQoWjwAAAFk"] [Sun Jul 12 18:13:23.612932 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtol_56DeKknhy7sP9zgAAAR0"] [Sun Jul 12 18:13:23.695014 2026] [security2:error] [pid 960377:tid 960418] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.git/config.bak.bak"] [unique_id "alQtoxMANaV5i2_BLQoWkgAADCc"] [Sun Jul 12 18:13:23.802517 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:52444] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/lara/info.php"] [unique_id "alQto1_56DeKknhy7sP9_wAAAVo"] [Sun Jul 12 18:13:23.907492 2026] [security2:error] [pid 967714:tid 967869] [client 20.226.22.37:6412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/3.php"] [unique_id "alQto1_56DeKknhy7sP-BAAAARg"] [Sun Jul 12 18:13:24.123034 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUiwAAAEM"] [Sun Jul 12 18:13:24.137205 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:24.137923 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:24.211575 2026] [security2:error] [pid 967714:tid 967860] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQto1_56DeKknhy7sP-AwAAAQ8"] [Sun Jul 12 18:13:24.246417 2026] [security2:error] [pid 960377:tid 960633] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtoxMANaV5i2_BLQoWiAAAfVk"] [Sun Jul 12 18:13:24.409759 2026] [security2:error] [pid 960377:tid 960392] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/.ssh/id_rsa"] [unique_id "alQtpBMANaV5i2_BLQoWnAAAeQ4"] [Sun Jul 12 18:13:24.476161 2026] [security2:error] [pid 967714:tid 967881] [client 20.226.22.37:11672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQtpF_56DeKknhy7sP-DwAAASQ"] [Sun Jul 12 18:13:24.832287 2026] [security2:error] [pid 967714:tid 967974] [client 47.128.17.191:52014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "il-rda.com"] [uri "/robots.txt"] [unique_id "alQtpF_56DeKknhy7sP-HwAAAYE"] [Sun Jul 12 18:13:24.837741 2026] [security2:error] [pid 967714:tid 967918] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtpF_56DeKknhy7sP-EgAAAUk"] [Sun Jul 12 18:13:24.991395 2026] [security2:error] [pid 967714:tid 967923] [client 20.226.22.37:6456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/403.php"] [unique_id "alQtpF_56DeKknhy7sP-IwAAAU4"] [Sun Jul 12 18:13:25.016176 2026] [authz_core:error] [pid 960377:tid 960622] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:25.016917 2026] [authz_core:error] [pid 960377:tid 960622] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:25.187412 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8cgAAATs"] [Sun Jul 12 18:13:25.198406 2026] [security2:error] [pid 967714:tid 967911] [client 20.244.27.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "marcybudwick.com"] [uri "/index.php"] [unique_id "alQtpF_56DeKknhy7sP-HAAAAUI"], referer: binance.com [Sun Jul 12 18:13:25.210855 2026] [security2:error] [pid 960377:tid 960508] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUhwAAAAI"] [Sun Jul 12 18:13:25.213403 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8dAAAASo"] [Sun Jul 12 18:13:25.213814 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQto1_56DeKknhy7sP95gAAAUs"], referer: http://67.222.38.115/druid/wall/ [Sun Jul 12 18:13:25.269193 2026] [security2:error] [pid 967714:tid 967863] [client 103.221.220.62:33076] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/app/.env"] [unique_id "alQtpV_56DeKknhy7sP-LwAAARI"] [Sun Jul 12 18:13:25.270326 2026] [security2:error] [pid 967714:tid 967885] [client 103.221.220.62:33066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/core/.env"] [unique_id "alQtpV_56DeKknhy7sP-MAAAASg"] [Sun Jul 12 18:13:25.294110 2026] [security2:error] [pid 967714:tid 967753] [remote 212.64.199.62:39872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.199.64.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.com"] [uri "/wp-login.php"] [unique_id "alQtpV_56DeKknhy7sP-MQABgxs"] [Sun Jul 12 18:13:25.371899 2026] [security2:error] [pid 960377:tid 960555] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZfMzA1OC82b2QvNDQ0MDlfb2Q=.htm"] [unique_id "alQtpRMANaV5i2_BLQoWqQAAAC8"] [Sun Jul 12 18:13:25.375238 2026] [security2:error] [pid 960377:tid 960587] [client 103.221.220.62:33086] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/api/.env"] [unique_id "alQtpRMANaV5i2_BLQoWqgAAAE8"] [Sun Jul 12 18:13:25.483117 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtpBMANaV5i2_BLQoWnwAAVHw"] [Sun Jul 12 18:13:25.545893 2026] [security2:error] [pid 960377:tid 960538] [client 20.226.22.37:6459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.annamarieakinsphotography.com"] [uri "/404.php"] [unique_id "alQtpRMANaV5i2_BLQoWrQAAAB4"] [Sun Jul 12 18:13:25.585867 2026] [security2:error] [pid 967714:tid 967968] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtpV_56DeKknhy7sP-LgAAAXs"] [Sun Jul 12 18:13:25.939434 2026] [authz_core:error] [pid 960377:tid 960612] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:25.939977 2026] [authz_core:error] [pid 960377:tid 960612] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:26.024523 2026] [security2:error] [pid 960377:tid 960591] [client 168.100.149.225:58800] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8320/bargainor/2308_monkey.jsp"] [unique_id "alQtphMANaV5i2_BLQoWvQAAAFM"] [Sun Jul 12 18:13:26.087978 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtpRMANaV5i2_BLQoWtQAAAGk"] [Sun Jul 12 18:13:26.088936 2026] [security2:error] [pid 967714:tid 967930] [client 103.221.220.62:33048] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/member/.env"] [unique_id "alQtpl_56DeKknhy7sP-QgAAAVU"] [Sun Jul 12 18:13:26.182153 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:52538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/laravel/info.php"] [unique_id "alQtphMANaV5i2_BLQoWxQAAAAw"] [Sun Jul 12 18:13:26.183322 2026] [security2:error] [pid 967714:tid 967910] [client 103.221.220.62:33096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/new/.env"] [unique_id "alQtpl_56DeKknhy7sP-RAAAAUE"] [Sun Jul 12 18:13:26.184015 2026] [security2:error] [pid 960377:tid 960512] [client 103.221.220.62:33110] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/bank/.env"] [unique_id "alQtphMANaV5i2_BLQoWxAAAAAQ"] [Sun Jul 12 18:13:26.248804 2026] [security2:error] [pid 967714:tid 967944] [client 24.203.79.110:54232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtpl_56DeKknhy7sP-RwAAAWM"] [Sun Jul 12 18:13:26.249706 2026] [security2:error] [pid 967714:tid 967944] [client 24.203.79.110:54232] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtpl_56DeKknhy7sP-RwAAAWM"] [Sun Jul 12 18:13:26.280479 2026] [security2:error] [pid 967714:tid 967924] [client 103.221.220.62:33064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/.env"] [unique_id "alQtpl_56DeKknhy7sP-SQAAAU8"] [Sun Jul 12 18:13:26.280727 2026] [security2:error] [pid 960377:tid 960540] [client 103.221.220.62:33062] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesalisbury.com"] [uri "/backend/.env"] [unique_id "alQtphMANaV5i2_BLQoWxwAAACA"] [Sun Jul 12 18:13:26.302737 2026] [security2:error] [pid 960377:tid 960471] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env.example.backup"] [unique_id "alQtphMANaV5i2_BLQoWyAAASFw"] [Sun Jul 12 18:13:26.348866 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQto1_56DeKknhy7sP99AAAAXM"], referer: http://67.222.38.115/druid/weburi.html [Sun Jul 12 18:13:26.379551 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQto1_56DeKknhy7sP99gAAATM"], referer: http://67.222.38.115/dubbo-admin/ [Sun Jul 12 18:13:26.383726 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQto1_56DeKknhy7sP99wAAATY"] [Sun Jul 12 18:13:26.387425 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/dump.sql"] [unique_id "alQtjl_56DeKknhy7sP-TAABVhU"] [Sun Jul 12 18:13:26.420423 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:58936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/apis/development/phpinfo.php"] [unique_id "alQtpl_56DeKknhy7sP-TQAAAWc"] [Sun Jul 12 18:13:26.447212 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.38.115"] [uri "/dump.sql"] [unique_id "alQtjl_56DeKknhy7sP-UAABVgo"], referer: http://67.222.38.115/dump.sql [Sun Jul 12 18:13:26.535086 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:52524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/services/info.php"] [unique_id "alQtpl_56DeKknhy7sP-WAAAAQ8"] [Sun Jul 12 18:13:26.620894 2026] [security2:error] [pid 967714:tid 967961] [client 125.167.21.72:62117] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtpl_56DeKknhy7sP-WwAAAXQ"] [Sun Jul 12 18:13:26.621368 2026] [security2:error] [pid 967714:tid 967961] [client 125.167.21.72:62117] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtpl_56DeKknhy7sP-WwAAAXQ"] [Sun Jul 12 18:13:26.643224 2026] [security2:error] [pid 967714:tid 967974] [client 190.89.31.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtpV_56DeKknhy7sP-PwAAAYE"] [Sun Jul 12 18:13:26.647548 2026] [security2:error] [pid 960377:tid 960563] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtpRMANaV5i2_BLQoWrgAAN38"] [Sun Jul 12 18:13:26.797851 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/apis/development/phpinfo.php"] [unique_id "alQtpl_56DeKknhy7sP-bAABg1c"] [Sun Jul 12 18:13:26.818150 2026] [security2:error] [pid 960377:tid 960568] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtphMANaV5i2_BLQoW0AAAADw"] [Sun Jul 12 18:13:26.819292 2026] [security2:error] [pid 960377:tid 960572] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtpRMANaV5i2_BLQoWuAAAAEA"] [Sun Jul 12 18:13:26.819342 2026] [security2:error] [pid 960377:tid 960572] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtpRMANaV5i2_BLQoWuAAAAEA"] [Sun Jul 12 18:13:26.825517 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.206:58252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZfMzA1OC82b2QvNDQ0MDlfb2Q=.htm"] [unique_id "alQtpV_56DeKknhy7sP-OgAAAS0"] [Sun Jul 12 18:13:26.853259 2026] [security2:error] [pid 967714:tid 967937] [client 20.210.108.71:54819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/speculative-loading.php"] [unique_id "alQtpl_56DeKknhy7sP-bQAAAVw"], referer: binance.com [Sun Jul 12 18:13:26.871596 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:26.872123 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:27.033960 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/apis/test.php"] [unique_id "alQtp1_56DeKknhy7sP-cQABCyo"] [Sun Jul 12 18:13:27.033961 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:58928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/apis/test.php"] [unique_id "alQtpxMANaV5i2_BLQoW2QAAAFg"] [Sun Jul 12 18:13:27.101611 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app-order-client/.env"] [unique_id "alQtp1_56DeKknhy7sP-cwABHAI"] [Sun Jul 12 18:13:27.118205 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8agABSG0"] [Sun Jul 12 18:13:27.207329 2026] [security2:error] [pid 967714:tid 967762] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app-order-client/.env"] [unique_id "alQtp1_56DeKknhy7sP-dgABTiQ"], referer: http://67.222.42.11/app-order-client/.env [Sun Jul 12 18:13:27.226837 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUcQAAAG0"] [Sun Jul 12 18:13:27.229219 2026] [security2:error] [pid 960377:tid 960510] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUkQAAABs"] [Sun Jul 12 18:13:27.305660 2026] [security2:error] [pid 960377:tid 960634] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtphMANaV5i2_BLQoW2AAAAH4"] [Sun Jul 12 18:13:27.401089 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/.env.bak"] [unique_id "alQtp1_56DeKknhy7sP-fwABTWQ"] [Sun Jul 12 18:13:27.550646 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/client/.env"] [unique_id "alQtp1_56DeKknhy7sP-jQABKm4"] [Sun Jul 12 18:13:27.551207 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/.env.bak"] [unique_id "alQtp1_56DeKknhy7sP-igABKmE"], referer: http://67.222.42.11/app/.env.bak [Sun Jul 12 18:13:27.560581 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:52510] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/api/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-jwAAAT8"] [Sun Jul 12 18:13:27.603941 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/config.php"] [unique_id "alQtp1_56DeKknhy7sP-kAABM1w"] [Sun Jul 12 18:13:27.617793 2026] [security2:error] [pid 967714:tid 967938] [client 165.154.135.215:48292] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/favicon.ico"] [unique_id "alQtp1_56DeKknhy7sP-kQAAAV0"] [Sun Jul 12 18:13:27.623035 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:41240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/backup/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-kgAAAXU"] [Sun Jul 12 18:13:27.625959 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:41250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/dev/info.php"] [unique_id "alQtpxMANaV5i2_BLQoW5AAAACk"] [Sun Jul 12 18:13:27.653588 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/config/.env"] [unique_id "alQtp1_56DeKknhy7sP-mQABCmU"] [Sun Jul 12 18:13:27.665155 2026] [security2:error] [pid 967714:tid 967963] [client 62.171.167.118:59872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/config.php"] [unique_id "alQtp1_56DeKknhy7sP-mwAAAXY"] [Sun Jul 12 18:13:27.725129 2026] [security2:error] [pid 960377:tid 960623] [client 165.154.135.215:48342] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/robots.txt"] [unique_id "alQtpxMANaV5i2_BLQoW6AAAAHM"] [Sun Jul 12 18:13:27.727978 2026] [security2:error] [pid 960377:tid 960436] [remote 57.141.18.84:50644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/GlQoBq_IZsUNbd1ilhnPoot2oV"] [unique_id "alQtpxMANaV5i2_BLQoW5wAASjk"] [Sun Jul 12 18:13:27.731876 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:27.732531 2026] [authz_core:error] [pid 960377:tid 960593] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:27.756489 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:59906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/config/parameters.php"] [unique_id "alQtp1_56DeKknhy7sP-owAAAWI"] [Sun Jul 12 18:13:27.764290 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/client/.env"] [unique_id "alQtp1_56DeKknhy7sP-pAABEzI"], referer: http://67.222.42.11/app/client/.env [Sun Jul 12 18:13:27.777071 2026] [security2:error] [pid 967714:tid 967868] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtp1_56DeKknhy7sP-hwAAARc"] [Sun Jul 12 18:13:27.784710 2026] [security2:error] [pid 960377:tid 960629] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtphMANaV5i2_BLQoW1QAAeSY"] [Sun Jul 12 18:13:27.795339 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/config/parameters.php"] [unique_id "alQtp1_56DeKknhy7sP-qAABIn4"] [Sun Jul 12 18:13:27.822929 2026] [security2:error] [pid 967714:tid 967757] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app/config/.env"] [unique_id "alQtp1_56DeKknhy7sP-qwABIh8"], referer: http://67.222.42.11/app/config/.env [Sun Jul 12 18:13:27.871218 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:59876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/info.php"] [unique_id "alQtpxMANaV5i2_BLQoW7AAAAHc"] [Sun Jul 12 18:13:27.871514 2026] [security2:error] [pid 960377:tid 960559] [client 62.171.167.118:59892] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/helper/phpinfo.php"] [unique_id "alQtpxMANaV5i2_BLQoW7QAAADM"] [Sun Jul 12 18:13:27.871525 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/helper/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-sAABJRc"] [Sun Jul 12 18:13:27.871656 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/info.php"] [unique_id "alQtp1_56DeKknhy7sP-rwABJQA"] [Sun Jul 12 18:13:27.913099 2026] [security2:error] [pid 967714:tid 967979] [client 109.37.159.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtp1_56DeKknhy7sP-ewAAAYY"] [Sun Jul 12 18:13:27.914213 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/lara/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-sQABWnY"] [Sun Jul 12 18:13:27.934714 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/old_phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-sgABXB0"] [Sun Jul 12 18:13:27.934895 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:59944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/old_phpinfo.php"] [unique_id "alQtpxMANaV5i2_BLQoW7wAAAAg"] [Sun Jul 12 18:13:27.936336 2026] [security2:error] [pid 967714:tid 967968] [client 62.171.167.118:58908] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/service/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-swAAAXs"] [Sun Jul 12 18:13:27.950379 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/service/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-tQABFlU"] [Sun Jul 12 18:13:27.963693 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/services/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP-uQABcQM"] [Sun Jul 12 18:13:27.964556 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:59932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/services/phpinfo.php"] [unique_id "alQtpxMANaV5i2_BLQoW8QAAACc"] [Sun Jul 12 18:13:28.022757 2026] [security2:error] [pid 967714:tid 967874] [client 165.154.135.215:48340] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/sitemap.xml"] [unique_id "alQtqF_56DeKknhy7sP-vAAAAR0"] [Sun Jul 12 18:13:28.064158 2026] [security2:error] [pid 960377:tid 960515] [client 168.100.149.146:21790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8255/bargainor/2308_gurian.jsp"] [unique_id "alQtqBMANaV5i2_BLQoW8wAAAAc"] [Sun Jul 12 18:13:28.076283 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:59920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/xampp/phpinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoW9AAAAAQ"] [Sun Jul 12 18:13:28.079462 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8dQAAATI"], referer: http://67.222.40.58/config/.git/config [Sun Jul 12 18:13:28.081762 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/app/xampp/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP-vwABNX8"] [Sun Jul 12 18:13:28.081817 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtll_56DeKknhy7sP8aAABSBk"] [Sun Jul 12 18:13:28.091813 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:41244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/infophp.php"] [unique_id "alQtqBMANaV5i2_BLQoW9QAAADY"] [Sun Jul 12 18:13:28.093786 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:41262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/services/phpinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoW9gAAAGc"] [Sun Jul 12 18:13:28.125362 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app1-static/.env"] [unique_id "alQtqF_56DeKknhy7sP-wgABHHs"] [Sun Jul 12 18:13:28.130850 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app_dir/.env"] [unique_id "alQtqF_56DeKknhy7sP-xAABHFM"] [Sun Jul 12 18:13:28.133568 2026] [security2:error] [pid 967714:tid 967737] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app2-static/.env"] [unique_id "alQtqF_56DeKknhy7sP-xQABHAs"] [Sun Jul 12 18:13:28.143548 2026] [security2:error] [pid 967714:tid 967889] [client 146.70.172.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9QgAAASw"] [Sun Jul 12 18:13:28.150832 2026] [security2:error] [pid 967714:tid 967878] [client 146.70.172.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9NwAAASE"] [Sun Jul 12 18:13:28.158394 2026] [security2:error] [pid 967714:tid 967862] [client 146.70.172.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9QQAAARE"] [Sun Jul 12 18:13:28.163783 2026] [security2:error] [pid 967714:tid 967876] [client 146.70.172.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9QAAAAR8"] [Sun Jul 12 18:13:28.202108 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtll_56DeKknhy7sP8ZAABSE4"] [Sun Jul 12 18:13:28.241179 2026] [security2:error] [pid 967714:tid 967838] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/application/config/constants.php/"] [unique_id "alQtqF_56DeKknhy7sP-zAABQnA"] [Sun Jul 12 18:13:28.265225 2026] [security2:error] [pid 960377:tid 960633] [client 62.171.167.118:59958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/application/config/constants.php/"] [unique_id "alQtqBMANaV5i2_BLQoW_AAAAH0"] [Sun Jul 12 18:13:28.266025 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:41268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/test.php"] [unique_id "alQtqF_56DeKknhy7sP-zwAAAS4"] [Sun Jul 12 18:13:28.269644 2026] [security2:error] [pid 967714:tid 967730] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/apps/client/.env"] [unique_id "alQtqF_56DeKknhy7sP-0AABQgQ"] [Sun Jul 12 18:13:28.270992 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app2-static/.env"] [unique_id "alQtqF_56DeKknhy7sP-0QABQnE"], referer: http://67.222.42.11/app2-static/.env [Sun Jul 12 18:13:28.271484 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app1-static/.env"] [unique_id "alQtqF_56DeKknhy7sP-0gABQgY"], referer: http://67.222.42.11/app1-static/.env [Sun Jul 12 18:13:28.311205 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/audio/.env"] [unique_id "alQtqF_56DeKknhy7sP-1QABG2k"] [Sun Jul 12 18:13:28.313585 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/app_dir/.env"] [unique_id "alQtqF_56DeKknhy7sP-1wABG0c"], referer: http://67.222.42.11/app_dir/.env [Sun Jul 12 18:13:28.320834 2026] [security2:error] [pid 967714:tid 967861] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtp1_56DeKknhy7sP-twAAARA"] [Sun Jul 12 18:13:28.342701 2026] [security2:error] [pid 967714:tid 967927] [client 146.70.172.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQtnV_56DeKknhy7sP9QwAAAVI"] [Sun Jul 12 18:13:28.399875 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/apps/client/.env"] [unique_id "alQtqF_56DeKknhy7sP-3gABcB4"], referer: http://67.222.42.11/apps/client/.env [Sun Jul 12 18:13:28.412951 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQtqF_56DeKknhy7sP-4wABcHU"] [Sun Jul 12 18:13:28.433214 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQtqF_56DeKknhy7sP-5wABdmM"] [Sun Jul 12 18:13:28.435375 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/audio/.env"] [unique_id "alQtqF_56DeKknhy7sP-6AABdiI"], referer: http://67.222.42.11/audio/.env [Sun Jul 12 18:13:28.450437 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:59978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/api/info.php"] [unique_id "alQtqF_56DeKknhy7sP-7QAAAYE"] [Sun Jul 12 18:13:28.473119 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/api/info.php"] [unique_id "alQtqF_56DeKknhy7sP-7gABQAU"] [Sun Jul 12 18:13:28.496100 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:59922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/help/phpinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoXBAAAAA0"] [Sun Jul 12 18:13:28.536696 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/help/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP-8gABQDk"] [Sun Jul 12 18:13:28.547256 2026] [core:error] [pid 960377:tid 960569] [client 47.238.121.28:57938] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:13:28.549606 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQtqF_56DeKknhy7sP-8wABQH0"], referer: http://67.222.42.11/babel-plugin-dotenv/test/fixtures/as-alias/.env [Sun Jul 12 18:13:28.553796 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQtqF_56DeKknhy7sP-9AABQH0"], referer: http://67.222.42.11/babel-plugin-dotenv/test/fixtures/filename/.env [Sun Jul 12 18:13:28.571114 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:58924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/infos.php"] [unique_id "alQtqF_56DeKknhy7sP-9gAAASs"] [Sun Jul 12 18:13:28.571126 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:28.571433 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/infos.php"] [unique_id "alQtqF_56DeKknhy7sP-9wABGl4"] [Sun Jul 12 18:13:28.571857 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:28.572945 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/old_phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP--AABGl4"] [Sun Jul 12 18:13:28.573283 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:59970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/old_phpinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoXCQAAADw"] [Sun Jul 12 18:13:28.612165 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:59988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/pinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoXCgAAAGI"] [Sun Jul 12 18:13:28.625422 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/pinfo.php"] [unique_id "alQtqF_56DeKknhy7sP--QABQww"] [Sun Jul 12 18:13:28.647962 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:59998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/server/phpinfo.php"] [unique_id "alQtqBMANaV5i2_BLQoXCwAAAFI"] [Sun Jul 12 18:13:28.678921 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/server/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP-_wABhHM"] [Sun Jul 12 18:13:28.679354 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:59868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/time.php"] [unique_id "alQtqF_56DeKknhy7sP_AAAAASI"] [Sun Jul 12 18:13:28.717828 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/time.php"] [unique_id "alQtqF_56DeKknhy7sP_AQABO0o"] [Sun Jul 12 18:13:28.718942 2026] [security2:error] [pid 967714:tid 967886] [client 168.100.149.52:23154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8385/bargainor/2308_impeccance.jsp"] [unique_id "alQtqF_56DeKknhy7sP_AgAAASk"] [Sun Jul 12 18:13:28.763482 2026] [security2:error] [pid 960377:tid 960530] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtqBMANaV5i2_BLQoXBgAAABY"] [Sun Jul 12 18:13:28.781131 2026] [security2:error] [pid 960377:tid 960617] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZfOTcvNm9kLzQ0NDA5X29k.htm"] [unique_id "alQtqBMANaV5i2_BLQoXDQAAAG0"] [Sun Jul 12 18:13:28.801583 2026] [security2:error] [pid 967714:tid 967958] [client 62.171.167.118:60004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/xampp/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP_BAAAAXE"] [Sun Jul 12 18:13:28.817121 2026] [security2:error] [pid 960377:tid 960584] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtpxMANaV5i2_BLQoW8AAATFU"] [Sun Jul 12 18:13:28.856051 2026] [security2:error] [pid 960377:tid 960619] [client 165.1.78.209:46174] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/hello.world?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "69.89.23.116"] [uri "/hello.world"] [unique_id "alQtqBMANaV5i2_BLQoXEAAAAG8"] [Sun Jul 12 18:13:28.859966 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:40502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/back/xampp/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP_CAABC2o"] [Sun Jul 12 18:13:28.931001 2026] [security2:error] [pid 960377:tid 960497] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/coupon/.env"] [unique_id "alQtqBMANaV5i2_BLQoXEQAAFHY"] [Sun Jul 12 18:13:29.088750 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtg1_56DeKknhy7sP8MAABSF0"], referer: http://67.222.40.58/blog/laravel.log [Sun Jul 12 18:13:29.099274 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtg1_56DeKknhy7sP8LgABSEw"] [Sun Jul 12 18:13:29.182139 2026] [security2:error] [pid 960377:tid 960557] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUcgAAADE"], referer: http://67.222.40.58/client/.git/config [Sun Jul 12 18:13:29.204903 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtlxMANaV5i2_BLQoUmgAAABI"] [Sun Jul 12 18:13:29.233535 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8dwABSGs"], referer: http://67.222.40.58/config/secrets/dev/mandrill_keys.json [Sun Jul 12 18:13:29.235437 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8dgAAAX8"], referer: http://67.222.40.58/conf/dev-application.conf [Sun Jul 12 18:13:29.260079 2026] [security2:error] [pid 960377:tid 960558] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtphMANaV5i2_BLQoWzAAAADI"] [Sun Jul 12 18:13:29.303170 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8iAABSBQ"] [Sun Jul 12 18:13:29.339036 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtpl_56DeKknhy7sP-VQAAAUQ"] [Sun Jul 12 18:13:29.521459 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:29.522149 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:29.551129 2026] [security2:error] [pid 967714:tid 967894] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_EQAAATE"] [Sun Jul 12 18:13:29.706350 2026] [security2:error] [pid 960377:tid 960395] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/telegram-bot/.env"] [unique_id "alQtqRMANaV5i2_BLQoXJQAASxE"] [Sun Jul 12 18:13:29.727880 2026] [security2:error] [pid 960377:tid 960597] [client 74.7.230.8:33822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "justfeelgood.com"] [uri "/index.php"] [unique_id "alQtqRMANaV5i2_BLQoXIwAAWUg"] [Sun Jul 12 18:13:29.727934 2026] [security2:error] [pid 960377:tid 960597] [client 74.7.230.8:33822] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "justfeelgood.com"] [uri "/index.php"] [unique_id "alQtqRMANaV5i2_BLQoXIwAAWUg"] [Sun Jul 12 18:13:29.747989 2026] [security2:error] [pid 960377:tid 960629] [client 165.154.135.215:49000] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/favicon.ico"] [unique_id "alQtqRMANaV5i2_BLQoXJgAAAHk"] [Sun Jul 12 18:13:29.843478 2026] [security2:error] [pid 967714:tid 967904] [client 165.154.135.215:49102] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/robots.txt"] [unique_id "alQtqV_56DeKknhy7sP_OAAAATs"] [Sun Jul 12 18:13:29.846835 2026] [security2:error] [pid 960377:tid 960559] [client 165.154.135.215:49104] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.16.253"] [uri "/sitemap.xml"] [unique_id "alQtqRMANaV5i2_BLQoXJwAAADM"] [Sun Jul 12 18:13:29.964587 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtqRMANaV5i2_BLQoXFwAAAGs"] [Sun Jul 12 18:13:29.964656 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtqRMANaV5i2_BLQoXFwAAAGs"] [Sun Jul 12 18:13:29.966087 2026] [security2:error] [pid 967714:tid 967949] [client 65.21.113.206:58254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZfOTcvNm9kLzQ0NDA5X29k.htm"] [unique_id "alQtqV_56DeKknhy7sP_FQAAAWg"] [Sun Jul 12 18:13:30.022939 2026] [security2:error] [pid 967714:tid 967948] [client 74.7.230.8:33836] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.justfeelgood.com"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_PgABZ0U"], referer: https://justfeelgood.com/robots.txt [Sun Jul 12 18:13:30.050764 2026] [security2:error] [pid 960377:tid 960570] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtqBMANaV5i2_BLQoXEgAAPnE"] [Sun Jul 12 18:13:30.090172 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtl1_56DeKknhy7sP8eAAAAWw"], referer: http://67.222.40.58/config/packages/framework.yaml [Sun Jul 12 18:13:30.100374 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtpl_56DeKknhy7sP-VgAAASM"] [Sun Jul 12 18:13:30.183218 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtpl_56DeKknhy7sP-VwAAAXc"], referer: http://67.222.38.115/Earthfile [Sun Jul 12 18:13:30.185247 2026] [security2:error] [pid 967714:tid 967969] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_PwAAAXw"] [Sun Jul 12 18:13:30.368504 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:30.369024 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:30.659802 2026] [security2:error] [pid 967714:tid 967902] [client 168.100.149.92:40108] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8450/bargainor/2308_gunz.jsp"] [unique_id "alQtql_56DeKknhy7sP_XQAAATk"] [Sun Jul 12 18:13:30.712471 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtql_56DeKknhy7sP_UwAAAVU"] [Sun Jul 12 18:13:30.887437 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api.php.tmp"] [unique_id "alQtql_56DeKknhy7sP_ZAAAAUo"] [Sun Jul 12 18:13:31.008574 2026] [security2:error] [pid 960377:tid 960563] [client 165.1.78.209:46174] ModSecurity: Access denied with code 406 (phase 2). Pattern match "=(?:ogg|tls|ssl|gopher|file|data|php|zlib|zip|glob|s3|phar|rar|s(?:sh2?|cp)|dict|expect|(?:ht|f)tps?)://" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "517"] [id "340165"] [rev "291"] [msg "Atomicorp.com WAF Rules: Uniencoded possible Remote File Injection attempt in URI (AE)"] [data "/?\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [hostname "69.89.23.116"] [uri "/"] [unique_id "alQtqxMANaV5i2_BLQoXPwAAADc"] [Sun Jul 12 18:13:31.039985 2026] [security2:error] [pid 960377:tid 960448] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/etc/"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/etc/aws_credentials.env"] [unique_id "alQtqxMANaV5i2_BLQoXQAAAAUU"] [Sun Jul 12 18:13:31.147815 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtmF_56DeKknhy7sP_GgABSBQ"], referer: http://67.222.40.58/config/settings/mailer_dsn.json [Sun Jul 12 18:13:31.148006 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/config/temp.php"] [unique_id "alQtm1_56DeKknhy7sP_aQABSBQ"] [Sun Jul 12 18:13:31.152211 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/configuration/.env"] [unique_id "alQtnF_56DeKknhy7sP_bAABSBQ"] [Sun Jul 12 18:13:31.156715 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/configuration/.env"] [unique_id "alQtnF_56DeKknhy7sP_bQABSBQ"], referer: http://67.222.40.58/configuration/.env [Sun Jul 12 18:13:31.160575 2026] [security2:error] [pid 960377:tid 960512] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtqhMANaV5i2_BLQoXLgAABGs"] [Sun Jul 12 18:13:31.198521 2026] [security2:error] [pid 960377:tid 960422] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/configuration.orig"] [unique_id "alQtqxMANaV5i2_BLQoXRQAARCs"] [Sun Jul 12 18:13:31.208478 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:31.209067 2026] [authz_core:error] [pid 967714:tid 967945] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:31.343176 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtmF_56DeKknhy7sP_RwABSCE"] [Sun Jul 12 18:13:31.357180 2026] [security2:error] [pid 960377:tid 960475] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sql/transaction.sql"] [unique_id "alQtqxMANaV5i2_BLQoXTQAAAmA"] [Sun Jul 12 18:13:31.760897 2026] [security2:error] [pid 967714:tid 967962] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtq1_56DeKknhy7sP_dgAAAXU"] [Sun Jul 12 18:13:31.901937 2026] [security2:error] [pid 960377:tid 960565] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZicTh3LTE2NTkvNmItMjA4MzcvYnE4dw=="] [unique_id "alQtqxMANaV5i2_BLQoXVwAAADk"] [Sun Jul 12 18:13:32.093020 2026] [security2:error] [pid 960377:tid 960614] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtqxMANaV5i2_BLQoXSQAAamo"] [Sun Jul 12 18:13:32.152831 2026] [authz_core:error] [pid 967714:tid 967955] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:32.153511 2026] [authz_core:error] [pid 967714:tid 967955] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:32.169099 2026] [security2:error] [pid 960377:tid 960554] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtqxMANaV5i2_BLQoXWQAAAC4"] [Sun Jul 12 18:13:32.251986 2026] [security2:error] [pid 960377:tid 960441] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/07-accessing-data/begin/vue-heroes/.env"] [unique_id "alQtrBMANaV5i2_BLQoXXAAAZT4"] [Sun Jul 12 18:13:32.257389 2026] [security2:error] [pid 967714:tid 967764] [remote 57.141.18.119:53082] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQtrF_56DeKknhy7sP_iQABIyY"] [Sun Jul 12 18:13:32.325435 2026] [security2:error] [pid 960377:tid 960447] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/web.config.i18n.ashx"] [unique_id "alQtrBMANaV5i2_BLQoXXQAAT0Q"] [Sun Jul 12 18:13:32.410043 2026] [security2:error] [pid 960377:tid 960482] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/07-accessing-data/end/vue-heroes/.env"] [unique_id "alQtrBMANaV5i2_BLQoXXgAAdmc"] [Sun Jul 12 18:13:32.569223 2026] [security2:error] [pid 960377:tid 960453] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/08-routing/begin/vue-heroes/.env"] [unique_id "alQtrBMANaV5i2_BLQoXYgAAe0o"] [Sun Jul 12 18:13:32.710713 2026] [security2:error] [pid 960377:tid 960538] [client 168.100.149.123:48272] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8515/bargainor/2308_monadically.jsp"] [unique_id "alQtrBMANaV5i2_BLQoXZgAAAB4"] [Sun Jul 12 18:13:32.725600 2026] [security2:error] [pid 967714:tid 967956] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtrF_56DeKknhy7sP_mQAAAW8"] [Sun Jul 12 18:13:32.727982 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/08-routing/end/vue-heroes/.env"] [unique_id "alQtrBMANaV5i2_BLQoXZwAAM3M"] [Sun Jul 12 18:13:32.808227 2026] [security2:error] [pid 967714:tid 967980] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtrF_56DeKknhy7sP_jAAAAYc"] [Sun Jul 12 18:13:32.808303 2026] [security2:error] [pid 967714:tid 967980] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtrF_56DeKknhy7sP_jAAAAYc"] [Sun Jul 12 18:13:32.810855 2026] [security2:error] [pid 967714:tid 967971] [client 65.21.113.206:58264] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZicTh3LTE2NTkvNmItMjA4MzcvYnE4dw=="] [unique_id "alQtrF_56DeKknhy7sP_igAAAX4"] [Sun Jul 12 18:13:32.886998 2026] [security2:error] [pid 960377:tid 960405] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/09-managing-state/begin/vue-heroes/.env"] [unique_id "alQtrBMANaV5i2_BLQoXbwAAbBs"] [Sun Jul 12 18:13:32.919531 2026] [security2:error] [pid 960377:tid 960628] [client 165.1.78.209:46174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.78.1.165.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "69.89.23.116"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "alQtrBMANaV5i2_BLQoXbAAAAHg"] [Sun Jul 12 18:13:32.948342 2026] [authz_core:error] [pid 967714:tid 967891] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:32.949131 2026] [authz_core:error] [pid 967714:tid 967891] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:33.043958 2026] [security2:error] [pid 960377:tid 960443] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/09-managing-state/end/vue-heroes/.env"] [unique_id "alQtrRMANaV5i2_BLQoXcwAAQ0A"] [Sun Jul 12 18:13:33.111825 2026] [security2:error] [pid 967714:tid 967920] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtrF_56DeKknhy7sP_pAAAAUs"] [Sun Jul 12 18:13:33.206899 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtqxMANaV5i2_BLQoXQgAAAFI"], referer: http://67.222.40.58/configuration/.git/config [Sun Jul 12 18:13:33.213540 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/configure.php.orig"] [unique_id "alQtnl_56DeKknhy7sP_qgABSBQ"] [Sun Jul 12 18:13:33.250175 2026] [security2:error] [pid 960377:tid 960572] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtqxMANaV5i2_BLQoXRAAAAEA"], referer: http://67.222.40.58/configs/application.ini [Sun Jul 12 18:13:33.261065 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtqxMANaV5i2_BLQoXQwAAAGI"] [Sun Jul 12 18:13:33.275016 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/content/.env"] [unique_id "alQtnl_56DeKknhy7sP_sQABSEM"] [Sun Jul 12 18:13:33.314114 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/core/.env"] [unique_id "alQtnl_56DeKknhy7sP_sgABSEM"] [Sun Jul 12 18:13:33.318241 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/crm/crm/info.php"] [unique_id "alQtnl_56DeKknhy7sP_twABSDc"] [Sun Jul 12 18:13:33.318518 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/crm/info.php"] [unique_id "alQtnl_56DeKknhy7sP_uAABSDM"] [Sun Jul 12 18:13:33.320215 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/crm/.env"] [unique_id "alQtnl_56DeKknhy7sP_tgABSEc"] [Sun Jul 12 18:13:33.321336 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cp/.env"] [unique_id "alQtnl_56DeKknhy7sP_tQABSGk"] [Sun Jul 12 18:13:33.321341 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cron/services/info.php"] [unique_id "alQtnl_56DeKknhy7sP_ugABSDc"] [Sun Jul 12 18:13:33.322033 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/current/crm/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP_vQABSEc"] [Sun Jul 12 18:13:33.322879 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/counterblockd/.env"] [unique_id "alQtnl_56DeKknhy7sP_tAABSHg"] [Sun Jul 12 18:13:33.322945 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cronlab/.env"] [unique_id "alQtnl_56DeKknhy7sP_uwABSCk"] [Sun Jul 12 18:13:33.324066 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/cron/development/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP_uQABSBA"] [Sun Jul 12 18:13:33.324302 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/current/laravel/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP_vwABSGk"] [Sun Jul 12 18:13:33.324488 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/current/develop/info.php"] [unique_id "alQtnl_56DeKknhy7sP_vgABSHI"] [Sun Jul 12 18:13:33.324646 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dashboard/admin/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP_wwABSCk"] [Sun Jul 12 18:13:33.325818 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dashboard/test.php"] [unique_id "alQtnl_56DeKknhy7sP_xwABSAU"] [Sun Jul 12 18:13:33.326645 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dashboard/phpinfo.php"] [unique_id "alQtnl_56DeKknhy7sP_xQABSGk"] [Sun Jul 12 18:13:33.327225 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/core/persistence/.env"] [unique_id "alQtnl_56DeKknhy7sP_swABSEM"] [Sun Jul 12 18:13:33.328427 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dashboardadmin/info.php"] [unique_id "alQtnl_56DeKknhy7sP_yQABSBA"] [Sun Jul 12 18:13:33.329233 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/database/.env"] [unique_id "alQtnl_56DeKknhy7sP_yAABSAU"] [Sun Jul 12 18:13:33.329938 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/content/.env"] [unique_id "alQtnl_56DeKknhy7sP_ygABSGk"], referer: http://67.222.40.58/content/.env [Sun Jul 12 18:13:33.333593 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/crm/.env"] [unique_id "alQtn1_56DeKknhy7sP_zwABSGk"], referer: http://67.222.40.58/crm/.env [Sun Jul 12 18:13:33.335263 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/default/help/phpinfo.php"] [unique_id "alQtoV_56DeKknhy7sP_1AABSA8"] [Sun Jul 12 18:13:33.336210 2026] [security2:error] [pid 967714:tid 967807] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/dataset1/.env"] [unique_id "alQtn1_56DeKknhy7sP_0QABSFE"] [Sun Jul 12 18:13:33.336363 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/core/persistence/.env"] [unique_id "alQtnl_56DeKknhy7sP_zAABSBA"], referer: http://67.222.40.58/core/persistence/.env [Sun Jul 12 18:13:33.336705 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/helper/info.php"] [unique_id "alQto1_56DeKknhy7sP_1wABSA8"] [Sun Jul 12 18:13:33.337796 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/backup/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP_3gABSBY"] [Sun Jul 12 18:13:33.338132 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/api/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP_3QABSGs"] [Sun Jul 12 18:13:33.338428 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/dev/info.php"] [unique_id "alQtp1_56DeKknhy7sP_4AABSGw"] [Sun Jul 12 18:13:33.338587 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/dashboard/phpinfo.php"] [unique_id "alQtp1_56DeKknhy7sP_4QABSCs"] [Sun Jul 12 18:13:33.338794 2026] [security2:error] [pid 967714:tid 967807] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/laravel/info.php"] [unique_id "alQtpl_56DeKknhy7sP_2gABSFE"] [Sun Jul 12 18:13:33.339317 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/counterblockd/.env"] [unique_id "alQtn1_56DeKknhy7sP_zgABSAU"], referer: http://67.222.40.58/counterblockd/.env [Sun Jul 12 18:13:33.339358 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/infophp.php"] [unique_id "alQtqF_56DeKknhy7sP_5AABSE0"] [Sun Jul 12 18:13:33.339532 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/test.php"] [unique_id "alQtqF_56DeKknhy7sP_5gABSGs"] [Sun Jul 12 18:13:33.339591 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/lara/info.php"] [unique_id "alQto1_56DeKknhy7sP_2AABSEw"] [Sun Jul 12 18:13:33.339896 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/database/.env"] [unique_id "alQtn1_56DeKknhy7sP_0AABSEo"], referer: http://67.222.40.58/database/.env [Sun Jul 12 18:13:33.340453 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/deploy/services/phpinfo.php"] [unique_id "alQtqF_56DeKknhy7sP_5QABSBY"] [Sun Jul 12 18:13:33.342516 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/demo/services/info.php"] [unique_id "alQtp1_56DeKknhy7sP_2wABSBA"] [Sun Jul 12 18:13:33.345261 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/deploy/.env.bak"] [unique_id "alQtp1_56DeKknhy7sP_4gABSFI"], referer: http://67.222.40.58/deploy/.env.bak [Sun Jul 12 18:13:33.345495 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/deploy/.env.bak"] [unique_id "alQtp1_56DeKknhy7sP_3AABSFY"] [Sun Jul 12 18:13:33.350080 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/cp/.env"] [unique_id "alQtn1_56DeKknhy7sP_2QABSGk"], referer: http://67.222.40.58/cp/.env [Sun Jul 12 18:13:33.368554 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/core/.env"] [unique_id "alQtnl_56DeKknhy7sP_ywABSEM"], referer: http://67.222.40.58/core/.env [Sun Jul 12 18:13:33.380585 2026] [security2:error] [pid 960377:tid 960519] [client 2a03:2880:f800:13:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQtrRMANaV5i2_BLQoXewAACzg"] [Sun Jul 12 18:13:33.573231 2026] [security2:error] [pid 967714:tid 967918] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_xAAAAUk"] [Sun Jul 12 18:13:33.730025 2026] [security2:error] [pid 960377:tid 960434] [remote 185.177.72.12:17120] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/dato/.env"] [unique_id "alQtrRMANaV5i2_BLQoXjgAAFDc"] [Sun Jul 12 18:13:33.732017 2026] [authz_core:error] [pid 967714:tid 967954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:33.732529 2026] [authz_core:error] [pid 967714:tid 967954] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:34.040155 2026] [security2:error] [pid 967714:tid 967870] [client 168.100.149.168:58592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8580/bargainor/2308_enhalo.jsp"] [unique_id "alQtrl_56DeKknhy7sMAGgAAARk"] [Sun Jul 12 18:13:34.081261 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.12:17120] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/post-new.php"] [unique_id "alQtrRMANaV5i2_BLQoXkAAAVgo"] [Sun Jul 12 18:13:34.164905 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtrRMANaV5i2_BLQoXdgAARjE"] [Sun Jul 12 18:13:34.206101 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:41278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dev/help/phpinfo.php"] [unique_id "alQtrl_56DeKknhy7sMAIgAAATg"] [Sun Jul 12 18:13:34.209488 2026] [security2:error] [pid 960377:tid 960546] [client 114.119.132.101:58717] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "hsaconnect.com"] [uri "/hsa-health-savings-accounts/hsa.php"] [unique_id "alQtrhMANaV5i2_BLQoXlgAAACY"], referer: http://hsaconnect.com/north-carolina-hsa-individual-family-health-insurance-quotes [Sun Jul 12 18:13:34.254261 2026] [security2:error] [pid 967714:tid 967937] [client 94.187.171.125:55187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtrl_56DeKknhy7sMAKQAAAVw"] [Sun Jul 12 18:13:34.254465 2026] [security2:error] [pid 967714:tid 967937] [client 94.187.171.125:55187] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtrl_56DeKknhy7sMAKQAAAVw"] [Sun Jul 12 18:13:34.332054 2026] [security2:error] [pid 960377:tid 960409] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/3-sequelize/final/.env"] [unique_id "alQtrhMANaV5i2_BLQoXnQAAVB8"] [Sun Jul 12 18:13:34.429028 2026] [security2:error] [pid 967714:tid 967859] [client 20.210.108.71:62634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/style-engine.php"] [unique_id "alQtrl_56DeKknhy7sMALgAAAQ4"], referer: binance.com [Sun Jul 12 18:13:34.490772 2026] [security2:error] [pid 960377:tid 960481] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/31_structure_tests/.env"] [unique_id "alQtrhMANaV5i2_BLQoXowAAIWY"] [Sun Jul 12 18:13:34.545024 2026] [authz_core:error] [pid 967714:tid 967966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:34.545830 2026] [authz_core:error] [pid 967714:tid 967966] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:34.550386 2026] [security2:error] [pid 967714:tid 967865] [client 34.60.131.171:33728] ModSecurity: Warning. Pattern match "^\\\\/$" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1450"] [id "9011111"] [msg "SQUID data collection"] [hostname "www.the-hospitality-center.com"] [uri "/"] [unique_id "alQtrl_56DeKknhy7sMAMAAAARQ"] [Sun Jul 12 18:13:34.561163 2026] [security2:error] [pid 960377:tid 960381] [remote 185.177.72.12:34976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQtrhMANaV5i2_BLQoXpAAAfwM"] [Sun Jul 12 18:13:34.595956 2026] [autoindex:error] [pid 967714:tid 967974] [client 65.49.1.108:0] AH01276: Cannot serve directory /home4/airqtool/public_html/premiumscentingtools/: No matching DirectoryIndex (index.php,index.html,/index.php) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:13:34.602545 2026] [core:error] [pid 967714:tid 967974] [client 65.49.1.108:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:13:34.697227 2026] [security2:error] [pid 967714:tid 967971] [client 83.36.146.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtrl_56DeKknhy7sMAKwAAAX4"] [Sun Jul 12 18:13:35.048404 2026] [security2:error] [pid 960377:tid 960575] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZlbXNvbl8xMzAyLzZlLzUyODAxL2U=.html"] [unique_id "alQtrxMANaV5i2_BLQoXqgAAAEM"] [Sun Jul 12 18:13:35.110796 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtq1_56DeKknhy7sP_cwAAAYQ"] [Sun Jul 12 18:13:35.178612 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dev/help/phpinfo.php"] [unique_id "alQtr1_56DeKknhy7sMAPwABSEA"] [Sun Jul 12 18:13:35.380112 2026] [security2:error] [pid 967714:tid 967909] [client 103.221.220.62:53166] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/api/.env"] [unique_id "alQtr1_56DeKknhy7sMASAAAAUA"] [Sun Jul 12 18:13:35.388951 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:35.389488 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:35.437199 2026] [security2:error] [pid 967714:tid 967877] [client 62.171.167.118:51130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dev/pinfo.php"] [unique_id "alQtr1_56DeKknhy7sMASwAAASA"] [Sun Jul 12 18:13:35.468210 2026] [security2:error] [pid 967714:tid 967954] [client 103.221.220.62:53174] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/.env"] [unique_id "alQtr1_56DeKknhy7sMATAAAAW0"] [Sun Jul 12 18:13:35.471189 2026] [security2:error] [pid 967714:tid 967870] [client 103.221.220.62:53198] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/new/.env"] [unique_id "alQtr1_56DeKknhy7sMATQAAARk"] [Sun Jul 12 18:13:35.472482 2026] [security2:error] [pid 967714:tid 967855] [client 103.221.220.62:53160] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/bank/.env"] [unique_id "alQtr1_56DeKknhy7sMATwAAAQo"] [Sun Jul 12 18:13:35.476920 2026] [cgid:error] [pid 967714:tid 967924] [client 199.45.154.127:0] AH01265: stderr from /home4/globalf1/public_html/tigma-roses/cgi-bin/: attempt to invoke directory as script, referer: http://tigma-roses.globalflower.net:80/cgi-bin [Sun Jul 12 18:13:35.490191 2026] [security2:error] [pid 960377:tid 960511] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtrxMANaV5i2_BLQoXrQAAAAM"] [Sun Jul 12 18:13:35.664243 2026] [security2:error] [pid 960377:tid 960529] [client 151.243.11.245:49084] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "mail.mail.brisbanebreastimplants.com.au"] [uri "/400.shtml"] [unique_id "alQtrxMANaV5i2_BLQoXuAAAABU"] [Sun Jul 12 18:13:35.767505 2026] [security2:error] [pid 960377:tid 960620] [client 103.221.220.62:53196] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/backend/.env"] [unique_id "alQtrxMANaV5i2_BLQoXugAAAHA"] [Sun Jul 12 18:13:35.768705 2026] [security2:error] [pid 967714:tid 967972] [client 103.221.220.62:53180] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/core/.env"] [unique_id "alQtr1_56DeKknhy7sMAWAAAAX8"] [Sun Jul 12 18:13:35.772475 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backend/.env.bak"] [unique_id "alQtrxMANaV5i2_BLQoXvAAAHFA"] [Sun Jul 12 18:13:35.772800 2026] [security2:error] [pid 960377:tid 960385] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backend/.env.bak"] [unique_id "alQtrxMANaV5i2_BLQoXuwAAHAc"], referer: http://67.222.42.11/backend/.env.bak [Sun Jul 12 18:13:35.815345 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/dev/pinfo.php"] [unique_id "alQtr1_56DeKknhy7sMAXAABSGE"] [Sun Jul 12 18:13:35.823948 2026] [security2:error] [pid 960377:tid 960399] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/firewall/.env"] [unique_id "alQtrxMANaV5i2_BLQoXwQAAOxU"] [Sun Jul 12 18:13:35.888430 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/develop/info.php"] [unique_id "alQtr1_56DeKknhy7sMAXgABSE8"] [Sun Jul 12 18:13:35.983595 2026] [security2:error] [pid 967714:tid 967858] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtr1_56DeKknhy7sMAVAAAAQ0"] [Sun Jul 12 18:13:35.983683 2026] [security2:error] [pid 967714:tid 967858] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtr1_56DeKknhy7sMAVAAAAQ0"] [Sun Jul 12 18:13:35.984949 2026] [security2:error] [pid 967714:tid 967937] [client 65.21.113.206:56982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZlbXNvbl8xMzAyLzZlLzUyODAxL2U=.html"] [unique_id "alQtr1_56DeKknhy7sMAUgAAAVw"] [Sun Jul 12 18:13:36.021960 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:51144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/develop/info.php"] [unique_id "alQtsBMANaV5i2_BLQoXxgAAAFc"] [Sun Jul 12 18:13:36.049120 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/developer/.env"] [unique_id "alQtsF_56DeKknhy7sMAagABSDg"] [Sun Jul 12 18:13:36.158138 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_HAAAAUw"], referer: http://67.222.38.115/ecp/ [Sun Jul 12 18:13:36.165271 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/developer/.env"] [unique_id "alQtsF_56DeKknhy7sMAbQABSBI"], referer: http://67.222.40.58/developer/.env [Sun Jul 12 18:13:36.182142 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:59980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/helper/info.php"] [unique_id "alQtsF_56DeKknhy7sMAbgAAATA"] [Sun Jul 12 18:13:36.188330 2026] [security2:error] [pid 960377:tid 960387] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/helper/info.php"] [unique_id "alQtsBMANaV5i2_BLQoXzAAAKQk"] [Sun Jul 12 18:13:36.188461 2026] [security2:error] [pid 960377:tid 960550] [client 47.238.121.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqBMANaV5i2_BLQoXCAAAACo"] [Sun Jul 12 18:13:36.201547 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqhMANaV5i2_BLQoXKwAAACc"] [Sun Jul 12 18:13:36.211623 2026] [authz_core:error] [pid 960377:tid 960539] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:36.212293 2026] [authz_core:error] [pid 960377:tid 960539] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:36.215772 2026] [security2:error] [pid 960377:tid 960424] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backend/src/.env"] [unique_id "alQtsBMANaV5i2_BLQoX0gAAEy0"] [Sun Jul 12 18:13:36.226718 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_JQAAATM"] [Sun Jul 12 18:13:36.259459 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/developer/.env.bak"] [unique_id "alQtsF_56DeKknhy7sMAcwABSFs"] [Sun Jul 12 18:13:36.274865 2026] [security2:error] [pid 960377:tid 960407] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/temp.php"] [unique_id "alQtsBMANaV5i2_BLQoX1QAAbx0"] [Sun Jul 12 18:13:36.309012 2026] [security2:error] [pid 960377:tid 960498] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/xampp/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX1wAAVHc"] [Sun Jul 12 18:13:36.341829 2026] [security2:error] [pid 960377:tid 960523] [client 62.171.167.118:54772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/xampp/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX2wAAAA8"] [Sun Jul 12 18:13:36.342124 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:54782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backend/temp.php"] [unique_id "alQtsBMANaV5i2_BLQoX3AAAAHs"] [Sun Jul 12 18:13:36.344506 2026] [security2:error] [pid 960377:tid 960394] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backendfinaltest/.env"] [unique_id "alQtsBMANaV5i2_BLQoX2QAAdhA"] [Sun Jul 12 18:13:36.345264 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/developer/.env.bak"] [unique_id "alQtsF_56DeKknhy7sMAdgABSAE"], referer: http://67.222.40.58/developer/.env.bak [Sun Jul 12 18:13:36.356746 2026] [security2:error] [pid 967714:tid 967898] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsF_56DeKknhy7sMAZwAAATU"] [Sun Jul 12 18:13:36.364368 2026] [security2:error] [pid 960377:tid 960396] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backend/src/.env"] [unique_id "alQtsBMANaV5i2_BLQoX3QAAZhI"], referer: http://67.222.42.11/backend/src/.env [Sun Jul 12 18:13:36.373888 2026] [security2:error] [pid 960377:tid 960597] [client 103.221.220.62:53188] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/app/.env"] [unique_id "alQtsBMANaV5i2_BLQoX3gAAAFk"] [Sun Jul 12 18:13:36.375885 2026] [security2:error] [pid 967714:tid 967916] [client 103.221.220.62:53200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "bellesprit.com"] [uri "/member/.env"] [unique_id "alQtsF_56DeKknhy7sMAegAAAUc"] [Sun Jul 12 18:13:36.376605 2026] [security2:error] [pid 960377:tid 960402] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backup/.env"] [unique_id "alQtsBMANaV5i2_BLQoX3wAATxg"] [Sun Jul 12 18:13:36.511421 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backendfinaltest/.env"] [unique_id "alQtsBMANaV5i2_BLQoX6wAAQXo"], referer: http://67.222.42.11/backendfinaltest/.env [Sun Jul 12 18:13:36.512640 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:54792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/backend/info.php"] [unique_id "alQtsF_56DeKknhy7sMAfwAAAWA"] [Sun Jul 12 18:13:36.513747 2026] [security2:error] [pid 960377:tid 960440] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/backend/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX7AAAQT0"] [Sun Jul 12 18:13:36.526086 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:54844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/help/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX7QAAAE0"] [Sun Jul 12 18:13:36.563818 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:54806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/helper/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX8AAAAGw"] [Sun Jul 12 18:13:36.564946 2026] [security2:error] [pid 960377:tid 960418] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/help/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX8QAACCc"] [Sun Jul 12 18:13:36.565385 2026] [security2:error] [pid 960377:tid 960468] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/helper/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX8wAACFk"] [Sun Jul 12 18:13:36.566693 2026] [security2:error] [pid 960377:tid 960414] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/backup/.env"] [unique_id "alQtsBMANaV5i2_BLQoX8gAACCM"], referer: http://67.222.42.11/backup/.env [Sun Jul 12 18:13:36.584174 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:54818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX9AAAAGg"] [Sun Jul 12 18:13:36.589080 2026] [security2:error] [pid 960377:tid 960483] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX9gAAeGg"] [Sun Jul 12 18:13:36.604369 2026] [security2:error] [pid 960377:tid 960401] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/lara/info.php"] [unique_id "alQtsBMANaV5i2_BLQoX9wAAERc"] [Sun Jul 12 18:13:36.623515 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:54848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/lara/info.php"] [unique_id "alQtsF_56DeKknhy7sMAhAAAAQ8"] [Sun Jul 12 18:13:36.639358 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:54764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/lara/phpinfo.php"] [unique_id "alQtsF_56DeKknhy7sMAhQAAAX8"] [Sun Jul 12 18:13:36.643274 2026] [security2:error] [pid 960377:tid 960508] [client 40.223.163.214:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoX1AAAAAA"] [Sun Jul 12 18:13:36.649819 2026] [security2:error] [pid 960377:tid 960404] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/lara/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX-wAAcho"] [Sun Jul 12 18:13:36.681001 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:54842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/laravel/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoX_gAAADw"] [Sun Jul 12 18:13:36.682354 2026] [security2:error] [pid 967714:tid 967971] [client 168.100.149.37:44932] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8645/bargainor/2308_metalogical.jsp"] [unique_id "alQtsF_56DeKknhy7sMAhwAAAX4"] [Sun Jul 12 18:13:36.706538 2026] [security2:error] [pid 960377:tid 960413] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/laravel/phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoYAwAAICI"] [Sun Jul 12 18:13:36.711930 2026] [security2:error] [pid 960377:tid 960591] [client 62.171.167.118:54864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/linusadmin-phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoYBAAAAFM"] [Sun Jul 12 18:13:36.751770 2026] [security2:error] [pid 960377:tid 960471] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/linusadmin-phpinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoYCAAAMFw"] [Sun Jul 12 18:13:36.767091 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:54880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/pinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoYCwAAAA4"] [Sun Jul 12 18:13:36.784386 2026] [security2:error] [pid 960377:tid 960487] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/backup/pinfo.php"] [unique_id "alQtsBMANaV5i2_BLQoYDQAAB2w"] [Sun Jul 12 18:13:36.790098 2026] [security2:error] [pid 960377:tid 960469] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/base/.env"] [unique_id "alQtsBMANaV5i2_BLQoYDgAAB1o"] [Sun Jul 12 18:13:36.801561 2026] [security2:error] [pid 967714:tid 967878] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsF_56DeKknhy7sMAgQAAASE"] [Sun Jul 12 18:13:36.846070 2026] [security2:error] [pid 960377:tid 960489] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/base_dir/.env"] [unique_id "alQtsBMANaV5i2_BLQoYEwAAO24"] [Sun Jul 12 18:13:36.870724 2026] [security2:error] [pid 967714:tid 967905] [client 125.167.21.72:62580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtsF_56DeKknhy7sMAkgAAATw"] [Sun Jul 12 18:13:36.871072 2026] [security2:error] [pid 967714:tid 967905] [client 125.167.21.72:62580] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtsF_56DeKknhy7sMAkgAAATw"] [Sun Jul 12 18:13:36.872266 2026] [security2:error] [pid 960377:tid 960436] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/basic-network/.env"] [unique_id "alQtsBMANaV5i2_BLQoYFwAAejk"] [Sun Jul 12 18:13:36.936380 2026] [security2:error] [pid 960377:tid 960480] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/base/.env"] [unique_id "alQtsBMANaV5i2_BLQoYIQAALmU"], referer: http://67.222.42.11/base/.env [Sun Jul 12 18:13:36.970045 2026] [security2:error] [pid 960377:tid 960511] [client 24.203.79.110:54758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtsBMANaV5i2_BLQoYIwAAAAM"] [Sun Jul 12 18:13:36.970318 2026] [security2:error] [pid 960377:tid 960511] [client 24.203.79.110:54758] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtsBMANaV5i2_BLQoYIwAAAAM"] [Sun Jul 12 18:13:37.027595 2026] [authz_core:error] [pid 960377:tid 960618] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:37.028111 2026] [authz_core:error] [pid 960377:tid 960618] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:37.036593 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:54916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/backend/phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYLQAAAHY"] [Sun Jul 12 18:13:37.046778 2026] [security2:error] [pid 960377:tid 960497] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/base_dir/.env"] [unique_id "alQtsRMANaV5i2_BLQoYLgAAZnY"], referer: http://67.222.42.11/base_dir/.env [Sun Jul 12 18:13:37.056844 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:54886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/infos.php"] [unique_id "alQtsRMANaV5i2_BLQoYLwAAAB8"] [Sun Jul 12 18:13:37.057611 2026] [security2:error] [pid 960377:tid 960476] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/backend/phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYMAAAT2E"] [Sun Jul 12 18:13:37.065769 2026] [security2:error] [pid 960377:tid 960499] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/infos.php"] [unique_id "alQtsRMANaV5i2_BLQoYMQAAc3g"] [Sun Jul 12 18:13:37.069651 2026] [security2:error] [pid 960377:tid 960484] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/linusadmin-phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYMgAAeWk"] [Sun Jul 12 18:13:37.071030 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:54936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/linusadmin-phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYMwAAAHM"] [Sun Jul 12 18:13:37.078820 2026] [security2:error] [pid 960377:tid 960538] [client 62.171.167.118:54834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/old_phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYNAAAAB4"] [Sun Jul 12 18:13:37.092513 2026] [security2:error] [pid 960377:tid 960391] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/old_phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYNgAAeQ0"] [Sun Jul 12 18:13:37.093918 2026] [security2:error] [pid 960377:tid 960613] [client 62.171.167.118:54924] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/services/info.php"] [unique_id "alQtsRMANaV5i2_BLQoYNwAAAGk"] [Sun Jul 12 18:13:37.102089 2026] [security2:error] [pid 960377:tid 960457] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/basic-network/.env"] [unique_id "alQtsRMANaV5i2_BLQoYNQAAeU4"], referer: http://67.222.42.11/basic-network/.env [Sun Jul 12 18:13:37.108808 2026] [security2:error] [pid 960377:tid 960395] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/services/info.php"] [unique_id "alQtsRMANaV5i2_BLQoYOAAAfxE"] [Sun Jul 12 18:13:37.136995 2026] [security2:error] [pid 960377:tid 960451] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/temp.php"] [unique_id "alQtsRMANaV5i2_BLQoYOQAAF0g"] [Sun Jul 12 18:13:37.137802 2026] [security2:error] [pid 960377:tid 960555] [client 62.171.167.118:54894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/beta/temp.php"] [unique_id "alQtsRMANaV5i2_BLQoYOwAAAC8"] [Sun Jul 12 18:13:37.194944 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqRMANaV5i2_BLQoXIgAAAEo"], referer: http://67.222.38.115/emqx/dashboard/ [Sun Jul 12 18:13:37.227397 2026] [core:error] [pid 960377:tid 960597] [client 47.238.121.28:45056] AH10244: invalid URI path (/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh) [Sun Jul 12 18:13:37.238308 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_JgAAAVI"], referer: http://67.222.38.115/elmah.axd [Sun Jul 12 18:13:37.241065 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_KAAAAV0"] [Sun Jul 12 18:13:37.254350 2026] [security2:error] [pid 960377:tid 960486] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/bookchain-client/.env"] [unique_id "alQtsRMANaV5i2_BLQoYRgAAQ2s"] [Sun Jul 12 18:13:37.279641 2026] [security2:error] [pid 960377:tid 960422] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/bootstrap/.env"] [unique_id "alQtsRMANaV5i2_BLQoYSgAAQCs"] [Sun Jul 12 18:13:37.282563 2026] [security2:error] [pid 960377:tid 960427] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/develop/info.php"] [unique_id "alQtsRMANaV5i2_BLQoYSwAAQDA"] [Sun Jul 12 18:13:37.289065 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqV_56DeKknhy7sP_KQAAAVQ"], referer: http://67.222.38.115/emqx/api/v5/ [Sun Jul 12 18:13:37.326111 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtqhMANaV5i2_BLQoXMAAAADY"] [Sun Jul 12 18:13:37.337501 2026] [security2:error] [pid 960377:tid 960383] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/infos.php"] [unique_id "alQtsRMANaV5i2_BLQoYUAAABAU"] [Sun Jul 12 18:13:37.371368 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoYKgAAAHs"] [Sun Jul 12 18:13:37.372356 2026] [security2:error] [pid 967714:tid 967956] [client 62.171.167.118:54942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/develop/info.php"] [unique_id "alQtsV_56DeKknhy7sMAnwAAAW8"] [Sun Jul 12 18:13:37.383201 2026] [security2:error] [pid 967714:tid 967883] [client 62.171.167.118:54950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/infos.php"] [unique_id "alQtsV_56DeKknhy7sMAoAAAASY"] [Sun Jul 12 18:13:37.398436 2026] [security2:error] [pid 960377:tid 960633] [client 62.171.167.118:54938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/old_phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYVQAAAH0"] [Sun Jul 12 18:13:37.459541 2026] [security2:error] [pid 960377:tid 960433] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/old_phpinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYVwAANTY"] [Sun Jul 12 18:13:37.461523 2026] [security2:error] [pid 960377:tid 960604] [client 62.171.167.118:54976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/php-info.php"] [unique_id "alQtsRMANaV5i2_BLQoYWAAAAGA"] [Sun Jul 12 18:13:37.473379 2026] [security2:error] [pid 960377:tid 960491] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/bookchain-client/.env"] [unique_id "alQtsRMANaV5i2_BLQoYWQAAXHA"], referer: http://67.222.42.11/bookchain-client/.env [Sun Jul 12 18:13:37.498815 2026] [security2:error] [pid 960377:tid 960384] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/bootstrap/.env"] [unique_id "alQtsRMANaV5i2_BLQoYWgAAOwY"], referer: http://67.222.42.11/bootstrap/.env [Sun Jul 12 18:13:37.507963 2026] [security2:error] [pid 960377:tid 960485] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/php-info.php"] [unique_id "alQtsRMANaV5i2_BLQoYWwAAFGo"] [Sun Jul 12 18:13:37.583333 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:54994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/pinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYYgAAACc"] [Sun Jul 12 18:13:37.594572 2026] [security2:error] [pid 960377:tid 960535] [client 114.119.150.154:49259] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bhcfe.org"] [uri "/testimonial/ymca-rapid-city/"] [unique_id "alQtsRMANaV5i2_BLQoYZAAAABs"], referer: https://www.bhcfe.org/testimonial-category/our-stories/page/3 [Sun Jul 12 18:13:37.653034 2026] [proxy:error] [pid 967714:tid 967952] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:37.653274 2026] [proxy_http:error] [pid 967714:tid 967952] [client 134.209.206.189:43128] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:37.657478 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/development/.env.bak"] [unique_id "alQtsV_56DeKknhy7sMApwABSC0"], referer: http://67.222.40.58/development/.env.bak [Sun Jul 12 18:13:37.657864 2026] [proxy:error] [pid 967714:tid 967952] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:37.658098 2026] [proxy_http:error] [pid 967714:tid 967952] [client 134.209.206.189:43128] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:37.676306 2026] [security2:error] [pid 960377:tid 960389] [remote 62.171.167.118:43556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/pinfo.php"] [unique_id "alQtsRMANaV5i2_BLQoYaAAALgs"] [Sun Jul 12 18:13:37.794921 2026] [security2:error] [pid 960377:tid 960546] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsRMANaV5i2_BLQoYYAAAACY"] [Sun Jul 12 18:13:37.811338 2026] [proxy:warn] [pid 967714:tid 967954] [client 18.116.101.220:21212] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:13:37.811416 2026] [proxy:error] [pid 967714:tid 967954] (70014)End of file found: [client 18.116.101.220:21212] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 18.116.101.220 () [Sun Jul 12 18:13:37.943344 2026] [authz_core:error] [pid 960377:tid 960623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:37.943908 2026] [authz_core:error] [pid 960377:tid 960623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:37.954973 2026] [security2:error] [pid 967714:tid 967982] [client 202.165.85.60:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "themarkberman.com"] [uri "/index.php"] [unique_id "alQtsF_56DeKknhy7sMAdQAAAYk"] [Sun Jul 12 18:13:37.966451 2026] [proxy:error] [pid 967714:tid 967916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:37.966676 2026] [proxy_http:error] [pid 967714:tid 967916] [client 134.209.206.189:43130] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.hanoverhumanesociety.com/ [Sun Jul 12 18:13:37.968586 2026] [proxy:error] [pid 967714:tid 967916] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:37.968779 2026] [proxy_http:error] [pid 967714:tid 967916] [client 134.209.206.189:43130] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.hanoverhumanesociety.com/ [Sun Jul 12 18:13:38.006795 2026] [security2:error] [pid 967714:tid 967855] [client 114.119.145.22:33613] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "cecillinois.org"] [uri "/turnweb/library/site/templates/html/footer.php"] [unique_id "alQtsV_56DeKknhy7sMArAAAAQo"], referer: http://cecillinois.org/turnweb/library/site/templates/html?C=M%3BO%3DA [Sun Jul 12 18:13:38.118254 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/development/.env.bak"] [unique_id "alQtsl_56DeKknhy7sMAswABSHY"] [Sun Jul 12 18:13:38.139894 2026] [security2:error] [pid 967714:tid 967869] [client 34.11.8.3:52563] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "klvance.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQtsl_56DeKknhy7sMAtgAAARg"] [Sun Jul 12 18:13:38.338201 2026] [security2:error] [pid 967714:tid 967920] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsV_56DeKknhy7sMAsQAAAUs"] [Sun Jul 12 18:13:38.521423 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/s-with-me-front/.env"] [unique_id "alQtshMANaV5i2_BLQoYgAAAI3M"] [Sun Jul 12 18:13:38.559743 2026] [security2:error] [pid 967714:tid 967942] [client 114.119.128.19:53997] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cecweb.org"] [uri "/wp-content/uploads/2017/09/"] [unique_id "alQtsl_56DeKknhy7sMAzQAAAWE"], referer: https://www.cecweb.org/wp-content/uploads/2017/09/?C=N%3BO%3DD [Sun Jul 12 18:13:38.602203 2026] [proxy:error] [pid 967714:tid 967981] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:38.602747 2026] [proxy_http:error] [pid 967714:tid 967981] [client 134.209.206.189:55776] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:38.607984 2026] [proxy:error] [pid 967714:tid 967981] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:38.608538 2026] [proxy_http:error] [pid 967714:tid 967981] [client 134.209.206.189:55776] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:38.674528 2026] [security2:error] [pid 960377:tid 960533] [client 168.100.149.50:44794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8710/bargainor/2308_psychoreflex.jsp"] [unique_id "alQtshMANaV5i2_BLQoYhgAAABk"] [Sun Jul 12 18:13:38.694231 2026] [security2:error] [pid 960377:tid 960405] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rbac/.env"] [unique_id "alQtshMANaV5i2_BLQoYiAAAUxs"] [Sun Jul 12 18:13:38.815332 2026] [authz_core:error] [pid 967714:tid 967922] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:38.815859 2026] [authz_core:error] [pid 967714:tid 967922] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:39.033585 2026] [security2:error] [pid 960377:tid 960567] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZlcmg0LTQ1MjAvNmUtMzM1NDkvZXJoNA=="] [unique_id "alQtsxMANaV5i2_BLQoYjwAAADs"] [Sun Jul 12 18:13:39.256536 2026] [security2:error] [pid 967714:tid 967924] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtsl_56DeKknhy7sMA2QAAAU8"] [Sun Jul 12 18:13:39.426400 2026] [security2:error] [pid 960377:tid 960500] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sTrIpE/.eNv"] [unique_id "alQtsxMANaV5i2_BLQoYlQAATnk"] [Sun Jul 12 18:13:39.434079 2026] [security2:error] [pid 960377:tid 960605] [client 47.238.121.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtsRMANaV5i2_BLQoYTAAAAGE"] [Sun Jul 12 18:13:39.436490 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtsV_56DeKknhy7sMAnQAAAXw"], referer: http://67.222.38.115/engine-rest/engine/default/process-definition [Sun Jul 12 18:13:39.446531 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtsRMANaV5i2_BLQoYVAAAAGc"], referer: http://67.222.38.115/engine-rest/engine/default/user [Sun Jul 12 18:13:39.678362 2026] [security2:error] [pid 960377:tid 960562] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtshMANaV5i2_BLQoYfgAAADY"] [Sun Jul 12 18:13:39.685753 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:39.686492 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:39.837108 2026] [security2:error] [pid 967714:tid 967942] [client 20.210.108.71:56479] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/template-canvas.php"] [unique_id "alQts1_56DeKknhy7sMA9wAAAWE"], referer: binance.com [Sun Jul 12 18:13:39.887032 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQts1_56DeKknhy7sMA9AAAAQ0"] [Sun Jul 12 18:13:39.947788 2026] [security2:error] [pid 967714:tid 967973] [client 67.222.60.87:21898] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQts1_56DeKknhy7sMA-gAAAYA"] [Sun Jul 12 18:13:39.947857 2026] [security2:error] [pid 967714:tid 967973] [client 67.222.60.87:21898] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQts1_56DeKknhy7sMA-gAAAYA"] [Sun Jul 12 18:13:40.046410 2026] [security2:error] [pid 960377:tid 960539] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtsxMANaV5i2_BLQoYnQAAAB8"] [Sun Jul 12 18:13:40.046488 2026] [security2:error] [pid 960377:tid 960539] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtsxMANaV5i2_BLQoYnQAAAB8"] [Sun Jul 12 18:13:40.047589 2026] [security2:error] [pid 960377:tid 960523] [client 65.21.113.206:56988] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZlcmg0LTQ1MjAvNmUtMzM1NDkvZXJoNA=="] [unique_id "alQtsxMANaV5i2_BLQoYmwAAAA8"] [Sun Jul 12 18:13:40.272015 2026] [security2:error] [pid 960377:tid 960620] [client 74.7.244.44:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "wsbs.sheckman.com"] [uri "/index.php"] [unique_id "alQtsRMANaV5i2_BLQoYZQAAAHA"] [Sun Jul 12 18:13:40.274221 2026] [security2:error] [pid 960377:tid 960510] [client 74.7.244.44:57404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "wsbs.sheckman.com"] [uri "/robots.txt"] [unique_id "alQtsRMANaV5i2_BLQoYYQAAAj4"] [Sun Jul 12 18:13:40.392585 2026] [cgid:error] [pid 967714:tid 967857] [client 202.46.62.24:2032] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/finder-window-clings-stock-p-863.html?osCsid=6eiu5j4nuq6p9v9j4ol7jgsjo4 [Sun Jul 12 18:13:40.429586 2026] [security2:error] [pid 967714:tid 967877] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQttF_56DeKknhy7sMA-wAAASA"] [Sun Jul 12 18:13:40.490005 2026] [security2:error] [pid 960377:tid 960568] [client 114.119.146.109:24741] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "stage1music.com"] [uri "/product/boss-ph-3-phase-shifter-pedal/"] [unique_id "alQttBMANaV5i2_BLQoYrAAAADw"], referer: https://stage1music.com/product/boss-ph-3-phase-shifter-pedal/ [Sun Jul 12 18:13:40.647215 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:40.647756 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:40.659338 2026] [security2:error] [pid 967714:tid 967947] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtsl_56DeKknhy7sMA3gAAAWY"] [Sun Jul 12 18:13:40.729655 2026] [security2:error] [pid 960377:tid 960519] [client 168.100.149.82:51148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8775/bargainor/2308_mailable.jsp"] [unique_id "alQttBMANaV5i2_BLQoYtAAAAAs"] [Sun Jul 12 18:13:40.870134 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/app/.env"] [unique_id "alQttF_56DeKknhy7sMBGQABSDY"], referer: http://67.222.40.58/docker/app/.env [Sun Jul 12 18:13:40.894507 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQttF_56DeKknhy7sMBFQAAATc"] [Sun Jul 12 18:13:41.069350 2026] [security2:error] [pid 967714:tid 967911] [client 114.119.154.11:20707] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "idreamofjeannemarie.com"] [uri "/tutorial-on-the-en-forreau-dress-pattern-pleats-by-thimbles-and-acorns/"] [unique_id "alQttV_56DeKknhy7sMBIQAAAUI"], referer: https://www.idreamofjeannemarie.com/cabin-fever-disco-fever-spring-fever-scarlet-fever-dolly-fever [Sun Jul 12 18:13:41.239014 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtsxMANaV5i2_BLQoYlwAAAD0"] [Sun Jul 12 18:13:41.282267 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtsxMANaV5i2_BLQoYmQAAAHY"] [Sun Jul 12 18:13:41.363295 2026] [security2:error] [pid 967714:tid 967952] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQttV_56DeKknhy7sMBIgAAAWs"] [Sun Jul 12 18:13:41.463683 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:41.464177 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:41.589603 2026] [security2:error] [pid 960377:tid 960410] [remote 47.128.117.32:17394] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "2nd2nunnsports.com"] [uri "/robots.txt"] [unique_id "alQttRMANaV5i2_BLQoYwQAAByA"] [Sun Jul 12 18:13:41.782169 2026] [security2:error] [pid 967714:tid 967938] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQttV_56DeKknhy7sMBLgAAAV0"] [Sun Jul 12 18:13:41.899647 2026] [security2:error] [pid 960377:tid 960629] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZtLzM0MzAzLzZtLzc4NTUvbWx0.asp"] [unique_id "alQttRMANaV5i2_BLQoYwwAAAHk"] [Sun Jul 12 18:13:41.952656 2026] [security2:error] [pid 960377:tid 960425] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/password.php.old"] [unique_id "alQttRMANaV5i2_BLQoYxAAAHi4"] [Sun Jul 12 18:13:42.187262 2026] [proxy:error] [pid 960377:tid 960594] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:42.187413 2026] [proxy_http:error] [pid 960377:tid 960594] [client 134.209.206.189:55878] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcalendars.hanoverhumanesociety.com/ [Sun Jul 12 18:13:42.189492 2026] [proxy:error] [pid 960377:tid 960594] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:42.189750 2026] [proxy_http:error] [pid 960377:tid 960594] [client 134.209.206.189:55878] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: https://cpcalendars.hanoverhumanesociety.com/ [Sun Jul 12 18:13:42.285575 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:42.286272 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:42.347014 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttV_56DeKknhy7sMBKAAAARU"] [Sun Jul 12 18:13:42.450335 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttV_56DeKknhy7sMBKwAAATk"], referer: http://67.222.38.115/examples/websocket/index.xhtml [Sun Jul 12 18:13:42.455139 2026] [security2:error] [pid 967714:tid 967887] [client 34.11.8.3:61645] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.8.11.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "klvance.org"] [uri "/xmlrpc.php"] [unique_id "alQttl_56DeKknhy7sMBRAAAASo"] [Sun Jul 12 18:13:42.455426 2026] [security2:error] [pid 967714:tid 967887] [client 34.11.8.3:61645] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "klvance.org"] [uri "/xmlrpc.php"] [unique_id "alQttl_56DeKknhy7sMBRAAAASo"] [Sun Jul 12 18:13:42.467236 2026] [security2:error] [pid 960377:tid 960527] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtthMANaV5i2_BLQoYzAAAABM"] [Sun Jul 12 18:13:42.679447 2026] [security2:error] [pid 960377:tid 960511] [client 168.100.149.96:49944] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8840/bargainor/2308_epidemiology.jsp"] [unique_id "alQtthMANaV5i2_BLQoY2QAAAAM"] [Sun Jul 12 18:13:42.831904 2026] [security2:error] [pid 967714:tid 967946] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBSAAAAWU"] [Sun Jul 12 18:13:42.831964 2026] [security2:error] [pid 967714:tid 967946] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBSAAAAWU"] [Sun Jul 12 18:13:42.833956 2026] [security2:error] [pid 967714:tid 967881] [client 65.21.113.206:57004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZtLzM0MzAzLzZtLzc4NTUvbWx0.asp"] [unique_id "alQttl_56DeKknhy7sMBRgAAASQ"] [Sun Jul 12 18:13:42.916648 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/app/.env"] [unique_id "alQttl_56DeKknhy7sMBYAABSHo"] [Sun Jul 12 18:13:42.946970 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtthMANaV5i2_BLQoY1wAAAHM"] [Sun Jul 12 18:13:42.974721 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQttl_56DeKknhy7sMBZQABSAw"] [Sun Jul 12 18:13:43.003036 2026] [security2:error] [pid 967714:tid 967941] [client 114.119.159.177:35857] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.lcmha.org"] [uri "/pathways/pathways_display_proof.pdf"] [unique_id "alQtt1_56DeKknhy7sMBaQAAAWA"], referer: https://www.lcmha.org/community-resources/ [Sun Jul 12 18:13:43.006439 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/database/.env"] [unique_id "alQtt1_56DeKknhy7sMBagABSHM"] [Sun Jul 12 18:13:43.022489 2026] [security2:error] [pid 967714:tid 967867] [client 114.119.141.80:25825] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sinfully-desilicious.com"] [uri "/product/eggless-wheat-chocolate-cake-with-strawberry-compote-choco-ganache"] [unique_id "alQtt1_56DeKknhy7sMBbAAAARY"], referer: https://sinfullydesilicious.tumblr.com/ [Sun Jul 12 18:13:43.029117 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/db/.env"] [unique_id "alQtt1_56DeKknhy7sMBbQABSFA"] [Sun Jul 12 18:13:43.031703 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/postgres/.env"] [unique_id "alQtt1_56DeKknhy7sMBbgABSHk"] [Sun Jul 12 18:13:43.049831 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/dodoswap-client/.env"] [unique_id "alQtt1_56DeKknhy7sMBdAABSDA"] [Sun Jul 12 18:13:43.062766 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/downloads/.env"] [unique_id "alQtt1_56DeKknhy7sMBdgABSHc"] [Sun Jul 12 18:13:43.107287 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/env/.env"] [unique_id "alQtt1_56DeKknhy7sMBdwABSEE"] [Sun Jul 12 18:13:43.109550 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQtt1_56DeKknhy7sMBeAABSCo"], referer: http://67.222.40.58/docker/compose/withMongo/.env [Sun Jul 12 18:13:43.128216 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/environments/local/.env"] [unique_id "alQtt1_56DeKknhy7sMBegABSAc"] [Sun Jul 12 18:13:43.130184 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/erp/backend/info.php"] [unique_id "alQtt1_56DeKknhy7sMBgQABSFY"] [Sun Jul 12 18:13:43.132606 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/erp/.env"] [unique_id "alQtt1_56DeKknhy7sMBfAABSCM"] [Sun Jul 12 18:13:43.133912 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/erp/temp.php"] [unique_id "alQtt1_56DeKknhy7sMBhAABSA0"] [Sun Jul 12 18:13:43.134500 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/database/.env"] [unique_id "alQtt1_56DeKknhy7sMBgwABSFY"], referer: http://67.222.40.58/docker/database/.env [Sun Jul 12 18:13:43.134526 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/erp/.env.bak"] [unique_id "alQtt1_56DeKknhy7sMBfQABSBY"] [Sun Jul 12 18:13:43.162495 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/errors/.env"] [unique_id "alQtt1_56DeKknhy7sMBiQABSG0"] [Sun Jul 12 18:13:43.181988 2026] [security2:error] [pid 960377:tid 960567] [client 23.161.169.125:59674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.169.161.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kg-ifa.com"] [uri "/xmlrpc.php"] [unique_id "alQttxMANaV5i2_BLQoY4gAAADs"] [Sun Jul 12 18:13:43.189146 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:43.205363 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:43.206408 2026] [security2:error] [pid 967714:tid 967863] [client 23.161.169.125:59646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.169.161.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kg-ifa.com"] [uri "/wp-login.php"] [unique_id "alQtt1_56DeKknhy7sMBcQAAARI"] [Sun Jul 12 18:13:43.219256 2026] [security2:error] [pid 967714:tid 967762] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/db/.env"] [unique_id "alQtt1_56DeKknhy7sMBkAABSCQ"], referer: http://67.222.40.58/docker/db/.env [Sun Jul 12 18:13:43.254830 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:51298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/erp/backend/info.php"] [unique_id "alQtt1_56DeKknhy7sMBmgAAASo"] [Sun Jul 12 18:13:43.266292 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:51292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/erp/temp.php"] [unique_id "alQttxMANaV5i2_BLQoY9wAAAAc"] [Sun Jul 12 18:13:43.274412 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/docker/postgres/.env"] [unique_id "alQtt1_56DeKknhy7sMBngABSF4"], referer: http://67.222.40.58/docker/postgres/.env [Sun Jul 12 18:13:43.354301 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/env/.env"] [unique_id "alQtt1_56DeKknhy7sMBpwABSE8"], referer: http://67.222.40.58/env/.env [Sun Jul 12 18:13:43.354407 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/dodoswap-client/.env"] [unique_id "alQtt1_56DeKknhy7sMBpgABSG4"], referer: http://67.222.40.58/dodoswap-client/.env [Sun Jul 12 18:13:43.356989 2026] [qos:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=62.171.167.118, id=alQtt1_56DeKknhy7sMBqgABSG4, referer: http://67.222.40.58/erp/.env [Sun Jul 12 18:13:43.357273 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/downloads/.env"] [unique_id "alQtt1_56DeKknhy7sMBpQABSGQ"], referer: http://67.222.40.58/downloads/.env [Sun Jul 12 18:13:43.357609 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/environments/local/.env"] [unique_id "alQtt1_56DeKknhy7sMBpAABSGE"], referer: http://67.222.40.58/environments/local/.env [Sun Jul 12 18:13:43.358902 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/erp/.env.bak"] [unique_id "alQtt1_56DeKknhy7sMBqQABSE8"], referer: http://67.222.40.58/erp/.env.bak [Sun Jul 12 18:13:43.406725 2026] [qos:error] [pid 967714:tid 967864] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.87.254.158, id=alQtt1_56DeKknhy7sMBrwAAARM, referer: http://67.222.40.58/environment [Sun Jul 12 18:13:43.406907 2026] [qos:error] [pid 967714:tid 967946] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=102, c=50.87.254.158, id=alQtt1_56DeKknhy7sMBrQAAAWU, referer: http://67.222.40.58/docs/server.xml [Sun Jul 12 18:13:43.406944 2026] [qos:error] [pid 967714:tid 967765] [remote 62.171.167.118:51036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=103, c=62.171.167.118, id=alQtt1_56DeKknhy7sMBsAABSCc, referer: http://67.222.40.58/erp/.env.local [Sun Jul 12 18:13:43.406981 2026] [security2:error] [pid 960377:tid 960551] [client 57.141.18.26:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtthMANaV5i2_BLQoY3gAAACs"] [Sun Jul 12 18:13:43.407413 2026] [qos:error] [pid 967714:tid 967727] [remote 62.171.167.118:51036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=103, c=62.171.167.118, id=alQtt1_56DeKknhy7sMBsgABSAE, referer: http://67.222.40.58/errors/.env [Sun Jul 12 18:13:43.408103 2026] [qos:error] [pid 967714:tid 967817] [remote 62.171.167.118:51036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=104, c=62.171.167.118, id=alQtt1_56DeKknhy7sMBsQABSFs, referer: http://67.222.40.58/erp/config.env [Sun Jul 12 18:13:43.410709 2026] [qos:error] [pid 967714:tid 967924] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.87.254.158, id=alQtt1_56DeKknhy7sMBswAAAU8, referer: http://67.222.40.58/docs/.ftpconfig [Sun Jul 12 18:13:43.541721 2026] [security2:error] [pid 967714:tid 967967] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBlgAAAXo"] [Sun Jul 12 18:13:43.721851 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/new/debug.bak"] [unique_id "alQttxMANaV5i2_BLQoZCwAAcEc"] [Sun Jul 12 18:13:44.093602 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:44.094303 2026] [authz_core:error] [pid 967714:tid 967948] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:44.137736 2026] [security2:error] [pid 960377:tid 960541] [client 70.80.229.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoZBwAAACE"] [Sun Jul 12 18:13:44.203168 2026] [security2:error] [pid 967714:tid 967878] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBwQAAASE"] [Sun Jul 12 18:13:44.244637 2026] [security2:error] [pid 960377:tid 960599] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTE2MC1wa3E=.cgi"] [unique_id "alQtuBMANaV5i2_BLQoZEQAAAFs"] [Sun Jul 12 18:13:44.283084 2026] [security2:error] [pid 960377:tid 960623] [client 216.244.66.198:38432] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cidclan.net"] [uri "/robots.txt"] [unique_id "alQtuBMANaV5i2_BLQoZEgAAAHM"] [Sun Jul 12 18:13:44.283333 2026] [security2:error] [pid 960377:tid 960623] [client 216.244.66.198:38432] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.cidclan.net"] [uri "/robots.txt"] [unique_id "alQtuBMANaV5i2_BLQoZEgAAAHM"] [Sun Jul 12 18:13:44.335841 2026] [security2:error] [pid 967714:tid 967942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBRQAAAWE"] [Sun Jul 12 18:13:44.484543 2026] [security2:error] [pid 967714:tid 967764] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/example/.env"] [unique_id "alQtuF_56DeKknhy7sMB0QABSCY"], referer: http://67.222.40.58/example/.env [Sun Jul 12 18:13:44.550241 2026] [security2:error] [pid 960377:tid 960437] [remote 202.46.62.22:21202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 22.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/password_forgotten.php"] [unique_id "alQtuBMANaV5i2_BLQoZHgAAdDo"] [Sun Jul 12 18:13:44.632852 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtuBMANaV5i2_BLQoZFgAAABs"] [Sun Jul 12 18:13:44.668491 2026] [security2:error] [pid 960377:tid 960597] [client 168.100.149.77:39962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8905/bargainor/2308_secque.jsp"] [unique_id "alQtuBMANaV5i2_BLQoZJgAAAFk"] [Sun Jul 12 18:13:44.807793 2026] [security2:error] [pid 960377:tid 960465] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/id_rsa"] [unique_id "alQtuBMANaV5i2_BLQoZLwAAEFY"] [Sun Jul 12 18:13:44.883179 2026] [security2:error] [pid 960377:tid 960568] [client 23.161.169.125:43000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "kg-ifa.com"] [uri "/wp-config.php.bak"] [unique_id "alQtuBMANaV5i2_BLQoZMwAAADw"] [Sun Jul 12 18:13:44.894733 2026] [http2:info] [pid 979474:tid 979474] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:13:44.898765 2026] [authz_core:error] [pid 967714:tid 967869] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:44.899450 2026] [authz_core:error] [pid 967714:tid 967869] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:44.910154 2026] [security2:error] [pid 960377:tid 960549] [client 94.187.171.125:55671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtuBMANaV5i2_BLQoZNAAAACk"] [Sun Jul 12 18:13:44.910470 2026] [security2:error] [pid 960377:tid 960549] [client 94.187.171.125:55671] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtuBMANaV5i2_BLQoZNAAAACk"] [Sun Jul 12 18:13:44.930919 2026] [security2:error] [pid 967714:tid 967953] [client 23.161.169.125:43020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "kg-ifa.com"] [uri "/wp-config.php.save"] [unique_id "alQtuF_56DeKknhy7sMB2QAAAWw"] [Sun Jul 12 18:13:44.939537 2026] [security2:error] [pid 967714:tid 967941] [client 23.161.169.125:42938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/run/.env"] [unique_id "alQtuF_56DeKknhy7sMB2gAAAWA"] [Sun Jul 12 18:13:44.940537 2026] [security2:error] [pid 960377:tid 960604] [client 23.161.169.125:42812] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/src/.env"] [unique_id "alQtuBMANaV5i2_BLQoZOAAAAGA"] [Sun Jul 12 18:13:44.988292 2026] [security2:error] [pid 960377:tid 960470] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/go_app/.env"] [unique_id "alQtuBMANaV5i2_BLQoZOwAAc1s"] [Sun Jul 12 18:13:45.047067 2026] [security2:error] [pid 960377:tid 960511] [client 23.161.169.125:43012] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "kg-ifa.com"] [uri "/wp-config.php.old"] [unique_id "alQtuRMANaV5i2_BLQoZPwAAAAM"] [Sun Jul 12 18:13:45.077433 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/example/.env"] [unique_id "alQtuV_56DeKknhy7sMB4gABSAA"] [Sun Jul 12 18:13:45.178433 2026] [security2:error] [pid 960377:tid 960522] [client 23.161.169.125:42796] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/server/config/.env"] [unique_id "alQtuRMANaV5i2_BLQoZQQAAAA4"] [Sun Jul 12 18:13:45.185357 2026] [security2:error] [pid 967714:tid 967862] [client 23.161.169.125:42950] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/resources/.env"] [unique_id "alQtuV_56DeKknhy7sMB6AAAARE"] [Sun Jul 12 18:13:45.189420 2026] [security2:error] [pid 967714:tid 967873] [client 23.161.169.125:42698] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/.env.old"] [unique_id "alQtuV_56DeKknhy7sMB5gAAARw"] [Sun Jul 12 18:13:45.189486 2026] [security2:error] [pid 967714:tid 967977] [client 23.161.169.125:42836] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/site/.env"] [unique_id "alQtuV_56DeKknhy7sMB5QAAAYQ"] [Sun Jul 12 18:13:45.190753 2026] [security2:error] [pid 967714:tid 967866] [client 23.161.169.125:42852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/public/.env"] [unique_id "alQtuV_56DeKknhy7sMB5AAAARU"] [Sun Jul 12 18:13:45.192769 2026] [security2:error] [pid 967714:tid 967982] [client 23.161.169.125:42800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/server/laravel/.env"] [unique_id "alQtuV_56DeKknhy7sMB6gAAAYk"] [Sun Jul 12 18:13:45.249502 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBTwAAAWg"] [Sun Jul 12 18:13:45.260063 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "alQtuV_56DeKknhy7sMB9QABSBc"] [Sun Jul 12 18:13:45.266158 2026] [security2:error] [pid 960377:tid 960510] [client 114.119.151.83:45325] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "undameta.com"] [uri "/product-tag/nanjala-design/"] [unique_id "alQtuRMANaV5i2_BLQoZSwAAAAI"], referer: https://undameta.com/product/dahlia-rain-electric-yellow/?wmc-currency=USD [Sun Jul 12 18:13:45.272640 2026] [qos:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=62.171.167.118, id=alQtuV_56DeKknhy7sMB9gABSFU, referer: http://67.222.40.58/example27-how-to-load-env/sample02/.env [Sun Jul 12 18:13:45.304304 2026] [security2:error] [pid 967714:tid 967921] [client 23.161.169.125:42882] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/prisma/.env"] [unique_id "alQtuV_56DeKknhy7sMB-gAAAUw"] [Sun Jul 12 18:13:45.329244 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBUAAAAWo"], referer: http://67.222.38.115/exec [Sun Jul 12 18:13:45.332084 2026] [security2:error] [pid 967714:tid 967896] [client 23.161.169.125:42752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/.env"] [unique_id "alQtuV_56DeKknhy7sMB_QAAATM"] [Sun Jul 12 18:13:45.336593 2026] [security2:error] [pid 967714:tid 967875] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtuF_56DeKknhy7sMB1wAAAR4"] [Sun Jul 12 18:13:45.336721 2026] [security2:error] [pid 967714:tid 967875] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtuF_56DeKknhy7sMB1wAAAR4"] [Sun Jul 12 18:13:45.340514 2026] [security2:error] [pid 960377:tid 960590] [client 65.21.113.206:42920] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTE2MC1wa3E=.cgi"] [unique_id "alQtuBMANaV5i2_BLQoZLAAAAFI"] [Sun Jul 12 18:13:45.344763 2026] [security2:error] [pid 967714:tid 967962] [client 23.161.169.125:42710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/api/.env"] [unique_id "alQtuV_56DeKknhy7sMB_gAAAXU"] [Sun Jul 12 18:13:45.436109 2026] [security2:error] [pid 960377:tid 960580] [client 57.141.18.74:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQtuBMANaV5i2_BLQoZMgAAAEg"] [Sun Jul 12 18:13:45.460262 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:54990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/service/phpinfo.php"] [unique_id "alQtuXTrIlbXpLXvkNcDpQAAAKo"] [Sun Jul 12 18:13:45.537590 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZSQAAAAY"] [Sun Jul 12 18:13:45.544170 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/01-simple-model/.env"] [unique_id "alQtuV_56DeKknhy7sMCBQABSDU"] [Sun Jul 12 18:13:45.623127 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/01-simple-model/.env"] [unique_id "alQtuV_56DeKknhy7sMCCQABSHs"], referer: http://67.222.40.58/examples/01-simple-model/.env [Sun Jul 12 18:13:45.643194 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQtuV_56DeKknhy7sMCDAABSFM"] [Sun Jul 12 18:13:45.725481 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/bot/service/phpinfo.php"] [unique_id "alQtuV_56DeKknhy7sMCDgABHks"] [Sun Jul 12 18:13:45.727811 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cache/.env"] [unique_id "alQtuV_56DeKknhy7sMCDwABHnw"] [Sun Jul 12 18:13:45.744451 2026] [authz_core:error] [pid 967714:tid 967924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:45.744981 2026] [authz_core:error] [pid 967714:tid 967924] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:45.745789 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ch6-mytodo/.env"] [unique_id "alQtuV_56DeKknhy7sMCEQABTHE"] [Sun Jul 12 18:13:45.748991 2026] [security2:error] [pid 967714:tid 967838] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cache/.env"] [unique_id "alQtuV_56DeKknhy7sMCEgABTHA"], referer: http://67.222.42.11/cache/.env [Sun Jul 12 18:13:45.768713 2026] [security2:error] [pid 967714:tid 967737] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQtuV_56DeKknhy7sMCFAABSAs"], referer: http://67.222.40.58/examples/react-dashboard/backend/.env [Sun Jul 12 18:13:45.778571 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ch8-mytodo/.env"] [unique_id "alQtuV_56DeKknhy7sMCFQABajY"] [Sun Jul 12 18:13:45.800433 2026] [security2:error] [pid 967714:tid 967784] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/sdl-first/.env"] [unique_id "alQtuV_56DeKknhy7sMCFwABSDo"] [Sun Jul 12 18:13:45.802290 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:41624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/client/server/phpinfo.php"] [unique_id "alQtuV_56DeKknhy7sMCGAAAAWw"] [Sun Jul 12 18:13:45.803769 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cgi-bin/.env"] [unique_id "alQtuV_56DeKknhy7sMCGQABKgg"], referer: http://67.222.42.11/cgi-bin/.env [Sun Jul 12 18:13:45.809893 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/client/server/phpinfo.php"] [unique_id "alQtuV_56DeKknhy7sMCGgABhGc"] [Sun Jul 12 18:13:45.856495 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/current/info.php"] [unique_id "alQtuV_56DeKknhy7sMCHgABRyI"] [Sun Jul 12 18:13:45.856702 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/backup/info.php"] [unique_id "alQtuV_56DeKknhy7sMCHAABR1k"] [Sun Jul 12 18:13:45.856826 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/config.php"] [unique_id "alQtuV_56DeKknhy7sMCHQABR2M"] [Sun Jul 12 18:13:45.860942 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/dev/info.php"] [unique_id "alQtuV_56DeKknhy7sMCHwABIUg"] [Sun Jul 12 18:13:45.869826 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/examples/sdl-first/.env"] [unique_id "alQtuV_56DeKknhy7sMCIAABSEY"], referer: http://67.222.40.58/examples/sdl-first/.env [Sun Jul 12 18:13:45.886653 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ch6-mytodo/.env"] [unique_id "alQtuV_56DeKknhy7sMCIQABHhs"], referer: http://67.222.42.11/ch6-mytodo/.env [Sun Jul 12 18:13:45.891306 2026] [security2:error] [pid 960377:tid 960599] [client 62.171.167.118:41626] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/backup/info.php"] [unique_id "alQtuRMANaV5i2_BLQoZYgAAAFs"] [Sun Jul 12 18:13:45.895149 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:54966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/config.php"] [unique_id "alQtuV_56DeKknhy7sMCIwAAAWo"] [Sun Jul 12 18:13:45.896249 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ch8-mytodo/.env"] [unique_id "alQtuV_56DeKknhy7sMCIgABaHo"], referer: http://67.222.42.11/ch8-mytodo/.env [Sun Jul 12 18:13:45.923223 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:41628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/current/info.php"] [unique_id "alQtuRMANaV5i2_BLQoZYwAAAHg"] [Sun Jul 12 18:13:45.931350 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/develop/info.php"] [unique_id "alQtuV_56DeKknhy7sMCJQABR3M"] [Sun Jul 12 18:13:45.933015 2026] [security2:error] [pid 979474:tid 979627] [client 62.171.167.118:41644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/dev/info.php"] [unique_id "alQtuXTrIlbXpLXvkNcDpwAAAJc"] [Sun Jul 12 18:13:45.948181 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/develop/phpinfo.php"] [unique_id "alQtuV_56DeKknhy7sMCJgABZVc"] [Sun Jul 12 18:13:45.950361 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:41648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/develop/phpinfo.php"] [unique_id "alQtuXTrIlbXpLXvkNcDqAAAAJk"] [Sun Jul 12 18:13:45.954445 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:41650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/help/info.php"] [unique_id "alQtuXTrIlbXpLXvkNcDqQAAAJo"] [Sun Jul 12 18:13:45.954881 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/helper/info.php"] [unique_id "alQtuV_56DeKknhy7sMCKAABT3k"] [Sun Jul 12 18:13:45.955071 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/help/info.php"] [unique_id "alQtuV_56DeKknhy7sMCJwABT1A"] [Sun Jul 12 18:13:45.955608 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:41660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/helper/info.php"] [unique_id "alQtuRMANaV5i2_BLQoZZAAAAHM"] [Sun Jul 12 18:13:45.957990 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/lara/info.php"] [unique_id "alQtuV_56DeKknhy7sMCKQABHjA"] [Sun Jul 12 18:13:45.961074 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/exapi/.env"] [unique_id "alQtuV_56DeKknhy7sMCKgABSHc"], referer: http://67.222.40.58/exapi/.env [Sun Jul 12 18:13:45.968832 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/laravel/info.php"] [unique_id "alQtuV_56DeKknhy7sMCKwABdUE"] [Sun Jul 12 18:13:45.970092 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/temp.php"] [unique_id "alQtuV_56DeKknhy7sMCLAABdSo"] [Sun Jul 12 18:13:45.985507 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZXgAAAEs"] [Sun Jul 12 18:13:45.986548 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/collected_static/.env"] [unique_id "alQtuV_56DeKknhy7sMCLQABiSM"] [Sun Jul 12 18:13:45.992078 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:41666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/lara/info.php"] [unique_id "alQtuRMANaV5i2_BLQoZZQAAACM"] [Sun Jul 12 18:13:45.993339 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/common/.env.bak"] [unique_id "alQtuV_56DeKknhy7sMCLgABTAI"] [Sun Jul 12 18:13:46.002812 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/common/backup/phpinfo.php"] [unique_id "alQtul_56DeKknhy7sMCMAABc1Y"] [Sun Jul 12 18:13:46.003548 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/common/backend/phpinfo.php"] [unique_id "alQtul_56DeKknhy7sMCLwABcw0"] [Sun Jul 12 18:13:46.007188 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/community/.env"] [unique_id "alQtul_56DeKknhy7sMCMQABcxY"] [Sun Jul 12 18:13:46.031404 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:41682] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cms/laravel/info.php"] [unique_id "alQtuhMANaV5i2_BLQoZZgAAAAc"] [Sun Jul 12 18:13:46.042372 2026] [security2:error] [pid 960377:tid 960630] [client 168.100.149.171:56538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/8970/bargainor/2308_dislevelment.jsp"] [unique_id "alQtuhMANaV5i2_BLQoZZwAAAHo"] [Sun Jul 12 18:13:46.046176 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/conf/api/info.php"] [unique_id "alQtul_56DeKknhy7sMCMgABaBA"] [Sun Jul 12 18:13:46.050245 2026] [security2:error] [pid 960377:tid 960631] [client 23.161.169.125:42920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/repo/.env"] [unique_id "alQtuhMANaV5i2_BLQoZaAAAAHs"] [Sun Jul 12 18:13:46.051802 2026] [security2:error] [pid 967714:tid 967867] [client 23.161.169.125:42940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kg-ifa.com"] [uri "/services/.env"] [unique_id "alQtul_56DeKknhy7sMCNAAAARY"] [Sun Jul 12 18:13:46.051973 2026] [security2:error] [pid 967714:tid 967867] [client 23.161.169.125:42940] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kg-ifa.com"] [uri "/services/.env"] [unique_id "alQtul_56DeKknhy7sMCNAAAARY"] [Sun Jul 12 18:13:46.052810 2026] [security2:error] [pid 967714:tid 967967] [client 23.161.169.125:42880] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/laravel/.env"] [unique_id "alQtul_56DeKknhy7sMCMwAAAXo"] [Sun Jul 12 18:13:46.054154 2026] [security2:error] [pid 960377:tid 960519] [client 23.161.169.125:42900] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/rest/.env"] [unique_id "alQtuhMANaV5i2_BLQoZaQAAAAs"] [Sun Jul 12 18:13:46.055226 2026] [security2:error] [pid 967714:tid 967900] [client 23.161.169.125:42894] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/prod/.env"] [unique_id "alQtul_56DeKknhy7sMCNQAAATc"] [Sun Jul 12 18:13:46.057032 2026] [security2:error] [pid 967714:tid 967911] [client 23.161.169.125:42772] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/backend/.env"] [unique_id "alQtul_56DeKknhy7sMCNgAAAUI"] [Sun Jul 12 18:13:46.057314 2026] [security2:error] [pid 967714:tid 967976] [client 23.161.169.125:42952] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/resources/docker/.env"] [unique_id "alQtul_56DeKknhy7sMCNwAAAYM"] [Sun Jul 12 18:13:46.059377 2026] [security2:error] [pid 960377:tid 960603] [client 23.161.169.125:42942] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/services/minio/.env"] [unique_id "alQtuhMANaV5i2_BLQoZagAAAF8"] [Sun Jul 12 18:13:46.059713 2026] [security2:error] [pid 967714:tid 967897] [client 23.161.169.125:42912] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/restapi/.env"] [unique_id "alQtul_56DeKknhy7sMCOAAAATQ"] [Sun Jul 12 18:13:46.061495 2026] [security2:error] [pid 967714:tid 967947] [client 23.161.169.125:43128] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kg-ifa.com"] [uri "/credentials.json"] [unique_id "alQtul_56DeKknhy7sMCPAAAAWY"] [Sun Jul 12 18:13:46.061689 2026] [security2:error] [pid 967714:tid 967947] [client 23.161.169.125:43128] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kg-ifa.com"] [uri "/credentials.json"] [unique_id "alQtul_56DeKknhy7sMCPAAAAWY"] [Sun Jul 12 18:13:46.070390 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/conf/dashboard/phpinfo.php"] [unique_id "alQtul_56DeKknhy7sMCRAABhG0"] [Sun Jul 12 18:13:46.071706 2026] [security2:error] [pid 967714:tid 967972] [client 23.161.169.125:42824] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/config/.env"] [unique_id "alQtul_56DeKknhy7sMCQAAAAX8"] [Sun Jul 12 18:13:46.072289 2026] [security2:error] [pid 967714:tid 967861] [client 23.161.169.125:42860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/private/.env"] [unique_id "alQtul_56DeKknhy7sMCQgAAARA"] [Sun Jul 12 18:13:46.074135 2026] [security2:error] [pid 967714:tid 967884] [client 23.161.169.125:42896] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/scripts/.env"] [unique_id "alQtul_56DeKknhy7sMCQQAAASc"] [Sun Jul 12 18:13:46.088141 2026] [security2:error] [pid 967714:tid 967970] [client 23.161.169.125:42922] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/root/.env"] [unique_id "alQtul_56DeKknhy7sMCTAAAAX0"] [Sun Jul 12 18:13:46.088948 2026] [security2:error] [pid 967714:tid 967964] [client 23.161.169.125:42782] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/server/.env"] [unique_id "alQtul_56DeKknhy7sMCTQAAAXc"] [Sun Jul 12 18:13:46.091421 2026] [security2:error] [pid 967714:tid 967937] [client 23.161.169.125:42874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/shared/.env"] [unique_id "alQtul_56DeKknhy7sMCTwAAAVw"] [Sun Jul 12 18:13:46.092290 2026] [security2:error] [pid 967714:tid 967969] [client 23.161.169.125:42856] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/public_html/.env"] [unique_id "alQtul_56DeKknhy7sMCSwAAAXw"] [Sun Jul 12 18:13:46.093362 2026] [security2:error] [pid 967714:tid 967901] [client 23.161.169.125:42716] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/.env.backup"] [unique_id "alQtul_56DeKknhy7sMCSAAAATg"] [Sun Jul 12 18:13:46.101462 2026] [security2:error] [pid 967714:tid 967863] [client 23.161.169.125:42750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/app/.env"] [unique_id "alQtul_56DeKknhy7sMCSgAAARI"] [Sun Jul 12 18:13:46.111639 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:41712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/conf/dashboard/phpinfo.php"] [unique_id "alQtuhMANaV5i2_BLQoZbgAAAGc"] [Sun Jul 12 18:13:46.120932 2026] [security2:error] [pid 967714:tid 967930] [client 23.161.169.125:42686] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "kg-ifa.com"] [uri "/.env.bak"] [unique_id "alQtul_56DeKknhy7sMCSQAAAVU"] [Sun Jul 12 18:13:46.136955 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config.php"] [unique_id "alQtul_56DeKknhy7sMCUgABOl4"] [Sun Jul 12 18:13:46.139075 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config.php.original"] [unique_id "alQtul_56DeKknhy7sMCUwABOl4"] [Sun Jul 12 18:13:46.151923 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config.php.zip"] [unique_id "alQtul_56DeKknhy7sMCVAABOhE"] [Sun Jul 12 18:13:46.165807 2026] [security2:error] [pid 960377:tid 960627] [client 62.171.167.118:41742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config.php.original"] [unique_id "alQtuhMANaV5i2_BLQoZdAAAAHc"] [Sun Jul 12 18:13:46.168207 2026] [security2:error] [pid 960377:tid 960538] [client 62.171.167.118:41740] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/common/backend/phpinfo.php"] [unique_id "alQtuhMANaV5i2_BLQoZcgAAAB4"] [Sun Jul 12 18:13:46.169156 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:41752] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config.php.zip"] [unique_id "alQtul_56DeKknhy7sMCVgAAASE"] [Sun Jul 12 18:13:46.178059 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMABwAAARc"], referer: http://67.222.40.58/deploy/config.env [Sun Jul 12 18:13:46.184966 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_rAABSBw"] [Sun Jul 12 18:13:46.185278 2026] [security2:error] [pid 967714:tid 967915] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQttl_56DeKknhy7sMBUQAAAUY"] [Sun Jul 12 18:13:46.244966 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/mail.php"] [unique_id "alQtul_56DeKknhy7sMCYQABaCc"] [Sun Jul 12 18:13:46.245502 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/helper/phpinfo.php"] [unique_id "alQtul_56DeKknhy7sMCYAABaH0"] [Sun Jul 12 18:13:46.267949 2026] [security2:error] [pid 979474:tid 979682] [client 62.171.167.118:41696] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/mail.php"] [unique_id "alQtunTrIlbXpLXvkNcDtgAAAM0"] [Sun Jul 12 18:13:46.273384 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/common/.env.bak"] [unique_id "alQtul_56DeKknhy7sMCZgABNzg"], referer: http://67.222.42.11/common/.env.bak [Sun Jul 12 18:13:46.274763 2026] [security2:error] [pid 960377:tid 960634] [client 62.171.167.118:41788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/helper/phpinfo.php"] [unique_id "alQtuhMANaV5i2_BLQoZfQAAAH4"] [Sun Jul 12 18:13:46.274969 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/pinfo.php"] [unique_id "alQtul_56DeKknhy7sMCaAABN1s"] [Sun Jul 12 18:13:46.302127 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:41760] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/pinfo.php"] [unique_id "alQtul_56DeKknhy7sMCawAAATQ"] [Sun Jul 12 18:13:46.311109 2026] [cgid:error] [pid 960377:tid 960597] [client 199.45.154.147:0] AH01265: stderr from /home4/globalf1/public_html/tigma-roses/cgi-bin/: attempt to invoke directory as script, referer: https://www.tigma-roses.globalflower.net:443/cgi-bin [Sun Jul 12 18:13:46.335325 2026] [security2:error] [pid 967714:tid 967935] [client 181.42.17.145:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "brujobites.com"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMACgAAAVo"] [Sun Jul 12 18:13:46.346708 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/config/temp.php"] [unique_id "alQtul_56DeKknhy7sMCcAABdz8"] [Sun Jul 12 18:13:46.396842 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/configuration/.env"] [unique_id "alQtul_56DeKknhy7sMCdQABfBc"] [Sun Jul 12 18:13:46.415598 2026] [security2:error] [pid 979474:tid 979640] [client 62.171.167.118:41840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/configure.php.orig"] [unique_id "alQtunTrIlbXpLXvkNcDvAAAAKQ"] [Sun Jul 12 18:13:46.445831 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/configure.php.orig"] [unique_id "alQtul_56DeKknhy7sMCeAABJTU"] [Sun Jul 12 18:13:46.520527 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/exapi/.env"] [unique_id "alQtul_56DeKknhy7sMCfAABSEs"] [Sun Jul 12 18:13:46.525327 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:47920] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/configuration/.env"] [unique_id "alQtul_56DeKknhy7sMCfQABgEs"], referer: http://67.222.42.11/configuration/.env [Sun Jul 12 18:13:46.541715 2026] [security2:error] [pid 960377:tid 960617] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtuhMANaV5i2_BLQoZewAAAG0"] [Sun Jul 12 18:13:46.611753 2026] [authz_core:error] [pid 979474:tid 979645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:46.612301 2026] [authz_core:error] [pid 979474:tid 979645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:46.812269 2026] [security2:error] [pid 960377:tid 960528] [client 20.210.108.71:51122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/theme-previews.php"] [unique_id "alQtuhMANaV5i2_BLQoZjQAAABQ"], referer: binance.com [Sun Jul 12 18:13:46.854991 2026] [security2:error] [pid 960377:tid 960622] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTE2NTQtcGtx.cgi"] [unique_id "alQtuhMANaV5i2_BLQoZjgAAAHI"] [Sun Jul 12 18:13:46.974057 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/favicons/.env"] [unique_id "alQtul_56DeKknhy7sMChgABSDM"], referer: http://67.222.40.58/favicons/.env [Sun Jul 12 18:13:46.988860 2026] [security2:error] [pid 979474:tid 979655] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtunTrIlbXpLXvkNcDxQAAALM"] [Sun Jul 12 18:13:47.092972 2026] [security2:error] [pid 979474:tid 979698] [client 57.141.18.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtunTrIlbXpLXvkNcDwQAAAN0"] [Sun Jul 12 18:13:47.196920 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMABgAAAXA"] [Sun Jul 12 18:13:47.422381 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:47.423227 2026] [authz_core:error] [pid 960377:tid 960594] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:47.475965 2026] [security2:error] [pid 967714:tid 967977] [client 125.167.21.72:63039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtu1_56DeKknhy7sMCkQAAAYQ"] [Sun Jul 12 18:13:47.476267 2026] [security2:error] [pid 967714:tid 967977] [client 125.167.21.72:63039] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtu1_56DeKknhy7sMCkQAAAYQ"] [Sun Jul 12 18:13:47.539120 2026] [security2:error] [pid 979474:tid 979665] [client 139.59.253.13:59820] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "hotspotcafe.net"] [uri "/wp-content/plugins/wps-hide-login/wps-hide-login.php"] [unique_id "alQtu3TrIlbXpLXvkNcDzQAAAL0"] [Sun Jul 12 18:13:47.636960 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtu1_56DeKknhy7sMCjAAAARY"] [Sun Jul 12 18:13:47.654252 2026] [security2:error] [pid 979474:tid 979663] [client 24.203.79.110:55292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtu3TrIlbXpLXvkNcDzgAAALs"] [Sun Jul 12 18:13:47.654690 2026] [security2:error] [pid 979474:tid 979663] [client 24.203.79.110:55292] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtu3TrIlbXpLXvkNcDzgAAALs"] [Sun Jul 12 18:13:47.842026 2026] [security2:error] [pid 960377:tid 960553] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db/info.php"] [unique_id "alQtuxMANaV5i2_BLQoZogAAAC0"] [Sun Jul 12 18:13:48.009352 2026] [security2:error] [pid 960377:tid 960525] [client 43.173.74.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "ophtek.com"] [uri "/index.php"] [unique_id "alQtuxMANaV5i2_BLQoZmwAAABE"], referer: https://ophtek.com/interest-in-chatgpt-related-to-new-malware-attacks [Sun Jul 12 18:13:48.125872 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_rwABSBQ"], referer: http://67.222.40.58/console/payments/config.json [Sun Jul 12 18:13:48.160944 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_wgABSHg"] [Sun Jul 12 18:13:48.180139 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_rgABSE4"], referer: http://67.222.40.58/console/base/config.json [Sun Jul 12 18:13:48.199162 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrRMANaV5i2_BLQoXggAAAAE"], referer: http://67.222.40.58/debug/default/view.html [Sun Jul 12 18:13:48.306941 2026] [security2:error] [pid 960377:tid 960567] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtuxMANaV5i2_BLQoZmQAAADs"] [Sun Jul 12 18:13:48.307001 2026] [security2:error] [pid 960377:tid 960567] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtuxMANaV5i2_BLQoZmQAAADs"] [Sun Jul 12 18:13:48.312293 2026] [security2:error] [pid 967714:tid 967911] [client 65.21.113.206:42934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTE2NTQtcGtx.cgi"] [unique_id "alQtu1_56DeKknhy7sMCjwAAAUI"] [Sun Jul 12 18:13:48.351906 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:48.352412 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:48.382502 2026] [security2:error] [pid 967714:tid 967922] [client 202.46.62.115:8319] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 115.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/password_forgotten.php"] [unique_id "alQtvF_56DeKknhy7sMCoQAAAU0"] [Sun Jul 12 18:13:48.387115 2026] [security2:error] [pid 967714:tid 967964] [client 114.119.138.77:56773] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.dawnpedersen.com"] [uri "/product/hand-painted-ornament-sheep"] [unique_id "alQtvF_56DeKknhy7sMCogAAAXc"], referer: https://www.dawnpedersen.com/product-tag/acrylics/page/2 [Sun Jul 12 18:13:48.437843 2026] [security2:error] [pid 960377:tid 960532] [client 47.128.20.236:27490] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.colonialvw.com"] [uri "/robots.txt"] [unique_id "alQtvBMANaV5i2_BLQoZqgAAABg"] [Sun Jul 12 18:13:48.454489 2026] [security2:error] [pid 979474:tid 979716] [client 31.173.84.161:17160] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQtvHTrIlbXpLXvkNcD0AAAAO8"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:13:48.500481 2026] [security2:error] [pid 967714:tid 967975] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtvF_56DeKknhy7sMCnAAAAYI"] [Sun Jul 12 18:13:48.554196 2026] [security2:error] [pid 979474:tid 979648] [client 57.141.18.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQtunTrIlbXpLXvkNcDwgAAAKw"] [Sun Jul 12 18:13:48.563804 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtuxMANaV5i2_BLQoZlwAAOFw"] [Sun Jul 12 18:13:48.651728 2026] [security2:error] [pid 967714:tid 967887] [client 114.119.150.32:34681] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cidclan.net"] [uri "/member.php"] [unique_id "alQtvF_56DeKknhy7sMCpQAAASo"], referer: http://www.cidclan.net [Sun Jul 12 18:13:48.726359 2026] [security2:error] [pid 960377:tid 960529] [client 168.100.149.193:41294] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9035/bargainor/2308_limnoria.jsp"] [unique_id "alQtvBMANaV5i2_BLQoZtwAAABU"] [Sun Jul 12 18:13:48.929297 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtvF_56DeKknhy7sMCqwAAARY"] [Sun Jul 12 18:13:49.102167 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_9QAAAUU"] [Sun Jul 12 18:13:49.196050 2026] [security2:error] [pid 967714:tid 967863] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMABAAAASk"], referer: http://67.222.40.58/deploy/xampp/phpinfo [Sun Jul 12 18:13:49.196572 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:49.197259 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:49.488116 2026] [security2:error] [pid 967714:tid 967972] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtvV_56DeKknhy7sMCuwAAAX8"] [Sun Jul 12 18:13:49.642518 2026] [security2:error] [pid 967714:tid 967964] [client 114.119.129.110:41207] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.charterschoolofexcellence.org"] [uri "/workforce-development"] [unique_id "alQtvV_56DeKknhy7sMCzgAAAXc"], referer: https://kickinhtx.com/blog/155329/Kickin-It-Charter-Development-and-Life-Skills-Through-Martial-Arts [Sun Jul 12 18:13:49.658856 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtvBMANaV5i2_BLQoZtgAAJTk"] [Sun Jul 12 18:13:49.659285 2026] [security2:error] [pid 960377:tid 960444] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/news-app/backend/.env"] [unique_id "alQtvRMANaV5i2_BLQoZwAAAZ0E"] [Sun Jul 12 18:13:49.816973 2026] [security2:error] [pid 960377:tid 960382] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/__tests__/test-become/.env"] [unique_id "alQtvRMANaV5i2_BLQoZwwAAIwQ"] [Sun Jul 12 18:13:50.012278 2026] [authz_core:error] [pid 979474:tid 979732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:50.012986 2026] [authz_core:error] [pid 979474:tid 979732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:50.034536 2026] [security2:error] [pid 967714:tid 967976] [client 168.100.149.63:62172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9100/bargainor/2308_milksopism.jsp"] [unique_id "alQtvl_56DeKknhy7sMC2AAAAYM"] [Sun Jul 12 18:13:50.054816 2026] [security2:error] [pid 979474:tid 979727] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtvXTrIlbXpLXvkNcD2wAAAPo"] [Sun Jul 12 18:13:50.076088 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuF_56DeKknhy7sMBzwAAAS8"] [Sun Jul 12 18:13:50.215123 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZTwAAABo"] [Sun Jul 12 18:13:50.228619 2026] [security2:error] [pid 979474:tid 979716] [client 31.173.84.161:17160] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQtvHTrIlbXpLXvkNcD0AAAAO8"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:13:50.228850 2026] [security2:error] [pid 979474:tid 979716] [client 31.173.84.161:17160] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQtvHTrIlbXpLXvkNcD0AAAAO8"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:13:50.237303 2026] [security2:error] [pid 967714:tid 967947] [client 114.119.128.50:35903] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.shopnanjala.com"] [uri "/"] [unique_id "alQtvl_56DeKknhy7sMC2gAAAWY"], referer: https://www.shopnanjala.com/ [Sun Jul 12 18:13:50.550131 2026] [security2:error] [pid 967714:tid 967973] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtvl_56DeKknhy7sMC3AAAAYA"] [Sun Jul 12 18:13:50.720572 2026] [security2:error] [pid 960377:tid 960457] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-content/dbdump.sql"] [unique_id "alQtvhMANaV5i2_BLQoZzQAAHk4"] [Sun Jul 12 18:13:50.773347 2026] [security2:error] [pid 967714:tid 967961] [client 23.161.169.125:42874] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "kg-ifa.com"] [uri "/wp-json"] [unique_id "alQtvl_56DeKknhy7sMC4wAAAXQ"] [Sun Jul 12 18:13:50.773603 2026] [security2:error] [pid 967714:tid 967961] [client 23.161.169.125:42874] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "kg-ifa.com"] [uri "/wp-json"] [unique_id "alQtvl_56DeKknhy7sMC4wAAAXQ"] [Sun Jul 12 18:13:50.794708 2026] [security2:error] [pid 967714:tid 967867] [client 23.161.169.125:42856] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.169.161.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kg-ifa.com"] [uri "/xmlrpc.php"] [unique_id "alQtvl_56DeKknhy7sMC6AAAARY"] [Sun Jul 12 18:13:50.795093 2026] [security2:error] [pid 967714:tid 967928] [client 23.161.169.125:42782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.169.161.23.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kg-ifa.com"] [uri "/wp-login.php"] [unique_id "alQtvl_56DeKknhy7sMC6gAAAVM"] [Sun Jul 12 18:13:50.865519 2026] [security2:error] [pid 960377:tid 960616] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtvRMANaV5i2_BLQoZxQAAbGE"] [Sun Jul 12 18:13:50.878049 2026] [authz_core:error] [pid 979474:tid 979628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:50.878561 2026] [authz_core:error] [pid 979474:tid 979628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:50.881971 2026] [security2:error] [pid 967714:tid 967970] [client 184.154.139.40:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtvl_56DeKknhy7sMC4AAAAX0"] [Sun Jul 12 18:13:50.882021 2026] [security2:error] [pid 967714:tid 967970] [client 184.154.139.40:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQtvl_56DeKknhy7sMC4AAAAX0"] [Sun Jul 12 18:13:50.882897 2026] [security2:error] [pid 967714:tid 967875] [client 184.154.139.40:52354] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "smellytele.com"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQtvl_56DeKknhy7sMC3QAAAR4"] [Sun Jul 12 18:13:50.893354 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/customer/web.config"] [unique_id "alQtvhMANaV5i2_BLQoZ0AAASEg"] [Sun Jul 12 18:13:50.929918 2026] [security2:error] [pid 967714:tid 967957] [client 220.181.108.177:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "sinfully-desilicious.com"] [uri "/index.php"] [unique_id "alQtvl_56DeKknhy7sMC4QAAAXA"] [Sun Jul 12 18:13:51.081143 2026] [security2:error] [pid 960377:tid 960576] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrRMANaV5i2_BLQoXhAAAAEQ"], referer: http://67.222.40.58/demo/.env.dist [Sun Jul 12 18:13:51.085734 2026] [security2:error] [pid 960377:tid 960624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZTgAAAHQ"] [Sun Jul 12 18:13:51.101987 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_rQABSFo"], referer: http://67.222.40.58/connectionstrings.json [Sun Jul 12 18:13:51.106041 2026] [security2:error] [pid 979474:tid 979677] [client 62.171.167.118:51336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/feature/xampp/info.php"] [unique_id "alQtv3TrIlbXpLXvkNcD8gAAAMk"] [Sun Jul 12 18:13:51.121280 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_sAABSFw"] [Sun Jul 12 18:13:51.148521 2026] [security2:error] [pid 967714:tid 967900] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMACAAAAVA"] [Sun Jul 12 18:13:51.160367 2026] [security2:error] [pid 960377:tid 960562] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTQ2NTktcGtx.cgi"] [unique_id "alQtvxMANaV5i2_BLQoZ1wAAADY"] [Sun Jul 12 18:13:51.182836 2026] [security2:error] [pid 979474:tid 979615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuXTrIlbXpLXvkNcDoQAAAIs"] [Sun Jul 12 18:13:51.211799 2026] [security2:error] [pid 979474:tid 979614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuXTrIlbXpLXvkNcDoAAAAIo"] [Sun Jul 12 18:13:51.240165 2026] [security2:error] [pid 979474:tid 979621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuXTrIlbXpLXvkNcDpAAAAJE"] [Sun Jul 12 18:13:51.325053 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZTQAAAE0"] [Sun Jul 12 18:13:51.328980 2026] [security2:error] [pid 979474:tid 979698] [client 62.171.167.118:51340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/linusadmin-phpinfo.php"] [unique_id "alQtv3TrIlbXpLXvkNcD-QAAAN0"] [Sun Jul 12 18:13:51.354920 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:38240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/old_phpinfo.php"] [unique_id "alQtv1_56DeKknhy7sMC_gAAAX0"] [Sun Jul 12 18:13:51.367271 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:51352] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/service/info.php"] [unique_id "alQtvxMANaV5i2_BLQoZ3QAAAEo"] [Sun Jul 12 18:13:51.461853 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtv1_56DeKknhy7sMC8gAAATc"] [Sun Jul 12 18:13:51.590950 2026] [security2:error] [pid 960377:tid 960613] [client 66.187.5.104:60862] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "webmail.kingsremnantmessianic.org"] [uri "/"] [unique_id "alQtvxMANaV5i2_BLQoZ4QAAAGk"] [Sun Jul 12 18:13:51.591184 2026] [security2:error] [pid 960377:tid 960613] [client 66.187.5.104:60862] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "webmail.kingsremnantmessianic.org"] [uri "/"] [unique_id "alQtvxMANaV5i2_BLQoZ4QAAAGk"] [Sun Jul 12 18:13:51.627332 2026] [authz_core:error] [pid 979474:tid 979712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:51.627845 2026] [authz_core:error] [pid 979474:tid 979712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:51.868333 2026] [security2:error] [pid 979474:tid 979674] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtv3TrIlbXpLXvkNcD_wAAAMY"] [Sun Jul 12 18:13:51.890304 2026] [security2:error] [pid 960377:tid 960490] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtvxMANaV5i2_BLQoZ0gAANW8"] [Sun Jul 12 18:13:52.039991 2026] [security2:error] [pid 960377:tid 960427] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/tailwind.config.mjs.bak"] [unique_id "alQtwBMANaV5i2_BLQoZ8AAASDA"] [Sun Jul 12 18:13:52.073463 2026] [security2:error] [pid 967714:tid 967871] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_9wAAARo"] [Sun Jul 12 18:13:52.080342 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMAAwAAAVs"] [Sun Jul 12 18:13:52.105080 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_8gAAATE"] [Sun Jul 12 18:13:52.287485 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtvxMANaV5i2_BLQoZ5gAAABo"] [Sun Jul 12 18:13:52.287540 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtvxMANaV5i2_BLQoZ5gAAABo"] [Sun Jul 12 18:13:52.289688 2026] [security2:error] [pid 967714:tid 967977] [client 65.21.113.206:42950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZwLTE2ODEzLTZwa3FmLTQ2NTktcGtx.cgi"] [unique_id "alQtv1_56DeKknhy7sMDAAAAAYQ"] [Sun Jul 12 18:13:52.420184 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:52.420897 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:52.463836 2026] [security2:error] [pid 979474:tid 979696] [client 114.119.153.158:21079] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bellesprit.com"] [uri "/to-shatter-glass/legal-disclaimer"] [unique_id "alQtwHTrIlbXpLXvkNcEAwAAANs"], referer: https://www.bellesprit.com/to-shatter-glass/ [Sun Jul 12 18:13:52.494950 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtwBMANaV5i2_BLQoZ9gAAAFE"] [Sun Jul 12 18:13:52.499005 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtv1_56DeKknhy7sMC9wAAAXQ"] [Sun Jul 12 18:13:52.573450 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtv1_56DeKknhy7sMC_AAAASc"], referer: http://67.222.38.115/flowable-rest/service/management/engine [Sun Jul 12 18:13:52.668466 2026] [security2:error] [pid 960377:tid 960466] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/settings.py.old"] [unique_id "alQtwBMANaV5i2_BLQoZ_AAAfFc"] [Sun Jul 12 18:13:52.737297 2026] [security2:error] [pid 967714:tid 967960] [client 168.100.149.215:31922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9165/bargainor/2308_capnoides.jsp"] [unique_id "alQtwF_56DeKknhy7sMDHgAAAXM"] [Sun Jul 12 18:13:52.825977 2026] [security2:error] [pid 979474:tid 979625] [client 20.210.108.71:62358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/theme-templates.php"] [unique_id "alQtwHTrIlbXpLXvkNcEBwAAAJU"], referer: binance.com [Sun Jul 12 18:13:52.916794 2026] [security2:error] [pid 979474:tid 979730] [client 216.244.66.226:51136] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/robots.txt"] [unique_id "alQtwHTrIlbXpLXvkNcEDgAAAP0"] [Sun Jul 12 18:13:52.917105 2026] [security2:error] [pid 979474:tid 979730] [client 216.244.66.226:51136] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.batterie-pc-portables.fr"] [uri "/robots.txt"] [unique_id "alQtwHTrIlbXpLXvkNcEDgAAAP0"] [Sun Jul 12 18:13:52.989738 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtwBMANaV5i2_BLQoZ8QAAbis"] [Sun Jul 12 18:13:53.101460 2026] [security2:error] [pid 979474:tid 979723] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtwHTrIlbXpLXvkNcECgAAAPY"] [Sun Jul 12 18:13:53.107848 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_9gAAASs"] [Sun Jul 12 18:13:53.139065 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtnl_56DeKknhy7sP_qwABSDQ"] [Sun Jul 12 18:13:53.278253 2026] [security2:error] [pid 960377:tid 960384] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/azure.php.old"] [unique_id "alQtwRMANaV5i2_BLQoaCAAAKgY"] [Sun Jul 12 18:13:53.295649 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:53.296262 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:53.457887 2026] [security2:error] [pid 960377:tid 960485] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/gitlab.php.bak"] [unique_id "alQtwRMANaV5i2_BLQoaCwAAJ2o"] [Sun Jul 12 18:13:53.533935 2026] [security2:error] [pid 960377:tid 960520] [client 114.119.131.93:63857] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lizatterbury.com"] [uri "/sparrow-portfolio-categories/fashionbeauty"] [unique_id "alQtwRMANaV5i2_BLQoaDAAAAAw"], referer: https://lizatterbury.com/sparrow-portfolio-categories/fashionbeauty [Sun Jul 12 18:13:53.684527 2026] [security2:error] [pid 979474:tid 979718] [client 179.184.50.205:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtwHTrIlbXpLXvkNcECwAAAPE"] [Sun Jul 12 18:13:53.710383 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:38282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/helper/backend/phpinfo.php"] [unique_id "alQtwV_56DeKknhy7sMDIgAAAYQ"] [Sun Jul 12 18:13:53.760893 2026] [security2:error] [pid 979474:tid 979687] [client 114.119.156.55:46787] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "connorpresbyterianchurch.org"] [uri "/sermons"] [unique_id "alQtwXTrIlbXpLXvkNcEFwAAANI"], referer: https://connorpresbyterianchurch.org/sermons?service=1&preacher=43&series=5 [Sun Jul 12 18:13:53.964493 2026] [security2:error] [pid 967714:tid 967922] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtwV_56DeKknhy7sMDJAAAAU0"] [Sun Jul 12 18:13:54.024297 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtwRMANaV5i2_BLQoaAwAAYHA"] [Sun Jul 12 18:13:54.047773 2026] [security2:error] [pid 967714:tid 967975] [client 168.100.149.232:26368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9230/bargainor/2308_deft.jsp"] [unique_id "alQtwl_56DeKknhy7sMDLgAAAYI"] [Sun Jul 12 18:13:54.091954 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:38270] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/helper/info.php"] [unique_id "alQtwhMANaV5i2_BLQoaEAAAAFI"] [Sun Jul 12 18:13:54.141733 2026] [security2:error] [pid 960377:tid 960398] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/connection.php.swp"] [unique_id "alQtwhMANaV5i2_BLQoaEQAAORQ"] [Sun Jul 12 18:13:54.161211 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:54.161921 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:54.164367 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMABQAAAS0"] [Sun Jul 12 18:13:54.178502 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/content/.env"] [unique_id "alQtwl_56DeKknhy7sMDMwABeF4"], referer: http://67.222.42.11/content/.env [Sun Jul 12 18:13:54.183686 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/content/.env"] [unique_id "alQtwl_56DeKknhy7sMDMgABeGU"] [Sun Jul 12 18:13:54.255844 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/core/.env"] [unique_id "alQtwl_56DeKknhy7sMDNQABhBg"] [Sun Jul 12 18:13:54.260752 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/core/persistence/.env"] [unique_id "alQtwl_56DeKknhy7sMDNwABhBw"] [Sun Jul 12 18:13:54.292750 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/counterblockd/.env"] [unique_id "alQtwl_56DeKknhy7sMDOgABEW4"] [Sun Jul 12 18:13:54.309870 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTZxaHpwLTg4MDkvNnEtMTM2NDEvcWh6cA=="] [unique_id "alQtwhMANaV5i2_BLQoaFQAAABo"] [Sun Jul 12 18:13:54.316374 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:38256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/html/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDPgAAAXA"] [Sun Jul 12 18:13:54.321189 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cp/.env"] [unique_id "alQtwl_56DeKknhy7sMDPwABCmE"] [Sun Jul 12 18:13:54.405923 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/core/persistence/.env"] [unique_id "alQtwl_56DeKknhy7sMDQgABWic"], referer: http://67.222.42.11/core/persistence/.env [Sun Jul 12 18:13:54.406533 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/core/.env"] [unique_id "alQtwl_56DeKknhy7sMDQQABWmQ"], referer: http://67.222.42.11/core/.env [Sun Jul 12 18:13:54.406739 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/crm/.env"] [unique_id "alQtwl_56DeKknhy7sMDQwABWn0"] [Sun Jul 12 18:13:54.412691 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/crm/crm/info.php"] [unique_id "alQtwl_56DeKknhy7sMDRAABdU8"] [Sun Jul 12 18:13:54.415841 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/crm/info.php"] [unique_id "alQtwl_56DeKknhy7sMDRQABdQE"] [Sun Jul 12 18:13:54.417508 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:41838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/crm/crm/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcEJwAAALE"] [Sun Jul 12 18:13:54.428397 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:41826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/crm/info.php"] [unique_id "alQtwl_56DeKknhy7sMDRgAAAVg"] [Sun Jul 12 18:13:54.432394 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/counterblockd/.env"] [unique_id "alQtwl_56DeKknhy7sMDRwABTWI"], referer: http://67.222.42.11/counterblockd/.env [Sun Jul 12 18:13:54.433736 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cron/development/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDSAABTTg"] [Sun Jul 12 18:13:54.459294 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cron/services/info.php"] [unique_id "alQtwl_56DeKknhy7sMDSQABHls"] [Sun Jul 12 18:13:54.462083 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:41824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cron/development/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDTAAAAXw"] [Sun Jul 12 18:13:54.465140 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cronlab/.env"] [unique_id "alQtwl_56DeKknhy7sMDSgABHjk"] [Sun Jul 12 18:13:54.465607 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cp/.env"] [unique_id "alQtwl_56DeKknhy7sMDTQABHi8"], referer: http://67.222.42.11/cp/.env [Sun Jul 12 18:13:54.481223 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/current/crm/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDTgABJ18"] [Sun Jul 12 18:13:54.491077 2026] [security2:error] [pid 967714:tid 967775] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/current/develop/info.php"] [unique_id "alQtwl_56DeKknhy7sMDUAABGjE"] [Sun Jul 12 18:13:54.511010 2026] [proxy:error] [pid 967714:tid 967982] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:54.511464 2026] [proxy_http:error] [pid 967714:tid 967982] [client 193.181.178.44:57679] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:54.516507 2026] [proxy:error] [pid 967714:tid 967982] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:13:54.516801 2026] [proxy_http:error] [pid 967714:tid 967982] [client 193.181.178.44:57679] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:13:54.523977 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/current/laravel/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDVgABXD0"] [Sun Jul 12 18:13:54.542722 2026] [security2:error] [pid 979474:tid 979651] [client 62.171.167.118:41830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/cron/services/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcELQAAAK8"] [Sun Jul 12 18:13:54.543989 2026] [security2:error] [pid 967714:tid 967764] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/crm/.env"] [unique_id "alQtwl_56DeKknhy7sMDWAABgyY"], referer: http://67.222.42.11/crm/.env [Sun Jul 12 18:13:54.561145 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/admin/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDXAABLVU"] [Sun Jul 12 18:13:54.572378 2026] [security2:error] [pid 967714:tid 967759] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDXQABZCE"] [Sun Jul 12 18:13:54.596113 2026] [security2:error] [pid 979474:tid 979670] [client 62.171.167.118:59080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/current/laravel/phpinfo.php"] [unique_id "alQtwnTrIlbXpLXvkNcEMQAAAMI"] [Sun Jul 12 18:13:54.618022 2026] [security2:error] [pid 967714:tid 967973] [client 62.171.167.118:59118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/admin/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDXwAAAYA"] [Sun Jul 12 18:13:54.618789 2026] [security2:error] [pid 979474:tid 979667] [client 62.171.167.118:59126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/phpinfo.php"] [unique_id "alQtwnTrIlbXpLXvkNcEMgAAAL8"] [Sun Jul 12 18:13:54.634896 2026] [security2:error] [pid 979474:tid 979658] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtwnTrIlbXpLXvkNcEJQAAALY"] [Sun Jul 12 18:13:54.648217 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/test.php"] [unique_id "alQtwl_56DeKknhy7sMDYQABTzU"] [Sun Jul 12 18:13:54.661516 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboardadmin/info.php"] [unique_id "alQtwl_56DeKknhy7sMDYgABET4"] [Sun Jul 12 18:13:54.687398 2026] [security2:error] [pid 979474:tid 979683] [client 62.171.167.118:59144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboard/test.php"] [unique_id "alQtwnTrIlbXpLXvkNcENAAAAM4"] [Sun Jul 12 18:13:54.688449 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/cronlab/.env"] [unique_id "alQtwl_56DeKknhy7sMDYwABCns"], referer: http://67.222.42.11/cronlab/.env [Sun Jul 12 18:13:54.690266 2026] [security2:error] [pid 979474:tid 979712] [client 62.171.167.118:59138] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dashboardadmin/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcENQAAAOs"] [Sun Jul 12 18:13:54.698655 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/database/.env"] [unique_id "alQtwl_56DeKknhy7sMDZAABUVM"] [Sun Jul 12 18:13:54.789891 2026] [security2:error] [pid 967714:tid 967737] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/dataset1/.env"] [unique_id "alQtwl_56DeKknhy7sMDbgABTQs"] [Sun Jul 12 18:13:54.831481 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/database/.env"] [unique_id "alQtwl_56DeKknhy7sMDcgABfDM"], referer: http://67.222.42.11/database/.env [Sun Jul 12 18:13:54.878447 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:59052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/default/help/phpinfo.php"] [unique_id "alQtwnTrIlbXpLXvkNcEPgAAALo"] [Sun Jul 12 18:13:54.886898 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/dataset1/.env"] [unique_id "alQtwl_56DeKknhy7sMDdgABHgg"], referer: http://67.222.42.11/dataset1/.env [Sun Jul 12 18:13:54.911859 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/default/help/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMDdwABJxQ"] [Sun Jul 12 18:13:54.927801 2026] [security2:error] [pid 979474:tid 979694] [client 62.171.167.118:59134] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/helper/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcEQAAAANk"] [Sun Jul 12 18:13:54.934234 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/helper/info.php"] [unique_id "alQtwl_56DeKknhy7sMDegABGk4"] [Sun Jul 12 18:13:54.934834 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/lara/info.php"] [unique_id "alQtwl_56DeKknhy7sMDewABGmo"] [Sun Jul 12 18:13:54.936656 2026] [security2:error] [pid 967714:tid 967861] [client 62.171.167.118:59130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/lara/info.php"] [unique_id "alQtwl_56DeKknhy7sMDfAAAARA"] [Sun Jul 12 18:13:54.960535 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:59218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/laravel/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcEQQAAALw"] [Sun Jul 12 18:13:54.964953 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/laravel/info.php"] [unique_id "alQtwl_56DeKknhy7sMDfgABgmc"] [Sun Jul 12 18:13:54.970184 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:59216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/services/info.php"] [unique_id "alQtwnTrIlbXpLXvkNcEQgAAAPM"] [Sun Jul 12 18:13:54.977066 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/demo/services/info.php"] [unique_id "alQtwl_56DeKknhy7sMDfwABXCI"] [Sun Jul 12 18:13:55.015247 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/deploy/.env.bak"] [unique_id "alQtw1_56DeKknhy7sMDgAABLUg"] [Sun Jul 12 18:13:55.022888 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/api/phpinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDgQABQyg"] [Sun Jul 12 18:13:55.027081 2026] [authz_core:error] [pid 979474:tid 979696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:55.027420 2026] [security2:error] [pid 979474:tid 979707] [client 62.171.167.118:59186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/api/phpinfo.php"] [unique_id "alQtw3TrIlbXpLXvkNcERAAAAOY"] [Sun Jul 12 18:13:55.027639 2026] [authz_core:error] [pid 979474:tid 979696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:55.047067 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:59094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/backup/phpinfo.php"] [unique_id "alQtwxMANaV5i2_BLQoaJAAAAG0"] [Sun Jul 12 18:13:55.047505 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/backup/phpinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDggABZGw"] [Sun Jul 12 18:13:55.056362 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtwl_56DeKknhy7sMDcwAAAVs"] [Sun Jul 12 18:13:55.062824 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/dashboard/phpinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDhgABYUY"] [Sun Jul 12 18:13:55.063401 2026] [security2:error] [pid 979474:tid 979726] [client 62.171.167.118:59064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/dashboard/phpinfo.php"] [unique_id "alQtw3TrIlbXpLXvkNcERgAAAPk"] [Sun Jul 12 18:13:55.067766 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/dev/info.php"] [unique_id "alQtw1_56DeKknhy7sMDhwABYRs"] [Sun Jul 12 18:13:55.069265 2026] [security2:error] [pid 979474:tid 979734] [client 62.171.167.118:59170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/dev/info.php"] [unique_id "alQtw3TrIlbXpLXvkNcESAAAAQE"] [Sun Jul 12 18:13:55.078166 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_-AAAAWI"] [Sun Jul 12 18:13:55.095119 2026] [security2:error] [pid 979474:tid 979735] [client 62.171.167.118:59156] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/infophp.php"] [unique_id "alQtw3TrIlbXpLXvkNcESQAAAQI"] [Sun Jul 12 18:13:55.095228 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP__QAAAT4"], referer: http://67.222.40.58/dev/.env.dev [Sun Jul 12 18:13:55.113887 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/infophp.php"] [unique_id "alQtw1_56DeKknhy7sMDiAABEXo"] [Sun Jul 12 18:13:55.114690 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/services/phpinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDiQABEXM"] [Sun Jul 12 18:13:55.119064 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtwhMANaV5i2_BLQoaEgAABhk"] [Sun Jul 12 18:13:55.124411 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:59106] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/services/phpinfo.php"] [unique_id "alQtwxMANaV5i2_BLQoaJQAAAHA"] [Sun Jul 12 18:13:55.131363 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/deploy/.env.bak"] [unique_id "alQtw1_56DeKknhy7sMDigABcAw"], referer: http://67.222.42.11/deploy/.env.bak [Sun Jul 12 18:13:55.172950 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/deploy/test.php"] [unique_id "alQtw1_56DeKknhy7sMDiwABClc"] [Sun Jul 12 18:13:55.188937 2026] [security2:error] [pid 960377:tid 960458] [remote 103.133.216.219:34010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.216.133.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lcmha.org"] [uri "/wp-login.php"] [unique_id "alQtwxMANaV5i2_BLQoaJgAAPE8"] [Sun Jul 12 18:13:55.210975 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtwBMANaV5i2_BLQoZ-wAAACk"] [Sun Jul 12 18:13:55.335133 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtwF_56DeKknhy7sMDFQAAATg"] [Sun Jul 12 18:13:55.336115 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtwF_56DeKknhy7sMDFwAAAUI"], referer: http://67.222.38.115/flower/api/tasks [Sun Jul 12 18:13:55.452556 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:59240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dev/help/phpinfo.php"] [unique_id "alQtw3TrIlbXpLXvkNcEUAAAAKo"] [Sun Jul 12 18:13:55.499527 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dev/help/phpinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDqAABWUo"] [Sun Jul 12 18:13:55.502994 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:59200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dev/pinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDqQAAAVs"] [Sun Jul 12 18:13:55.561523 2026] [security2:error] [pid 979474:tid 979699] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtwnTrIlbXpLXvkNcEOwAAAN4"] [Sun Jul 12 18:13:55.561578 2026] [security2:error] [pid 979474:tid 979699] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtwnTrIlbXpLXvkNcEOwAAAN4"] [Sun Jul 12 18:13:55.562913 2026] [security2:error] [pid 967714:tid 967977] [client 65.21.113.206:56758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTZxaHpwLTg4MDkvNnEtMTM2NDEvcWh6cA=="] [unique_id "alQtwl_56DeKknhy7sMDbwAAAYQ"] [Sun Jul 12 18:13:55.568124 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/dev/pinfo.php"] [unique_id "alQtw1_56DeKknhy7sMDrQABIgI"] [Sun Jul 12 18:13:55.578178 2026] [security2:error] [pid 979474:tid 979731] [client 94.187.171.125:56152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtw3TrIlbXpLXvkNcEUwAAAP4"] [Sun Jul 12 18:13:55.578475 2026] [security2:error] [pid 979474:tid 979731] [client 94.187.171.125:56152] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtw3TrIlbXpLXvkNcEUwAAAP4"] [Sun Jul 12 18:13:55.606518 2026] [security2:error] [pid 979474:tid 979644] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtw3TrIlbXpLXvkNcETQAAAKg"] [Sun Jul 12 18:13:55.620033 2026] [security2:error] [pid 979474:tid 979626] [client 62.171.167.118:59248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/develop/info.php"] [unique_id "alQtw3TrIlbXpLXvkNcEVQAAAJY"] [Sun Jul 12 18:13:55.698311 2026] [security2:error] [pid 967714:tid 967812] [remote 62.171.167.118:48884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/develop/info.php"] [unique_id "alQtw1_56DeKknhy7sMDsAABgFY"] [Sun Jul 12 18:13:55.778830 2026] [security2:error] [pid 960377:tid 960421] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rust-app/client/.env"] [unique_id "alQtwxMANaV5i2_BLQoaNQAAJio"] [Sun Jul 12 18:13:55.845623 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:55.846149 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:55.947488 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/token.php.bak"] [unique_id "alQtwxMANaV5i2_BLQoaNgAANUs"] [Sun Jul 12 18:13:56.164443 2026] [security2:error] [pid 967714:tid 967910] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sP_9AAAAUE"] [Sun Jul 12 18:13:56.176133 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtwF_56DeKknhy7sMDGAAAAXc"] [Sun Jul 12 18:13:56.332770 2026] [security2:error] [pid 960377:tid 960527] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtwxMANaV5i2_BLQoaKwAAEEA"] [Sun Jul 12 18:13:56.480351 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxF_56DeKknhy7sMDugAAATc"] [Sun Jul 12 18:13:56.533607 2026] [security2:error] [pid 967714:tid 967957] [client 88.167.113.26:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQtw1_56DeKknhy7sMDtwAAAXA"] [Sun Jul 12 18:13:56.598002 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:56.598483 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:56.629982 2026] [security2:error] [pid 979474:tid 979659] [client 62.171.167.118:38238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info.php/"] [unique_id "alQtxHTrIlbXpLXvkNcEYQAAALc"] [Sun Jul 12 18:13:56.682365 2026] [security2:error] [pid 967714:tid 967942] [client 168.100.149.22:57886] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9295/bargainor/2308_did.jsp"] [unique_id "alQtxF_56DeKknhy7sMDxgAAAWE"] [Sun Jul 12 18:13:56.881088 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxF_56DeKknhy7sMDxQAAAWI"] [Sun Jul 12 18:13:57.095714 2026] [security2:error] [pid 960377:tid 960621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrRMANaV5i2_BLQoXhgAAAHE"], referer: http://67.222.40.58/deployment/.env.local [Sun Jul 12 18:13:57.098993 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtxBMANaV5i2_BLQoaOgAAYDg"] [Sun Jul 12 18:13:57.346232 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:57.346742 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:57.364544 2026] [security2:error] [pid 979474:tid 979665] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxXTrIlbXpLXvkNcEaQAAAL0"] [Sun Jul 12 18:13:57.457821 2026] [security2:error] [pid 967714:tid 967934] [client 20.210.108.71:50028] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/utf8.php"] [unique_id "alQtxV_56DeKknhy7sMDzwAAAVk"], referer: binance.com [Sun Jul 12 18:13:57.535397 2026] [security2:error] [pid 960377:tid 960415] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rails_app/.env"] [unique_id "alQtxRMANaV5i2_BLQoaRwAARCQ"] [Sun Jul 12 18:13:57.741717 2026] [security2:error] [pid 979474:tid 979713] [client 62.171.167.118:38254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info/info.php"] [unique_id "alQtxXTrIlbXpLXvkNcEcQAAAOw"] [Sun Jul 12 18:13:57.889590 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:43218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/infos.php"] [unique_id "alQtxV_56DeKknhy7sMD3AAAAUU"] [Sun Jul 12 18:13:57.942478 2026] [security2:error] [pid 967714:tid 967906] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxV_56DeKknhy7sMD1wAAAT0"] [Sun Jul 12 18:13:58.027652 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtxRMANaV5i2_BLQoaRAAACGM"] [Sun Jul 12 18:13:58.036909 2026] [security2:error] [pid 967714:tid 967965] [client 125.167.21.72:61514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtxl_56DeKknhy7sMD4gAAAXg"] [Sun Jul 12 18:13:58.037202 2026] [security2:error] [pid 967714:tid 967965] [client 125.167.21.72:61514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQtxl_56DeKknhy7sMD4gAAAXg"] [Sun Jul 12 18:13:58.052580 2026] [security2:error] [pid 967714:tid 967861] [client 168.100.149.53:59028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9360/bargainor/2308_delphian.jsp"] [unique_id "alQtxl_56DeKknhy7sMD4wAAARA"] [Sun Jul 12 18:13:58.174042 2026] [security2:error] [pid 979474:tid 979704] [client 110.249.202.108:27284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.mattbeyer.com"] [uri "/robots.txt"] [unique_id "alQtxnTrIlbXpLXvkNcEdwAAAOM"] [Sun Jul 12 18:13:58.225601 2026] [security2:error] [pid 960377:tid 960514] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTctMjIzOS83OHkvNDA1MzMtOHl3ag=="] [unique_id "alQtxhMANaV5i2_BLQoaUQAAAAY"] [Sun Jul 12 18:13:58.234379 2026] [authz_core:error] [pid 967714:tid 967964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:58.235063 2026] [authz_core:error] [pid 967714:tid 967964] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:58.336430 2026] [security2:error] [pid 960377:tid 960563] [client 24.203.79.110:55819] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtxhMANaV5i2_BLQoaVAAAADc"] [Sun Jul 12 18:13:58.336957 2026] [security2:error] [pid 960377:tid 960563] [client 24.203.79.110:55819] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQtxhMANaV5i2_BLQoaVAAAADc"] [Sun Jul 12 18:13:58.361043 2026] [security2:error] [pid 967714:tid 967967] [client 114.119.150.215:29197] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "madrasmediamarketing.com"] [uri "/category/content-marketing-thoughts/page/2/"] [unique_id "alQtxl_56DeKknhy7sMD6QAAAXo"], referer: http://madrasmediamarketing.com/category/content-marketing-thoughts [Sun Jul 12 18:13:58.521561 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxhMANaV5i2_BLQoaTwAAAG4"] [Sun Jul 12 18:13:58.670866 2026] [security2:error] [pid 967714:tid 967961] [client 114.119.134.226:62421] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mackinstyle.com"] [uri "/tag/lonelyplanet/"] [unique_id "alQtxl_56DeKknhy7sMD7AAAAXQ"], referer: https://mackinstyle.com/2017/06/09/reason-visit-portugal/ [Sun Jul 12 18:13:58.894882 2026] [security2:error] [pid 960377:tid 960629] [client 114.119.146.141:22769] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.stephenspublishing.com"] [uri "/neon-glow-sticks-fire-safety-theme-stock-p-889.html"] [unique_id "alQtxhMANaV5i2_BLQoaXAAAAHk"], referer: https://www.stephenspublishing.com/neon-glow-sticks-fire-safety-theme-stock-p-889.html [Sun Jul 12 18:13:58.963275 2026] [security2:error] [pid 967714:tid 967924] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtxl_56DeKknhy7sMD7QAAAU8"] [Sun Jul 12 18:13:59.098173 2026] [authz_core:error] [pid 979474:tid 979724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:13:59.098972 2026] [authz_core:error] [pid 979474:tid 979724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:13:59.244728 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtxhMANaV5i2_BLQoaTgAASgE"] [Sun Jul 12 18:13:59.452440 2026] [security2:error] [pid 967714:tid 967973] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtxl_56DeKknhy7sMD7wAAAYA"] [Sun Jul 12 18:13:59.453583 2026] [security2:error] [pid 979474:tid 979708] [client 65.21.113.206:56762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTctMjIzOS83OHkvNDA1MzMtOHl3ag=="] [unique_id "alQtxnTrIlbXpLXvkNcEfAAAAOc"] [Sun Jul 12 18:13:59.454267 2026] [security2:error] [pid 967714:tid 967973] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtxl_56DeKknhy7sMD7wAAAYA"] [Sun Jul 12 18:13:59.940616 2026] [authz_core:error] [pid 979474:tid 979644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:00.011889 2026] [autoindex:error] [pid 967714:tid 967868] [client 152.53.100.131:0] AH01276: Cannot serve directory /home2/cecillin/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:14:00.396705 2026] [authz_core:error] [pid 979474:tid 979644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:00.060212 2026] [security2:error] [pid 967714:tid 967896] [client 184.154.139.40:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "alQtyF_56DeKknhy7sMEAwAAATM"] [Sun Jul 12 18:14:00.061525 2026] [security2:error] [pid 967714:tid 967862] [client 184.154.139.40:57956] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "alQtyF_56DeKknhy7sMEAAAAARE"] [Sun Jul 12 18:14:00.135996 2026] [security2:error] [pid 967714:tid 967904] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrV_56DeKknhy7sMAAAAAATs"] [Sun Jul 12 18:14:00.147253 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrhMANaV5i2_BLQoXkQAAABI"] [Sun Jul 12 18:14:00.177332 2026] [security2:error] [pid 979474:tid 979728] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw3TrIlbXpLXvkNcESwAAAPs"], referer: http://67.222.38.115/flower/api/workers [Sun Jul 12 18:14:00.220339 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw1_56DeKknhy7sMDoQAAASc"] [Sun Jul 12 18:14:00.378743 2026] [security2:error] [pid 967714:tid 967878] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtx1_56DeKknhy7sMD9AAAASE"] [Sun Jul 12 18:14:00.440521 2026] [security2:error] [pid 979474:tid 979691] [client 184.154.139.40:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/wp-content/plugins/themegrill-demo-importer/readme.txt"] [unique_id "alQtyHTrIlbXpLXvkNcEkgAAANY"] [Sun Jul 12 18:14:00.442045 2026] [security2:error] [pid 967714:tid 967962] [client 184.154.139.40:58146] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/wp-content/plugins/themegrill-demo-importer/readme.txt"] [unique_id "alQtyF_56DeKknhy7sMECgAAAXU"] [Sun Jul 12 18:14:00.652036 2026] [security2:error] [pid 967714:tid 967969] [client 114.119.135.35:46991] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.colonialvw.com"] [uri "/vehicle-details/used-2017-volkswagen-golf-alltrack-westborough-ma-id-37117502"] [unique_id "alQtyF_56DeKknhy7sMEDgAAAXw"], referer: https://www.colonialvw.com/vehicle-details/used-2017-volkswagen-golf-alltrack-wellesley-ma-id-33872773 [Sun Jul 12 18:14:00.730033 2026] [security2:error] [pid 967714:tid 967887] [client 168.100.149.217:56016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9425/bargainor/2308_anisodactyli.jsp"] [unique_id "alQtyF_56DeKknhy7sMEDwAAASo"] [Sun Jul 12 18:14:00.791651 2026] [security2:error] [pid 979474:tid 979675] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtyHTrIlbXpLXvkNcEmAAAAMc"] [Sun Jul 12 18:14:01.130011 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw3TrIlbXpLXvkNcETwAAAJk"] [Sun Jul 12 18:14:01.132237 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:43222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/lara/backend/phpinfo.php"] [unique_id "alQtyXTrIlbXpLXvkNcEnAAAAK4"] [Sun Jul 12 18:14:01.169686 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtxxMANaV5i2_BLQoaaAAAOS8"] [Sun Jul 12 18:14:01.216049 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw1_56DeKknhy7sMDpQAAAUw"] [Sun Jul 12 18:14:01.257613 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw1_56DeKknhy7sMDpgAAAVw"], referer: http://67.222.38.115/flowise/api/v1/chatflows [Sun Jul 12 18:14:01.263338 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:01.263894 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:01.265934 2026] [security2:error] [pid 960377:tid 960550] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtwxMANaV5i2_BLQoaLQAAACo"], referer: http://67.222.38.115/flowise/api/v1/assistants [Sun Jul 12 18:14:01.350390 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtw1_56DeKknhy7sMDowAAASs"], referer: http://67.222.38.115/flowise/api/v1/apikey [Sun Jul 12 18:14:01.463120 2026] [security2:error] [pid 967714:tid 967961] [client 114.119.132.227:35269] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.portables-batterie.fr"] [uri "/dell/MT264-portable-batterie.htm"] [unique_id "alQtyV_56DeKknhy7sMEJwAAAXQ"], referer: https://portables-batterie.fr/ [Sun Jul 12 18:14:01.466824 2026] [security2:error] [pid 967714:tid 967973] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtyF_56DeKknhy7sMEHAAAAYA"] [Sun Jul 12 18:14:01.470091 2026] [security2:error] [pid 967714:tid 967884] [client 198.235.24.126:63084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.24.235.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/shell.php"] [unique_id "alQtyV_56DeKknhy7sMEKAAAASc"] [Sun Jul 12 18:14:01.641321 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/azure-credentials.backup"] [unique_id "alQtyRMANaV5i2_BLQoafQAAJ0c"] [Sun Jul 12 18:14:01.804141 2026] [security2:error] [pid 967714:tid 967890] [client 91.160.46.1:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtyV_56DeKknhy7sMEIgAAAS0"] [Sun Jul 12 18:14:01.818213 2026] [security2:error] [pid 960377:tid 960387] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dashboard-app/frontend/.env"] [unique_id "alQtyRMANaV5i2_BLQoaggAADQk"] [Sun Jul 12 18:14:02.098173 2026] [security2:error] [pid 979474:tid 979625] [client 168.100.149.248:48372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9490/bargainor/2308_birefraction.jsp"] [unique_id "alQtynTrIlbXpLXvkNcEtAAAAJU"] [Sun Jul 12 18:14:02.103465 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrRMANaV5i2_BLQoXhQAAAEI"], referer: http://67.222.40.58/deployment/.env.dev [Sun Jul 12 18:14:02.103821 2026] [security2:error] [pid 960377:tid 960588] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoYCQAAAFA"] [Sun Jul 12 18:14:02.225425 2026] [security2:error] [pid 979474:tid 979734] [client 114.119.134.107:21591] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.musecology.com"] [uri "/images/prettyPhoto/"] [unique_id "alQtynTrIlbXpLXvkNcEtwAAAQE"], referer: http://www.musecology.com/images/prettyPhoto/?C=D%3BO%3DA [Sun Jul 12 18:14:02.294057 2026] [authz_core:error] [pid 960377:tid 960566] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:02.294799 2026] [authz_core:error] [pid 960377:tid 960566] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:02.362509 2026] [security2:error] [pid 979474:tid 979727] [client 20.63.87.152:8590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/.dj/index.php"] [unique_id "alQtynTrIlbXpLXvkNcEugAAAPo"] [Sun Jul 12 18:14:02.383223 2026] [security2:error] [pid 979474:tid 979620] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuXTrIlbXpLXvkNcDowAAAJA"] [Sun Jul 12 18:14:02.476827 2026] [security2:error] [pid 967714:tid 967870] [client 23.161.169.125:43166] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuF_56DeKknhy7sMB2AAAARk"] [Sun Jul 12 18:14:02.542978 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtyRMANaV5i2_BLQoadQAAJVg"] [Sun Jul 12 18:14:02.558914 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtyhMANaV5i2_BLQoahQAAAEo"] [Sun Jul 12 18:14:02.583703 2026] [security2:error] [pid 960377:tid 960580] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTctNTA1OC83OHkvNDA1MzMtOHl3ag=="] [unique_id "alQtyhMANaV5i2_BLQoaigAAAEg"] [Sun Jul 12 18:14:02.647464 2026] [security2:error] [pid 979474:tid 979736] [client 84.17.60.236:2576] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQtynTrIlbXpLXvkNcEwQAAAQM"] [Sun Jul 12 18:14:02.717570 2026] [security2:error] [pid 979474:tid 979731] [client 198.96.88.81:45628] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:(?:(?:url|src|href|lowsrc)[\\\\s]*=)|(?:url[\\\\s]*[\\\\(]))[\\\\s]*[\\\\'\\"]*javascript[\\\\:]" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1012"] [id "340112"] [rev "3"] [msg "Atomicorp.com WAF Rules: cross site scripting attempt to execute Javascript code"] [severity "CRITICAL"] [hostname "box2216.bluehost.com"] [uri "/client_dialog/confirm/"] [unique_id "alQtynTrIlbXpLXvkNcExAAAAP4"] [Sun Jul 12 18:14:02.955536 2026] [security2:error] [pid 967714:tid 967964] [client 84.17.60.236:26715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 236.60.17.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gourmetcaviarcatering.com"] [uri "/xmlrpc.php"] [unique_id "alQtyl_56DeKknhy7sMEPgAAAXc"] [Sun Jul 12 18:14:03.019020 2026] [security2:error] [pid 967714:tid 967910] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtyl_56DeKknhy7sMEOQAAAUE"] [Sun Jul 12 18:14:03.067743 2026] [security2:error] [pid 967714:tid 967961] [client 20.63.87.152:17497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/.trash7206/index.php"] [unique_id "alQty1_56DeKknhy7sMEQgAAAXQ"] [Sun Jul 12 18:14:03.167434 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:03.168158 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:03.430785 2026] [security2:error] [pid 979474:tid 979670] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtyXTrIlbXpLXvkNcEoAAAAMI"], referer: http://67.222.38.115/flowise/api/v1/tools [Sun Jul 12 18:14:03.435717 2026] [security2:error] [pid 967714:tid 967960] [client 84.17.60.236:42914] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQty1_56DeKknhy7sMETQAAAXM"] [Sun Jul 12 18:14:03.471080 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtyXTrIlbXpLXvkNcEoQAAALs"] [Sun Jul 12 18:14:03.490618 2026] [cgid:error] [pid 960377:tid 960396] [remote 69.171.231.23:40760] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/versatil/public_html/404.shtml [Sun Jul 12 18:14:03.573656 2026] [security2:error] [pid 960377:tid 960526] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoamAAAABI"] [Sun Jul 12 18:14:03.727900 2026] [security2:error] [pid 967714:tid 967868] [client 84.17.60.236:42926] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQty1_56DeKknhy7sMEUQAAARc"] [Sun Jul 12 18:14:03.950659 2026] [authz_core:error] [pid 960377:tid 960599] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:04.379214 2026] [authz_core:error] [pid 960377:tid 960599] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:03.966108 2026] [security2:error] [pid 979474:tid 979635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQty3TrIlbXpLXvkNcEzwAAAJ8"] [Sun Jul 12 18:14:04.127116 2026] [security2:error] [pid 967714:tid 967922] [client 62.171.167.118:43246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/lara/current/phpinfo.php"] [unique_id "alQtzF_56DeKknhy7sMEWgAAAU0"] [Sun Jul 12 18:14:04.127258 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtrl_56DeKknhy7sMAJgAAAYc"], referer: http://67.222.40.58/dev/.env.dist [Sun Jul 12 18:14:04.383246 2026] [security2:error] [pid 967714:tid 967934] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtzF_56DeKknhy7sMEXQAAAVk"] [Sun Jul 12 18:14:04.418295 2026] [security2:error] [pid 960377:tid 960598] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuhMANaV5i2_BLQoZeAAAAFo"] [Sun Jul 12 18:14:04.446004 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/developer/.env.bak"] [unique_id "alQtzBMANaV5i2_BLQoaqwAAJno"] [Sun Jul 12 18:14:04.450561 2026] [security2:error] [pid 960377:tid 960473] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/developer/.env"] [unique_id "alQtzBMANaV5i2_BLQoaqgAAJl4"] [Sun Jul 12 18:14:04.451242 2026] [security2:error] [pid 960377:tid 960462] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/developer/.env"] [unique_id "alQtzBMANaV5i2_BLQoarQAAJlM"], referer: http://67.222.42.11/developer/.env [Sun Jul 12 18:14:04.455865 2026] [security2:error] [pid 960377:tid 960418] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/developer/.env.bak"] [unique_id "alQtzBMANaV5i2_BLQoarwAAJic"], referer: http://67.222.42.11/developer/.env.bak [Sun Jul 12 18:14:04.478876 2026] [security2:error] [pid 967714:tid 967857] [client 23.161.169.125:43146] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuV_56DeKknhy7sMB4QAAAQw"] [Sun Jul 12 18:14:04.495194 2026] [security2:error] [pid 960377:tid 960503] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/development/.env.bak"] [unique_id "alQtzBMANaV5i2_BLQoasgAAJnw"] [Sun Jul 12 18:14:04.583326 2026] [security2:error] [pid 960377:tid 960463] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQtzBMANaV5i2_BLQoauQAAPFQ"] [Sun Jul 12 18:14:04.583641 2026] [security2:error] [pid 960377:tid 960404] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/app/.env"] [unique_id "alQtzBMANaV5i2_BLQoatwAAPBo"] [Sun Jul 12 18:14:04.584198 2026] [security2:error] [pid 960377:tid 960413] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/database/.env"] [unique_id "alQtzBMANaV5i2_BLQoaugAAPCI"] [Sun Jul 12 18:14:04.618787 2026] [security2:error] [pid 960377:tid 960624] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtyhMANaV5i2_BLQoaiwAAdDo"] [Sun Jul 12 18:14:04.620990 2026] [security2:error] [pid 960377:tid 960469] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/instagram/.env"] [unique_id "alQtzBMANaV5i2_BLQoauwAAQlo"] [Sun Jul 12 18:14:04.626217 2026] [security2:error] [pid 960377:tid 960393] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/db/.env"] [unique_id "alQtzBMANaV5i2_BLQoavQAAUA8"] [Sun Jul 12 18:14:04.627152 2026] [security2:error] [pid 960377:tid 960472] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/postgres/.env"] [unique_id "alQtzBMANaV5i2_BLQoavwAAUF0"] [Sun Jul 12 18:14:04.628803 2026] [security2:error] [pid 960377:tid 960420] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/development/.env.bak"] [unique_id "alQtzBMANaV5i2_BLQoavgAAUCk"], referer: http://67.222.42.11/development/.env.bak [Sun Jul 12 18:14:04.657798 2026] [security2:error] [pid 960377:tid 960522] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoalAAAAA4"] [Sun Jul 12 18:14:04.684129 2026] [security2:error] [pid 960377:tid 960522] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoalAAAAA4"] [Sun Jul 12 18:14:04.658458 2026] [security2:error] [pid 960377:tid 960589] [client 65.21.113.206:56460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTctNTA1OC83OHkvNDA1MzMtOHl3ag=="] [unique_id "alQtyxMANaV5i2_BLQoakwAAAFE"] [Sun Jul 12 18:14:04.702826 2026] [security2:error] [pid 960377:tid 960554] [client 84.17.60.236:35578] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQtzBMANaV5i2_BLQoayAAAAC4"] [Sun Jul 12 18:14:04.703385 2026] [security2:error] [pid 979474:tid 979617] [client 168.100.149.81:50340] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9555/bargainor/2308_mediator.jsp"] [unique_id "alQtzHTrIlbXpLXvkNcE2AAAAI0"] [Sun Jul 12 18:14:04.745787 2026] [security2:error] [pid 960377:tid 960480] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/dodoswap-client/.env"] [unique_id "alQtzBMANaV5i2_BLQoazQAAWWU"] [Sun Jul 12 18:14:04.767535 2026] [security2:error] [pid 960377:tid 960499] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/app/.env"] [unique_id "alQtzBMANaV5i2_BLQoa0wAALXg"], referer: http://67.222.42.11/docker/app/.env [Sun Jul 12 18:14:04.780488 2026] [security2:error] [pid 960377:tid 960457] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQtzBMANaV5i2_BLQoa1wAASE4"], referer: http://67.222.42.11/docker/compose/withMongo/.env [Sun Jul 12 18:14:04.784777 2026] [security2:error] [pid 960377:tid 960391] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/db/.env"] [unique_id "alQtzBMANaV5i2_BLQoa2AAAZA0"], referer: http://67.222.42.11/docker/db/.env [Sun Jul 12 18:14:04.785818 2026] [security2:error] [pid 960377:tid 960476] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/downloads/.env"] [unique_id "alQtzBMANaV5i2_BLQoa2QAAZGE"] [Sun Jul 12 18:14:04.788789 2026] [security2:error] [pid 960377:tid 960395] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/database/.env"] [unique_id "alQtzBMANaV5i2_BLQoa2wAAZBE"], referer: http://67.222.42.11/docker/database/.env [Sun Jul 12 18:14:04.794454 2026] [security2:error] [pid 960377:tid 960451] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/env/.env"] [unique_id "alQtzBMANaV5i2_BLQoa3AAAZEg"] [Sun Jul 12 18:14:04.795802 2026] [security2:error] [pid 960377:tid 960492] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/docker/postgres/.env"] [unique_id "alQtzBMANaV5i2_BLQoa3gAAZHE"], referer: http://67.222.42.11/docker/postgres/.env [Sun Jul 12 18:14:04.846189 2026] [security2:error] [pid 960377:tid 960448] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/environments/local/.env"] [unique_id "alQtzBMANaV5i2_BLQoa4wAAK0U"] [Sun Jul 12 18:14:04.901450 2026] [security2:error] [pid 960377:tid 960490] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/dodoswap-client/.env"] [unique_id "alQtzBMANaV5i2_BLQoa5wAANW8"], referer: http://67.222.42.11/dodoswap-client/.env [Sun Jul 12 18:14:04.915608 2026] [security2:error] [pid 960377:tid 960427] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/downloads/.env"] [unique_id "alQtzBMANaV5i2_BLQoa6AAAGzA"], referer: http://67.222.42.11/downloads/.env [Sun Jul 12 18:14:04.919960 2026] [security2:error] [pid 960377:tid 960475] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/erp/.env"] [unique_id "alQtzBMANaV5i2_BLQoa6QAAG2A"] [Sun Jul 12 18:14:04.921389 2026] [security2:error] [pid 960377:tid 960383] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/env/.env"] [unique_id "alQtzBMANaV5i2_BLQoa6gAAGwU"], referer: http://67.222.42.11/env/.env [Sun Jul 12 18:14:04.947603 2026] [security2:error] [pid 960377:tid 960466] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/erp/.env.bak"] [unique_id "alQtzBMANaV5i2_BLQoa7QAAKFc"] [Sun Jul 12 18:14:04.956302 2026] [security2:error] [pid 960377:tid 960479] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/environments/local/.env"] [unique_id "alQtzBMANaV5i2_BLQoa8AAAAWQ"], referer: http://67.222.42.11/environments/local/.env [Sun Jul 12 18:14:04.990016 2026] [security2:error] [pid 960377:tid 960565] [client 84.17.60.236:42956] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQtzBMANaV5i2_BLQoa8gAAADk"] [Sun Jul 12 18:14:04.993817 2026] [security2:error] [pid 960377:tid 960464] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/erp/.env"] [unique_id "alQtzBMANaV5i2_BLQoa8QAACVU"], referer: http://67.222.42.11/erp/.env [Sun Jul 12 18:14:05.025492 2026] [security2:error] [pid 960377:tid 960584] [client 62.171.167.118:46642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/erp/backend/info.php"] [unique_id "alQtzRMANaV5i2_BLQoa9gAAAEw"] [Sun Jul 12 18:14:05.026503 2026] [security2:error] [pid 960377:tid 960485] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/erp/backend/info.php"] [unique_id "alQtzRMANaV5i2_BLQoa9wAABmo"] [Sun Jul 12 18:14:05.053353 2026] [security2:error] [pid 960377:tid 960389] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/erp/.env.bak"] [unique_id "alQtzRMANaV5i2_BLQoa-AAAXws"], referer: http://67.222.42.11/erp/.env.bak [Sun Jul 12 18:14:05.067840 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:46716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/erp/temp.php"] [unique_id "alQtzRMANaV5i2_BLQoa-gAAAGY"] [Sun Jul 12 18:14:05.080847 2026] [security2:error] [pid 960377:tid 960491] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/erp/temp.php"] [unique_id "alQtzRMANaV5i2_BLQoa-wAAN3A"] [Sun Jul 12 18:14:05.107058 2026] [security2:error] [pid 960377:tid 960433] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/errors/.env"] [unique_id "alQtzRMANaV5i2_BLQoa_wAAczY"] [Sun Jul 12 18:14:05.138509 2026] [core:error] [pid 967714:tid 967965] [client 8.222.225.103:35716] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:14:05.148899 2026] [security2:error] [pid 960377:tid 960453] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/example/.env"] [unique_id "alQtzRMANaV5i2_BLQobAgAAGEo"] [Sun Jul 12 18:14:05.155353 2026] [security2:error] [pid 960377:tid 960378] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "alQtzRMANaV5i2_BLQobAwAAGAA"] [Sun Jul 12 18:14:05.167498 2026] [security2:error] [pid 960377:tid 960458] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQtzRMANaV5i2_BLQobCQAAGE8"] [Sun Jul 12 18:14:05.171968 2026] [security2:error] [pid 960377:tid 960458] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/sdl-first/.env"] [unique_id "alQtzRMANaV5i2_BLQobCwAAGE8"] [Sun Jul 12 18:14:05.189366 2026] [security2:error] [pid 967714:tid 967965] [client 8.222.225.103:35716] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "173.254.17.192"] [uri "/400.shtml"] [unique_id "alQtzV_56DeKknhy7sMEgAAAAXg"] [Sun Jul 12 18:14:05.189573 2026] [security2:error] [pid 960377:tid 960482] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/01-simple-model/.env"] [unique_id "alQtzRMANaV5i2_BLQobCAAAGGc"] [Sun Jul 12 18:14:05.194293 2026] [security2:error] [pid 960377:tid 960446] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/exapi/.env"] [unique_id "alQtzRMANaV5i2_BLQobDAAAGEM"] [Sun Jul 12 18:14:05.221762 2026] [security2:error] [pid 967714:tid 967859] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtzF_56DeKknhy7sMEdwAAAQ4"] [Sun Jul 12 18:14:05.223046 2026] [security2:error] [pid 960377:tid 960421] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/errors/.env"] [unique_id "alQtzRMANaV5i2_BLQobEQAAAio"], referer: http://67.222.42.11/errors/.env [Sun Jul 12 18:14:05.223450 2026] [security2:error] [pid 960377:tid 960500] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/favs/.env"] [unique_id "alQtzRMANaV5i2_BLQobEgAAAnk"] [Sun Jul 12 18:14:05.224331 2026] [security2:error] [pid 960377:tid 960408] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/favicons/.env"] [unique_id "alQtzRMANaV5i2_BLQobEAAAAh4"] [Sun Jul 12 18:14:05.268307 2026] [security2:error] [pid 960377:tid 960447] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/feature/.env"] [unique_id "alQtzRMANaV5i2_BLQobFgAAJkQ"] [Sun Jul 12 18:14:05.269171 2026] [security2:error] [pid 960377:tid 960443] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/example/.env"] [unique_id "alQtzRMANaV5i2_BLQobFQAAJkA"], referer: http://67.222.42.11/example/.env [Sun Jul 12 18:14:05.274402 2026] [security2:error] [pid 960377:tid 960455] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "alQtzRMANaV5i2_BLQobGAAAPEw"], referer: http://67.222.42.11/example27-how-to-load-env/sample02/.env [Sun Jul 12 18:14:05.284348 2026] [security2:error] [pid 967714:tid 967980] [client 84.17.60.236:42968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQtzV_56DeKknhy7sMEiAAAAYc"] [Sun Jul 12 18:14:05.292057 2026] [security2:error] [pid 960377:tid 960495] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/01-simple-model/.env"] [unique_id "alQtzRMANaV5i2_BLQobGgAAW3Q"], referer: http://67.222.42.11/examples/01-simple-model/.env [Sun Jul 12 18:14:05.301479 2026] [security2:error] [pid 960377:tid 960441] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/feature/.env.bak"] [unique_id "alQtzRMANaV5i2_BLQobGQAAWz4"] [Sun Jul 12 18:14:05.302739 2026] [security2:error] [pid 960377:tid 960435] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQtzRMANaV5i2_BLQobGwAAWzg"], referer: http://67.222.42.11/examples/react-dashboard/backend/.env [Sun Jul 12 18:14:05.303069 2026] [security2:error] [pid 960377:tid 960428] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/examples/sdl-first/.env"] [unique_id "alQtzRMANaV5i2_BLQobHAAAWzE"], referer: http://67.222.42.11/examples/sdl-first/.env [Sun Jul 12 18:14:05.317563 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:46750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/feature/xampp/info.php"] [unique_id "alQtzRMANaV5i2_BLQobHQAAAA0"] [Sun Jul 12 18:14:05.327566 2026] [security2:error] [pid 960377:tid 960388] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/exapi/.env"] [unique_id "alQtzRMANaV5i2_BLQobHgAASQo"], referer: http://67.222.42.11/exapi/.env [Sun Jul 12 18:14:05.340075 2026] [security2:error] [pid 960377:tid 960434] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/favicons/.env"] [unique_id "alQtzRMANaV5i2_BLQobHwAASTc"], referer: http://67.222.42.11/favicons/.env [Sun Jul 12 18:14:05.358762 2026] [security2:error] [pid 960377:tid 960415] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/favs/.env"] [unique_id "alQtzRMANaV5i2_BLQobIAAAciQ"], referer: http://67.222.42.11/favs/.env [Sun Jul 12 18:14:05.376640 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:05.377403 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:05.385832 2026] [security2:error] [pid 960377:tid 960381] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/feature/.env"] [unique_id "alQtzRMANaV5i2_BLQobIQAAHgM"], referer: http://67.222.42.11/feature/.env [Sun Jul 12 18:14:05.440560 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/config/config.php"] [unique_id "alQtzRMANaV5i2_BLQobJAAAAFA"] [Sun Jul 12 18:14:05.442008 2026] [security2:error] [pid 960377:tid 960478] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/feature/.env.bak"] [unique_id "alQtzRMANaV5i2_BLQobIwAAY2M"], referer: http://67.222.42.11/feature/.env.bak [Sun Jul 12 18:14:05.443931 2026] [security2:error] [pid 960377:tid 960410] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/feature/xampp/info.php"] [unique_id "alQtzRMANaV5i2_BLQobJQAAYyA"] [Sun Jul 12 18:14:05.561977 2026] [security2:error] [pid 967714:tid 967904] [client 84.17.60.236:42976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQtzV_56DeKknhy7sMEkQAAATs"] [Sun Jul 12 18:14:05.581777 2026] [security2:error] [pid 960377:tid 960430] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/files/.env"] [unique_id "alQtzRMANaV5i2_BLQobJwAAGjM"] [Sun Jul 12 18:14:05.611488 2026] [security2:error] [pid 960377:tid 960386] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQtzRMANaV5i2_BLQobKQAAOgg"] [Sun Jul 12 18:14:05.613258 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/verify/.env"] [unique_id "alQtzRMANaV5i2_BLQobKgAALQE"] [Sun Jul 12 18:14:05.653008 2026] [security2:error] [pid 960377:tid 960385] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/first-network/.env"] [unique_id "alQtzRMANaV5i2_BLQobKwAASgc"] [Sun Jul 12 18:14:05.655471 2026] [security2:error] [pid 960377:tid 960459] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fisdom/fisdom/.env"] [unique_id "alQtzRMANaV5i2_BLQobLAAASlA"] [Sun Jul 12 18:14:05.698717 2026] [security2:error] [pid 960377:tid 960409] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/files/.env"] [unique_id "alQtzRMANaV5i2_BLQobLQAASB8"], referer: http://67.222.42.11/files/.env [Sun Jul 12 18:14:05.717391 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtzBMANaV5i2_BLQoa1QAARWk"] [Sun Jul 12 18:14:05.737657 2026] [security2:error] [pid 960377:tid 960399] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQtzRMANaV5i2_BLQobLwAAERU"], referer: http://67.222.42.11/finalVersion/lcomernbootcamp/projbackend/.env [Sun Jul 12 18:14:05.753892 2026] [security2:error] [pid 960377:tid 960505] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/first-network/.env"] [unique_id "alQtzRMANaV5i2_BLQobMQAAK34"], referer: http://67.222.42.11/first-network/.env [Sun Jul 12 18:14:05.761341 2026] [security2:error] [pid 960377:tid 960416] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/blocks/.env"] [unique_id "alQtzRMANaV5i2_BLQobMwAASyU"] [Sun Jul 12 18:14:05.766081 2026] [security2:error] [pid 960377:tid 960618] [client 114.119.131.166:29815] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/L14C3K32.jpg"] [unique_id "alQtzRMANaV5i2_BLQobNAAAAG4"], referer: https://www.batterie-pc-portables.fr/Tablette_PC.htm [Sun Jul 12 18:14:05.780042 2026] [security2:error] [pid 960377:tid 960423] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/fixture/.env"] [unique_id "alQtzRMANaV5i2_BLQobNQAARCw"] [Sun Jul 12 18:14:05.785578 2026] [security2:error] [pid 960377:tid 960426] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fisdom/fisdom/.env"] [unique_id "alQtzRMANaV5i2_BLQobNgAAIS8"], referer: http://67.222.42.11/fisdom/fisdom/.env [Sun Jul 12 18:14:05.834456 2026] [security2:error] [pid 960377:tid 960419] [remote 62.171.167.118:37098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/blocks/.env"] [unique_id "alQtzRMANaV5i2_BLQobNwAAECg"], referer: http://67.222.42.11/fixtures/blocks/.env [Sun Jul 12 18:14:05.852254 2026] [security2:error] [pid 967714:tid 967967] [client 84.17.60.236:10324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "alQtzV_56DeKknhy7sMElwAAAXo"] [Sun Jul 12 18:14:06.049003 2026] [security2:error] [pid 967714:tid 967921] [client 168.100.149.148:39962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9620/bargainor/2308_gurian.jsp"] [unique_id "alQtzl_56DeKknhy7sMEoAAAAUw"] [Sun Jul 12 18:14:06.088100 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQts1_56DeKknhy7sMA5wAAAYE"] [Sun Jul 12 18:14:06.097984 2026] [security2:error] [pid 960377:tid 960571] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtshMANaV5i2_BLQoYdgAAAD8"] [Sun Jul 12 18:14:06.136990 2026] [security2:error] [pid 967714:tid 967947] [client 84.17.60.236:42990] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQtzl_56DeKknhy7sMEowAAAWY"] [Sun Jul 12 18:14:06.148553 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsF_56DeKknhy7sMAjAAAAXI"] [Sun Jul 12 18:14:06.156995 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsF_56DeKknhy7sMAfgAAAUQ"], referer: http://67.222.40.58/developer/.env.dev [Sun Jul 12 18:14:06.165096 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoYJgAAAGU"], referer: http://67.222.40.58/developer/.env.local [Sun Jul 12 18:14:06.166041 2026] [security2:error] [pid 960377:tid 960560] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtshMANaV5i2_BLQoYfAAAADQ"], referer: http://67.222.40.58/development/.env.dist [Sun Jul 12 18:14:06.193415 2026] [security2:error] [pid 967714:tid 967960] [client 94.187.171.125:56637] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtzl_56DeKknhy7sMEpAAAAXM"] [Sun Jul 12 18:14:06.193897 2026] [security2:error] [pid 967714:tid 967960] [client 94.187.171.125:56637] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQtzl_56DeKknhy7sMEpAAAAXM"] [Sun Jul 12 18:14:06.209403 2026] [authz_core:error] [pid 979474:tid 979665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:06.210018 2026] [authz_core:error] [pid 979474:tid 979665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:06.256338 2026] [security2:error] [pid 967714:tid 967951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtzV_56DeKknhy7sMEnAAAAWo"] [Sun Jul 12 18:14:06.302555 2026] [security2:error] [pid 979474:tid 979633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQty3TrIlbXpLXvkNcEzgAAAJ0"] [Sun Jul 12 18:14:06.340774 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoanwAAAGc"] [Sun Jul 12 18:14:06.352421 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoangAAAHg"], referer: http://67.222.38.115/fluent-bit/api/v1/health [Sun Jul 12 18:14:06.355414 2026] [security2:error] [pid 967714:tid 967925] [client 20.63.87.152:34945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQtzl_56DeKknhy7sMEqQAAAVA"] [Sun Jul 12 18:14:06.417452 2026] [security2:error] [pid 979474:tid 979704] [client 84.17.60.236:42998] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQtznTrIlbXpLXvkNcE5wAAAOM"] [Sun Jul 12 18:14:06.665228 2026] [fcgid:warn] [pid 960377:tid 960573] (70014)End of file found: [client 18.116.101.220:12990] mod_fcgid: can't get data from http client [Sun Jul 12 18:14:06.719048 2026] [security2:error] [pid 960377:tid 960521] [client 84.17.60.236:43014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQtzhMANaV5i2_BLQobSQAAAA0"] [Sun Jul 12 18:14:06.734792 2026] [security2:error] [pid 979474:tid 979717] [client 62.171.167.118:43234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/laravel/help/phpinfo.php"] [unique_id "alQtznTrIlbXpLXvkNcE6gAAAPA"] [Sun Jul 12 18:14:06.734928 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtzhMANaV5i2_BLQobQgAAAHs"] [Sun Jul 12 18:14:06.768184 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd2YXZ1M18zNzY3Lzd2LzMzNzg5L3Y=.html"] [unique_id "alQtzhMANaV5i2_BLQobTAAAAAs"] [Sun Jul 12 18:14:06.817237 2026] [security2:error] [pid 979474:tid 979703] [client 20.63.87.152:7076] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/.well-known/logs233/index.php"] [unique_id "alQtznTrIlbXpLXvkNcE7AAAAOI"] [Sun Jul 12 18:14:06.826712 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtzRMANaV5i2_BLQobOAAADgI"] [Sun Jul 12 18:14:06.985013 2026] [security2:error] [pid 960377:tid 960456] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/_static/.env"] [unique_id "alQtzhMANaV5i2_BLQobUAAAJE0"] [Sun Jul 12 18:14:07.002735 2026] [security2:error] [pid 967714:tid 967967] [client 84.17.60.236:43020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQtz1_56DeKknhy7sMEuAAAAXo"] [Sun Jul 12 18:14:07.011466 2026] [authz_core:error] [pid 979474:tid 979695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:07.012084 2026] [authz_core:error] [pid 979474:tid 979695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:07.116094 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttBMANaV5i2_BLQoYrQAAAD4"] [Sun Jul 12 18:14:07.118957 2026] [security2:error] [pid 979474:tid 979734] [client 20.63.87.152:28913] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/.well-known/wp-cron.php"] [unique_id "alQtz3TrIlbXpLXvkNcE8gAAAQE"] [Sun Jul 12 18:14:07.126932 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtyxMANaV5i2_BLQoaoAAAAGg"], referer: http://67.222.38.115/flowise/api/v1/variables [Sun Jul 12 18:14:07.134096 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsl_56DeKknhy7sMAxgAAAVI"], referer: http://67.222.40.58/development/.env.dev [Sun Jul 12 18:14:07.187312 2026] [security2:error] [pid 979474:tid 979733] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtznTrIlbXpLXvkNcE7gAAAQA"] [Sun Jul 12 18:14:07.290893 2026] [security2:error] [pid 960377:tid 960621] [client 84.17.60.236:43028] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "gourmetcaviarcatering.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQtzxMANaV5i2_BLQobUwAAAHE"] [Sun Jul 12 18:14:07.354059 2026] [security2:error] [pid 960377:tid 960604] [client 114.119.159.37:40779] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.autumnharvest.com"] [uri "/index.php"] [unique_id "alQtzxMANaV5i2_BLQobVAAAAGA"], referer: http://www.autumnharvest.com/index.php?main_page=stores [Sun Jul 12 18:14:07.419025 2026] [security2:error] [pid 967714:tid 967913] [client 20.63.87.152:12111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/0.kb-v3.php"] [unique_id "alQtz1_56DeKknhy7sMEwwAAAUQ"] [Sun Jul 12 18:14:07.443236 2026] [security2:error] [pid 967714:tid 967941] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuV_56DeKknhy7sMB7gAAAWA"] [Sun Jul 12 18:14:07.678386 2026] [security2:error] [pid 979474:tid 979666] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtz3TrIlbXpLXvkNcE-wAAAL4"] [Sun Jul 12 18:14:07.690360 2026] [security2:error] [pid 967714:tid 967932] [client 114.119.135.253:63337] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.lap-baterie.pl"] [uri "/samsung-zasilacz/A4819-FDY.htm"] [unique_id "alQtz1_56DeKknhy7sMExgAAAVc"], referer: https://www.lap-baterie.pl/samsung-zasilacz/AA-PA2N200.htm [Sun Jul 12 18:14:07.797474 2026] [security2:error] [pid 979474:tid 979685] [client 20.63.87.152:23521] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/0.php"] [unique_id "alQtz3TrIlbXpLXvkNcFAQAAANA"] [Sun Jul 12 18:14:07.849226 2026] [autoindex:error] [pid 979474:tid 979736] [client 119.91.20.139:41324] AH01276: Cannot serve directory /home4/zigzags3/public_html/tenethomes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.tenethomes.co.uk [Sun Jul 12 18:14:07.877088 2026] [authz_core:error] [pid 979474:tid 979735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:07.877598 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:60052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/laravel/info.php"] [unique_id "alQtz1_56DeKknhy7sMEzwAAATU"] [Sun Jul 12 18:14:07.877604 2026] [authz_core:error] [pid 979474:tid 979735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:07.877826 2026] [autoindex:error] [pid 967714:tid 967978] [client 114.119.148.1:0] AH01276: Cannot serve directory /home4/ophtekco/public_html/wp-content/uploads/2016/11/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.ophtek.com/wp-content/uploads/2016?C=S%3BO%3DA [Sun Jul 12 18:14:07.970690 2026] [security2:error] [pid 979474:tid 979732] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtz3TrIlbXpLXvkNcE-QAAAP8"] [Sun Jul 12 18:14:07.970759 2026] [security2:error] [pid 979474:tid 979732] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQtz3TrIlbXpLXvkNcE-QAAAP8"] [Sun Jul 12 18:14:07.971851 2026] [security2:error] [pid 967714:tid 967912] [client 65.21.113.206:56468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd2YXZ1M18zNzY3Lzd2LzMzNzg5L3Y=.html"] [unique_id "alQtz1_56DeKknhy7sMEvwAAAUM"] [Sun Jul 12 18:14:07.989076 2026] [ssl:error] [pid 960377:tid 960527] [client 66.132.172.131:21522] AH02032: Hostname box2216.bluehost.com (default host as no SNI was provided) and hostname mail.machinelat.org provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:14:08.032594 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:34984] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQtzxMANaV5i2_BLQobWgAAEBA"] [Sun Jul 12 18:14:08.039408 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQtzxMANaV5i2_BLQobUQAAWTQ"] [Sun Jul 12 18:14:08.090793 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoYGgAAAAU"], referer: http://67.222.40.58/developer/.env.dist [Sun Jul 12 18:14:08.161967 2026] [security2:error] [pid 967714:tid 967857] [client 20.63.87.152:17484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/002.php"] [unique_id "alQt0F_56DeKknhy7sME0QAAAQw"] [Sun Jul 12 18:14:08.197657 2026] [security2:error] [pid 960377:tid 960396] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/acme-challenge/.env"] [unique_id "alQt0BMANaV5i2_BLQobXAAAORI"] [Sun Jul 12 18:14:08.199976 2026] [security2:error] [pid 960377:tid 960414] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sessions/.env"] [unique_id "alQt0BMANaV5i2_BLQobXQAAKiM"] [Sun Jul 12 18:14:08.298298 2026] [security2:error] [pid 979474:tid 979714] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtznTrIlbXpLXvkNcE5gAAAO0"] [Sun Jul 12 18:14:08.355451 2026] [security2:error] [pid 960377:tid 960462] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/acme/.env"] [unique_id "alQt0BMANaV5i2_BLQobYAAAP1M"] [Sun Jul 12 18:14:08.373800 2026] [security2:error] [pid 960377:tid 960575] [client 23.161.169.125:43104] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuBMANaV5i2_BLQoZOgAAAEM"] [Sun Jul 12 18:14:08.378859 2026] [security2:error] [pid 960377:tid 960606] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZPgAAAGI"] [Sun Jul 12 18:14:08.382956 2026] [security2:error] [pid 967714:tid 967858] [client 23.161.169.125:43048] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtul_56DeKknhy7sMCPQAAAQ0"] [Sun Jul 12 18:14:08.441332 2026] [security2:error] [pid 979474:tid 979710] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQtz3TrIlbXpLXvkNcE9gAAAOk"], referer: http://67.222.38.115/fly.toml [Sun Jul 12 18:14:08.513974 2026] [security2:error] [pid 960377:tid 960418] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/acme_challenges/.env"] [unique_id "alQt0BMANaV5i2_BLQobYwAAaSc"] [Sun Jul 12 18:14:08.552510 2026] [security2:error] [pid 960377:tid 960514] [client 20.63.87.152:5465] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/01.php"] [unique_id "alQt0BMANaV5i2_BLQobZAAAAAY"] [Sun Jul 12 18:14:08.665299 2026] [security2:error] [pid 967714:tid 967911] [client 125.167.21.72:61974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt0F_56DeKknhy7sME5QAAAUI"] [Sun Jul 12 18:14:08.665535 2026] [security2:error] [pid 967714:tid 967911] [client 125.167.21.72:61974] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt0F_56DeKknhy7sME5QAAAUI"] [Sun Jul 12 18:14:08.672058 2026] [security2:error] [pid 979474:tid 979709] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt0HTrIlbXpLXvkNcFBAAAAOg"] [Sun Jul 12 18:14:08.677299 2026] [security2:error] [pid 960377:tid 960412] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/actions-server/.env"] [unique_id "alQt0BMANaV5i2_BLQobZwAAZyE"] [Sun Jul 12 18:14:08.685197 2026] [authz_core:error] [pid 967714:tid 967866] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:08.685715 2026] [authz_core:error] [pid 967714:tid 967866] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:08.739902 2026] [security2:error] [pid 967714:tid 967975] [client 168.100.149.245:20084] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9685/bargainor/2308_monkey.jsp"] [unique_id "alQt0F_56DeKknhy7sME5gAAAYI"] [Sun Jul 12 18:14:08.777513 2026] [cgid:error] [pid 967714:tid 967926] [client 87.219.163.27:51664] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/putterma/public_html/miniparadise/404.shtml [Sun Jul 12 18:14:08.863193 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phpsysinfo/info.php"] [unique_id "alQt0F_56DeKknhy7sME8AAAAVU"] [Sun Jul 12 18:14:08.913737 2026] [security2:error] [pid 967714:tid 967941] [client 20.63.87.152:7056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/0x.php"] [unique_id "alQt0F_56DeKknhy7sME8QAAAWA"] [Sun Jul 12 18:14:09.009106 2026] [security2:error] [pid 967714:tid 967934] [client 24.203.79.110:56342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt0V_56DeKknhy7sME8gAAAVk"] [Sun Jul 12 18:14:09.009495 2026] [security2:error] [pid 967714:tid 967934] [client 24.203.79.110:56342] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt0V_56DeKknhy7sME8gAAAVk"] [Sun Jul 12 18:14:09.073283 2026] [security2:error] [pid 960377:tid 960578] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtsBMANaV5i2_BLQoYGwAAAEY"] [Sun Jul 12 18:14:09.168401 2026] [security2:error] [pid 960377:tid 960543] [client 20.63.87.152:17697] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.theblessednewbie.org"] [uri "/1.php"] [unique_id "alQt0RMANaV5i2_BLQobbwAAACM"] [Sun Jul 12 18:14:09.168744 2026] [security2:error] [pid 960377:tid 960543] [client 20.63.87.152:17697] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/1.php"] [unique_id "alQt0RMANaV5i2_BLQobbwAAACM"] [Sun Jul 12 18:14:09.307095 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt0RMANaV5i2_BLQobbgAAAE4"] [Sun Jul 12 18:14:09.420484 2026] [authz_core:error] [pid 979474:tid 979640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:09.421265 2026] [authz_core:error] [pid 979474:tid 979640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:09.432975 2026] [security2:error] [pid 960377:tid 960539] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZSgAAAB8"] [Sun Jul 12 18:14:09.434823 2026] [security2:error] [pid 960377:tid 960518] [client 23.161.169.125:43068] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZQAAAAAo"] [Sun Jul 12 18:14:09.451937 2026] [security2:error] [pid 967714:tid 967963] [client 23.161.169.125:43124] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuF_56DeKknhy7sMB2wAAAXY"] [Sun Jul 12 18:14:09.462227 2026] [security2:error] [pid 960377:tid 960512] [client 23.161.169.125:43156] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuBMANaV5i2_BLQoZNQAAAAQ"] [Sun Jul 12 18:14:09.468244 2026] [security2:error] [pid 960377:tid 960627] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuhMANaV5i2_BLQoZdQAAAHc"] [Sun Jul 12 18:14:09.541301 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt0F_56DeKknhy7sME2QAAAU4"] [Sun Jul 12 18:14:09.588180 2026] [security2:error] [pid 967714:tid 967868] [client 20.63.87.152:36951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/100.php"] [unique_id "alQt0V_56DeKknhy7sME-wAAARc"] [Sun Jul 12 18:14:09.634734 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt0BMANaV5i2_BLQobaQAAcGg"] [Sun Jul 12 18:14:09.730385 2026] [security2:error] [pid 967714:tid 967871] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt0V_56DeKknhy7sME9gAAARo"] [Sun Jul 12 18:14:09.898887 2026] [security2:error] [pid 979474:tid 979621] [client 20.63.87.152:39556] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/122.php"] [unique_id "alQt0XTrIlbXpLXvkNcFDwAAAJE"] [Sun Jul 12 18:14:10.055466 2026] [security2:error] [pid 960377:tid 960617] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC00MjU0LXl6bw==.cgi"] [unique_id "alQt0hMANaV5i2_BLQobfgAAAG0"] [Sun Jul 12 18:14:10.074076 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBlAAAAS4"] [Sun Jul 12 18:14:10.094151 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt0BMANaV5i2_BLQobYgAAAG8"], referer: http://67.222.38.115/frpc/api/status [Sun Jul 12 18:14:10.240720 2026] [security2:error] [pid 960377:tid 960585] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt0RMANaV5i2_BLQobewAAAE0"] [Sun Jul 12 18:14:10.246622 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:10.247161 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:10.272070 2026] [security2:error] [pid 967714:tid 967937] [client 20.63.87.152:28911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/123.php"] [unique_id "alQt0l_56DeKknhy7sMFBgAAAVw"] [Sun Jul 12 18:14:10.418889 2026] [security2:error] [pid 960377:tid 960471] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phpinfo.php.copy.backup.bak"] [unique_id "alQt0hMANaV5i2_BLQobgQAASlw"] [Sun Jul 12 18:14:10.429028 2026] [security2:error] [pid 967714:tid 967902] [client 23.161.169.125:43118] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtul_56DeKknhy7sMCRQAAATk"] [Sun Jul 12 18:14:10.455151 2026] [security2:error] [pid 960377:tid 960530] [client 23.161.169.125:43130] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuBMANaV5i2_BLQoZNgAAABY"] [Sun Jul 12 18:14:10.528103 2026] [security2:error] [pid 967714:tid 967855] [client 20.63.87.152:39563] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/13.php"] [unique_id "alQt0l_56DeKknhy7sMFEAAAAQo"] [Sun Jul 12 18:14:10.543131 2026] [security2:error] [pid 979474:tid 979669] [client 104.210.140.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.julesroyaltypetcare.com"] [uri "/index.php"] [unique_id "alQtznTrIlbXpLXvkNcE8AAAAME"] [Sun Jul 12 18:14:10.635334 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt0RMANaV5i2_BLQobeQAAJBc"] [Sun Jul 12 18:14:10.740604 2026] [security2:error] [pid 967714:tid 967868] [client 168.100.149.8:48006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9750/bargainor/2308_impeccance.jsp"] [unique_id "alQt0l_56DeKknhy7sMFFQAAARc"] [Sun Jul 12 18:14:10.796226 2026] [security2:error] [pid 960377:tid 960445] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/admin-app/.env"] [unique_id "alQt0hMANaV5i2_BLQobiwAAJUI"] [Sun Jul 12 18:14:10.807960 2026] [security2:error] [pid 960377:tid 960508] [client 114.119.144.15:27521] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "bestdestinationweddingphotographers.com"] [uri "/category/uncategorized/page/12/www.pleinairdesign.com"] [unique_id "alQt0hMANaV5i2_BLQobjgAAAAA"], referer: http://bestdestinationweddingphotographers.com/category/uncategorized/page/12 [Sun Jul 12 18:14:10.883764 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt0hMANaV5i2_BLQobhgAAACs"] [Sun Jul 12 18:14:10.886488 2026] [security2:error] [pid 960377:tid 960577] [client 20.63.87.152:17969] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/133.php"] [unique_id "alQt0hMANaV5i2_BLQobkAAAAEU"] [Sun Jul 12 18:14:10.955461 2026] [security2:error] [pid 960377:tid 960469] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/admin-panel/.env"] [unique_id "alQt0hMANaV5i2_BLQobkQAAflo"] [Sun Jul 12 18:14:10.988418 2026] [authz_core:error] [pid 967714:tid 967871] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:10.988921 2026] [authz_core:error] [pid 967714:tid 967871] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:11.155827 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBhQAAAXk"] [Sun Jul 12 18:14:11.185498 2026] [security2:error] [pid 967714:tid 967745] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBcgABSBM"] [Sun Jul 12 18:14:11.186044 2026] [security2:error] [pid 967714:tid 967915] [client 20.63.87.152:17946] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/155.php"] [unique_id "alQt01_56DeKknhy7sMFIgAAAUY"] [Sun Jul 12 18:14:11.318918 2026] [security2:error] [pid 967714:tid 967912] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt0l_56DeKknhy7sMFEwAAAUM"] [Sun Jul 12 18:14:11.318999 2026] [security2:error] [pid 967714:tid 967912] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt0l_56DeKknhy7sMFEwAAAUM"] [Sun Jul 12 18:14:11.320132 2026] [security2:error] [pid 979474:tid 979616] [client 65.21.113.206:56480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC00MjU0LXl6bw==.cgi"] [unique_id "alQt0nTrIlbXpLXvkNcFFgAAAIw"] [Sun Jul 12 18:14:11.364052 2026] [security2:error] [pid 960377:tid 960564] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt0RMANaV5i2_BLQobdgAAADg"] [Sun Jul 12 18:14:11.399107 2026] [security2:error] [pid 979474:tid 979712] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt03TrIlbXpLXvkNcFFwAAAOs"] [Sun Jul 12 18:14:11.429961 2026] [security2:error] [pid 960377:tid 960537] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuhMANaV5i2_BLQoZdwAAAB0"] [Sun Jul 12 18:14:11.438808 2026] [security2:error] [pid 967714:tid 967946] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtul_56DeKknhy7sMCVwAAAWU"] [Sun Jul 12 18:14:11.448998 2026] [security2:error] [pid 979474:tid 979623] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtunTrIlbXpLXvkNcDrgAAAJM"] [Sun Jul 12 18:14:11.504331 2026] [security2:error] [pid 979474:tid 979656] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt0nTrIlbXpLXvkNcFEwAAALQ"] [Sun Jul 12 18:14:11.549695 2026] [security2:error] [pid 967714:tid 967970] [client 20.63.87.152:39554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/177.php"] [unique_id "alQt01_56DeKknhy7sMFMAAAAX0"] [Sun Jul 12 18:14:11.601801 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/console.php"] [unique_id "alQt01_56DeKknhy7sMFMQAAAUo"] [Sun Jul 12 18:14:11.803435 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:11.804182 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:11.900361 2026] [security2:error] [pid 967714:tid 967924] [client 20.63.87.152:36931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/1index.php"] [unique_id "alQt01_56DeKknhy7sMFOgAAAU8"] [Sun Jul 12 18:14:12.043729 2026] [security2:error] [pid 967714:tid 967941] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt01_56DeKknhy7sMFOAAAAWA"] [Sun Jul 12 18:14:12.106385 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttF_56DeKknhy7sMBEwAAATw"], referer: http://67.222.40.58/development/config.env [Sun Jul 12 18:14:12.129825 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttBMANaV5i2_BLQoYsAAAAFQ"], referer: http://67.222.40.58/docker/Dockerfile.dev.server [Sun Jul 12 18:14:12.159438 2026] [security2:error] [pid 960377:tid 960533] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttBMANaV5i2_BLQoYqwAAABk"] [Sun Jul 12 18:14:12.210157 2026] [security2:error] [pid 967714:tid 967910] [client 196.235.188.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQt01_56DeKknhy7sMFNwAAAUE"], referer: https://learningindia.in [Sun Jul 12 18:14:12.249157 2026] [security2:error] [pid 960377:tid 960550] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt0xMANaV5i2_BLQoblAAAKl0"] [Sun Jul 12 18:14:12.383779 2026] [security2:error] [pid 960377:tid 960572] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuRMANaV5i2_BLQoZPQAAAEA"] [Sun Jul 12 18:14:12.393981 2026] [security2:error] [pid 960377:tid 960518] [client 20.63.87.152:47321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/2.php"] [unique_id "alQt1BMANaV5i2_BLQobrwAAAAo"] [Sun Jul 12 18:14:12.406727 2026] [security2:error] [pid 967714:tid 967869] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuV_56DeKknhy7sMB7wAAARg"] [Sun Jul 12 18:14:12.408657 2026] [security2:error] [pid 967714:tid 967883] [client 23.161.169.125:43062] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtul_56DeKknhy7sMCOgAAASY"] [Sun Jul 12 18:14:12.426845 2026] [security2:error] [pid 967714:tid 967889] [client 23.161.169.125:43116] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuV_56DeKknhy7sMB-wAAASw"] [Sun Jul 12 18:14:12.445038 2026] [security2:error] [pid 960377:tid 960536] [client 23.161.169.125:42658] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtuhMANaV5i2_BLQoZawAAABw"] [Sun Jul 12 18:14:12.466737 2026] [security2:error] [pid 979474:tid 979737] [client 114.119.137.230:31503] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "dentonwelch.com"] [uri "/art"] [unique_id "alQt1HTrIlbXpLXvkNcFJgAAAQQ"], referer: https://dentonwelch.com/art [Sun Jul 12 18:14:12.504065 2026] [security2:error] [pid 967714:tid 967959] [client 114.119.144.29:22833] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/events/newcomer-drop-in-class/2026-09-08/"] [unique_id "alQt1F_56DeKknhy7sMFRQAAAXI"], referer: https://coloradodancesport.com/wp-sitemap-posts-tribe_events-1.xml [Sun Jul 12 18:14:12.527414 2026] [security2:error] [pid 967714:tid 967933] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1F_56DeKknhy7sMFPAAAAVg"] [Sun Jul 12 18:14:12.648063 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:12.648550 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:12.696874 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/hidden/.env"] [unique_id "alQt1BMANaV5i2_BLQobsgAAOnE"] [Sun Jul 12 18:14:12.713196 2026] [security2:error] [pid 960377:tid 960616] [client 168.100.149.200:39392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9815/bargainor/2308_gunz.jsp"] [unique_id "alQt1BMANaV5i2_BLQobswAAAGw"] [Sun Jul 12 18:14:12.716856 2026] [security2:error] [pid 960377:tid 960593] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC00Njg4LXl6bw==.cgi"] [unique_id "alQt1BMANaV5i2_BLQobtAAAAFU"] [Sun Jul 12 18:14:12.808391 2026] [security2:error] [pid 967714:tid 967923] [client 20.63.87.152:34987] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/222.php"] [unique_id "alQt1F_56DeKknhy7sMFTAAAAU4"] [Sun Jul 12 18:14:12.842466 2026] [security2:error] [pid 967714:tid 967958] [client 31.173.86.126:28520] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQt0l_56DeKknhy7sMFDgAAAXE"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:14:12.842560 2026] [security2:error] [pid 967714:tid 967958] [client 31.173.86.126:28520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQt0l_56DeKknhy7sMFDgAAAXE"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:14:12.891569 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/chat-app/server/.env"] [unique_id "alQt1BMANaV5i2_BLQobtQAALX0"] [Sun Jul 12 18:14:12.917838 2026] [security2:error] [pid 960377:tid 960617] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt1BMANaV5i2_BLQobsAAAbUg"] [Sun Jul 12 18:14:12.986163 2026] [lsapi:warn] [pid 967714:tid 967870] [client 192.0.102.146:35944] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:14:13.091307 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoY5gAAACw"] [Sun Jul 12 18:14:13.179658 2026] [security2:error] [pid 960377:tid 960604] [client 20.63.87.152:7075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/2p.update.php"] [unique_id "alQt1RMANaV5i2_BLQobuAAAAGA"] [Sun Jul 12 18:14:13.369732 2026] [security2:error] [pid 967714:tid 967913] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1V_56DeKknhy7sMFUAAAAUQ"] [Sun Jul 12 18:14:13.439366 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:13.440074 2026] [authz_core:error] [pid 967714:tid 967980] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:13.761693 2026] [security2:error] [pid 979474:tid 979722] [client 62.171.167.118:46730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/linusadmin-phpinfo.php"] [unique_id "alQt1XTrIlbXpLXvkNcFMQAAAPU"] [Sun Jul 12 18:14:13.768893 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:46774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/service/info.php"] [unique_id "alQt1V_56DeKknhy7sMFZgAAAXQ"] [Sun Jul 12 18:14:13.770702 2026] [security2:error] [pid 967714:tid 967877] [client 62.171.167.118:46772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/old_phpinfo.php"] [unique_id "alQt1V_56DeKknhy7sMFZwAAASA"] [Sun Jul 12 18:14:13.791678 2026] [security2:error] [pid 960377:tid 960577] [client 20.63.87.152:10551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/3.php"] [unique_id "alQt1RMANaV5i2_BLQobxgAAAEU"] [Sun Jul 12 18:14:13.801962 2026] [security2:error] [pid 960377:tid 960595] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt1RMANaV5i2_BLQobuQAAAFc"] [Sun Jul 12 18:14:13.802020 2026] [security2:error] [pid 960377:tid 960595] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt1RMANaV5i2_BLQobuQAAAFc"] [Sun Jul 12 18:14:13.803285 2026] [security2:error] [pid 979474:tid 979685] [client 65.21.113.206:36358] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC00Njg4LXl6bw==.cgi"] [unique_id "alQt1XTrIlbXpLXvkNcFKwAAANA"] [Sun Jul 12 18:14:13.837789 2026] [security2:error] [pid 967714:tid 967883] [client 62.171.167.118:46788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/helper/backend/phpinfo.php"] [unique_id "alQt1V_56DeKknhy7sMFawAAASY"] [Sun Jul 12 18:14:13.844743 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:46804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/helper/info.php"] [unique_id "alQt1V_56DeKknhy7sMFbAAAAUk"] [Sun Jul 12 18:14:13.855583 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:46816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/html/phpinfo.php"] [unique_id "alQt1V_56DeKknhy7sMFbQAAAXI"] [Sun Jul 12 18:14:13.865319 2026] [security2:error] [pid 967714:tid 967962] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1V_56DeKknhy7sMFYgAAAXU"] [Sun Jul 12 18:14:13.891899 2026] [security2:error] [pid 979474:tid 979537] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/linusadmin-phpinfo.php"] [unique_id "alQt1XTrIlbXpLXvkNcFNwABAjk"] [Sun Jul 12 18:14:13.892331 2026] [security2:error] [pid 979474:tid 979503] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/old_phpinfo.php"] [unique_id "alQt1XTrIlbXpLXvkNcFOAABAhc"] [Sun Jul 12 18:14:13.892739 2026] [security2:error] [pid 979474:tid 979538] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/function/service/info.php"] [unique_id "alQt1XTrIlbXpLXvkNcFOQABAjo"] [Sun Jul 12 18:14:13.893055 2026] [security2:error] [pid 979474:tid 979535] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFNAABAjc"] [Sun Jul 12 18:14:13.893259 2026] [security2:error] [pid 979474:tid 979534] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFMwABAjY"] [Sun Jul 12 18:14:13.893817 2026] [security2:error] [pid 979474:tid 979503] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/helper/backend/phpinfo.php"] [unique_id "alQt1XTrIlbXpLXvkNcFOwABAhc"] [Sun Jul 12 18:14:13.894874 2026] [security2:error] [pid 979474:tid 979534] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/helper/info.php"] [unique_id "alQt1XTrIlbXpLXvkNcFPgABAjY"] [Sun Jul 12 18:14:13.894976 2026] [security2:error] [pid 979474:tid 979537] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/gists/laravel/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFOgABAjk"] [Sun Jul 12 18:14:13.895110 2026] [security2:error] [pid 979474:tid 979538] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFPAABAjo"], referer: http://67.222.42.11/fixtures/fiber-debugger/.env [Sun Jul 12 18:14:13.896247 2026] [security2:error] [pid 979474:tid 979548] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/html/phpinfo.php"] [unique_id "alQt1XTrIlbXpLXvkNcFQAABAkQ"] [Sun Jul 12 18:14:13.896756 2026] [security2:error] [pid 979474:tid 979549] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/info.php/"] [unique_id "alQt1XTrIlbXpLXvkNcFRQABAkU"] [Sun Jul 12 18:14:13.898065 2026] [security2:error] [pid 979474:tid 979503] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/html/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFPwABAhc"] [Sun Jul 12 18:14:13.899857 2026] [security2:error] [pid 979474:tid 979547] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/icons/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFQQABAkM"] [Sun Jul 12 18:14:13.900214 2026] [security2:error] [pid 979474:tid 979535] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFPQABAjc"], referer: http://67.222.42.11/fixtures/kitchensink/.env [Sun Jul 12 18:14:13.900387 2026] [security2:error] [pid 979474:tid 979534] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ikiwiki/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFQgABAjY"] [Sun Jul 12 18:14:13.900510 2026] [security2:error] [pid 979474:tid 979562] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/images/.env"] [unique_id "alQt1XTrIlbXpLXvkNcFQwABAlI"] [Sun Jul 12 18:14:13.908194 2026] [security2:error] [pid 979474:tid 979710] [client 62.171.167.118:46786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/info/info.php"] [unique_id "alQt1XTrIlbXpLXvkNcFRgAAAOk"] [Sun Jul 12 18:14:13.921385 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:46828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/infos.php"] [unique_id "alQt1V_56DeKknhy7sMFbgAAARQ"] [Sun Jul 12 18:14:14.022236 2026] [security2:error] [pid 979474:tid 979520] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/info/info.php"] [unique_id "alQt1nTrIlbXpLXvkNcFSQAAuyg"] [Sun Jul 12 18:14:14.028780 2026] [security2:error] [pid 979474:tid 979729] [client 114.119.148.56:52965] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.laptop-accu-batterij.nl"] [uri "/batterij-nec-accu/Nec-PC-LS150BS6L.html"] [unique_id "alQt1nTrIlbXpLXvkNcFUAAAAPw"], referer: http://portables-pc-batterie.over-blog.fr/article-nec-pc-vp-wp109-pc-vp-wp110-haute-qualite-prix-bas-pas-cher-reduction-vente-en-gros-original-nouveau-123540458.html [Sun Jul 12 18:14:14.030075 2026] [security2:error] [pid 979474:tid 979520] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/infos.php"] [unique_id "alQt1nTrIlbXpLXvkNcFSwAAuyg"] [Sun Jul 12 18:14:14.031358 2026] [security2:error] [pid 979474:tid 979552] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/js-plugin/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFTAAAu0g"] [Sun Jul 12 18:14:14.031397 2026] [security2:error] [pid 979474:tid 979563] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/gists/laravel/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFSAAAu1M"], referer: http://67.222.42.11/gists/laravel/.env [Sun Jul 12 18:14:14.031483 2026] [security2:error] [pid 979474:tid 979522] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/icons/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFUgAAuyo"], referer: http://67.222.42.11/icons/.env [Sun Jul 12 18:14:14.034480 2026] [security2:error] [pid 979474:tid 979567] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/html/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFTgAAu1c"], referer: http://67.222.42.11/html/.env [Sun Jul 12 18:14:14.043208 2026] [security2:error] [pid 979474:tid 979556] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/images/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFUwAAu0w"], referer: http://67.222.42.11/images/.env [Sun Jul 12 18:14:14.043329 2026] [security2:error] [pid 979474:tid 979557] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lara/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFVAAAu00"] [Sun Jul 12 18:14:14.056154 2026] [security2:error] [pid 979474:tid 979528] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lara/.env.bak"] [unique_id "alQt1nTrIlbXpLXvkNcFVgAAiDA"] [Sun Jul 12 18:14:14.068020 2026] [security2:error] [pid 967714:tid 967926] [client 168.100.149.196:42658] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9880/bargainor/2308_monadically.jsp"] [unique_id "alQt1l_56DeKknhy7sMFdQAAAVE"] [Sun Jul 12 18:14:14.074378 2026] [security2:error] [pid 960377:tid 960605] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoY8wAAAGE"] [Sun Jul 12 18:14:14.090610 2026] [security2:error] [pid 979474:tid 979558] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/js-plugin/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFWQAA1k4"], referer: http://67.222.42.11/js-plugin/.env [Sun Jul 12 18:14:14.115314 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:45276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lara/backend/phpinfo.php"] [unique_id "alQt1l_56DeKknhy7sMFeAAAAVo"] [Sun Jul 12 18:14:14.124082 2026] [security2:error] [pid 979474:tid 979561] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lara/backend/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFXQAAylE"] [Sun Jul 12 18:14:14.124349 2026] [security2:error] [pid 967714:tid 967978] [client 176.204.255.217:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt1V_56DeKknhy7sMFYAAAAYU"] [Sun Jul 12 18:14:14.152482 2026] [security2:error] [pid 979474:tid 979635] [client 20.63.87.152:34985] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQt1nTrIlbXpLXvkNcFYQAAAJ8"] [Sun Jul 12 18:14:14.155188 2026] [security2:error] [pid 960377:tid 960626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoY5wAAAHY"] [Sun Jul 12 18:14:14.165214 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:45314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lara/current/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFYwAAAJg"] [Sun Jul 12 18:14:14.167482 2026] [security2:error] [pid 979474:tid 979585] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lara/current/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFZQAAjWk"] [Sun Jul 12 18:14:14.170237 2026] [security2:error] [pid 979474:tid 979533] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lara/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFZAAAjTU"], referer: http://67.222.42.11/lara/.env [Sun Jul 12 18:14:14.180660 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:45278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/laravel/help/phpinfo.php"] [unique_id "alQt1hMANaV5i2_BLQobzgAAABQ"] [Sun Jul 12 18:14:14.181473 2026] [security2:error] [pid 979474:tid 979593] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/laravel/help/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFaQAArXE"] [Sun Jul 12 18:14:14.187248 2026] [security2:error] [pid 979474:tid 979595] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lara/.env.bak"] [unique_id "alQt1nTrIlbXpLXvkNcFagAAs3M"], referer: http://67.222.42.11/lara/.env.bak [Sun Jul 12 18:14:14.197296 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:45292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/laravel/info.php"] [unique_id "alQt1l_56DeKknhy7sMFegAAARk"] [Sun Jul 12 18:14:14.202840 2026] [security2:error] [pid 979474:tid 979565] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/laravel/info.php"] [unique_id "alQt1nTrIlbXpLXvkNcFbAAA5FU"] [Sun Jul 12 18:14:14.231151 2026] [security2:error] [pid 979474:tid 979566] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/leafer-app/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFbQAA4FY"] [Sun Jul 12 18:14:14.265291 2026] [security2:error] [pid 979474:tid 979569] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ledger_sync/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFbwAA8Vk"] [Sun Jul 12 18:14:14.290572 2026] [security2:error] [pid 979474:tid 979633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt03TrIlbXpLXvkNcFGgAAAJ0"], referer: http://67.222.38.115/frps/api/serverinfo [Sun Jul 12 18:14:14.294980 2026] [security2:error] [pid 960377:tid 960584] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt0xMANaV5i2_BLQobmAAAAEw"] [Sun Jul 12 18:14:14.296085 2026] [security2:error] [pid 979474:tid 979570] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legacy/tests/9.1.1/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFcQAAt1o"] [Sun Jul 12 18:14:14.303870 2026] [security2:error] [pid 979474:tid 979598] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legacy/tests/9.2.0/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFcwAAt3Y"] [Sun Jul 12 18:14:14.310095 2026] [security2:error] [pid 967714:tid 967925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt01_56DeKknhy7sMFKgAAAVA"], referer: http://67.222.38.115/frps/api/proxy [Sun Jul 12 18:14:14.311996 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:14.312411 2026] [security2:error] [pid 979474:tid 979598] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legal/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFdAAAt3Y"] [Sun Jul 12 18:14:14.312506 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:14.328585 2026] [security2:error] [pid 979474:tid 979573] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFeAAAt10"] [Sun Jul 12 18:14:14.336986 2026] [security2:error] [pid 979474:tid 979654] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1nTrIlbXpLXvkNcFVQAAALI"] [Sun Jul 12 18:14:14.340696 2026] [security2:error] [pid 979474:tid 979529] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/library/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFeQAAtTE"] [Sun Jul 12 18:14:14.342517 2026] [security2:error] [pid 967714:tid 967956] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt01_56DeKknhy7sMFLgAAAW8"] [Sun Jul 12 18:14:14.346059 2026] [security2:error] [pid 979474:tid 979574] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/leafer-app/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFegAAoV4"], referer: http://67.222.42.11/leafer-app/.env [Sun Jul 12 18:14:14.369058 2026] [security2:error] [pid 979474:tid 979541] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/live/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFewAA3T0"] [Sun Jul 12 18:14:14.381093 2026] [security2:error] [pid 967714:tid 967914] [client 114.119.151.64:61591] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "instantgourmetspices.com"] [uri "/index.php&zenid=n4hvikba2id7mdgt1bk2gbj1a1"] [unique_id "alQt1l_56DeKknhy7sMFjQAAAUU"], referer: http://instantgourmetspices.com/index.php&zenid=n4hvikba2id7mdgt1bk2gbj1a1 [Sun Jul 12 18:14:14.386236 2026] [security2:error] [pid 979474:tid 979579] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/backend/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFfQAAomM"] [Sun Jul 12 18:14:14.391685 2026] [security2:error] [pid 979474:tid 979579] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/ledger_sync/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFfgAAomM"], referer: http://67.222.42.11/ledger_sync/.env [Sun Jul 12 18:14:14.406050 2026] [security2:error] [pid 979474:tid 979581] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/info.php"] [unique_id "alQt1nTrIlbXpLXvkNcFfwAA5WU"] [Sun Jul 12 18:14:14.417307 2026] [security2:error] [pid 979474:tid 979543] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legacy/tests/9.1.1/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFgQAAwT8"], referer: http://67.222.42.11/legacy/tests/9.1.1/.env [Sun Jul 12 18:14:14.419540 2026] [security2:error] [pid 967714:tid 967913] [client 20.63.87.152:34998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/403.php"] [unique_id "alQt1l_56DeKknhy7sMFlgAAAUQ"] [Sun Jul 12 18:14:14.428729 2026] [security2:error] [pid 979474:tid 979583] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/infophp.php"] [unique_id "alQt1nTrIlbXpLXvkNcFggAAtmc"] [Sun Jul 12 18:14:14.448179 2026] [security2:error] [pid 979474:tid 979586] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legacy/tests/9.2.0/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFhAAAv2o"], referer: http://67.222.42.11/legacy/tests/9.2.0/.env [Sun Jul 12 18:14:14.455868 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:45322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/backend/phpinfo.php"] [unique_id "alQt1l_56DeKknhy7sMFmQAAAX0"] [Sun Jul 12 18:14:14.457716 2026] [security2:error] [pid 979474:tid 979661] [client 62.171.167.118:46734] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/infophp.php"] [unique_id "alQt1nTrIlbXpLXvkNcFhwAAALk"] [Sun Jul 12 18:14:14.457920 2026] [security2:error] [pid 979474:tid 979559] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/infos.php"] [unique_id "alQt1nTrIlbXpLXvkNcFhQAAw08"] [Sun Jul 12 18:14:14.461360 2026] [security2:error] [pid 967714:tid 967947] [client 62.171.167.118:45288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/info.php"] [unique_id "alQt1l_56DeKknhy7sMFmgAAAWY"] [Sun Jul 12 18:14:14.462567 2026] [security2:error] [pid 979474:tid 979480] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/legal/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFhgAAwwA"], referer: http://67.222.42.11/legal/.env [Sun Jul 12 18:14:14.463776 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:45332] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/infos.php"] [unique_id "alQt1l_56DeKknhy7sMFmwAAAQo"] [Sun Jul 12 18:14:14.480717 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:45342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/lara/info.php"] [unique_id "alQt1l_56DeKknhy7sMFnQAAATM"] [Sun Jul 12 18:14:14.484354 2026] [security2:error] [pid 979474:tid 979627] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtvnTrIlbXpLXvkNcD5AAAAJc"] [Sun Jul 12 18:14:14.488825 2026] [security2:error] [pid 979474:tid 979596] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFiQAAl3Q"], referer: http://67.222.42.11/lemonldap-ng-fr-doc/.env [Sun Jul 12 18:14:14.509162 2026] [security2:error] [pid 960377:tid 960444] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-content/dump.sql"] [unique_id "alQt1hMANaV5i2_BLQob1wAASUE"] [Sun Jul 12 18:14:14.525319 2026] [security2:error] [pid 979474:tid 979589] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/lara/info.php"] [unique_id "alQt1nTrIlbXpLXvkNcFiwAArG0"] [Sun Jul 12 18:14:14.526957 2026] [security2:error] [pid 979474:tid 979590] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/library/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFigAArG4"], referer: http://67.222.42.11/library/.env [Sun Jul 12 18:14:14.536803 2026] [security2:error] [pid 979474:tid 979630] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtvnTrIlbXpLXvkNcD5QAAAJo"] [Sun Jul 12 18:14:14.548649 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:46806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/old_phpinfo.php"] [unique_id "alQt1hMANaV5i2_BLQob2AAAAFQ"] [Sun Jul 12 18:14:14.554866 2026] [security2:error] [pid 979474:tid 979588] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/old_phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFjAAAvWw"] [Sun Jul 12 18:14:14.561794 2026] [security2:error] [pid 979474:tid 979576] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/live/.env"] [unique_id "alQt1nTrIlbXpLXvkNcFjQAA42A"], referer: http://67.222.42.11/live/.env [Sun Jul 12 18:14:14.601484 2026] [security2:error] [pid 979474:tid 979719] [client 62.171.167.118:45384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/php.php"] [unique_id "alQt1nTrIlbXpLXvkNcFkAAAAPI"] [Sun Jul 12 18:14:14.632750 2026] [security2:error] [pid 979474:tid 979582] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/php.php"] [unique_id "alQt1nTrIlbXpLXvkNcFkQAA4mY"] [Sun Jul 12 18:14:14.667960 2026] [security2:error] [pid 979474:tid 979681] [client 62.171.167.118:45268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFlgAAAMw"] [Sun Jul 12 18:14:14.689010 2026] [security2:error] [pid 967714:tid 967981] [client 20.63.87.152:17677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.theblessednewbie.org"] [uri "/404.php"] [unique_id "alQt1l_56DeKknhy7sMFnwAAAYg"] [Sun Jul 12 18:14:14.709184 2026] [security2:error] [pid 979474:tid 979597] [remote 62.171.167.118:37144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/phpinfo.php"] [unique_id "alQt1nTrIlbXpLXvkNcFlwABAHU"] [Sun Jul 12 18:14:14.824849 2026] [proxy:warn] [pid 967714:tid 967875] [client 3.129.187.38:30864] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /400.shtml [Sun Jul 12 18:14:14.824908 2026] [proxy:error] [pid 967714:tid 967875] (70014)End of file found: [client 3.129.187.38:30864] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.129.187.38 () [Sun Jul 12 18:14:14.928871 2026] [security2:error] [pid 967714:tid 967877] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFogAAASA"] [Sun Jul 12 18:14:15.052405 2026] [security2:error] [pid 960377:tid 960427] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crackerjackcom.com"] [uri "/wp-login.php"] [unique_id "alQt1hMANaV5i2_BLQob2wAAZjA"] [Sun Jul 12 18:14:15.079557 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBkgAAATA"] [Sun Jul 12 18:14:15.105996 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBlQAAAV8"] [Sun Jul 12 18:14:15.156138 2026] [security2:error] [pid 967714:tid 967952] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBrgAAAWs"], referer: http://67.222.40.58/docs/.gitlab-ci.yml [Sun Jul 12 18:14:15.161513 2026] [security2:error] [pid 960377:tid 960602] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/tester.php"] [unique_id "alQt1xMANaV5i2_BLQob3wAAAF4"] [Sun Jul 12 18:14:15.175700 2026] [authz_core:error] [pid 979474:tid 979730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:15.176497 2026] [authz_core:error] [pid 979474:tid 979730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:15.400590 2026] [security2:error] [pid 967714:tid 967903] [client 23.161.169.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtul_56DeKknhy7sMCWAAAATo"] [Sun Jul 12 18:14:15.570762 2026] [security2:error] [pid 960377:tid 960529] [client 198.235.24.85:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQtvxMANaV5i2_BLQoZ0wAAABU"] [Sun Jul 12 18:14:15.578372 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt1xMANaV5i2_BLQob4wAAAFE"] [Sun Jul 12 18:14:15.722341 2026] [security2:error] [pid 979474:tid 979696] [client 114.119.153.112:52573] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.tigmaroses.com"] [uri "/fr/content/murano"] [unique_id "alQt13TrIlbXpLXvkNcFpAAAANs"], referer: https://www.tigmaroses.de/fr/catalog/roses?page=7 [Sun Jul 12 18:14:15.815462 2026] [security2:error] [pid 967714:tid 967959] [client 114.119.138.27:40247] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "pug-love-crochet.com"] [uri "/maker-spotlight-chain-two-crochet"] [unique_id "alQt11_56DeKknhy7sMFtgAAAXI"], referer: https://pug-love-crochet.com/maker-spotlight-chain-two-crochet [Sun Jul 12 18:14:15.934873 2026] [security2:error] [pid 979474:tid 979619] [client 114.119.129.82:44679] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "azerowasteculture.org"] [uri "/product/t-shirt-with-buttons"] [unique_id "alQt13TrIlbXpLXvkNcFpgAAAI8"], referer: https://azerowasteculture.org/product-category/clothing [Sun Jul 12 18:14:15.936980 2026] [security2:error] [pid 960377:tid 960622] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt1xMANaV5i2_BLQob4AAAcgU"] [Sun Jul 12 18:14:15.986762 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:15.987255 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:16.002722 2026] [security2:error] [pid 967714:tid 967943] [client 114.119.136.88:55807] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "manitheuncanny.com"] [uri "/product/a-gentle-heart-mouse-pad/"] [unique_id "alQt2F_56DeKknhy7sMFuQAAAWI"], referer: https://manitheuncanny.com/art/ [Sun Jul 12 18:14:16.010195 2026] [security2:error] [pid 979474:tid 979642] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt13TrIlbXpLXvkNcFpQAAAKY"] [Sun Jul 12 18:14:16.056521 2026] [security2:error] [pid 967714:tid 967860] [client 168.100.149.211:61072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/9945/bargainor/2308_enhalo.jsp"] [unique_id "alQt2F_56DeKknhy7sMFugAAAQ8"] [Sun Jul 12 18:14:16.102963 2026] [security2:error] [pid 960377:tid 960616] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC01MzM4LXl6bw==.cgi"] [unique_id "alQt2BMANaV5i2_BLQob7QAAAGw"] [Sun Jul 12 18:14:16.104121 2026] [security2:error] [pid 960377:tid 960464] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/adminapp/.env"] [unique_id "alQt2BMANaV5i2_BLQob7AAAVVU"] [Sun Jul 12 18:14:16.176588 2026] [security2:error] [pid 979474:tid 979731] [client 114.119.141.201:29221] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "theflic.org"] [uri "/privacy-policy.html"] [unique_id "alQt2HTrIlbXpLXvkNcFqQAAAP4"], referer: https://theflic.org/privacy-policy.html [Sun Jul 12 18:14:16.394497 2026] [security2:error] [pid 960377:tid 960617] [client 114.119.143.59:20441] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.travelwithmom.com"] [uri "/uploads/packages/Hells%20Kitchen%20Flyer-%20Maggie%20Wislon%20(6).pdf"] [unique_id "alQt2BMANaV5i2_BLQob8AAAAG0"], referer: http://www.travelwithmom.com/ [Sun Jul 12 18:14:16.439427 2026] [security2:error] [pid 979474:tid 979702] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2HTrIlbXpLXvkNcFrQAAAOE"] [Sun Jul 12 18:14:16.651278 2026] [security2:error] [pid 979474:tid 979682] [client 43.173.178.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2HTrIlbXpLXvkNcFswAAAM0"] [Sun Jul 12 18:14:16.831866 2026] [authz_core:error] [pid 979474:tid 979633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:16.832374 2026] [authz_core:error] [pid 979474:tid 979633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:16.871171 2026] [security2:error] [pid 979474:tid 979705] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2HTrIlbXpLXvkNcFvQAAAOQ"] [Sun Jul 12 18:14:16.929166 2026] [security2:error] [pid 979474:tid 979684] [client 114.119.140.84:53379] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sheehycareers.com"] [uri "/"] [unique_id "alQt2HTrIlbXpLXvkNcFwAAAAM8"], referer: https://joanne-kelly.com/eue/8c9793dc9d8eddd9bc8c8f9d83b4bcd593d484bfec8cb3d9ddb6b7898482.html [Sun Jul 12 18:14:16.961104 2026] [security2:error] [pid 979474:tid 979613] [client 94.187.171.125:57132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt2HTrIlbXpLXvkNcFwgAAAIk"] [Sun Jul 12 18:14:16.961350 2026] [security2:error] [pid 979474:tid 979613] [client 94.187.171.125:57132] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt2HTrIlbXpLXvkNcFwgAAAIk"] [Sun Jul 12 18:14:17.008104 2026] [security2:error] [pid 967714:tid 967980] [client 114.119.128.244:53567] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.fusionflavorsusa.com"] [uri "/index.php"] [unique_id "alQt2V_56DeKknhy7sMFyQAAAYc"], referer: http://www.fusionflavorsusa.com/index.php?main_page=products_all&disp_order=1&page=2 [Sun Jul 12 18:14:17.139931 2026] [security2:error] [pid 960377:tid 960553] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt2BMANaV5i2_BLQob7wAALWo"] [Sun Jul 12 18:14:17.300888 2026] [security2:error] [pid 960377:tid 960398] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/adminer/.env"] [unique_id "alQt2RMANaV5i2_BLQob-QAAfhQ"] [Sun Jul 12 18:14:17.328005 2026] [security2:error] [pid 979474:tid 979655] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt2HTrIlbXpLXvkNcFvAAAALM"] [Sun Jul 12 18:14:17.328075 2026] [security2:error] [pid 979474:tid 979655] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt2HTrIlbXpLXvkNcFvAAAALM"] [Sun Jul 12 18:14:17.329055 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:36364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC01MzM4LXl6bw==.cgi"] [unique_id "alQt2BMANaV5i2_BLQob8wAAACw"] [Sun Jul 12 18:14:17.364562 2026] [security2:error] [pid 960377:tid 960582] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2RMANaV5i2_BLQob9wAAAEo"] [Sun Jul 12 18:14:17.391282 2026] [security2:error] [pid 979474:tid 979611] [client 114.119.142.236:25869] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "srijb.org"] [uri "/2019srijbfellows/"] [unique_id "alQt2XTrIlbXpLXvkNcFyQAAAIc"], referer: https://srijb.org/news/ [Sun Jul 12 18:14:17.533989 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/localhost/.env"] [unique_id "alQt2RMANaV5i2_BLQob_wAANnM"] [Sun Jul 12 18:14:17.664120 2026] [authz_core:error] [pid 960377:tid 960537] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:17.664605 2026] [authz_core:error] [pid 960377:tid 960537] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:18.009648 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2RMANaV5i2_BLQocBAAAAGE"] [Sun Jul 12 18:14:18.025108 2026] [security2:error] [pid 960377:tid 960554] [client 31.173.86.126:31000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-admin/admin.php"] [unique_id "alQt2BMANaV5i2_BLQob8QAAAC4"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:14:18.060804 2026] [security2:error] [pid 967714:tid 967899] [client 114.119.156.111:63553] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "rapports-minoritaires.net"] [uri "/category/_produits/grand-format"] [unique_id "alQt2l_56DeKknhy7sMF0wAAATY"], referer: https://rapports-minoritaires.net/2013/quest-ce-que-le-renseignement-8/ [Sun Jul 12 18:14:18.099002 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBoAABSEA"], referer: http://67.222.40.58/docs/laravel.log [Sun Jul 12 18:14:18.131138 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoZBQAAAH8"], referer: http://67.222.40.58/erp/.env.dist [Sun Jul 12 18:14:18.201468 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/favicons/.env"] [unique_id "alQtvF_56DeKknhy7sMF1QABSEM"] [Sun Jul 12 18:14:18.203216 2026] [security2:error] [pid 967714:tid 967856] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQtt1_56DeKknhy7sMBkwAAAQs"] [Sun Jul 12 18:14:18.207126 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/favs/.env"] [unique_id "alQtv1_56DeKknhy7sMF1wABSEM"] [Sun Jul 12 18:14:18.208188 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/feature/.env"] [unique_id "alQtv1_56DeKknhy7sMF2AABSG4"] [Sun Jul 12 18:14:18.209705 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/feature/.env.bak"] [unique_id "alQtv1_56DeKknhy7sMF2QABSBg"] [Sun Jul 12 18:14:18.210839 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/feature/xampp/info.php"] [unique_id "alQtv1_56DeKknhy7sMF2gABSEM"] [Sun Jul 12 18:14:18.213602 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/favs/.env"] [unique_id "alQtv1_56DeKknhy7sMF2wABSG4"], referer: http://67.222.40.58/favs/.env [Sun Jul 12 18:14:18.216427 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/files/.env"] [unique_id "alQtv1_56DeKknhy7sMF3QABSEM"] [Sun Jul 12 18:14:18.220927 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/first-network/.env"] [unique_id "alQtv1_56DeKknhy7sMF3wABSEM"] [Sun Jul 12 18:14:18.222822 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQtv1_56DeKknhy7sMF3gABSG4"] [Sun Jul 12 18:14:18.228926 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQtv1_56DeKknhy7sMF5gABSGI"] [Sun Jul 12 18:14:18.229079 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/blocks/.env"] [unique_id "alQtv1_56DeKknhy7sMF4wABSAU"] [Sun Jul 12 18:14:18.229714 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fisdom/fisdom/.env"] [unique_id "alQtv1_56DeKknhy7sMF4gABSE8"] [Sun Jul 12 18:14:18.230382 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/feature/.env"] [unique_id "alQtv1_56DeKknhy7sMF4AABSEM"], referer: http://67.222.40.58/feature/.env [Sun Jul 12 18:14:18.232113 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/linusadmin-phpinfo.php"] [unique_id "alQtv1_56DeKknhy7sMF6gABSEM"] [Sun Jul 12 18:14:18.232320 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/old_phpinfo.php"] [unique_id "alQtv1_56DeKknhy7sMF7AABSE8"] [Sun Jul 12 18:14:18.232367 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/feature/.env.bak"] [unique_id "alQtv1_56DeKknhy7sMF5AABSG4"], referer: http://67.222.40.58/feature/.env.bak [Sun Jul 12 18:14:18.234041 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQtv1_56DeKknhy7sMF6AABSGI"] [Sun Jul 12 18:14:18.234078 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/function/service/info.php"] [unique_id "alQtv1_56DeKknhy7sMF7gABSE8"] [Sun Jul 12 18:14:18.236161 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/files/.env"] [unique_id "alQtv1_56DeKknhy7sMF7QABSEM"], referer: http://67.222.40.58/files/.env [Sun Jul 12 18:14:18.242319 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fisdom/fisdom/.env"] [unique_id "alQtv1_56DeKknhy7sMF8QABSEM"], referer: http://67.222.40.58/fisdom/fisdom/.env [Sun Jul 12 18:14:18.243145 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQtv1_56DeKknhy7sMF7wABSGI"], referer: http://67.222.40.58/finalVersion/lcomernbootcamp/projbackend/.env [Sun Jul 12 18:14:18.243256 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/first-network/.env"] [unique_id "alQtv1_56DeKknhy7sMF8AABSG4"], referer: http://67.222.40.58/first-network/.env [Sun Jul 12 18:14:18.245470 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/helper/backend/phpinfo.php"] [unique_id "alQtwV_56DeKknhy7sMF-gABSG4"] [Sun Jul 12 18:14:18.246856 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/html/phpinfo.php"] [unique_id "alQtwl_56DeKknhy7sMF_wABSDw"] [Sun Jul 12 18:14:18.247367 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/gists/laravel/.env"] [unique_id "alQtwF_56DeKknhy7sMF9wABSD8"], referer: http://67.222.40.58/gists/laravel/.env [Sun Jul 12 18:14:18.247618 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQtv1_56DeKknhy7sMF9AABSEM"], referer: http://67.222.40.58/fixtures/fiber-debugger/.env [Sun Jul 12 18:14:18.248234 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/helper/info.php"] [unique_id "alQtwl_56DeKknhy7sMF-wABSBk"] [Sun Jul 12 18:14:18.249117 2026] [security2:error] [pid 967714:tid 967752] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/html/.env"] [unique_id "alQtwl_56DeKknhy7sMF_AABSBo"] [Sun Jul 12 18:14:18.249488 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/gists/laravel/.env"] [unique_id "alQtwV_56DeKknhy7sMF-QABSAM"] [Sun Jul 12 18:14:18.250450 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQtv1_56DeKknhy7sMF9gABSGI"], referer: http://67.222.40.58/fixtures/kitchensink/.env [Sun Jul 12 18:14:18.250581 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/icons/.env"] [unique_id "alQtwl_56DeKknhy7sMGAAABSEQ"], referer: http://67.222.40.58/icons/.env [Sun Jul 12 18:14:18.251968 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/html/.env"] [unique_id "alQtwl_56DeKknhy7sMF_gABSDI"], referer: http://67.222.40.58/html/.env [Sun Jul 12 18:14:18.260359 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info.php/"] [unique_id "alQtxV_56DeKknhy7sMGCQABSD8"] [Sun Jul 12 18:14:18.253962 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/fixtures/blocks/.env"] [unique_id "alQtv1_56DeKknhy7sMF8gABSE8"], referer: http://67.222.40.58/fixtures/blocks/.env [Sun Jul 12 18:14:18.261035 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ikiwiki/.env"] [unique_id "alQtw1_56DeKknhy7sMGBQABSBk"], referer: http://67.222.40.58/ikiwiki/.env [Sun Jul 12 18:14:18.261376 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/images/.env"] [unique_id "alQtxF_56DeKknhy7sMGBwABSD4"], referer: http://67.222.40.58/images/.env [Sun Jul 12 18:14:18.261649 2026] [security2:error] [pid 967714:tid 967785] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/images/.env"] [unique_id "alQtxF_56DeKknhy7sMGCAABSDs"] [Sun Jul 12 18:14:18.262488 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/infos.php"] [unique_id "alQtxV_56DeKknhy7sMGDAABSFg"] [Sun Jul 12 18:14:18.262748 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/info/info.php"] [unique_id "alQtxV_56DeKknhy7sMGCwABSAM"] [Sun Jul 12 18:14:18.263457 2026] [security2:error] [pid 967714:tid 967752] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ikiwiki/.env"] [unique_id "alQtw1_56DeKknhy7sMGBgABSBo"] [Sun Jul 12 18:14:18.263907 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/js-plugin/.env"] [unique_id "alQtxl_56DeKknhy7sMGDwABSDI"], referer: http://67.222.40.58/js-plugin/.env [Sun Jul 12 18:14:18.264815 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/js-plugin/.env"] [unique_id "alQtxl_56DeKknhy7sMGDQABSEQ"] [Sun Jul 12 18:14:18.267339 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/icons/.env"] [unique_id "alQtwl_56DeKknhy7sMGBAABSEM"] [Sun Jul 12 18:14:18.269091 2026] [security2:error] [pid 967714:tid 967737] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lara/.env"] [unique_id "alQtx1_56DeKknhy7sMGFQABSAs"], referer: http://67.222.40.58/lara/.env [Sun Jul 12 18:14:18.269487 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lara/.env"] [unique_id "alQtyF_56DeKknhy7sMGFgABSFg"] [Sun Jul 12 18:14:18.269989 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lara/.env.bak"] [unique_id "alQtyF_56DeKknhy7sMGFwABSAg"] [Sun Jul 12 18:14:18.270375 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lara/.env.bak"] [unique_id "alQtyF_56DeKknhy7sMGGAABSEQ"], referer: http://67.222.40.58/lara/.env.bak [Sun Jul 12 18:14:18.271685 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/lara/backend/phpinfo.php"] [unique_id "alQty1_56DeKknhy7sMGHAABSAg"] [Sun Jul 12 18:14:18.275238 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/lara/current/phpinfo.php"] [unique_id "alQtzF_56DeKknhy7sMGIAABSAg"] [Sun Jul 12 18:14:18.276801 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/laravel/help/phpinfo.php"] [unique_id "alQtz1_56DeKknhy7sMGIwABSHU"] [Sun Jul 12 18:14:18.277909 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/laravel/info.php"] [unique_id "alQt0F_56DeKknhy7sMGJAABSHU"] [Sun Jul 12 18:14:18.293063 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/leafer-app/.env"] [unique_id "alQt0V_56DeKknhy7sMGJQABSCg"] [Sun Jul 12 18:14:18.294920 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ledger_sync/.env"] [unique_id "alQt1F_56DeKknhy7sMGKAABSHU"] [Sun Jul 12 18:14:18.294920 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/leafer-app/.env"] [unique_id "alQt0l_56DeKknhy7sMGJgABSC4"], referer: http://67.222.40.58/leafer-app/.env [Sun Jul 12 18:14:18.295154 2026] [security2:error] [pid 967714:tid 967745] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/ledger_sync/.env"] [unique_id "alQt0l_56DeKknhy7sMGJwABSBM"], referer: http://67.222.40.58/ledger_sync/.env [Sun Jul 12 18:14:18.295518 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legacy/tests/9.1.1/.env"] [unique_id "alQt1V_56DeKknhy7sMGKgABSBs"], referer: http://67.222.40.58/legacy/tests/9.1.1/.env [Sun Jul 12 18:14:18.296392 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legacy/tests/9.2.0/.env"] [unique_id "alQt1l_56DeKknhy7sMGLQABSEY"] [Sun Jul 12 18:14:18.296880 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legacy/tests/9.2.0/.env"] [unique_id "alQt1V_56DeKknhy7sMGKwABSAY"], referer: http://67.222.40.58/legacy/tests/9.2.0/.env [Sun Jul 12 18:14:18.296993 2026] [security2:error] [pid 967714:tid 967735] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQt11_56DeKknhy7sMGMwABSAk"] [Sun Jul 12 18:14:18.297032 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legal/.env"] [unique_id "alQt1l_56DeKknhy7sMGMAABSAw"], referer: http://67.222.40.58/legal/.env [Sun Jul 12 18:14:18.297036 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/library/.env"] [unique_id "alQt11_56DeKknhy7sMGNAABSHM"] [Sun Jul 12 18:14:18.299048 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legal/.env"] [unique_id "alQt1l_56DeKknhy7sMGLgABSHo"] [Sun Jul 12 18:14:18.299164 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQt11_56DeKknhy7sMGMgABSGg"], referer: http://67.222.40.58/lemonldap-ng-fr-doc/.env [Sun Jul 12 18:14:18.309851 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/legacy/tests/9.1.1/.env"] [unique_id "alQt1V_56DeKknhy7sMGKQABSEg"] [Sun Jul 12 18:14:18.311478 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/library/.env"] [unique_id "alQt2F_56DeKknhy7sMGOAABSCg"], referer: http://67.222.40.58/library/.env [Sun Jul 12 18:14:18.326583 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/live/.env"] [unique_id "alQt2V_56DeKknhy7sMGRgABSHk"] [Sun Jul 12 18:14:18.329470 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/live/.env"] [unique_id "alQt2V_56DeKknhy7sMGRQABSCs"], referer: http://67.222.40.58/live/.env [Sun Jul 12 18:14:18.430588 2026] [security2:error] [pid 960377:tid 960571] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt2RMANaV5i2_BLQob_QAAPzY"] [Sun Jul 12 18:14:18.459342 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:18.459915 2026] [authz_core:error] [pid 960377:tid 960578] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:18.541539 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMF_QAAAVs"] [Sun Jul 12 18:14:18.748981 2026] [security2:error] [pid 967714:tid 967965] [client 168.100.149.246:33664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10010/bargainor/2308_metalogical.jsp"] [unique_id "alQt2l_56DeKknhy7sMGUgAAAXg"] [Sun Jul 12 18:14:18.942354 2026] [security2:error] [pid 967714:tid 967951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGUQAAAWo"] [Sun Jul 12 18:14:19.074817 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt2hMANaV5i2_BLQocGAAAMlI"] [Sun Jul 12 18:14:19.224900 2026] [security2:error] [pid 967714:tid 967866] [client 143.14.6.148:21394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 148.6.14.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQt21_56DeKknhy7sMGWgAAARU"], referer: https://www.cidclan.net/ [Sun Jul 12 18:14:19.254093 2026] [security2:error] [pid 967714:tid 967939] [client 143.20.253.11:61766] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.253.20.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQt21_56DeKknhy7sMGWwAAAV4"], referer: https://www.cidclan.net/ [Sun Jul 12 18:14:19.280207 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:19.280888 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:19.401279 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:56080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/backend/phpinfo.php"] [unique_id "alQt21_56DeKknhy7sMGYAAAASc"] [Sun Jul 12 18:14:19.426451 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt2xMANaV5i2_BLQocIAAAAC8"] [Sun Jul 12 18:14:19.463384 2026] [security2:error] [pid 979474:tid 979726] [client 125.167.21.72:62440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt23TrIlbXpLXvkNcF4wAAAPk"] [Sun Jul 12 18:14:19.463614 2026] [security2:error] [pid 979474:tid 979726] [client 125.167.21.72:62440] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt23TrIlbXpLXvkNcF4wAAAPk"] [Sun Jul 12 18:14:19.549164 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/backend/phpinfo.php"] [unique_id "alQt21_56DeKknhy7sMGZQABSHc"] [Sun Jul 12 18:14:19.553371 2026] [security2:error] [pid 960377:tid 960589] [client 62.171.167.118:60060] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/info.php"] [unique_id "alQt2xMANaV5i2_BLQocIwAAAFE"] [Sun Jul 12 18:14:19.632720 2026] [security2:error] [pid 979474:tid 979646] [client 57.141.18.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQt23TrIlbXpLXvkNcF3QAAAKo"] [Sun Jul 12 18:14:19.740091 2026] [security2:error] [pid 960377:tid 960538] [client 24.203.79.110:56861] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt2xMANaV5i2_BLQocJQAAAB4"] [Sun Jul 12 18:14:19.745326 2026] [security2:error] [pid 960377:tid 960538] [client 24.203.79.110:56861] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt2xMANaV5i2_BLQocJQAAAB4"] [Sun Jul 12 18:14:19.848464 2026] [security2:error] [pid 967714:tid 967897] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt21_56DeKknhy7sMGaAAAATQ"] [Sun Jul 12 18:14:20.019966 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt2xMANaV5i2_BLQocIQAAWh4"] [Sun Jul 12 18:14:20.074808 2026] [authz_core:error] [pid 967714:tid 967878] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:20.075511 2026] [authz_core:error] [pid 967714:tid 967878] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:20.089795 2026] [security2:error] [pid 960377:tid 960518] [client 168.100.149.48:53086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10075/bargainor/2308_psychoreflex.jsp"] [unique_id "alQt3BMANaV5i2_BLQocKQAAAAo"] [Sun Jul 12 18:14:20.191450 2026] [security2:error] [pid 960377:tid 960441] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/agora/.env"] [unique_id "alQt3BMANaV5i2_BLQocLAAAOj4"] [Sun Jul 12 18:14:20.203281 2026] [security2:error] [pid 979474:tid 979666] [client 114.119.167.239:50239] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "qcreda.com"] [uri "/meeting-minutes-june-2018"] [unique_id "alQt3HTrIlbXpLXvkNcF7AAAAL4"], referer: https://qcreda.com/2020/10/page/2 [Sun Jul 12 18:14:20.263303 2026] [security2:error] [pid 967714:tid 967935] [client 91.165.124.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt21_56DeKknhy7sMGawAAAVo"] [Sun Jul 12 18:14:20.284551 2026] [security2:error] [pid 979474:tid 979696] [client 114.119.133.191:54463] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "westoaksfellowship.org"] [uri "/why-advent-part-1/"] [unique_id "alQt3HTrIlbXpLXvkNcF7QAAANs"], referer: https://westoaksfellowship.org/why-advent-part-1/ [Sun Jul 12 18:14:20.359366 2026] [security2:error] [pid 960377:tid 960435] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/alpha/.env"] [unique_id "alQt3BMANaV5i2_BLQocLwAASDg"] [Sun Jul 12 18:14:20.381900 2026] [security2:error] [pid 960377:tid 960604] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC02MjM3LXl6bw==.cgi"] [unique_id "alQt3BMANaV5i2_BLQocMAAAAGA"] [Sun Jul 12 18:14:20.407315 2026] [security2:error] [pid 967714:tid 967914] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGegAAAUU"] [Sun Jul 12 18:14:20.517721 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/anaconda/.env"] [unique_id "alQt3BMANaV5i2_BLQocMQAAJDE"] [Sun Jul 12 18:14:20.554155 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/info.php"] [unique_id "alQt3F_56DeKknhy7sMGhwABSE0"] [Sun Jul 12 18:14:20.562293 2026] [security2:error] [pid 967714:tid 967855] [client 74.7.244.3:50066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.europeangranite.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGgQABCnI"] [Sun Jul 12 18:14:20.724923 2026] [security2:error] [pid 967714:tid 967866] [client 74.7.242.56:37602] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.europeangranite.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGggABFW0"] [Sun Jul 12 18:14:20.830210 2026] [security2:error] [pid 967714:tid 967971] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGigAAAX4"] [Sun Jul 12 18:14:20.835273 2026] [authz_core:error] [pid 979474:tid 979713] [client 43.166.255.102:41408] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log, referer: http://70.40.216.195 [Sun Jul 12 18:14:20.965819 2026] [authz_core:error] [pid 979474:tid 979675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:20.966423 2026] [authz_core:error] [pid 979474:tid 979675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:21.112966 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQttxMANaV5i2_BLQoZBAAAAA8"], referer: http://67.222.40.58/erp/.env.dev [Sun Jul 12 18:14:21.141590 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFjwAAAXc"], referer: http://67.222.38.115/functions/v1/ [Sun Jul 12 18:14:21.203740 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFjAAAAYI"], referer: http://67.222.38.115/gate/applications [Sun Jul 12 18:14:21.211305 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFkQAAAVU"] [Sun Jul 12 18:14:21.278624 2026] [access_compat:error] [pid 960377:tid 960527] [client 45.184.19.133:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/hp-ac-adapter [Sun Jul 12 18:14:21.282139 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFlQAAATk"] [Sun Jul 12 18:14:21.282744 2026] [access_compat:error] [pid 960377:tid 960527] [client 45.184.19.133:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/401.shtml [Sun Jul 12 18:14:21.298190 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFkAAAAXA"] [Sun Jul 12 18:14:21.324154 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFiwAAAT8"] [Sun Jul 12 18:14:21.416818 2026] [security2:error] [pid 979474:tid 979709] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3XTrIlbXpLXvkNcF_wAAAOg"] [Sun Jul 12 18:14:21.528617 2026] [security2:error] [pid 967714:tid 967936] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGkQAAAVs"] [Sun Jul 12 18:14:21.528729 2026] [security2:error] [pid 967714:tid 967936] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt3F_56DeKknhy7sMGkQAAAVs"] [Sun Jul 12 18:14:21.530338 2026] [security2:error] [pid 979474:tid 979617] [client 65.21.113.206:36366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd5LTIzNy03eXpvbC02MjM3LXl6bw==.cgi"] [unique_id "alQt3HTrIlbXpLXvkNcF_AAAAI0"] [Sun Jul 12 18:14:21.659753 2026] [security2:error] [pid 979474:tid 979698] [client 62.171.167.118:56096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/infophp.php"] [unique_id "alQt3XTrIlbXpLXvkNcGAgAAAN0"] [Sun Jul 12 18:14:21.665965 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt3BMANaV5i2_BLQocMwAAKzc"] [Sun Jul 12 18:14:21.809704 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:21.810200 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:21.873692 2026] [security2:error] [pid 967714:tid 967904] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3V_56DeKknhy7sMGowAAATs"] [Sun Jul 12 18:14:22.127567 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFkwAAAVw"] [Sun Jul 12 18:14:22.132641 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt1l_56DeKknhy7sMFhwAAASs"], referer: http://67.222.38.115/galaxies/index [Sun Jul 12 18:14:22.255477 2026] [security2:error] [pid 967714:tid 967892] [client 198.235.24.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQt3V_56DeKknhy7sMGoQAAAS8"] [Sun Jul 12 18:14:22.340323 2026] [security2:error] [pid 967714:tid 967883] [client 62.171.167.118:56098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/infos.php"] [unique_id "alQt3l_56DeKknhy7sMGswAAASY"] [Sun Jul 12 18:14:22.392314 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3l_56DeKknhy7sMGrQAAAQ0"] [Sun Jul 12 18:14:22.414624 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:56116] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/old_phpinfo.php"] [unique_id "alQt3l_56DeKknhy7sMGtQAAAYc"] [Sun Jul 12 18:14:22.418259 2026] [security2:error] [pid 979474:tid 979643] [client 62.171.167.118:56102] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/lara/info.php"] [unique_id "alQt3nTrIlbXpLXvkNcGCgAAAKc"] [Sun Jul 12 18:14:22.624343 2026] [authz_core:error] [pid 979474:tid 979686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:22.624890 2026] [authz_core:error] [pid 979474:tid 979686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:22.663762 2026] [security2:error] [pid 979474:tid 979719] [client 114.119.139.118:48595] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.shiromi.com"] [uri "/gallery3/index.php/form/add/comments/7253"] [unique_id "alQt3nTrIlbXpLXvkNcGEQAAAPI"], referer: http://www.shiromi.com/gallery3/index.php/form/add/comments/7253 [Sun Jul 12 18:14:22.710570 2026] [security2:error] [pid 979474:tid 979674] [client 168.100.149.30:24404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10140/bargainor/2308_mailable.jsp"] [unique_id "alQt3nTrIlbXpLXvkNcGEwAAAMY"] [Sun Jul 12 18:14:22.757159 2026] [security2:error] [pid 960377:tid 960517] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt3RMANaV5i2_BLQocQQAACWM"] [Sun Jul 12 18:14:22.885988 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt3hMANaV5i2_BLQocRAAAAAw"] [Sun Jul 12 18:14:22.912196 2026] [proxy:warn] [pid 967714:tid 967945] [client 18.116.101.220:46846] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:14:22.944234 2026] [proxy:error] [pid 967714:tid 967945] (70014)End of file found: [client 18.116.101.220:46846] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 18.116.101.220 () [Sun Jul 12 18:14:22.951359 2026] [security2:error] [pid 960377:tid 960516] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTd6dWExZF8zNTI4Lzd6LzE1MTk3L3o=.html"] [unique_id "alQt3hMANaV5i2_BLQocSQAAAAg"] [Sun Jul 12 18:14:22.959826 2026] [security2:error] [pid 979474:tid 979514] [remote 58.186.150.51:56874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.150.186.58.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQt3nTrIlbXpLXvkNcGFAAAkyI"] [Sun Jul 12 18:14:23.046705 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:45376] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/phpversion.php"] [unique_id "alQt31_56DeKknhy7sMGwQAAAXA"] [Sun Jul 12 18:14:23.054657 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:45362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/test.php"] [unique_id "alQt31_56DeKknhy7sMGwgAAAT8"] [Sun Jul 12 18:14:23.056065 2026] [security2:error] [pid 979474:tid 979692] [client 62.171.167.118:45372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/temp.php"] [unique_id "alQt33TrIlbXpLXvkNcGFgAAANc"] [Sun Jul 12 18:14:23.189884 2026] [security2:error] [pid 960377:tid 960514] [client 62.171.167.118:45346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lms/current/phpinfo.php"] [unique_id "alQt3xMANaV5i2_BLQocTwAAAAY"] [Sun Jul 12 18:14:23.330721 2026] [security2:error] [pid 960377:tid 960379] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/temp.php"] [unique_id "alQt3xMANaV5i2_BLQocVAAAIwE"] [Sun Jul 12 18:14:23.331288 2026] [security2:error] [pid 960377:tid 960409] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/lms/current/phpinfo.php"] [unique_id "alQt3xMANaV5i2_BLQocVwAAIx8"] [Sun Jul 12 18:14:23.332453 2026] [security2:error] [pid 960377:tid 960409] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/mailer/infophp.php"] [unique_id "alQt3xMANaV5i2_BLQocWwAAIx8"] [Sun Jul 12 18:14:23.333236 2026] [security2:error] [pid 960377:tid 960385] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/live/phpversion.php"] [unique_id "alQt3xMANaV5i2_BLQocVQAAIwc"] [Sun Jul 12 18:14:23.334113 2026] [security2:error] [pid 960377:tid 960409] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/mailer/server/info.php"] [unique_id "alQt3xMANaV5i2_BLQocXAAAIx8"] [Sun Jul 12 18:14:23.337011 2026] [security2:error] [pid 960377:tid 960484] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/local/.env"] [unique_id "alQt3xMANaV5i2_BLQocWAAAI2k"] [Sun Jul 12 18:14:23.337146 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:45398] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/mailer/server/info.php"] [unique_id "alQt31_56DeKknhy7sMGyQAAAYU"] [Sun Jul 12 18:14:23.337211 2026] [security2:error] [pid 960377:tid 960505] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/mail/.env"] [unique_id "alQt3xMANaV5i2_BLQocWgAAI34"] [Sun Jul 12 18:14:23.371438 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt3nTrIlbXpLXvkNcGCQAAAPQ"] [Sun Jul 12 18:14:23.373474 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt3l_56DeKknhy7sMGsgAAAX4"], referer: http://67.222.38.115/gerrit/projects/ [Sun Jul 12 18:14:23.381778 2026] [security2:error] [pid 967714:tid 967916] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt31_56DeKknhy7sMGxwAAAUc"] [Sun Jul 12 18:14:23.382638 2026] [security2:error] [pid 960377:tid 960450] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/main/.env"] [unique_id "alQt3xMANaV5i2_BLQocYAAABEc"] [Sun Jul 12 18:14:23.409597 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:23.449457 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:23.462475 2026] [security2:error] [pid 960377:tid 960424] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/marketing/backend/info.php"] [unique_id "alQt3xMANaV5i2_BLQocZgAAey0"] [Sun Jul 12 18:14:23.462981 2026] [security2:error] [pid 960377:tid 960407] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/marketing/infophp.php"] [unique_id "alQt3xMANaV5i2_BLQocZwAAex0"] [Sun Jul 12 18:14:23.467452 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:45386] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/marketing/backend/info.php"] [unique_id "alQt3xMANaV5i2_BLQocaQAAAB8"] [Sun Jul 12 18:14:23.469539 2026] [security2:error] [pid 960377:tid 960602] [client 62.171.167.118:45426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/marketing/infophp.php"] [unique_id "alQt3xMANaV5i2_BLQocbAAAAF4"] [Sun Jul 12 18:14:23.482836 2026] [security2:error] [pid 960377:tid 960380] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/mail/.env"] [unique_id "alQt3xMANaV5i2_BLQocagAAewI"], referer: http://67.222.42.11/mail/.env [Sun Jul 12 18:14:23.497108 2026] [security2:error] [pid 960377:tid 960439] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/new/.env"] [unique_id "alQt3xMANaV5i2_BLQoccAAAdDw"] [Sun Jul 12 18:14:23.497497 2026] [security2:error] [pid 960377:tid 960488] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/monerod/.env"] [unique_id "alQt3xMANaV5i2_BLQocbwAAdG0"] [Sun Jul 12 18:14:23.551359 2026] [proxy:error] [pid 979474:tid 979689] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:14:23.551583 2026] [proxy_http:error] [pid 979474:tid 979689] [client 185.247.137.168:44927] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:14:23.553249 2026] [security2:error] [pid 960377:tid 960406] [remote 185.177.72.12:34984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config.bak"] [unique_id "alQt3xMANaV5i2_BLQoccwAAMxw"] [Sun Jul 12 18:14:23.554285 2026] [proxy:error] [pid 979474:tid 979689] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:14:23.554552 2026] [proxy_http:error] [pid 979474:tid 979689] [client 185.247.137.168:44927] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:14:23.594837 2026] [security2:error] [pid 960377:tid 960394] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/main/.env"] [unique_id "alQt3xMANaV5i2_BLQoceAAAURA"], referer: http://67.222.42.11/main/.env [Sun Jul 12 18:14:23.601783 2026] [security2:error] [pid 960377:tid 960431] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/newsite/.env"] [unique_id "alQt3xMANaV5i2_BLQocegAAUTQ"] [Sun Jul 12 18:14:23.607359 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:45492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/node/crm/info.php"] [unique_id "alQt31_56DeKknhy7sMG2QAAASo"] [Sun Jul 12 18:14:23.615723 2026] [security2:error] [pid 960377:tid 960414] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/node/crm/info.php"] [unique_id "alQt3xMANaV5i2_BLQocfAAAUSM"] [Sun Jul 12 18:14:23.638437 2026] [security2:error] [pid 960377:tid 960473] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/api/info.php"] [unique_id "alQt3xMANaV5i2_BLQocfgAAUV4"] [Sun Jul 12 18:14:23.640129 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:45448] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/api/info.php"] [unique_id "alQt33TrIlbXpLXvkNcGJgAAAP4"] [Sun Jul 12 18:14:23.646648 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:45514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/infophp.php"] [unique_id "alQt3xMANaV5i2_BLQocfwAAAFo"] [Sun Jul 12 18:14:23.670708 2026] [security2:error] [pid 960377:tid 960462] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/monerod/.env"] [unique_id "alQt3xMANaV5i2_BLQocgQAAClM"], referer: http://67.222.42.11/monerod/.env [Sun Jul 12 18:14:23.672338 2026] [security2:error] [pid 960377:tid 960418] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/infophp.php"] [unique_id "alQt3xMANaV5i2_BLQocggAACic"] [Sun Jul 12 18:14:23.673752 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:45350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/infos.php"] [unique_id "alQt3xMANaV5i2_BLQocgwAAABw"] [Sun Jul 12 18:14:23.695894 2026] [security2:error] [pid 960377:tid 960440] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/infos.php"] [unique_id "alQt3xMANaV5i2_BLQochAAAbD0"] [Sun Jul 12 18:14:23.699827 2026] [security2:error] [pid 960377:tid 960501] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/newsite/.env"] [unique_id "alQt3xMANaV5i2_BLQochgAAbHo"], referer: http://67.222.42.11/newsite/.env [Sun Jul 12 18:14:23.702103 2026] [security2:error] [pid 960377:tid 960503] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/new/.env"] [unique_id "alQt3xMANaV5i2_BLQochwAAbHw"], referer: http://67.222.42.11/new/.env [Sun Jul 12 18:14:23.714603 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:45462] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/laravel/info.php"] [unique_id "alQt31_56DeKknhy7sMG3QAAAXQ"] [Sun Jul 12 18:14:23.726437 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:45474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/phpversion.php"] [unique_id "alQt33TrIlbXpLXvkNcGJwAAANs"] [Sun Jul 12 18:14:23.730830 2026] [security2:error] [pid 960377:tid 960496] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/laravel/info.php"] [unique_id "alQt3xMANaV5i2_BLQociQAAZXU"] [Sun Jul 12 18:14:23.742824 2026] [security2:error] [pid 960377:tid 960463] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/phpversion.php"] [unique_id "alQt3xMANaV5i2_BLQocigAAelQ"] [Sun Jul 12 18:14:23.763691 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:45406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/pinfo.php"] [unique_id "alQt3xMANaV5i2_BLQociwAAAG0"] [Sun Jul 12 18:14:23.788463 2026] [security2:error] [pid 960377:tid 960483] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/pinfo.php"] [unique_id "alQt3xMANaV5i2_BLQocjAAAY2g"] [Sun Jul 12 18:14:23.805720 2026] [security2:error] [pid 979474:tid 979724] [client 62.171.167.118:45528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/temp.php"] [unique_id "alQt33TrIlbXpLXvkNcGKAAAAPc"] [Sun Jul 12 18:14:23.812766 2026] [security2:error] [pid 960377:tid 960460] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/temp.php"] [unique_id "alQt3xMANaV5i2_BLQocjQAAIFE"] [Sun Jul 12 18:14:23.814920 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:45440] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/time.php"] [unique_id "alQt3xMANaV5i2_BLQocjgAAAE0"] [Sun Jul 12 18:14:23.816297 2026] [security2:error] [pid 960377:tid 960413] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/nodeapi/time.php"] [unique_id "alQt3xMANaV5i2_BLQocjwAAGiI"] [Sun Jul 12 18:14:23.828558 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:45420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/old_phpinfo.php"] [unique_id "alQt33TrIlbXpLXvkNcGKgAAAN4"] [Sun Jul 12 18:14:23.833459 2026] [security2:error] [pid 960377:tid 960437] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/old_phpinfo.php"] [unique_id "alQt3xMANaV5i2_BLQockQAADjo"] [Sun Jul 12 18:14:23.850150 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt3hMANaV5i2_BLQocSAAAJzM"] [Sun Jul 12 18:14:23.861716 2026] [security2:error] [pid 960377:tid 960487] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/oldsanta/.env"] [unique_id "alQt3xMANaV5i2_BLQockgAAZGw"] [Sun Jul 12 18:14:23.950345 2026] [security2:error] [pid 960377:tid 960623] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt3xMANaV5i2_BLQocbgAAAHM"] [Sun Jul 12 18:14:23.950424 2026] [security2:error] [pid 960377:tid 960623] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt3xMANaV5i2_BLQocbgAAAHM"] [Sun Jul 12 18:14:23.951848 2026] [security2:error] [pid 967714:tid 967910] [client 65.21.113.206:45218] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTd6dWExZF8zNTI4Lzd6LzE1MTk3L3o=.html"] [unique_id "alQt31_56DeKknhy7sMG1AAAAUE"] [Sun Jul 12 18:14:23.980201 2026] [security2:error] [pid 960377:tid 960566] [client 185.177.72.12:34984] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/index.php"] [unique_id "alQt3xMANaV5i2_BLQociAAAOkk"] [Sun Jul 12 18:14:23.982989 2026] [security2:error] [pid 960377:tid 960401] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/oldsanta/.env"] [unique_id "alQt3xMANaV5i2_BLQoclAAAbhc"], referer: http://67.222.42.11/oldsanta/.env [Sun Jul 12 18:14:24.022283 2026] [security2:error] [pid 960377:tid 960489] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/app/.env"] [unique_id "alQt4BMANaV5i2_BLQoclwAAfm4"] [Sun Jul 12 18:14:24.022609 2026] [security2:error] [pid 960377:tid 960506] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "alQt4BMANaV5i2_BLQocmAAAfn8"] [Sun Jul 12 18:14:24.055173 2026] [security2:error] [pid 960377:tid 960469] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/web/.env"] [unique_id "alQt4BMANaV5i2_BLQocmgAAD1o"] [Sun Jul 12 18:14:24.063813 2026] [security2:error] [pid 960377:tid 960417] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packed/.env"] [unique_id "alQt4BMANaV5i2_BLQocmwAALCY"] [Sun Jul 12 18:14:24.133353 2026] [security2:error] [pid 960377:tid 960393] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/patchwork/.env"] [unique_id "alQt4BMANaV5i2_BLQocnAAASg8"] [Sun Jul 12 18:14:24.154229 2026] [security2:error] [pid 960377:tid 960420] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/app/.env"] [unique_id "alQt4BMANaV5i2_BLQocnQAAEyk"], referer: http://67.222.42.11/packages/app/.env [Sun Jul 12 18:14:24.170217 2026] [security2:error] [pid 960377:tid 960436] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "alQt4BMANaV5i2_BLQocngAAKDk"], referer: http://67.222.42.11/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env [Sun Jul 12 18:14:24.172837 2026] [security2:error] [pid 960377:tid 960474] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packages/web/.env"] [unique_id "alQt4BMANaV5i2_BLQocnwAAKF8"], referer: http://67.222.42.11/packages/web/.env [Sun Jul 12 18:14:24.192463 2026] [security2:error] [pid 979474:tid 979693] [client 62.171.167.118:60764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php-info/info.php"] [unique_id "alQt4HTrIlbXpLXvkNcGMgAAANg"] [Sun Jul 12 18:14:24.198352 2026] [security2:error] [pid 960377:tid 960499] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/pfbe/.env"] [unique_id "alQt4BMANaV5i2_BLQocoAAAPXg"] [Sun Jul 12 18:14:24.270615 2026] [security2:error] [pid 979474:tid 979610] [client 74.125.215.227:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "wieda.com"] [uri "/index.php"] [unique_id "alQt13TrIlbXpLXvkNcFngAAAIY"] [Sun Jul 12 18:14:24.303745 2026] [security2:error] [pid 960377:tid 960497] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php-info/info.php"] [unique_id "alQt4BMANaV5i2_BLQocowAAdXY"] [Sun Jul 12 18:14:24.310618 2026] [security2:error] [pid 960377:tid 960480] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/packed/.env"] [unique_id "alQt4BMANaV5i2_BLQocpQAAdWU"], referer: http://67.222.42.11/packed/.env [Sun Jul 12 18:14:24.319890 2026] [security2:error] [pid 960377:tid 960382] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/patchwork/.env"] [unique_id "alQt4BMANaV5i2_BLQocpAAAdQQ"], referer: http://67.222.42.11/patchwork/.env [Sun Jul 12 18:14:24.319917 2026] [security2:error] [pid 960377:tid 960480] [remote 62.171.167.118:45874] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/pfbe/.env"] [unique_id "alQt4BMANaV5i2_BLQocpgAAdWU"], referer: http://67.222.42.11/pfbe/.env [Sun Jul 12 18:14:24.385447 2026] [authz_core:error] [pid 979474:tid 979651] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:24.385969 2026] [authz_core:error] [pid 979474:tid 979651] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:24.469954 2026] [security2:error] [pid 960377:tid 960476] [remote 185.177.72.12:62978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQt4BMANaV5i2_BLQocpwAALWE"] [Sun Jul 12 18:14:24.746062 2026] [security2:error] [pid 967714:tid 967964] [client 168.100.149.134:48164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10205/bargainor/2308_epidemiology.jsp"] [unique_id "alQt4F_56DeKknhy7sMG7wAAAXc"] [Sun Jul 12 18:14:24.948693 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt4BMANaV5i2_BLQoclgAAJUI"] [Sun Jul 12 18:14:25.308036 2026] [security2:error] [pid 979474:tid 979647] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt4HTrIlbXpLXvkNcGOwAAAKs"] [Sun Jul 12 18:14:25.318811 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:25.319303 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:25.332612 2026] [security2:error] [pid 967714:tid 967925] [client 74.7.244.10:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "daniellesdayoff.com"] [uri "/index.php"] [unique_id "alQt2F_56DeKknhy7sMFvQABUDc"] [Sun Jul 12 18:14:25.424651 2026] [proxy:warn] [pid 967714:tid 967942] [client 18.116.101.220:51808] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:14:25.424745 2026] [proxy:error] [pid 967714:tid 967942] (70014)End of file found: [client 18.116.101.220:51808] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 18.116.101.220 () [Sun Jul 12 18:14:25.841923 2026] [security2:error] [pid 979474:tid 979672] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt4XTrIlbXpLXvkNcGQwAAAMQ"] [Sun Jul 12 18:14:25.845381 2026] [security2:error] [pid 967714:tid 967959] [client 186.249.18.93:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQt4V_56DeKknhy7sMG-gAAAXI"] [Sun Jul 12 18:14:25.862611 2026] [security2:error] [pid 960377:tid 960564] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt4RMANaV5i2_BLQocqgAAOA0"] [Sun Jul 12 18:14:25.977356 2026] [security2:error] [pid 967714:tid 967787] [remote 216.73.216.109:41132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQt4V_56DeKknhy7sMG_wABRD0"] [Sun Jul 12 18:14:26.046574 2026] [security2:error] [pid 967714:tid 967922] [client 114.119.141.200:29615] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.boundaryplanner.com"] [uri "/rd_part2_query.php"] [unique_id "alQt4l_56DeKknhy7sMHAQAAAU0"], referer: https://www.boundaryplanner.com/cms_userroles.php [Sun Jul 12 18:14:26.070111 2026] [security2:error] [pid 960377:tid 960526] [client 168.100.149.7:34066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10270/bargainor/2308_secque.jsp"] [unique_id "alQt4hMANaV5i2_BLQocuQAAABI"] [Sun Jul 12 18:14:26.097388 2026] [authz_core:error] [pid 979474:tid 979688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:26.098309 2026] [authz_core:error] [pid 979474:tid 979688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:26.171987 2026] [proxy:warn] [pid 960377:tid 960509] [client 3.129.187.38:55288] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /400.shtml [Sun Jul 12 18:14:26.172054 2026] [proxy:error] [pid 960377:tid 960509] (70014)End of file found: [client 3.129.187.38:55288] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.129.187.38 () [Sun Jul 12 18:14:26.195084 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt31_56DeKknhy7sMG0QAAASE"] [Sun Jul 12 18:14:26.211133 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt31_56DeKknhy7sMG0AAAAWc"] [Sun Jul 12 18:14:26.259591 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt31_56DeKknhy7sMG0wAAAVM"] [Sun Jul 12 18:14:26.280286 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt31_56DeKknhy7sMG0gAAAQ8"] [Sun Jul 12 18:14:26.327286 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt4hMANaV5i2_BLQoctgAAAGc"] [Sun Jul 12 18:14:26.729268 2026] [security2:error] [pid 960377:tid 960539] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt4hMANaV5i2_BLQocwQAAAB8"] [Sun Jul 12 18:14:26.804001 2026] [security2:error] [pid 960377:tid 960519] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTdfMTk5MDNfN3BuYS9wXzM1NThfbmF6.html"] [unique_id "alQt4hMANaV5i2_BLQocxAAAAAs"] [Sun Jul 12 18:14:26.844124 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt4hMANaV5i2_BLQoctQAACE4"] [Sun Jul 12 18:14:26.847649 2026] [cgid:error] [pid 979474:tid 979697] [client 74.7.230.27:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/seantari/public_html/404.shtml [Sun Jul 12 18:14:26.847966 2026] [security2:error] [pid 979474:tid 979697] [client 74.7.230.27:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "seantario.com"] [uri "/404.shtml"] [unique_id "alQt4nTrIlbXpLXvkNcGTgAAANw"] [Sun Jul 12 18:14:26.853424 2026] [security2:error] [pid 979474:tid 979623] [client 74.7.230.27:55902] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "seantario.com"] [uri "/robots.txt"] [unique_id "alQt4nTrIlbXpLXvkNcGTAAAkxQ"] [Sun Jul 12 18:14:26.890324 2026] [security2:error] [pid 967714:tid 967849] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "alQt4l_56DeKknhy7sMHEQABhns"] [Sun Jul 12 18:14:26.943460 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:26.944139 2026] [authz_core:error] [pid 960377:tid 960559] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:27.001837 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/api-server/.env"] [unique_id "alQt4hMANaV5i2_BLQocyAAAMn0"] [Sun Jul 12 18:14:27.036962 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:56126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/php.php"] [unique_id "alQt43TrIlbXpLXvkNcGUgAAAPM"] [Sun Jul 12 18:14:27.175531 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:37228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/phpinfo.php"] [unique_id "alQt41_56DeKknhy7sMHGwAAARk"] [Sun Jul 12 18:14:27.178145 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:37238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/temp.php"] [unique_id "alQt41_56DeKknhy7sMHHAAAAXc"] [Sun Jul 12 18:14:27.258644 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:37276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mail/current/info.php"] [unique_id "alQt41_56DeKknhy7sMHHwAAAVk"] [Sun Jul 12 18:14:27.267306 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:37298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/infophp.php"] [unique_id "alQt41_56DeKknhy7sMHIAAAAYg"] [Sun Jul 12 18:14:27.268957 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:37290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/server/info.php"] [unique_id "alQt41_56DeKknhy7sMHIQAAAR0"] [Sun Jul 12 18:14:27.271555 2026] [security2:error] [pid 979474:tid 979689] [client 62.171.167.118:37296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/help/phpinfo.php"] [unique_id "alQt43TrIlbXpLXvkNcGUwAAANQ"] [Sun Jul 12 18:14:27.276240 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:37302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/test.php"] [unique_id "alQt41_56DeKknhy7sMHJgAAAWQ"] [Sun Jul 12 18:14:27.296379 2026] [security2:error] [pid 979474:tid 979708] [client 57.141.18.105:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQt4nTrIlbXpLXvkNcGTwAAAOc"] [Sun Jul 12 18:14:27.307825 2026] [security2:error] [pid 979474:tid 979700] [client 62.171.167.118:37380] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/marketing/backend/info.php"] [unique_id "alQt43TrIlbXpLXvkNcGVQAAAN8"] [Sun Jul 12 18:14:27.314440 2026] [security2:error] [pid 967714:tid 967868] [client 114.119.137.122:57351] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "gethsemanegardens.com"] [uri "/newsite/checkout"] [unique_id "alQt41_56DeKknhy7sMHKwAAARc"], referer: https://gethsemanegardens.com/directions/ [Sun Jul 12 18:14:27.327269 2026] [proxy:warn] [pid 979474:tid 979639] [client 3.129.187.38:55304] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /400.shtml [Sun Jul 12 18:14:27.327345 2026] [proxy:error] [pid 979474:tid 979639] (70014)End of file found: [client 3.129.187.38:55304] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.129.187.38 () [Sun Jul 12 18:14:27.348200 2026] [security2:error] [pid 967714:tid 967867] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHGQAAARY"] [Sun Jul 12 18:14:27.419284 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:37478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/graphql.php"] [unique_id "alQt4xMANaV5i2_BLQoczwAAAGw"] [Sun Jul 12 18:14:27.453689 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt4hMANaV5i2_BLQocvgAAAA0"], referer: http://67.222.38.115/go/api/config/server [Sun Jul 12 18:14:27.500775 2026] [security2:error] [pid 967714:tid 967968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt4l_56DeKknhy7sMHCQAAAXs"] [Sun Jul 12 18:14:27.633959 2026] [security2:error] [pid 967714:tid 967970] [client 94.187.171.125:57616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt41_56DeKknhy7sMHSwAAAX0"] [Sun Jul 12 18:14:27.634221 2026] [security2:error] [pid 967714:tid 967970] [client 94.187.171.125:57616] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt41_56DeKknhy7sMHSwAAAX0"] [Sun Jul 12 18:14:27.751354 2026] [security2:error] [pid 979474:tid 979663] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt43TrIlbXpLXvkNcGYQAAALs"] [Sun Jul 12 18:14:27.788118 2026] [authz_core:error] [pid 979474:tid 979699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:27.788645 2026] [authz_core:error] [pid 979474:tid 979699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:27.913942 2026] [security2:error] [pid 967714:tid 967752] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dataset1/.env"] [unique_id "alQt41_56DeKknhy7sMHTAABbRo"] [Sun Jul 12 18:14:27.914480 2026] [security2:error] [pid 967714:tid 967908] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHLQAAAT8"] [Sun Jul 12 18:14:27.914528 2026] [security2:error] [pid 967714:tid 967908] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHLQAAAT8"] [Sun Jul 12 18:14:27.915571 2026] [security2:error] [pid 967714:tid 967927] [client 65.21.113.206:45234] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTdfMTk5MDNfN3BuYS9wXzM1NThfbmF6.html"] [unique_id "alQt41_56DeKknhy7sMHKgAAAVI"] [Sun Jul 12 18:14:27.967343 2026] [security2:error] [pid 960377:tid 960619] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt4xMANaV5i2_BLQocyQAAb0g"] [Sun Jul 12 18:14:28.305325 2026] [security2:error] [pid 979474:tid 979642] [client 66.249.73.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQt4nTrIlbXpLXvkNcGUQAAAKY"] [Sun Jul 12 18:14:28.434958 2026] [security2:error] [pid 979474:tid 979635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5HTrIlbXpLXvkNcGawAAAJ8"] [Sun Jul 12 18:14:28.509255 2026] [security2:error] [pid 960377:tid 960566] [client 114.119.133.146:36769] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.birdgenoscape.org"] [uri "/wp-content/uploads/2022/05/conservationbiology2004-1.pdf"] [unique_id "alQt5BMANaV5i2_BLQoc2QAAADo"], referer: https://www.semanticscholar.org/author/S.-Clegg/153405710 [Sun Jul 12 18:14:28.570055 2026] [security2:error] [pid 979474:tid 979640] [client 62.171.167.118:37416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/node/crm/info.php"] [unique_id "alQt5HTrIlbXpLXvkNcGcAAAAKQ"] [Sun Jul 12 18:14:28.570678 2026] [security2:error] [pid 967714:tid 967905] [client 86.161.146.59:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt5F_56DeKknhy7sMHUAAAATw"] [Sun Jul 12 18:14:28.588983 2026] [authz_core:error] [pid 979474:tid 979635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:28.589703 2026] [authz_core:error] [pid 979474:tid 979635] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:28.723850 2026] [security2:error] [pid 967714:tid 967868] [client 168.100.149.192:39152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10335/bargainor/2308_dislevelment.jsp"] [unique_id "alQt5F_56DeKknhy7sMHYQAAARc"] [Sun Jul 12 18:14:28.824810 2026] [security2:error] [pid 979474:tid 979678] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5HTrIlbXpLXvkNcGcQAAAMo"] [Sun Jul 12 18:14:28.932199 2026] [security2:error] [pid 960377:tid 960552] [client 182.253.153.218:58926] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "omnimodedigital.com"] [uri "/"] [unique_id "alQt5BMANaV5i2_BLQoc2wAAACw"] [Sun Jul 12 18:14:29.017079 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt5BMANaV5i2_BLQoc2AAAc0Y"] [Sun Jul 12 18:14:29.101082 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGAQAAAT0"] [Sun Jul 12 18:14:29.149379 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2hMANaV5i2_BLQocDwAAAE4"] [Sun Jul 12 18:14:29.190124 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGAwAAATA"] [Sun Jul 12 18:14:29.199479 2026] [security2:error] [pid 967714:tid 967941] [client 114.119.141.71:64503] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.jimmybuy.co.uk"] [uri "/asus-battery/P2438UU"] [unique_id "alQt5V_56DeKknhy7sMHbQAAAWA"], referer: http://www.jimmybuy.co.uk/asus-battery/PU551L [Sun Jul 12 18:14:29.395266 2026] [security2:error] [pid 979474:tid 979661] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5XTrIlbXpLXvkNcGdwAAALk"] [Sun Jul 12 18:14:29.470944 2026] [authz_core:error] [pid 979474:tid 979630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:29.471435 2026] [authz_core:error] [pid 979474:tid 979630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:29.564559 2026] [security2:error] [pid 960377:tid 960569] [client 147.185.132.97:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQt5RMANaV5i2_BLQoc4AAAAD0"] [Sun Jul 12 18:14:29.566752 2026] [security2:error] [pid 967714:tid 967891] [client 147.185.132.97:64164] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/shell.php"] [unique_id "alQt5F_56DeKknhy7sMHZAAAAS4"] [Sun Jul 12 18:14:29.597534 2026] [security2:error] [pid 967714:tid 967939] [client 182.253.153.218:58938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt5V_56DeKknhy7sMHdgAAAV4"] [Sun Jul 12 18:14:29.753913 2026] [security2:error] [pid 967714:tid 967974] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5V_56DeKknhy7sMHdQAAAYE"] [Sun Jul 12 18:14:29.760854 2026] [security2:error] [pid 979474:tid 979656] [client 62.171.167.118:37408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/api/info.php"] [unique_id "alQt5XTrIlbXpLXvkNcGfQAAALQ"] [Sun Jul 12 18:14:29.892994 2026] [security2:error] [pid 979474:tid 979659] [client 43.130.26.3:39018] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.26.130.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/search.php"] [unique_id "alQt5XTrIlbXpLXvkNcGgAAAALc"] [Sun Jul 12 18:14:29.917553 2026] [security2:error] [pid 967714:tid 967843] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/config/.env"] [unique_id "alQt5V_56DeKknhy7sMHeQABGHU"] [Sun Jul 12 18:14:29.919550 2026] [security2:error] [pid 967714:tid 967897] [client 114.119.157.183:59289] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "vanceworldtravel.com"] [uri "/travel-blog/archives/09-2020"] [unique_id "alQt5V_56DeKknhy7sMHegAAATQ"], referer: http://vanceworldtravel.com/travel-blog/archives/09-2019 [Sun Jul 12 18:14:29.979571 2026] [security2:error] [pid 979474:tid 979636] [client 62.171.167.118:37388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/infophp.php"] [unique_id "alQt5XTrIlbXpLXvkNcGgQAAAKA"] [Sun Jul 12 18:14:29.981906 2026] [security2:error] [pid 979474:tid 979611] [client 125.167.21.72:62887] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt5XTrIlbXpLXvkNcGggAAAIc"] [Sun Jul 12 18:14:29.982483 2026] [security2:error] [pid 979474:tid 979611] [client 125.167.21.72:62887] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt5XTrIlbXpLXvkNcGggAAAIc"] [Sun Jul 12 18:14:30.008129 2026] [security2:error] [pid 960377:tid 960548] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt5RMANaV5i2_BLQoc4QAAKEE"] [Sun Jul 12 18:14:30.085531 2026] [security2:error] [pid 967714:tid 967738] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/svelte-app/client/.env"] [unique_id "alQt5l_56DeKknhy7sMHfQABSgw"] [Sun Jul 12 18:14:30.208068 2026] [security2:error] [pid 979474:tid 979681] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2nTrIlbXpLXvkNcF1gAAAPo"], referer: http://67.222.40.58/frontend/web/debug/default/view [Sun Jul 12 18:14:30.211201 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHOgAAAXI"] [Sun Jul 12 18:14:30.291433 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:30.292186 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHRwAAAUU"], referer: http://67.222.38.115/go/api/server_health_messages [Sun Jul 12 18:14:30.292316 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:30.311089 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt43TrIlbXpLXvkNcGXwAAANs"] [Sun Jul 12 18:14:30.417058 2026] [security2:error] [pid 960377:tid 960513] [client 24.203.79.110:57502] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt5hMANaV5i2_BLQoc7gAAAAU"] [Sun Jul 12 18:14:30.423154 2026] [security2:error] [pid 960377:tid 960513] [client 24.203.79.110:57502] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt5hMANaV5i2_BLQoc7gAAAAU"] [Sun Jul 12 18:14:30.578187 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5hMANaV5i2_BLQoc6gAAADQ"] [Sun Jul 12 18:14:30.738218 2026] [security2:error] [pid 979474:tid 979700] [client 62.171.167.118:37404] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/infos.php"] [unique_id "alQt5nTrIlbXpLXvkNcGjgAAAN8"] [Sun Jul 12 18:14:30.741254 2026] [security2:error] [pid 967714:tid 967792] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/keys/id_dsa"] [unique_id "alQt5l_56DeKknhy7sMHnwABe0I"] [Sun Jul 12 18:14:30.762883 2026] [security2:error] [pid 960377:tid 960628] [client 168.100.149.169:41056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10400/bargainor/2308_limnoria.jsp"] [unique_id "alQt5hMANaV5i2_BLQoc8AAAAHg"] [Sun Jul 12 18:14:30.900613 2026] [security2:error] [pid 967714:tid 967808] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/panel/.env"] [unique_id "alQt5l_56DeKknhy7sMHoAABOFI"] [Sun Jul 12 18:14:31.009110 2026] [security2:error] [pid 979474:tid 979639] [client 182.253.153.218:58950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/bdght.php"] [unique_id "alQt5nTrIlbXpLXvkNcGkAAAAKM"] [Sun Jul 12 18:14:31.067429 2026] [security2:error] [pid 960377:tid 960468] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt5hMANaV5i2_BLQoc4wAAAFk"] [Sun Jul 12 18:14:31.071996 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGPgAAAUA"], referer: http://67.222.40.58/lara/.env.dev [Sun Jul 12 18:14:31.119077 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGOQAAASg"] [Sun Jul 12 18:14:31.129059 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGOgAAAXw"] [Sun Jul 12 18:14:31.152072 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGOwAAAXE"] [Sun Jul 12 18:14:31.156728 2026] [authz_core:error] [pid 967714:tid 967894] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:31.157934 2026] [authz_core:error] [pid 967714:tid 967894] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:31.172556 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGQQAAAUI"], referer: http://67.222.40.58/kyc/.env.staging [Sun Jul 12 18:14:31.179051 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMHPQAAATU"], referer: http://67.222.38.115/go/api/pipelines [Sun Jul 12 18:14:31.235936 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2nTrIlbXpLXvkNcF1wAAAQE"] [Sun Jul 12 18:14:31.304264 2026] [security2:error] [pid 960377:tid 960627] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTdfMjUyLzdkaC8yNDM2MV9kaA==.htm"] [unique_id "alQt5xMANaV5i2_BLQoc-QAAAHc"] [Sun Jul 12 18:14:31.362838 2026] [security2:error] [pid 979474:tid 979714] [client 114.119.155.23:53785] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "learningindia.in"] [uri "/visa-application-guide/%23comment-1573%200%200%20text/html;%20charset=utf-8%200%20404"] [unique_id "alQt53TrIlbXpLXvkNcGmAAAAO0"], referer: https://learningindia.in/visa-application-guide/%23comment-1573%200%200%20text/html;%20charset=utf-8%200%20404 [Sun Jul 12 18:14:31.420083 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:37366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/laravel/info.php"] [unique_id "alQt53TrIlbXpLXvkNcGmQAAALw"] [Sun Jul 12 18:14:31.434172 2026] [security2:error] [pid 960377:tid 960579] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt5xMANaV5i2_BLQoc9wAAAEc"] [Sun Jul 12 18:14:31.439357 2026] [security2:error] [pid 967714:tid 967868] [client 114.119.130.102:23645] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.turnweb.org"] [uri "/about/"] [unique_id "alQt51_56DeKknhy7sMHqQAAARc"], referer: https://www.turnweb.org/about/ [Sun Jul 12 18:14:31.595919 2026] [security2:error] [pid 967714:tid 967762] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/mentorg-lava-docker/.env"] [unique_id "alQt51_56DeKknhy7sMHuQABeCQ"] [Sun Jul 12 18:14:31.696134 2026] [security2:error] [pid 979474:tid 979621] [client 182.253.153.218:58952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/bdght.php.json"] [unique_id "alQt53TrIlbXpLXvkNcGmgAAAJE"] [Sun Jul 12 18:14:31.755960 2026] [security2:error] [pid 967714:tid 967739] [remote 185.177.72.12:62988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/web/.env"] [unique_id "alQt51_56DeKknhy7sMHvAABUg0"] [Sun Jul 12 18:14:31.756069 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:60778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php-info/phpinfo.php"] [unique_id "alQt51_56DeKknhy7sMHvQAAAUo"] [Sun Jul 12 18:14:31.851733 2026] [security2:error] [pid 979474:tid 979610] [client 62.171.167.118:60782] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php/phpinfo.php"] [unique_id "alQt53TrIlbXpLXvkNcGnwAAAIY"] [Sun Jul 12 18:14:31.902081 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:60792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "alQt5xMANaV5i2_BLQoc-gAAABY"] [Sun Jul 12 18:14:31.903645 2026] [security2:error] [pid 967714:tid 967939] [client 62.171.167.118:60794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpconf.php"] [unique_id "alQt51_56DeKknhy7sMHwwAAAV4"] [Sun Jul 12 18:14:31.969174 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:31.969884 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:31.971559 2026] [security2:error] [pid 979474:tid 979612] [client 62.171.167.118:60812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php5"] [unique_id "alQt53TrIlbXpLXvkNcGoAAAAIg"] [Sun Jul 12 18:14:31.972963 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:60804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php4"] [unique_id "alQt51_56DeKknhy7sMHxwAAAYI"] [Sun Jul 12 18:14:31.975189 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:60798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php/"] [unique_id "alQt51_56DeKknhy7sMHyQAAATY"] [Sun Jul 12 18:14:31.982942 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:60816] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo1.php"] [unique_id "alQt51_56DeKknhy7sMHygAAAWI"] [Sun Jul 12 18:14:31.983387 2026] [security2:error] [pid 960377:tid 960509] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt5xMANaV5i2_BLQoc-AAAATA"] [Sun Jul 12 18:14:32.024230 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH0AABInQ"] [Sun Jul 12 18:14:32.024378 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpconf.php"] [unique_id "alQt6F_56DeKknhy7sMH0QABIgo"] [Sun Jul 12 18:14:32.024546 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/php-info/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMHzwABIhE"] [Sun Jul 12 18:14:32.025344 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php4"] [unique_id "alQt6F_56DeKknhy7sMH1AABInQ"] [Sun Jul 12 18:14:32.025449 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php5"] [unique_id "alQt6F_56DeKknhy7sMH1QABIgo"] [Sun Jul 12 18:14:32.033042 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo.php/"] [unique_id "alQt6F_56DeKknhy7sMH0wABIkA"] [Sun Jul 12 18:14:32.035337 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpinfo/info.php"] [unique_id "alQt6F_56DeKknhy7sMH1wABIkA"] [Sun Jul 12 18:14:32.035843 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpmyadmin/index.php"] [unique_id "alQt6F_56DeKknhy7sMH2AABIic"] [Sun Jul 12 18:14:32.037509 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/playground/.env"] [unique_id "alQt6F_56DeKknhy7sMH2QABImQ"] [Sun Jul 12 18:14:32.039605 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH0gABIhI"] [Sun Jul 12 18:14:32.045230 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/api/info.php"] [unique_id "alQt6F_56DeKknhy7sMH3QABIhY"] [Sun Jul 12 18:14:32.055861 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/develop/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH3gABLDg"] [Sun Jul 12 18:14:32.129868 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGRAAAAVE"], referer: http://67.222.40.58/laravel/.env.local [Sun Jul 12 18:14:32.160596 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/php-info.php"] [unique_id "alQt6F_56DeKknhy7sMH4AABPQg"] [Sun Jul 12 18:14:32.165892 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/time.php"] [unique_id "alQt6F_56DeKknhy7sMH4gABPWY"] [Sun Jul 12 18:14:32.166805 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/temp.php"] [unique_id "alQt6F_56DeKknhy7sMH4QABPQE"] [Sun Jul 12 18:14:32.167697 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/product/backup/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH5wABPWY"] [Sun Jul 12 18:14:32.168085 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/product/info.php"] [unique_id "alQt6F_56DeKknhy7sMH6AABPQA"] [Sun Jul 12 18:14:32.168614 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGQAAAATo"], referer: http://67.222.40.58/kyc/.env.local [Sun Jul 12 18:14:32.169346 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/xampp/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH4wABPQg"] [Sun Jul 12 18:14:32.169729 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/prod/current/info.php"] [unique_id "alQt6F_56DeKknhy7sMH5QABPV8"] [Sun Jul 12 18:14:32.171129 2026] [security2:error] [pid 960377:tid 960576] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2hMANaV5i2_BLQocEQAAAEQ"], referer: http://67.222.40.58/lara/config.env [Sun Jul 12 18:14:32.181230 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/profiler/test.php"] [unique_id "alQt6F_56DeKknhy7sMH6wABPSk"] [Sun Jul 12 18:14:32.200357 2026] [security2:error] [pid 967714:tid 967890] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt51_56DeKknhy7sMHxgAAAS0"] [Sun Jul 12 18:14:32.206273 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:60824] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/temp.php"] [unique_id "alQt6HTrIlbXpLXvkNcGogAAAOE"] [Sun Jul 12 18:14:32.211361 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/project/infophp.php"] [unique_id "alQt6F_56DeKknhy7sMH8AABeX8"] [Sun Jul 12 18:14:32.212408 2026] [security2:error] [pid 967714:tid 967759] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/project/development/iinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH7gABeSE"] [Sun Jul 12 18:14:32.214488 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:60854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/api/info.php"] [unique_id "alQt6F_56DeKknhy7sMH7wAAAYU"] [Sun Jul 12 18:14:32.217651 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:60880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/develop/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH8QAAAVg"] [Sun Jul 12 18:14:32.219298 2026] [security2:error] [pid 979474:tid 979657] [client 62.171.167.118:60848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/xampp/phpinfo.php"] [unique_id "alQt6HTrIlbXpLXvkNcGpAAAALU"] [Sun Jul 12 18:14:32.226127 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/project/.env.bak"] [unique_id "alQt6F_56DeKknhy7sMH7AABeSM"] [Sun Jul 12 18:14:32.230270 2026] [security2:error] [pid 979474:tid 979668] [client 62.171.167.118:60836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/portal/time.php"] [unique_id "alQt6HTrIlbXpLXvkNcGpgAAAMA"] [Sun Jul 12 18:14:32.231873 2026] [security2:error] [pid 979474:tid 979690] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt23TrIlbXpLXvkNcF4gAAANI"], referer: http://67.222.40.58/live/.env.staging [Sun Jul 12 18:14:32.237558 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/project_root/.env"] [unique_id "alQt6F_56DeKknhy7sMH8gABeRc"] [Sun Jul 12 18:14:32.253843 2026] [security2:error] [pid 967714:tid 967730] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/psnlink/.env"] [unique_id "alQt6F_56DeKknhy7sMH8wABSQQ"] [Sun Jul 12 18:14:32.265742 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:60904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/product/backup/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMH9QAAAUA"] [Sun Jul 12 18:14:32.268008 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/pub/.env"] [unique_id "alQt6F_56DeKknhy7sMH9AABalM"] [Sun Jul 12 18:14:32.271314 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:60914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/product/info.php"] [unique_id "alQt6BMANaV5i2_BLQoc_AAAAAQ"] [Sun Jul 12 18:14:32.277366 2026] [security2:error] [pid 967714:tid 967757] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/public/.env"] [unique_id "alQt6F_56DeKknhy7sMH9wABah8"] [Sun Jul 12 18:14:32.278901 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:60938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/project/development/iinfo.php"] [unique_id "alQt6BMANaV5i2_BLQoc_QAAAHs"] [Sun Jul 12 18:14:32.283652 2026] [security2:error] [pid 967714:tid 967969] [client 114.119.150.114:49371] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "laraza1023.com"] [uri "/inicio/index.php/que-pasa-con-la-raza/item/887-marco-flores-de-la-banda-jerez-golpea-a-persona-en-un-jaripeo.html"] [unique_id "alQt6F_56DeKknhy7sMH-gAAAXw"], referer: http://laraza1023.com/inicio/index.php/que-pasa-con-la-raza/item/888-el-tuca-y-el-tri-no-le-tienen-miedo-a-argentina.html [Sun Jul 12 18:14:32.286573 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:60952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/project/infophp.php"] [unique_id "alQt6BMANaV5i2_BLQodAAAAAB8"] [Sun Jul 12 18:14:32.289172 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/backup/info.php"] [unique_id "alQt6F_56DeKknhy7sMH-wABan4"] [Sun Jul 12 18:14:32.346637 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:60986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/backup/info.php"] [unique_id "alQt6F_56DeKknhy7sMH_AAAAU8"] [Sun Jul 12 18:14:32.355070 2026] [security2:error] [pid 979474:tid 979655] [client 62.171.167.118:60890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/laravel/info.php"] [unique_id "alQt6HTrIlbXpLXvkNcGrQAAALM"] [Sun Jul 12 18:14:32.355576 2026] [security2:error] [pid 967714:tid 967959] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt51_56DeKknhy7sMHwAAAAXI"] [Sun Jul 12 18:14:32.355651 2026] [security2:error] [pid 967714:tid 967959] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt51_56DeKknhy7sMHwAAAAXI"] [Sun Jul 12 18:14:32.357119 2026] [security2:error] [pid 979474:tid 979642] [client 65.21.113.206:45240] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTdfMjUyLzdkaC8yNDM2MV9kaA==.htm"] [unique_id "alQt53TrIlbXpLXvkNcGnAAAAKY"] [Sun Jul 12 18:14:32.363276 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/laravel/info.php"] [unique_id "alQt6F_56DeKknhy7sMH_wABC0s"] [Sun Jul 12 18:14:32.392937 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/linusadmin-phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMIAQABI08"] [Sun Jul 12 18:14:32.393912 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:60998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/linusadmin-phpinfo.php"] [unique_id "alQt6BMANaV5i2_BLQodAQAAAAg"] [Sun Jul 12 18:14:32.409976 2026] [security2:error] [pid 967714:tid 967957] [client 182.253.153.218:58968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt6F_56DeKknhy7sMIBQAAAXA"] [Sun Jul 12 18:14:32.419617 2026] [security2:error] [pid 967714:tid 967861] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/lib/zend/tool/framework/system/provider/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMIBwAAARA"] [Sun Jul 12 18:14:32.421725 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/project/.env.bak"] [unique_id "alQt6F_56DeKknhy7sMIBgABYDY"], referer: http://67.222.42.11/project/.env.bak [Sun Jul 12 18:14:32.426517 2026] [security2:error] [pid 967714:tid 967752] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/php-info.php"] [unique_id "alQt6F_56DeKknhy7sMICAABeBo"] [Sun Jul 12 18:14:32.445832 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/project_root/.env"] [unique_id "alQt6F_56DeKknhy7sMICgABGFQ"], referer: http://67.222.42.11/project_root/.env [Sun Jul 12 18:14:32.481028 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/pub/.env"] [unique_id "alQt6F_56DeKknhy7sMICwABMjU"], referer: http://67.222.42.11/pub/.env [Sun Jul 12 18:14:32.493268 2026] [security2:error] [pid 979474:tid 979650] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQt6HTrIlbXpLXvkNcGoQAAAK4"] [Sun Jul 12 18:14:32.494440 2026] [security2:error] [pid 967714:tid 967980] [client 65.21.113.253:35772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/robots.txt"] [unique_id "alQt6F_56DeKknhy7sMHzAAAAYc"] [Sun Jul 12 18:14:32.504897 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/services/info.php"] [unique_id "alQt6F_56DeKknhy7sMIDgABJXg"] [Sun Jul 12 18:14:32.506809 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:60964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public/services/info.php"] [unique_id "alQt6HTrIlbXpLXvkNcGrwAAAJo"] [Sun Jul 12 18:14:32.563287 2026] [proxy:warn] [pid 967714:tid 967926] [client 3.129.187.38:36108] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /400.shtml [Sun Jul 12 18:14:32.563361 2026] [proxy:error] [pid 967714:tid 967926] (70014)End of file found: [client 3.129.187.38:36108] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.129.187.38 () [Sun Jul 12 18:14:32.610312 2026] [security2:error] [pid 979474:tid 979611] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/config/settings.php"] [unique_id "alQt6HTrIlbXpLXvkNcGtAAAAIc"] [Sun Jul 12 18:14:32.663677 2026] [security2:error] [pid 960377:tid 960598] [client 62.171.167.118:60922] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public_html/current/phpinfo.php"] [unique_id "alQt6BMANaV5i2_BLQodAwAAAFo"] [Sun Jul 12 18:14:32.679034 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/public_html/current/phpinfo.php"] [unique_id "alQt6F_56DeKknhy7sMIHwABWgc"] [Sun Jul 12 18:14:32.691349 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/qa/.env"] [unique_id "alQt6F_56DeKknhy7sMIIAABe04"] [Sun Jul 12 18:14:32.774008 2026] [security2:error] [pid 967714:tid 967893] [client 168.100.149.47:64582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10465/bargainor/2308_milksopism.jsp"] [unique_id "alQt6F_56DeKknhy7sMIJgAAATA"] [Sun Jul 12 18:14:32.791215 2026] [security2:error] [pid 967714:tid 967962] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/filesystems.php"] [unique_id "alQt6F_56DeKknhy7sMIKAAAAXU"] [Sun Jul 12 18:14:32.811167 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:32.811820 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:32.826301 2026] [security2:error] [pid 967714:tid 967758] [remote 62.171.167.118:47718] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/qa/.env"] [unique_id "alQt6F_56DeKknhy7sMIKQABRSA"], referer: http://67.222.42.11/qa/.env [Sun Jul 12 18:14:32.930542 2026] [security2:error] [pid 967714:tid 967918] [client 107.191.36.209:52539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eieda.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQt6F_56DeKknhy7sMILQAAAUk"] [Sun Jul 12 18:14:32.994425 2026] [security2:error] [pid 960377:tid 960475] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt6BMANaV5i2_BLQoc-wAACWA"] [Sun Jul 12 18:14:33.188008 2026] [security2:error] [pid 960377:tid 960584] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2hMANaV5i2_BLQocDQAAAEw"], referer: http://67.222.40.58/file/php/phpinfo [Sun Jul 12 18:14:33.254143 2026] [security2:error] [pid 967714:tid 967982] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGSgAAAYk"] [Sun Jul 12 18:14:33.284886 2026] [security2:error] [pid 967714:tid 967970] [client 185.177.72.12:62988] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/update-core.php"] [unique_id "alQt6F_56DeKknhy7sMILgABfRM"] [Sun Jul 12 18:14:33.286449 2026] [security2:error] [pid 979474:tid 979632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt23TrIlbXpLXvkNcF4AAAAJw"] [Sun Jul 12 18:14:33.290703 2026] [security2:error] [pid 967714:tid 967912] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGSQAAAUM"], referer: http://67.222.40.58/lemonldap-ng-doc/.env/ [Sun Jul 12 18:14:33.293920 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/infophp.php"] [unique_id "alQt3l_56DeKknhy7sMIPQABSG4"] [Sun Jul 12 18:14:33.295466 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/infos.php"] [unique_id "alQt3l_56DeKknhy7sMIPgABSG4"] [Sun Jul 12 18:14:33.295762 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/old_phpinfo.php"] [unique_id "alQt3l_56DeKknhy7sMIQAABSF0"] [Sun Jul 12 18:14:33.296811 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/lara/info.php"] [unique_id "alQt3l_56DeKknhy7sMIPwABSFA"] [Sun Jul 12 18:14:33.298124 2026] [security2:error] [pid 967714:tid 967915] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGPAAAAUY"], referer: http://67.222.40.58/kyc/.env.production [Sun Jul 12 18:14:33.299076 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/php.php"] [unique_id "alQt41_56DeKknhy7sMIQwABSFA"] [Sun Jul 12 18:14:33.376901 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/phpinfo.php"] [unique_id "alQt41_56DeKknhy7sMISgABSEM"] [Sun Jul 12 18:14:33.378933 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/phpversion.php"] [unique_id "alQt41_56DeKknhy7sMISwABSEM"] [Sun Jul 12 18:14:33.380819 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/temp.php"] [unique_id "alQt41_56DeKknhy7sMITAABSEM"] [Sun Jul 12 18:14:33.380991 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/live/test.php"] [unique_id "alQt41_56DeKknhy7sMITQABSFg"] [Sun Jul 12 18:14:33.381536 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt2l_56DeKknhy7sMGQwAAAWw"] [Sun Jul 12 18:14:33.383775 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/local/.env"] [unique_id "alQt41_56DeKknhy7sMITwABSHE"] [Sun Jul 12 18:14:33.384256 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/logging/.env"] [unique_id "alQt41_56DeKknhy7sMIUAABSEM"] [Sun Jul 12 18:14:33.386770 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/lms/current/phpinfo.php"] [unique_id "alQt41_56DeKknhy7sMIUgABSHc"] [Sun Jul 12 18:14:33.388600 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/mail/.env"] [unique_id "alQt41_56DeKknhy7sMIVAABSEM"] [Sun Jul 12 18:14:33.390438 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mail/current/info.php"] [unique_id "alQt41_56DeKknhy7sMIVQABSEM"] [Sun Jul 12 18:14:33.392924 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mail/infophp.php"] [unique_id "alQt41_56DeKknhy7sMIVgABSHc"] [Sun Jul 12 18:14:33.394737 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/help/phpinfo.php"] [unique_id "alQt41_56DeKknhy7sMIWAABSHc"] [Sun Jul 12 18:14:33.396305 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/test.php"] [unique_id "alQt41_56DeKknhy7sMIWwABSBA"] [Sun Jul 12 18:14:33.396875 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/server/info.php"] [unique_id "alQt41_56DeKknhy7sMIWgABSGk"] [Sun Jul 12 18:14:33.397825 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/mailer/infophp.php"] [unique_id "alQt41_56DeKknhy7sMIWQABSHc"] [Sun Jul 12 18:14:33.404691 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/main/.env"] [unique_id "alQt41_56DeKknhy7sMIYAABSGk"] [Sun Jul 12 18:14:33.406314 2026] [security2:error] [pid 967714:tid 967885] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIMQAAASg"] [Sun Jul 12 18:14:33.410503 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/marketing/infophp.php"] [unique_id "alQt41_56DeKknhy7sMIZAABSGA"] [Sun Jul 12 18:14:33.412153 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/marketing/backend/info.php"] [unique_id "alQt41_56DeKknhy7sMIYwABSAI"] [Sun Jul 12 18:14:33.421475 2026] [security2:error] [pid 967714:tid 967929] [client 65.21.113.253:35774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/image-sitemap-1.xml"] [unique_id "alQt6F_56DeKknhy7sMILwAAAVQ"] [Sun Jul 12 18:14:33.429997 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/new/.env"] [unique_id "alQt41_56DeKknhy7sMIaQABSAI"] [Sun Jul 12 18:14:33.433199 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/monerod/.env"] [unique_id "alQt41_56DeKknhy7sMIaAABSGA"] [Sun Jul 12 18:14:33.439274 2026] [authz_core:error] [pid 967714:tid 967891] [client 20.210.108.71:50651] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/IXR/error_log, referer: binance.com [Sun Jul 12 18:14:33.600031 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:33.600511 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:33.791057 2026] [security2:error] [pid 967714:tid 967823] [remote 185.177.72.12:57308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQt6V_56DeKknhy7sMIgAABNmE"] [Sun Jul 12 18:14:34.070853 2026] [security2:error] [pid 960377:tid 960616] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt6RMANaV5i2_BLQodCAAAbFc"] [Sun Jul 12 18:14:34.400502 2026] [authz_core:error] [pid 979474:tid 979685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:34.401062 2026] [authz_core:error] [pid 979474:tid 979685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:34.576067 2026] [security2:error] [pid 979474:tid 979699] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt6nTrIlbXpLXvkNcG4QAAAN4"] [Sun Jul 12 18:14:34.767607 2026] [security2:error] [pid 960377:tid 960527] [client 168.100.149.200:33014] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10530/bargainor/2308_capnoides.jsp"] [unique_id "alQt6hMANaV5i2_BLQodFAAAABM"] [Sun Jul 12 18:14:34.919647 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt6hMANaV5i2_BLQodDwAAWAU"] [Sun Jul 12 18:14:35.180955 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHiAAAARE"], referer: http://67.222.38.115/go/api/users [Sun Jul 12 18:14:35.204942 2026] [security2:error] [pid 960377:tid 960625] [client 182.253.153.218:58996] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodGwAAAHU"] [Sun Jul 12 18:14:35.231052 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:35.231802 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:35.239343 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:37438] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/phpversion.php"] [unique_id "alQt6xMANaV5i2_BLQodHAAAABs"] [Sun Jul 12 18:14:35.242081 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHkAAAATw"] [Sun Jul 12 18:14:35.251020 2026] [security2:error] [pid 960377:tid 960562] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTdfNzMyNi83dmgvMTgzMTNfdmg=.htm"] [unique_id "alQt6xMANaV5i2_BLQodHQAAADY"] [Sun Jul 12 18:14:35.258255 2026] [security2:error] [pid 979474:tid 979684] [client 62.171.167.118:37432] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/pinfo.php"] [unique_id "alQt63TrIlbXpLXvkNcG6wAAAM8"] [Sun Jul 12 18:14:35.259997 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:37422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/temp.php"] [unique_id "alQt6xMANaV5i2_BLQodHgAAAD0"] [Sun Jul 12 18:14:35.268976 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt6hMANaV5i2_BLQodFwAAAE4"] [Sun Jul 12 18:14:35.442892 2026] [security2:error] [pid 967714:tid 967817] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/old/secret.bak"] [unique_id "alQt61_56DeKknhy7sMIkwABYVs"] [Sun Jul 12 18:14:35.491704 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:45192] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/old_phpinfo.php"] [unique_id "alQt63TrIlbXpLXvkNcG7AAAAMc"] [Sun Jul 12 18:14:35.834583 2026] [security2:error] [pid 960377:tid 960513] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodIwAAAAU"] [Sun Jul 12 18:14:35.869480 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodGgAAKys"] [Sun Jul 12 18:14:35.993801 2026] [authz_core:error] [pid 960377:tid 960542] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:35.994276 2026] [authz_core:error] [pid 960377:tid 960542] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:36.151925 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHkgAAAR0"], referer: http://67.222.38.115/good_job/cron_entries [Sun Jul 12 18:14:36.153572 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHiQAAASs"] [Sun Jul 12 18:14:36.233741 2026] [security2:error] [pid 960377:tid 960626] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodJgAAAHY"] [Sun Jul 12 18:14:36.233813 2026] [security2:error] [pid 960377:tid 960626] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodJgAAAHY"] [Sun Jul 12 18:14:36.236195 2026] [security2:error] [pid 979474:tid 979668] [client 65.21.113.206:48576] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTdfNzMyNi83dmgvMTgzMTNfdmg=.htm"] [unique_id "alQt63TrIlbXpLXvkNcG8wAAAMA"] [Sun Jul 12 18:14:36.295581 2026] [security2:error] [pid 960377:tid 960557] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5hMANaV5i2_BLQoc6AAAADE"] [Sun Jul 12 18:14:36.306732 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHigAAARs"], referer: http://67.222.38.115/go/api/support [Sun Jul 12 18:14:36.328028 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7BMANaV5i2_BLQodMAAAAFU"] [Sun Jul 12 18:14:36.353366 2026] [security2:error] [pid 967714:tid 967877] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt5l_56DeKknhy7sMHhwAAASA"] [Sun Jul 12 18:14:36.545750 2026] [security2:error] [pid 960377:tid 960579] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQt7BMANaV5i2_BLQodMwAAAEc"] [Sun Jul 12 18:14:36.547241 2026] [security2:error] [pid 979474:tid 979642] [client 65.21.113.253:35784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/page-sitemap.xml"] [unique_id "alQt7HTrIlbXpLXvkNcG9QAAAKY"] [Sun Jul 12 18:14:36.725839 2026] [security2:error] [pid 967714:tid 967867] [client 168.100.149.217:43086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10595/bargainor/2308_deft.jsp"] [unique_id "alQt7F_56DeKknhy7sMIsAAAARY"] [Sun Jul 12 18:14:36.762409 2026] [security2:error] [pid 960377:tid 960631] [client 114.119.135.96:42535] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "beats.codenamehippie.com"] [uri "/samples/SoundFrontz/Tri%20Loop.sf2"] [unique_id "alQt7BMANaV5i2_BLQodNgAAAHs"], referer: http://beats.codenamehippie.com/samples/SoundFrontz/?C=N%3BO%3DD [Sun Jul 12 18:14:36.769922 2026] [security2:error] [pid 967714:tid 967949] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7F_56DeKknhy7sMIqQAAAWg"] [Sun Jul 12 18:14:36.796068 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:36.796555 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:36.873120 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt7BMANaV5i2_BLQodLgAABmo"] [Sun Jul 12 18:14:36.945345 2026] [security2:error] [pid 967714:tid 967727] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/base_dir/.env"] [unique_id "alQt7F_56DeKknhy7sMIsQABPQE"] [Sun Jul 12 18:14:36.949612 2026] [security2:error] [pid 967714:tid 967794] [remote 110.249.201.113:21224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nwuav.com"] [uri "/terms-and-conditions.html"] [unique_id "alQt7F_56DeKknhy7sMIsgABXUQ"] [Sun Jul 12 18:14:37.048290 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:45230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php-info/info.php"] [unique_id "alQt7RMANaV5i2_BLQodPAAAABU"] [Sun Jul 12 18:14:37.342597 2026] [security2:error] [pid 979474:tid 979688] [client 74.7.244.46:55076] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "sisters-in-sync.com"] [uri "/robots.txt"] [unique_id "alQt7XTrIlbXpLXvkNcHBQAAANM"] [Sun Jul 12 18:14:37.444819 2026] [security2:error] [pid 979474:tid 979671] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7XTrIlbXpLXvkNcHAgAAAMM"] [Sun Jul 12 18:14:37.576117 2026] [authz_core:error] [pid 979474:tid 979719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:37.576841 2026] [authz_core:error] [pid 979474:tid 979719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:37.599836 2026] [core:error] [pid 967714:tid 967948] [client 74.7.244.46:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://sisters-in-sync.com/robots.txt [Sun Jul 12 18:14:37.599894 2026] [core:error] [pid 967714:tid 967948] [client 74.7.244.46:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://sisters-in-sync.com/robots.txt [Sun Jul 12 18:14:37.600331 2026] [security2:error] [pid 967714:tid 967948] [client 74.7.244.46:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "sisters-in-sync.com"] [uri "/index.php"] [unique_id "alQt7V_56DeKknhy7sMIvwAAAWc"], referer: http://sisters-in-sync.com/robots.txt [Sun Jul 12 18:14:37.604098 2026] [security2:error] [pid 967714:tid 967918] [client 74.7.244.46:55922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "sisters-in-sync.com"] [uri "/robots.txt"] [unique_id "alQt7V_56DeKknhy7sMIvAABSWU"], referer: http://sisters-in-sync.com/robots.txt [Sun Jul 12 18:14:37.880806 2026] [security2:error] [pid 967714:tid 967958] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7V_56DeKknhy7sMIxgAAAXE"] [Sun Jul 12 18:14:37.985068 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt7RMANaV5i2_BLQodOwAAU3A"] [Sun Jul 12 18:14:38.014463 2026] [security2:error] [pid 960377:tid 960617] [client 182.253.153.218:57960] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt7hMANaV5i2_BLQodRgAAAG0"] [Sun Jul 12 18:14:38.125079 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt7HTrIlbXpLXvkNcG-gAAALE"], referer: http://67.222.38.115/grafana/api/admin/settings [Sun Jul 12 18:14:38.155548 2026] [security2:error] [pid 960377:tid 960378] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/api/src/.env"] [unique_id "alQt7hMANaV5i2_BLQodTAAAbAA"] [Sun Jul 12 18:14:38.249351 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:45256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php-info/phpinfo.php"] [unique_id "alQt7l_56DeKknhy7sMI1QAAARs"] [Sun Jul 12 18:14:38.320642 2026] [security2:error] [pid 960377:tid 960390] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/api/v1/.env"] [unique_id "alQt7hMANaV5i2_BLQodTwAAaAw"] [Sun Jul 12 18:14:38.328974 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt7F_56DeKknhy7sMIpQAAAXw"] [Sun Jul 12 18:14:38.374712 2026] [security2:error] [pid 967714:tid 967887] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7l_56DeKknhy7sMI0AAAASo"] [Sun Jul 12 18:14:38.390125 2026] [security2:error] [pid 967714:tid 967863] [client 94.187.171.125:58103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt7l_56DeKknhy7sMI1wAAARI"] [Sun Jul 12 18:14:38.390514 2026] [security2:error] [pid 967714:tid 967863] [client 94.187.171.125:58103] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt7l_56DeKknhy7sMI1wAAARI"] [Sun Jul 12 18:14:38.393747 2026] [authz_core:error] [pid 979474:tid 979723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:38.394396 2026] [authz_core:error] [pid 979474:tid 979723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:38.739647 2026] [security2:error] [pid 960377:tid 960537] [client 168.100.149.248:22906] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10660/bargainor/2308_did.jsp"] [unique_id "alQt7hMANaV5i2_BLQodaAAAAB0"] [Sun Jul 12 18:14:38.851044 2026] [security2:error] [pid 960377:tid 960553] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7hMANaV5i2_BLQodWgAAAC0"] [Sun Jul 12 18:14:39.046832 2026] [security2:error] [pid 960377:tid 960554] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTdkazE1dl84Njg5LzdkLzM4MTg1L2Q=.html"] [unique_id "alQt7xMANaV5i2_BLQodagAAAC4"] [Sun Jul 12 18:14:39.260871 2026] [security2:error] [pid 979474:tid 979717] [client 65.49.20.68:57978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 68.20.49.65.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "putterman.net"] [uri "/wordpress/index.php"] [unique_id "alQt73TrIlbXpLXvkNcHEwAAAPA"] [Sun Jul 12 18:14:39.316309 2026] [security2:error] [pid 960377:tid 960582] [client 190.5.45.235:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt7hMANaV5i2_BLQodWwAAAEo"] [Sun Jul 12 18:14:39.342999 2026] [security2:error] [pid 979474:tid 979632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt7nTrIlbXpLXvkNcHCQAAAJw"] [Sun Jul 12 18:14:39.362863 2026] [security2:error] [pid 960377:tid 960513] [client 178.156.240.127:47872] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "totalflexwaukesha.com"] [uri "/"] [unique_id "alQt7xMANaV5i2_BLQodawAAAAU"] [Sun Jul 12 18:14:39.456408 2026] [security2:error] [pid 979474:tid 979644] [client 182.253.153.218:57966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/txmah.php7"] [unique_id "alQt73TrIlbXpLXvkNcHGgAAAKg"] [Sun Jul 12 18:14:39.460601 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt71_56DeKknhy7sMI4AAAAYY"] [Sun Jul 12 18:14:39.536610 2026] [authz_core:error] [pid 979474:tid 979699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:39.545973 2026] [authz_core:error] [pid 979474:tid 979699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:39.562857 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:32776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/backup/info.php"] [unique_id "alQt71_56DeKknhy7sMI7AAAAS0"] [Sun Jul 12 18:14:39.621912 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt7hMANaV5i2_BLQodUQAAADA"], referer: http://67.222.38.115/grafana/api/admin/stats [Sun Jul 12 18:14:39.649537 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt7hMANaV5i2_BLQodVAAAEEM"] [Sun Jul 12 18:14:39.692566 2026] [security2:error] [pid 979474:tid 979654] [client 62.171.167.118:32768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/crm/info.php"] [unique_id "alQt73TrIlbXpLXvkNcHIwAAALI"] [Sun Jul 12 18:14:39.708707 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:60988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/php.php"] [unique_id "alQt7xMANaV5i2_BLQodcwAAAFQ"] [Sun Jul 12 18:14:39.816367 2026] [security2:error] [pid 960377:tid 960441] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/api/v2/.env"] [unique_id "alQt7xMANaV5i2_BLQoddgAAdz4"] [Sun Jul 12 18:14:39.836553 2026] [security2:error] [pid 979474:tid 979544] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/php.php"] [unique_id "alQt73TrIlbXpLXvkNcHJwAA0kA"] [Sun Jul 12 18:14:39.837154 2026] [security2:error] [pid 979474:tid 979560] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/backup/info.php"] [unique_id "alQt73TrIlbXpLXvkNcHJQAA0lA"] [Sun Jul 12 18:14:39.838640 2026] [security2:error] [pid 979474:tid 979561] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/qa/crm/info.php"] [unique_id "alQt73TrIlbXpLXvkNcHJgAA0lE"] [Sun Jul 12 18:14:39.839606 2026] [security2:error] [pid 979474:tid 979587] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/rasax/.env"] [unique_id "alQt73TrIlbXpLXvkNcHKAAA0ms"] [Sun Jul 12 18:14:39.878928 2026] [security2:error] [pid 979474:tid 979531] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/repos/.env"] [unique_id "alQt73TrIlbXpLXvkNcHKQAA1TM"] [Sun Jul 12 18:14:39.881540 2026] [security2:error] [pid 979474:tid 979585] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/resources/docker/.env"] [unique_id "alQt73TrIlbXpLXvkNcHKgAA1Wk"] [Sun Jul 12 18:14:39.885354 2026] [security2:error] [pid 979474:tid 979533] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/resources/docker/rediscommander/.env"] [unique_id "alQt73TrIlbXpLXvkNcHKwAA1TU"] [Sun Jul 12 18:14:39.905138 2026] [security2:error] [pid 960377:tid 960628] [client 82.215.104.78:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "dentonwelch.com"] [uri "/index.php"] [unique_id "alQt6xMANaV5i2_BLQodKAAAAHg"] [Sun Jul 12 18:14:39.925052 2026] [security2:error] [pid 979474:tid 979591] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/robots/.env"] [unique_id "alQt73TrIlbXpLXvkNcHLQAAkm8"] [Sun Jul 12 18:14:39.927321 2026] [security2:error] [pid 979474:tid 979593] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/rasax/.env"] [unique_id "alQt73TrIlbXpLXvkNcHLgAAknE"], referer: http://67.222.42.11/rasax/.env [Sun Jul 12 18:14:39.978497 2026] [security2:error] [pid 960377:tid 960435] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/apis/.env"] [unique_id "alQt7xMANaV5i2_BLQodeQAAIzg"] [Sun Jul 12 18:14:40.013875 2026] [security2:error] [pid 979474:tid 979595] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/root/info.php"] [unique_id "alQt8HTrIlbXpLXvkNcHMgAAn3M"] [Sun Jul 12 18:14:40.032805 2026] [security2:error] [pid 979474:tid 979651] [client 62.171.167.118:43800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/root/info.php"] [unique_id "alQt8HTrIlbXpLXvkNcHNAAAAK8"] [Sun Jul 12 18:14:40.044227 2026] [security2:error] [pid 960377:tid 960520] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt7xMANaV5i2_BLQoddAAAAAw"] [Sun Jul 12 18:14:40.057831 2026] [security2:error] [pid 979474:tid 979564] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/repos/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHNgABA1Q"], referer: http://67.222.42.11/repos/.env [Sun Jul 12 18:14:40.091347 2026] [security2:error] [pid 967714:tid 967911] [client 168.100.149.54:28652] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10725/bargainor/2308_delphian.jsp"] [unique_id "alQt8F_56DeKknhy7sMI9wAAAUI"] [Sun Jul 12 18:14:40.161162 2026] [security2:error] [pid 967714:tid 967971] [client 182.253.153.218:57976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/txmah.php7.json"] [unique_id "alQt8F_56DeKknhy7sMI-QAAAX4"] [Sun Jul 12 18:14:40.164073 2026] [security2:error] [pid 979474:tid 979565] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/routes/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHOAAA7lU"] [Sun Jul 12 18:14:40.166586 2026] [security2:error] [pid 979474:tid 979566] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/saas/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHOwAA7lY"] [Sun Jul 12 18:14:40.167897 2026] [security2:error] [pid 979474:tid 979569] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/resources/docker/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHPAAA7lk"], referer: http://67.222.42.11/resources/docker/.env [Sun Jul 12 18:14:40.168078 2026] [security2:error] [pid 979474:tid 979568] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/resources/docker/rediscommander/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHPQAA7lg"], referer: http://67.222.42.11/resources/docker/rediscommander/.env [Sun Jul 12 18:14:40.193602 2026] [security2:error] [pid 979474:tid 979599] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHPwAA_nc"] [Sun Jul 12 18:14:40.195545 2026] [security2:error] [pid 979474:tid 979570] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/robots/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHPgAA_lo"], referer: http://67.222.42.11/robots/.env [Sun Jul 12 18:14:40.220708 2026] [security2:error] [pid 979474:tid 979691] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt73TrIlbXpLXvkNcHIQAAANY"] [Sun Jul 12 18:14:40.220786 2026] [security2:error] [pid 979474:tid 979691] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt73TrIlbXpLXvkNcHIQAAANY"] [Sun Jul 12 18:14:40.232725 2026] [security2:error] [pid 979474:tid 979571] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/script/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHQgAApls"] [Sun Jul 12 18:14:40.237709 2026] [security2:error] [pid 979474:tid 979572] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/scripts/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHQwAAplw"] [Sun Jul 12 18:14:40.247690 2026] [security2:error] [pid 967714:tid 967975] [client 65.21.113.206:48584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTdkazE1dl84Njg5LzdkLzM4MTg1L2Q=.html"] [unique_id "alQt71_56DeKknhy7sMI7gAAAYI"] [Sun Jul 12 18:14:40.262499 2026] [security2:error] [pid 979474:tid 979541] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/sendgrid_email/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHSAAApj0"] [Sun Jul 12 18:14:40.270258 2026] [security2:error] [pid 979474:tid 979542] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/routes/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHSQAApj4"], referer: http://67.222.42.11/routes/.env [Sun Jul 12 18:14:40.288797 2026] [security2:error] [pid 979474:tid 979650] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/a.php"] [unique_id "alQt8HTrIlbXpLXvkNcHSgAAAK4"] [Sun Jul 12 18:14:40.307300 2026] [security2:error] [pid 967714:tid 967982] [client 34.90.66.217:49152] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "cpanel.redwolfaudio.com"] [uri "/"] [unique_id "alQt8F_56DeKknhy7sMI_wAAAYk"] [Sun Jul 12 18:14:40.307602 2026] [security2:error] [pid 967714:tid 967982] [client 34.90.66.217:49152] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "cpanel.redwolfaudio.com"] [uri "/"] [unique_id "alQt8F_56DeKknhy7sMI_wAAAYk"] [Sun Jul 12 18:14:40.315826 2026] [security2:error] [pid 979474:tid 979579] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/saas/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHTwAAiWM"], referer: http://67.222.42.11/saas/.env [Sun Jul 12 18:14:40.316654 2026] [security2:error] [pid 979474:tid 979578] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHTgAAiWI"], referer: http://67.222.42.11/samples/docker/deploymentscripts/.env [Sun Jul 12 18:14:40.370270 2026] [security2:error] [pid 979474:tid 979543] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/scripts/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHUwAApz8"], referer: http://67.222.42.11/scripts/.env [Sun Jul 12 18:14:40.372056 2026] [security2:error] [pid 979474:tid 979581] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/script/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHVAAAp2U"], referer: http://67.222.42.11/script/.env [Sun Jul 12 18:14:40.430385 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:45218] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php/phpinfo.php"] [unique_id "alQt8BMANaV5i2_BLQodgQAAAGY"] [Sun Jul 12 18:14:40.452688 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:43852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/api/phpinfo.php"] [unique_id "alQt8BMANaV5i2_BLQodgwAAAAg"] [Sun Jul 12 18:14:40.457797 2026] [security2:error] [pid 979474:tid 979590] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/sendgrid_email/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHXAAAum4"], referer: http://67.222.42.11/sendgrid_email/.env [Sun Jul 12 18:14:40.511647 2026] [security2:error] [pid 979474:tid 979588] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/api/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHXwAAjGw"] [Sun Jul 12 18:14:40.514711 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:43778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/laravel/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHYAAAAQA"] [Sun Jul 12 18:14:40.518021 2026] [security2:error] [pid 979474:tid 979681] [client 62.171.167.118:43762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/services/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHYQAAAMw"] [Sun Jul 12 18:14:40.518609 2026] [security2:error] [pid 979474:tid 979575] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/laravel/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHYgAAjF8"] [Sun Jul 12 18:14:40.524254 2026] [security2:error] [pid 979474:tid 979577] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/server/services/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHYwAAjGE"] [Sun Jul 12 18:14:40.525359 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:43806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/service/service/info.php"] [unique_id "alQt8HTrIlbXpLXvkNcHZAAAAJU"] [Sun Jul 12 18:14:40.528701 2026] [security2:error] [pid 979474:tid 979582] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/service/service/info.php"] [unique_id "alQt8HTrIlbXpLXvkNcHZQAAjGY"] [Sun Jul 12 18:14:40.536076 2026] [security2:error] [pid 979474:tid 979597] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/services/documents/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHZwAAjHU"] [Sun Jul 12 18:14:40.593709 2026] [authz_core:error] [pid 979474:tid 979671] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:40.594383 2026] [authz_core:error] [pid 979474:tid 979671] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:40.606361 2026] [security2:error] [pid 979474:tid 979481] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/services/portainer/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHbQAA-gE"] [Sun Jul 12 18:14:40.615001 2026] [security2:error] [pid 979474:tid 979592] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/settings/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHcAAA-nA"] [Sun Jul 12 18:14:40.674584 2026] [security2:error] [pid 979474:tid 979492] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/services/documents/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHeAAAlAw"], referer: http://67.222.42.11/services/documents/.env [Sun Jul 12 18:14:40.676946 2026] [security2:error] [pid 979474:tid 979647] [client 125.167.21.72:61358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt8HTrIlbXpLXvkNcHdQAAAKs"] [Sun Jul 12 18:14:40.677305 2026] [security2:error] [pid 979474:tid 979647] [client 125.167.21.72:61358] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt8HTrIlbXpLXvkNcHdQAAAKs"] [Sun Jul 12 18:14:40.689853 2026] [security2:error] [pid 979474:tid 979700] [client 62.171.167.118:43828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/sites/default/settings.php"] [unique_id "alQt8HTrIlbXpLXvkNcHegAAAN8"] [Sun Jul 12 18:14:40.693511 2026] [security2:error] [pid 979474:tid 979495] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/sites/default/settings.php"] [unique_id "alQt8HTrIlbXpLXvkNcHfQAAlA8"] [Sun Jul 12 18:14:40.696124 2026] [security2:error] [pid 979474:tid 979487] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/shared/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHfAAAlAc"] [Sun Jul 12 18:14:40.733851 2026] [security2:error] [pid 979474:tid 979603] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/services/portainer/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHggAAlns"], referer: http://67.222.42.11/services/portainer/.env [Sun Jul 12 18:14:40.734421 2026] [security2:error] [pid 979474:tid 979485] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/spikes/config-material-app/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHgQAAlgU"] [Sun Jul 12 18:14:40.739217 2026] [security2:error] [pid 979474:tid 979515] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/settings/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHgwAAliM"], referer: http://67.222.42.11/settings/.env [Sun Jul 12 18:14:40.744508 2026] [security2:error] [pid 979474:tid 979604] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHhQAAlnw"] [Sun Jul 12 18:14:40.817409 2026] [security2:error] [pid 979474:tid 979510] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHigAAzR4"] [Sun Jul 12 18:14:40.832272 2026] [security2:error] [pid 979474:tid 979605] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/shared/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHjgAA6X0"], referer: http://67.222.42.11/shared/.env [Sun Jul 12 18:14:40.832905 2026] [security2:error] [pid 979474:tid 979490] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHiwAA6Qo"] [Sun Jul 12 18:14:40.856470 2026] [security2:error] [pid 967714:tid 967925] [client 62.171.167.118:43822] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/src/phpinfo.php"] [unique_id "alQt8F_56DeKknhy7sMJEAAAAVA"] [Sun Jul 12 18:14:40.865140 2026] [security2:error] [pid 979474:tid 979504] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/spikes/config-material-app/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHkwAA7Bg"], referer: http://67.222.42.11/spikes/config-material-app/.env [Sun Jul 12 18:14:40.872119 2026] [security2:error] [pid 979474:tid 979732] [client 182.253.153.218:57980] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt8HTrIlbXpLXvkNcHlQAAAP8"] [Sun Jul 12 18:14:40.873783 2026] [security2:error] [pid 979474:tid 979518] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHlAAAqSY"], referer: http://67.222.42.11/src/.env [Sun Jul 12 18:14:40.876242 2026] [security2:error] [pid 979474:tid 979483] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/src/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHlgAAqQM"] [Sun Jul 12 18:14:40.886029 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt8F_56DeKknhy7sMJCAAAAUo"] [Sun Jul 12 18:14:40.890750 2026] [security2:error] [pid 979474:tid 979516] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/stackato-pkg/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHmAAA0CQ"] [Sun Jul 12 18:14:40.934270 2026] [security2:error] [pid 967714:tid 967886] [client 62.171.167.118:50552] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/i.php"] [unique_id "alQt8F_56DeKknhy7sMJEQAAASk"] [Sun Jul 12 18:14:40.939051 2026] [security2:error] [pid 979474:tid 979500] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHmwAAkBQ"], referer: http://67.222.42.11/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env [Sun Jul 12 18:14:40.968931 2026] [security2:error] [pid 979474:tid 979508] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "alQt8HTrIlbXpLXvkNcHoQAAnRw"], referer: http://67.222.42.11/src/core/tests/dotenv-files/.env [Sun Jul 12 18:14:40.971314 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:43834] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/stage/crm/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHogAAAJg"] [Sun Jul 12 18:14:40.985429 2026] [security2:error] [pid 979474:tid 979506] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/stage/crm/phpinfo.php"] [unique_id "alQt8HTrIlbXpLXvkNcHpAAAnRo"] [Sun Jul 12 18:14:41.021004 2026] [security2:error] [pid 979474:tid 979512] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/stackato-pkg/.env"] [unique_id "alQt8XTrIlbXpLXvkNcHpQABASA"], referer: http://67.222.42.11/stackato-pkg/.env [Sun Jul 12 18:14:41.050073 2026] [security2:error] [pid 967714:tid 967934] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQt7l_56DeKknhy7sMI2gAAAVk"] [Sun Jul 12 18:14:41.050706 2026] [security2:error] [pid 960377:tid 960604] [client 65.21.113.253:35788] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/post-sitemap.xml"] [unique_id "alQt7hMANaV5i2_BLQodXwAAAGA"] [Sun Jul 12 18:14:41.067131 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:43830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/stage/develop/phpinfo.php"] [unique_id "alQt8XTrIlbXpLXvkNcHpwAAAN4"] [Sun Jul 12 18:14:41.069380 2026] [security2:error] [pid 967714:tid 967741] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/upload.php~"] [unique_id "alQt8V_56DeKknhy7sMJEwABhA8"] [Sun Jul 12 18:14:41.106131 2026] [proxy:warn] [pid 979474:tid 979726] [client 134.199.156.104:42154] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be charterschoolofexcellence.org for uri /400.shtml [Sun Jul 12 18:14:41.106268 2026] [proxy:error] [pid 979474:tid 979726] (70014)End of file found: [client 134.199.156.104:42154] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 134.199.156.104 () [Sun Jul 12 18:14:41.106829 2026] [security2:error] [pid 979474:tid 979513] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.11"] [uri "/stage/develop/phpinfo.php"] [unique_id "alQt8XTrIlbXpLXvkNcHqwABBCE"] [Sun Jul 12 18:14:41.131167 2026] [security2:error] [pid 979474:tid 979692] [client 24.203.79.110:58205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt8XTrIlbXpLXvkNcHrAAAANc"] [Sun Jul 12 18:14:41.131500 2026] [security2:error] [pid 979474:tid 979692] [client 24.203.79.110:58205] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt8XTrIlbXpLXvkNcHrAAAANc"] [Sun Jul 12 18:14:41.156651 2026] [security2:error] [pid 979474:tid 979546] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/staging/.env.bak"] [unique_id "alQt8XTrIlbXpLXvkNcHrwAA1UI"] [Sun Jul 12 18:14:41.230837 2026] [security2:error] [pid 979474:tid 979524] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/stats/.env"] [unique_id "alQt8XTrIlbXpLXvkNcHsQAAkiw"] [Sun Jul 12 18:14:41.280042 2026] [security2:error] [pid 979474:tid 979526] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/staging/.env.bak"] [unique_id "alQt8XTrIlbXpLXvkNcHsgAA6i4"], referer: http://67.222.42.11/staging/.env.bak [Sun Jul 12 18:14:41.282099 2026] [security2:error] [pid 979474:tid 979505] [remote 62.171.167.118:51536] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.11"] [uri "/stats/.env"] [unique_id "alQt8XTrIlbXpLXvkNcHswAA6hk"], referer: http://67.222.42.11/stats/.env [Sun Jul 12 18:14:41.329978 2026] [security2:error] [pid 960377:tid 960581] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt8BMANaV5i2_BLQodfAAASTE"] [Sun Jul 12 18:14:41.490101 2026] [security2:error] [pid 960377:tid 960415] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app-order-client/.env"] [unique_id "alQt8RMANaV5i2_BLQodjAAAbCQ"] [Sun Jul 12 18:14:41.517878 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:41.518574 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:41.723311 2026] [security2:error] [pid 979474:tid 979635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt8XTrIlbXpLXvkNcHtQAAAJ8"] [Sun Jul 12 18:14:41.723476 2026] [security2:error] [pid 979474:tid 979708] [client 32.193.31.241:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "cloud2e.com"] [uri "/index.php"] [unique_id "alQt7nTrIlbXpLXvkNcHCgAAAOc"] [Sun Jul 12 18:14:41.775894 2026] [security2:error] [pid 967714:tid 967859] [client 62.171.167.118:45248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "alQt8V_56DeKknhy7sMJIAAAAQ4"] [Sun Jul 12 18:14:41.818995 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:45246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php/"] [unique_id "alQt8V_56DeKknhy7sMJIQAAAWI"] [Sun Jul 12 18:14:41.911164 2026] [authz_core:error] [pid 960377:tid 960609] [client 20.210.108.71:54783] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/IXR/error_log, referer: binance.com [Sun Jul 12 18:14:41.916440 2026] [security2:error] [pid 979474:tid 979665] [client 216.244.66.229:37558] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.stephenspublishing.com"] [uri "/robots.txt"] [unique_id "alQt8XTrIlbXpLXvkNcHvQAAAL0"] [Sun Jul 12 18:14:41.916744 2026] [security2:error] [pid 979474:tid 979665] [client 216.244.66.229:37558] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.stephenspublishing.com"] [uri "/robots.txt"] [unique_id "alQt8XTrIlbXpLXvkNcHvQAAAL0"] [Sun Jul 12 18:14:41.963076 2026] [ssl:error] [pid 979474:tid 979730] [client 199.45.155.75:44924] AH02032: Hostname box2216.bluehost.com (default host as no SNI was provided) and hostname galileofootball.galileolions.org provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:14:41.971723 2026] [security2:error] [pid 967714:tid 967922] [client 62.171.167.118:45264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php5"] [unique_id "alQt8V_56DeKknhy7sMJJgAAAU0"] [Sun Jul 12 18:14:42.049186 2026] [security2:error] [pid 979474:tid 979669] [client 69.115.198.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQt7HTrIlbXpLXvkNcG-QAAwUk"] [Sun Jul 12 18:14:42.073894 2026] [security2:error] [pid 967714:tid 967868] [client 69.115.198.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQt7F_56DeKknhy7sMIogABF2Y"] [Sun Jul 12 18:14:42.086192 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:45294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo/info.php"] [unique_id "alQt8hMANaV5i2_BLQodmgAAACk"] [Sun Jul 12 18:14:42.100589 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:45306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo/phpinfo.php"] [unique_id "alQt8l_56DeKknhy7sMJKQAAAVM"] [Sun Jul 12 18:14:42.113960 2026] [security2:error] [pid 960377:tid 960582] [client 62.171.167.118:45278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfos.php"] [unique_id "alQt8hMANaV5i2_BLQodnAAAAEo"] [Sun Jul 12 18:14:42.115402 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:45322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpmyadmin/index.php"] [unique_id "alQt8hMANaV5i2_BLQodnQAAAF0"] [Sun Jul 12 18:14:42.115886 2026] [proxy:warn] [pid 960377:tid 960548] [client 134.199.156.104:42156] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be charterschoolofexcellence.org for uri /400.shtml [Sun Jul 12 18:14:42.115995 2026] [proxy:error] [pid 960377:tid 960548] (70014)End of file found: [client 134.199.156.104:42156] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 134.199.156.104 () [Sun Jul 12 18:14:42.120404 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:45330] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpsysinfo/info.php"] [unique_id "alQt8hMANaV5i2_BLQodnwAAAD4"] [Sun Jul 12 18:14:42.219209 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIcwAAAV8"] [Sun Jul 12 18:14:42.232524 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/main/.env"] [unique_id "alQt41_56DeKknhy7sMJMAABSDM"], referer: http://67.222.40.58/main/.env [Sun Jul 12 18:14:42.233622 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/mail/.env"] [unique_id "alQt41_56DeKknhy7sMJKwABSHI"], referer: http://67.222.40.58/mail/.env [Sun Jul 12 18:14:42.235753 2026] [security2:error] [pid 967714:tid 967963] [client 182.253.153.218:57988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/ajtaa.php5"] [unique_id "alQt8l_56DeKknhy7sMJOgAAAXY"] [Sun Jul 12 18:14:42.235961 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/new/.env"] [unique_id "alQt41_56DeKknhy7sMJNgABSEI"], referer: http://67.222.40.58/new/.env [Sun Jul 12 18:14:42.238990 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/monerod/.env"] [unique_id "alQt41_56DeKknhy7sMJNAABSCg"], referer: http://67.222.40.58/monerod/.env [Sun Jul 12 18:14:42.239993 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/newsite/.env"] [unique_id "alQt5F_56DeKknhy7sMJOQABSHI"], referer: http://67.222.40.58/newsite/.env [Sun Jul 12 18:14:42.243762 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/node/crm/info.php"] [unique_id "alQt5V_56DeKknhy7sMJOwABSDI"] [Sun Jul 12 18:14:42.244531 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/infophp.php"] [unique_id "alQt5V_56DeKknhy7sMJPQABSFI"] [Sun Jul 12 18:14:42.244781 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/infos.php"] [unique_id "alQt51_56DeKknhy7sMJPgABSEI"] [Sun Jul 12 18:14:42.245093 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/phpversion.php"] [unique_id "alQt61_56DeKknhy7sMJQAABSBU"] [Sun Jul 12 18:14:42.246148 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/time.php"] [unique_id "alQt61_56DeKknhy7sMJRAABSEI"] [Sun Jul 12 18:14:42.246470 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/temp.php"] [unique_id "alQt61_56DeKknhy7sMJQwABSFI"] [Sun Jul 12 18:14:42.247404 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/newsite/.env"] [unique_id "alQt5F_56DeKknhy7sMJOAABSD8"] [Sun Jul 12 18:14:42.247457 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/pinfo.php"] [unique_id "alQt61_56DeKknhy7sMJQgABSHI"] [Sun Jul 12 18:14:42.251796 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/api/info.php"] [unique_id "alQt5V_56DeKknhy7sMJPAABSHk"] [Sun Jul 12 18:14:42.254242 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/old_phpinfo.php"] [unique_id "alQt61_56DeKknhy7sMJRgABSEI"] [Sun Jul 12 18:14:42.255116 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "alQt61_56DeKknhy7sMJSQABSD8"] [Sun Jul 12 18:14:42.255282 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/oldsanta/.env"] [unique_id "alQt61_56DeKknhy7sMJRwABSFI"] [Sun Jul 12 18:14:42.255511 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/nodeapi/laravel/info.php"] [unique_id "alQt51_56DeKknhy7sMJPwABSDI"] [Sun Jul 12 18:14:42.260001 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/app/.env"] [unique_id "alQt61_56DeKknhy7sMJSAABSCg"] [Sun Jul 12 18:14:42.274345 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/oldsanta/.env"] [unique_id "alQt61_56DeKknhy7sMJUAABSHk"], referer: http://67.222.40.58/oldsanta/.env [Sun Jul 12 18:14:42.275740 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/app/.env"] [unique_id "alQt61_56DeKknhy7sMJUQABSD8"], referer: http://67.222.40.58/packages/app/.env [Sun Jul 12 18:14:42.277365 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/web/.env"] [unique_id "alQt61_56DeKknhy7sMJVAABSEI"], referer: http://67.222.40.58/packages/web/.env [Sun Jul 12 18:14:42.280098 2026] [security2:error] [pid 967714:tid 967959] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt8V_56DeKknhy7sMJJQAAAXI"] [Sun Jul 12 18:14:42.285951 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "alQt61_56DeKknhy7sMJUgABSFI"], referer: http://67.222.40.58/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env [Sun Jul 12 18:14:42.311443 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packed/.env"] [unique_id "alQt7F_56DeKknhy7sMJYAABSHk"], referer: http://67.222.40.58/packed/.env [Sun Jul 12 18:14:42.312961 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packages/web/.env"] [unique_id "alQt7F_56DeKknhy7sMJXgABSCg"] [Sun Jul 12 18:14:42.316538 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/patchwork/.env"] [unique_id "alQt7F_56DeKknhy7sMJYQABSEI"], referer: http://67.222.40.58/patchwork/.env [Sun Jul 12 18:14:42.317601 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/patchwork/.env"] [unique_id "alQt7F_56DeKknhy7sMJYgABSFI"] [Sun Jul 12 18:14:42.321231 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/pfbe/.env"] [unique_id "alQt7F_56DeKknhy7sMJZAABSFI"] [Sun Jul 12 18:14:42.323234 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php-info/info.php"] [unique_id "alQt7V_56DeKknhy7sMJZgABSFI"] [Sun Jul 12 18:14:42.324436 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php-info/phpinfo.php"] [unique_id "alQt7l_56DeKknhy7sMJaQABSEI"] [Sun Jul 12 18:14:42.326349 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/packed/.env"] [unique_id "alQt7F_56DeKknhy7sMJXwABSDI"] [Sun Jul 12 18:14:42.330102 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/pfbe/.env"] [unique_id "alQt7F_56DeKknhy7sMJZQABSD8"], referer: http://67.222.40.58/pfbe/.env [Sun Jul 12 18:14:42.333619 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "alQt8V_56DeKknhy7sMJbgABSGI"] [Sun Jul 12 18:14:42.334012 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpconf.php"] [unique_id "alQt8V_56DeKknhy7sMJbQABSDI"] [Sun Jul 12 18:14:42.334086 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php4"] [unique_id "alQt8V_56DeKknhy7sMJcAABSFc"] [Sun Jul 12 18:14:42.334269 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php5"] [unique_id "alQt8V_56DeKknhy7sMJcQABSGg"] [Sun Jul 12 18:14:42.334804 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo.php/"] [unique_id "alQt8V_56DeKknhy7sMJbwABSD8"] [Sun Jul 12 18:14:42.335213 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/php/phpinfo.php"] [unique_id "alQt8F_56DeKknhy7sMJbAABSBY"] [Sun Jul 12 18:14:42.335355 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo/info.php"] [unique_id "alQt8V_56DeKknhy7sMJcwABSGI"] [Sun Jul 12 18:14:42.335746 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo1.php"] [unique_id "alQt8V_56DeKknhy7sMJdQABSFc"] [Sun Jul 12 18:14:42.335892 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfo/phpinfo.php"] [unique_id "alQt8V_56DeKknhy7sMJdAABSDI"] [Sun Jul 12 18:14:42.336071 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpinfos.php"] [unique_id "alQt8V_56DeKknhy7sMJdgABSGg"] [Sun Jul 12 18:14:42.336800 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpmyadmin/index.php"] [unique_id "alQt8l_56DeKknhy7sMJdwABSFo"] [Sun Jul 12 18:14:42.344339 2026] [security2:error] [pid 967714:tid 967740] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/phpsysinfo/info.php"] [unique_id "alQt8l_56DeKknhy7sMJeAABSA4"] [Sun Jul 12 18:14:42.346705 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/playground/.env"] [unique_id "alQt8l_56DeKknhy7sMJfAABSGg"], referer: http://67.222.40.58/playground/.env [Sun Jul 12 18:14:42.353747 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/playground/.env"] [unique_id "alQt8l_56DeKknhy7sMJeQABSBY"] [Sun Jul 12 18:14:42.370925 2026] [authz_core:error] [pid 967714:tid 967939] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/php.ini, referer: http://67.222.40.58/php.ini [Sun Jul 12 18:14:42.393122 2026] [authz_core:error] [pid 979474:tid 979702] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home1/lcmhaorg/public_html/php.ini [Sun Jul 12 18:14:42.452515 2026] [authz_core:error] [pid 979474:tid 979697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:42.453065 2026] [authz_core:error] [pid 979474:tid 979697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:42.631565 2026] [security2:error] [pid 960377:tid 960434] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt8RMANaV5i2_BLQodjQAAaDc"] [Sun Jul 12 18:14:42.636137 2026] [security2:error] [pid 960377:tid 960410] [remote 103.82.20.130:55260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.20.82.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "michigansparc.info"] [uri "/wp-login.php"] [unique_id "alQt8hMANaV5i2_BLQoduQAACCA"] [Sun Jul 12 18:14:42.710833 2026] [security2:error] [pid 967714:tid 967865] [client 66.249.70.105:49007] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQt8l_56DeKknhy7sMJnQAAARQ"] [Sun Jul 12 18:14:42.717401 2026] [security2:error] [pid 979474:tid 979713] [client 168.100.149.222:64764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10790/bargainor/2308_anisodactyli.jsp"] [unique_id "alQt8nTrIlbXpLXvkNcH4AAAAOw"] [Sun Jul 12 18:14:42.723128 2026] [security2:error] [pid 960377:tid 960546] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodqgAAACY"] [Sun Jul 12 18:14:42.896045 2026] [security2:error] [pid 967714:tid 967914] [client 182.253.153.218:58002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/ajtaa.php5.json"] [unique_id "alQt8l_56DeKknhy7sMJpwAAAUU"] [Sun Jul 12 18:14:43.071584 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIdgAAAXc"] [Sun Jul 12 18:14:43.088189 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt71_56DeKknhy7sMI6QAAATA"] [Sun Jul 12 18:14:43.139650 2026] [security2:error] [pid 960377:tid 960575] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt7xMANaV5i2_BLQodbwAAAEM"], referer: http://67.222.38.115/grafana/api/alerting/ [Sun Jul 12 18:14:43.150947 2026] [security2:error] [pid 967714:tid 967942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIRwAAAWY"], referer: http://67.222.40.58/live/php.ini [Sun Jul 12 18:14:43.151909 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6RMANaV5i2_BLQodCgAAABo"] [Sun Jul 12 18:14:43.239065 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt71_56DeKknhy7sMI8wAAAVg"], referer: http://67.222.38.115/grafana/api/annotations [Sun Jul 12 18:14:43.251078 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt71_56DeKknhy7sMI6gAAAYU"] [Sun Jul 12 18:14:43.297711 2026] [security2:error] [pid 967714:tid 967922] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJqQAAAU0"] [Sun Jul 12 18:14:43.336413 2026] [proxy:warn] [pid 967714:tid 967975] [client 134.199.156.104:42172] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be charterschoolofexcellence.org for uri /400.shtml [Sun Jul 12 18:14:43.336515 2026] [proxy:error] [pid 967714:tid 967975] (70014)End of file found: [client 134.199.156.104:42172] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 134.199.156.104 () [Sun Jul 12 18:14:43.474132 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:43.474859 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:43.501388 2026] [security2:error] [pid 979474:tid 979633] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/index.php"] [unique_id "alQt83TrIlbXpLXvkNcH4gAAAJ0"] [Sun Jul 12 18:14:43.510191 2026] [security2:error] [pid 967714:tid 967901] [client 65.21.113.253:49570] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/sitemap-1.xml"] [unique_id "alQt81_56DeKknhy7sMJqgAAATg"] [Sun Jul 12 18:14:43.580516 2026] [security2:error] [pid 960377:tid 960580] [client 182.253.153.218:58016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt8xMANaV5i2_BLQod0QAAAEg"] [Sun Jul 12 18:14:43.810534 2026] [security2:error] [pid 979474:tid 979678] [client 114.119.141.52:52091] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "euronovelties.ae"] [uri "/products/camels/5.jpg"] [unique_id "alQt83TrIlbXpLXvkNcH7QAAAMo"], referer: https://euronovelties.ae/camels.html [Sun Jul 12 18:14:43.829597 2026] [security2:error] [pid 960377:tid 960481] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodygAADWY"] [Sun Jul 12 18:14:43.855008 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:47842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTdzLTI0NDI5LTdzczJoLTI1Mi1zczI=.cgi"] [unique_id "alQt8xMANaV5i2_BLQod2AAAACw"] [Sun Jul 12 18:14:43.860557 2026] [security2:error] [pid 979474:tid 979692] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt83TrIlbXpLXvkNcH6QAAANc"] [Sun Jul 12 18:14:44.065909 2026] [security2:error] [pid 967714:tid 967968] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/staging/test.php"] [unique_id "alQt9F_56DeKknhy7sMJxAAAAXs"] [Sun Jul 12 18:14:44.153566 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6XTrIlbXpLXvkNcG2QAAAKo"] [Sun Jul 12 18:14:44.174091 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMISAAAAWA"] [Sun Jul 12 18:14:44.206886 2026] [security2:error] [pid 979474:tid 979718] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6XTrIlbXpLXvkNcG3AAAAKM"], referer: http://67.222.40.58/magento_version [Sun Jul 12 18:14:44.225110 2026] [security2:error] [pid 960377:tid 960607] [client 91.92.42.204:46686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 204.42.92.91.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cieda-co.il-rda.com"] [uri "/wp-login.php"] [unique_id "alQt9BMANaV5i2_BLQod2wAAAGM"] [Sun Jul 12 18:14:44.244286 2026] [security2:error] [pid 967714:tid 967780] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/slack.php.bak"] [unique_id "alQt9F_56DeKknhy7sMJxQABUTY"] [Sun Jul 12 18:14:44.286847 2026] [proxy:warn] [pid 979474:tid 979731] [client 134.199.156.104:42188] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be charterschoolofexcellence.org for uri /400.shtml [Sun Jul 12 18:14:44.286926 2026] [proxy:error] [pid 979474:tid 979731] (70014)End of file found: [client 134.199.156.104:42188] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 134.199.156.104 () [Sun Jul 12 18:14:44.422907 2026] [authz_core:error] [pid 960377:tid 960510] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:44.423582 2026] [authz_core:error] [pid 960377:tid 960510] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:44.531732 2026] [security2:error] [pid 979474:tid 979657] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt83TrIlbXpLXvkNcH5gAAALU"] [Sun Jul 12 18:14:44.540435 2026] [security2:error] [pid 960377:tid 960616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt8xMANaV5i2_BLQodzQAAAGw"], referer: http://67.222.38.115/grafana/api/dashboards [Sun Jul 12 18:14:44.680306 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:45342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/api/info.php"] [unique_id "alQt9BMANaV5i2_BLQod5QAAABQ"] [Sun Jul 12 18:14:44.687472 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:45334] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/develop/phpinfo.php"] [unique_id "alQt9BMANaV5i2_BLQod5gAAAG0"] [Sun Jul 12 18:14:44.767303 2026] [security2:error] [pid 960377:tid 960627] [client 168.100.149.75:34520] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10855/bargainor/2308_birefraction.jsp"] [unique_id "alQt9BMANaV5i2_BLQod5wAAAHc"] [Sun Jul 12 18:14:44.855975 2026] [security2:error] [pid 979474:tid 979613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9HTrIlbXpLXvkNcH-wAAAIk"] [Sun Jul 12 18:14:44.940521 2026] [security2:error] [pid 960377:tid 960587] [client 182.253.153.218:58026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/hdwdz.php3"] [unique_id "alQt9BMANaV5i2_BLQod6AAAAE8"] [Sun Jul 12 18:14:44.956145 2026] [security2:error] [pid 979474:tid 979634] [client 62.171.167.118:45364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/php-info.php"] [unique_id "alQt9HTrIlbXpLXvkNcIBAAAAJ4"] [Sun Jul 12 18:14:44.991859 2026] [security2:error] [pid 979474:tid 979627] [client 43.156.41.180:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQt9HTrIlbXpLXvkNcH_AAAAJc"] [Sun Jul 12 18:14:45.095346 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6RMANaV5i2_BLQodDQAAACc"] [Sun Jul 12 18:14:45.165264 2026] [security2:error] [pid 960377:tid 960633] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt8xMANaV5i2_BLQod2QAAfSU"] [Sun Jul 12 18:14:45.192340 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt9BMANaV5i2_BLQod4gAAABM"] [Sun Jul 12 18:14:45.192419 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt9BMANaV5i2_BLQod4gAAABM"] [Sun Jul 12 18:14:45.194206 2026] [security2:error] [pid 967714:tid 967976] [client 65.21.113.206:34924] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTdzLTI0NDI5LTdzczJoLTI1Mi1zczI=.cgi"] [unique_id "alQt9F_56DeKknhy7sMJxwAAAYM"] [Sun Jul 12 18:14:45.218106 2026] [security2:error] [pid 967714:tid 967944] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIdAAAAWM"] [Sun Jul 12 18:14:45.319066 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIagAAAQw"] [Sun Jul 12 18:14:45.425720 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:45.426431 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:45.485872 2026] [security2:error] [pid 967714:tid 967966] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9V_56DeKknhy7sMJ2AAAAXk"] [Sun Jul 12 18:14:45.611495 2026] [security2:error] [pid 979474:tid 979723] [client 216.244.66.249:40886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lcmha.org"] [uri "/ebookpdf/decitre-1-2066-huit_femmes-elclubbilingue.com.html"] [unique_id "alQt9XTrIlbXpLXvkNcIEAAAAPY"] [Sun Jul 12 18:14:45.611819 2026] [security2:error] [pid 979474:tid 979723] [client 216.244.66.249:40886] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "lcmha.org"] [uri "/ebookpdf/decitre-1-2066-huit_femmes-elclubbilingue.com.html"] [unique_id "alQt9XTrIlbXpLXvkNcIEAAAAPY"] [Sun Jul 12 18:14:45.620144 2026] [security2:error] [pid 979474:tid 979623] [client 62.171.167.118:50562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/info.php"] [unique_id "alQt9XTrIlbXpLXvkNcIEQAAAJM"] [Sun Jul 12 18:14:45.648589 2026] [security2:error] [pid 967714:tid 967901] [client 182.253.153.218:58030] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.153.253.182.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/tmp/hdwdz.php3.json"] [unique_id "alQt9V_56DeKknhy7sMJ5AAAATg"] [Sun Jul 12 18:14:45.926542 2026] [security2:error] [pid 960377:tid 960589] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9RMANaV5i2_BLQod7QAAAFE"] [Sun Jul 12 18:14:46.143105 2026] [security2:error] [pid 960377:tid 960517] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodxQAAAAk"] [Sun Jul 12 18:14:46.162596 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJoAAAAQ8"] [Sun Jul 12 18:14:46.166041 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6XTrIlbXpLXvkNcG2wAAAI0"] [Sun Jul 12 18:14:46.177953 2026] [security2:error] [pid 967714:tid 967965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIcAAAAUE"] [Sun Jul 12 18:14:46.191838 2026] [security2:error] [pid 979474:tid 979717] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcH3AAAAPA"] [Sun Jul 12 18:14:46.198078 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJngAAAXU"] [Sun Jul 12 18:14:46.199525 2026] [security2:error] [pid 979474:tid 979710] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcH2wAAAOk"] [Sun Jul 12 18:14:46.220249 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcH3gAAALs"] [Sun Jul 12 18:14:46.242122 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9F_56DeKknhy7sMJzwAAAXQ"], referer: http://67.222.38.115/grafana/api/org [Sun Jul 12 18:14:46.265717 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9HTrIlbXpLXvkNcH_QAAALo"] [Sun Jul 12 18:14:46.326994 2026] [security2:error] [pid 967714:tid 967948] [client 103.126.217.26:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQt9V_56DeKknhy7sMJ6AAAAWc"], referer: https://learningindia.in [Sun Jul 12 18:14:46.345718 2026] [security2:error] [pid 960377:tid 960576] [client 182.253.153.218:58034] ModSecurity: Access denied with code 406 (phase 1). Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "187"] [id "900401"] [msg "PHP Spam Botnet"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod9QAAAEQ"] [Sun Jul 12 18:14:46.390884 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:46.391586 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:46.454139 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ9QABQGY"] [Sun Jul 12 18:14:46.458590 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.bash_history"] [unique_id "alQt8l_56DeKknhy7sMKCAABQEo"] [Sun Jul 12 18:14:46.504088 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/web.config"] [unique_id "alQt8l_56DeKknhy7sMKBwABQGw"] [Sun Jul 12 18:14:46.587458 2026] [security2:error] [pid 979474:tid 979711] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIGQAAAOo"] [Sun Jul 12 18:14:46.603700 2026] [security2:error] [pid 960377:tid 960578] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt9RMANaV5i2_BLQod6QAARhU"] [Sun Jul 12 18:14:46.644866 2026] [access_compat:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] AH01797: client denied by server configuration: proxy:https://127.0.0.1:8443/server-status [Sun Jul 12 18:14:46.666023 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/web.config"] [unique_id "alQt8l_56DeKknhy7sMKNwABQH8"], referer: http://67.222.42.205/web.config [Sun Jul 12 18:14:46.716920 2026] [security2:error] [pid 967714:tid 967884] [client 168.100.149.9:24544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10920/bargainor/2308_mediator.jsp"] [unique_id "alQt9l_56DeKknhy7sMKSwAAASc"] [Sun Jul 12 18:14:46.720184 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.bash_history"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.bash_history"] [unique_id "alQt8l_56DeKknhy7sMKTAABQEk"], referer: http://67.222.42.205/.bash_history [Sun Jul 12 18:14:46.976429 2026] [security2:error] [pid 960377:tid 960548] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeDAAAACg"] [Sun Jul 12 18:14:47.167294 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMIXQABSCQ"] [Sun Jul 12 18:14:47.174985 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ8gABQAQ"] [Sun Jul 12 18:14:47.204766 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ7wABQCo"] [Sun Jul 12 18:14:47.240104 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ9wABQEE"] [Sun Jul 12 18:14:47.288995 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ-gABQFM"] [Sun Jul 12 18:14:47.294156 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJ-wABQF4"] [Sun Jul 12 18:14:47.304646 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMJ_gAAAVs"] [Sun Jul 12 18:14:47.391237 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:45360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/temp.php"] [unique_id "alQt91_56DeKknhy7sMKYgAAAWI"] [Sun Jul 12 18:14:47.486224 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:47.486831 2026] [authz_core:error] [pid 967714:tid 967873] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:47.487149 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeCgAAJWk"] [Sun Jul 12 18:14:47.535276 2026] [security2:error] [pid 967714:tid 967929] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt91_56DeKknhy7sMKWAAAAVQ"] [Sun Jul 12 18:14:47.537868 2026] [security2:error] [pid 960377:tid 960609] [client 175.158.203.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQt8xMANaV5i2_BLQod1gAAAGU"], referer: https://www.youtube.com/ [Sun Jul 12 18:14:47.802079 2026] [core:error] [pid 979474:tid 979737] [client 175.119.225.92:56932] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:14:47.968218 2026] [security2:error] [pid 960377:tid 960598] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt9xMANaV5i2_BLQoeFgAAAFo"] [Sun Jul 12 18:14:48.102162 2026] [security2:error] [pid 979474:tid 979691] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIIgAAANY"] [Sun Jul 12 18:14:48.152008 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIJAAAAMc"] [Sun Jul 12 18:14:48.168863 2026] [security2:error] [pid 979474:tid 979660] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIIQAAALg"] [Sun Jul 12 18:14:48.241961 2026] [security2:error] [pid 979474:tid 979673] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIHgAAAMU"] [Sun Jul 12 18:14:48.251057 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKBQAAATA"] [Sun Jul 12 18:14:48.272075 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKHwABQDg"] [Sun Jul 12 18:14:48.323902 2026] [security2:error] [pid 979474:tid 979609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcINAAAAIU"] [Sun Jul 12 18:14:48.333182 2026] [security2:error] [pid 960377:tid 960539] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php.service"] [unique_id "alQt-BMANaV5i2_BLQoeHQAAAB8"] [Sun Jul 12 18:14:48.340711 2026] [qos:error] [pid 967714:tid 967849] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKrQABQHs, referer: http://67.222.42.205/.travis.yml [Sun Jul 12 18:14:48.343213 2026] [qos:error] [pid 967714:tid 967752] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=102, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKrAABQBo, referer: http://67.222.42.205/.svn/entries [Sun Jul 12 18:14:48.343933 2026] [qos:error] [pid 967714:tid 967780] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=103, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKqQABQDY, referer: http://67.222.42.205/README.md [Sun Jul 12 18:14:48.344724 2026] [qos:error] [pid 967714:tid 967837] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=104, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKrwABQG8, referer: http://67.222.42.205/nginx_app.conf [Sun Jul 12 18:14:48.346297 2026] [security2:error] [pid 979474:tid 979711] [client 65.21.113.206:42324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQt-HTrIlbXpLXvkNcIZAAAAOo"] [Sun Jul 12 18:14:48.350763 2026] [qos:error] [pid 967714:tid 967810] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=105, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKsQABQFQ, referer: http://67.222.42.205/package.json [Sun Jul 12 18:14:48.351715 2026] [qos:error] [pid 967714:tid 967850] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=106, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKsgABQHw, referer: http://67.222.42.205/Jenkinsfile [Sun Jul 12 18:14:48.351749 2026] [qos:error] [pid 967714:tid 967814] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=107, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKsAABQFg, referer: http://67.222.42.205/server-status [Sun Jul 12 18:14:48.351783 2026] [qos:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=108, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKqgABQGA, referer: http://67.222.42.205/Makefile [Sun Jul 12 18:14:48.355739 2026] [qos:error] [pid 967714:tid 967806] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=109, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKqwABQFA, referer: http://67.222.42.205/README [Sun Jul 12 18:14:48.356104 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKLAABQFo"] [Sun Jul 12 18:14:48.358711 2026] [qos:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=109, c=62.171.167.118, id=alQt8l_56DeKknhy7sMKmgABQHo, referer: http://67.222.42.205/docker-compose.yml [Sun Jul 12 18:14:48.369529 2026] [qos:error] [pid 960377:tid 960515] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=110, c=50.87.254.158, id=alQt-BMANaV5i2_BLQoeIAAAAAc, referer: http://67.222.42.205/.env.sample [Sun Jul 12 18:14:48.371821 2026] [qos:error] [pid 960377:tid 960575] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=111, c=50.87.254.158, id=alQt-BMANaV5i2_BLQoeIQAAAEM, referer: http://67.222.42.205/README.mkd [Sun Jul 12 18:14:48.372516 2026] [qos:error] [pid 967714:tid 967960] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=112, c=50.87.254.158, id=alQt-F_56DeKknhy7sMKtwAAAXM, referer: http://67.222.42.205/config.lua [Sun Jul 12 18:14:48.373389 2026] [qos:error] [pid 960377:tid 960533] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=113, c=50.87.254.158, id=alQt-BMANaV5i2_BLQoeIgAAABk, referer: http://67.222.42.205/.git/config [Sun Jul 12 18:14:48.373456 2026] [qos:error] [pid 967714:tid 967862] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=114, c=50.87.254.158, id=alQt-F_56DeKknhy7sMKuAAAARE, referer: http://67.222.42.205/Vagrantfile [Sun Jul 12 18:14:48.404738 2026] [qos:error] [pid 960377:tid 960629] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=106, c=50.87.254.158, id=alQt-BMANaV5i2_BLQoeIwAAAHk, referer: http://67.222.42.205/.ssh/config [Sun Jul 12 18:14:48.422482 2026] [security2:error] [pid 967714:tid 967905] [client 191.44.71.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt91_56DeKknhy7sMKaAAAATw"] [Sun Jul 12 18:14:48.440305 2026] [qos:error] [pid 967714:tid 967863] [client 62.171.167.118:0] mod_qos(010): access denied, QS_LocRequestLimit* rule: /(100), concurrent requests=101, c=50.87.254.158, id=alQt-F_56DeKknhy7sMKwwAAARI, referer: http://67.222.42.205/.profile [Sun Jul 12 18:14:48.523713 2026] [authz_core:error] [pid 960377:tid 960512] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:48.524269 2026] [authz_core:error] [pid 960377:tid 960512] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:48.646932 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt9xMANaV5i2_BLQoeFAAAaFA"] [Sun Jul 12 18:14:48.713286 2026] [security2:error] [pid 960377:tid 960537] [client 168.100.149.206:55632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/10985/bargainor/2308_gurian.jsp"] [unique_id "alQt-BMANaV5i2_BLQoeKAAAAB0"] [Sun Jul 12 18:14:48.791508 2026] [security2:error] [pid 967714:tid 967965] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMK1QAAAXg"] [Sun Jul 12 18:14:48.805955 2026] [security2:error] [pid 960377:tid 960426] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/client/.env"] [unique_id "alQt-BMANaV5i2_BLQoeKQAANS8"] [Sun Jul 12 18:14:48.854748 2026] [security2:error] [pid 960377:tid 960578] [client 65.21.113.206:34926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQt-BMANaV5i2_BLQoeKgAAAEY"] [Sun Jul 12 18:14:48.904431 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:45346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/time.php"] [unique_id "alQt-F_56DeKknhy7sMK5QAAATg"] [Sun Jul 12 18:14:48.963786 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/code/community/Nosto/Tagging/.env"] [unique_id "alQt-BMANaV5i2_BLQoeKwAAQgE"] [Sun Jul 12 18:14:48.983575 2026] [security2:error] [pid 967714:tid 967947] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/klarna/config.php"] [unique_id "alQt-F_56DeKknhy7sMK6QAAAWY"] [Sun Jul 12 18:14:49.083572 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcILgAAAP4"] [Sun Jul 12 18:14:49.099275 2026] [security2:error] [pid 979474:tid 979610] [client 94.187.171.125:58595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt-XTrIlbXpLXvkNcIdQAAAIY"] [Sun Jul 12 18:14:49.099580 2026] [security2:error] [pid 979474:tid 979610] [client 94.187.171.125:58595] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQt-XTrIlbXpLXvkNcIdQAAAIY"] [Sun Jul 12 18:14:49.100387 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKEQABQGQ"] [Sun Jul 12 18:14:49.158325 2026] [security2:error] [pid 979474:tid 979655] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcILQAAALM"] [Sun Jul 12 18:14:49.179767 2026] [security2:error] [pid 967714:tid 967970] [client 65.21.113.206:42330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YThhcTV4Yl80NTIwLzhhLzMzNjIxL2E=.html"] [unique_id "alQt-V_56DeKknhy7sMK8wAAAX0"] [Sun Jul 12 18:14:49.186961 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIMwAAAJo"] [Sun Jul 12 18:14:49.203842 2026] [security2:error] [pid 979474:tid 979677] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIPAAAAMk"] [Sun Jul 12 18:14:49.206070 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKMwABQBY"], referer: http://67.222.42.205/Gulpfile.js [Sun Jul 12 18:14:49.210740 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod-gAAAA0"] [Sun Jul 12 18:14:49.220987 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKBAAAARc"] [Sun Jul 12 18:14:49.252912 2026] [security2:error] [pid 979474:tid 979712] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIKQAAAOs"], referer: http://67.222.38.115/grafana/api/search [Sun Jul 12 18:14:49.257071 2026] [security2:error] [pid 979474:tid 979618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIQwAAAI4"] [Sun Jul 12 18:14:49.259302 2026] [security2:error] [pid 979474:tid 979682] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIPQAAAM0"] [Sun Jul 12 18:14:49.263685 2026] [security2:error] [pid 979474:tid 979624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIPgAAAJQ"] [Sun Jul 12 18:14:49.340297 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeAwAAAF0"], referer: http://67.222.42.205/.vimrc [Sun Jul 12 18:14:49.372089 2026] [security2:error] [pid 960377:tid 960630] [client 65.21.113.206:34926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQt-RMANaV5i2_BLQoeLwAAAHo"] [Sun Jul 12 18:14:49.397215 2026] [security2:error] [pid 979474:tid 979715] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIKgAAAO4"], referer: http://67.222.38.115/grafana/api/serviceaccounts [Sun Jul 12 18:14:49.412924 2026] [security2:error] [pid 960377:tid 960554] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod9gAAAC4"] [Sun Jul 12 18:14:49.450890 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:49.451556 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:49.468397 2026] [security2:error] [pid 967714:tid 967926] [client 134.199.156.104:40294] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1578"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.charterschoolofexcellence.org"] [uri "/robots.txt"] [unique_id "alQt-V_56DeKknhy7sMLBAAAAVE"] [Sun Jul 12 18:14:49.555330 2026] [security2:error] [pid 967714:tid 967955] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt-V_56DeKknhy7sMK9gAAAW4"] [Sun Jul 12 18:14:49.986950 2026] [security2:error] [pid 967714:tid 967911] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt-V_56DeKknhy7sMLEwAAAUI"] [Sun Jul 12 18:14:50.085499 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcINgAAAJU"] [Sun Jul 12 18:14:50.130554 2026] [security2:error] [pid 967714:tid 967886] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKRQAAASk"], referer: http://67.222.42.205/Thumbs.db [Sun Jul 12 18:14:50.152054 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod-QAAADY"] [Sun Jul 12 18:14:50.153115 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKOwAAAVg"] [Sun Jul 12 18:14:50.167076 2026] [security2:error] [pid 960377:tid 960548] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt-RMANaV5i2_BLQoeLAAAKBY"] [Sun Jul 12 18:14:50.221084 2026] [security2:error] [pid 960377:tid 960567] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod-wAAADs"] [Sun Jul 12 18:14:50.243288 2026] [security2:error] [pid 967714:tid 967905] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/system/config.php"] [unique_id "alQt-l_56DeKknhy7sMLIQAAATw"] [Sun Jul 12 18:14:50.248268 2026] [security2:error] [pid 979474:tid 979689] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIQgAAANQ"] [Sun Jul 12 18:14:50.264490 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKQwAAAVk"] [Sun Jul 12 18:14:50.280095 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKIQABQC4"] [Sun Jul 12 18:14:50.281926 2026] [security2:error] [pid 979474:tid 979616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcINQAAAIw"] [Sun Jul 12 18:14:50.287899 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKRgAAAVo"] [Sun Jul 12 18:14:50.326420 2026] [authz_core:error] [pid 960377:tid 960532] [client 20.210.108.71:50356] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sun Jul 12 18:14:50.332709 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/config/.env"] [unique_id "alQt-hMANaV5i2_BLQoeRQAAHkc"] [Sun Jul 12 18:14:50.341126 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeBAAAAFw"] [Sun Jul 12 18:14:50.345517 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt93TrIlbXpLXvkNcITgAAALw"], referer: http://67.222.42.205/yarn.lock [Sun Jul 12 18:14:50.348971 2026] [security2:error] [pid 960377:tid 960570] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeBQAAAD4"], referer: http://67.222.42.205/nginx.conf [Sun Jul 12 18:14:50.395793 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:50.396462 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:50.442751 2026] [security2:error] [pid 967714:tid 967801] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config.php.old"] [unique_id "alQt-l_56DeKknhy7sMLIwABVEs"] [Sun Jul 12 18:14:50.500313 2026] [security2:error] [pid 960377:tid 960407] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/config/dev/.env"] [unique_id "alQt-hMANaV5i2_BLQoeRwAAax0"] [Sun Jul 12 18:14:50.525174 2026] [security2:error] [pid 960377:tid 960529] [client 134.199.156.104:40298] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1578"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.charterschoolofexcellence.org"] [uri "/sitemap.xml"] [unique_id "alQt-hMANaV5i2_BLQoeSQAAABU"] [Sun Jul 12 18:14:50.560218 2026] [security2:error] [pid 960377:tid 960528] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt-RMANaV5i2_BLQoeOgAAABQ"] [Sun Jul 12 18:14:50.560271 2026] [security2:error] [pid 960377:tid 960528] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt-RMANaV5i2_BLQoeOgAAABQ"] [Sun Jul 12 18:14:50.562213 2026] [security2:error] [pid 967714:tid 967865] [client 65.21.113.206:34942] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YThhcTV4Yl80NTIwLzhhLzMzNjIxL2E=.html"] [unique_id "alQt-V_56DeKknhy7sMLFwAAARQ"] [Sun Jul 12 18:14:50.569746 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-V_56DeKknhy7sMLAwAAASc"] [Sun Jul 12 18:14:50.610646 2026] [security2:error] [pid 967714:tid 967973] [client 216.244.66.249:40896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lcmha.org"] [uri "/ebookpdf/decitre-23-4422-Fran%C3%A7ois_Ier_-_Roi_de_France_et_prince_de_la_Renaissance-elclubbilingue.com.html"] [unique_id "alQt-l_56DeKknhy7sMLKwAAAYA"] [Sun Jul 12 18:14:50.610904 2026] [security2:error] [pid 967714:tid 967973] [client 216.244.66.249:40896] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "lcmha.org"] [uri "/ebookpdf/decitre-23-4422-Fran%C3%A7ois_Ier_-_Roi_de_France_et_prince_de_la_Renaissance-elclubbilingue.com.html"] [unique_id "alQt-l_56DeKknhy7sMLKwAAAYA"] [Sun Jul 12 18:14:50.613448 2026] [security2:error] [pid 967714:tid 967807] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/mysql_dump.sql"] [unique_id "alQt-l_56DeKknhy7sMLKgABU1E"] [Sun Jul 12 18:14:50.658691 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app/frontend/.env"] [unique_id "alQt-hMANaV5i2_BLQoeTAAACVg"] [Sun Jul 12 18:14:50.762014 2026] [security2:error] [pid 967714:tid 967858] [client 57.141.18.123:41000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "rapports-minoritaires.net"] [uri "/index.php"] [unique_id "alQt-l_56DeKknhy7sMLIgABDSM"] [Sun Jul 12 18:14:50.785079 2026] [security2:error] [pid 960377:tid 960533] [client 168.100.149.159:22126] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11050/bargainor/2308_monkey.jsp"] [unique_id "alQt-hMANaV5i2_BLQoeUQAAABk"] [Sun Jul 12 18:14:51.024575 2026] [security2:error] [pid 960377:tid 960577] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt-hMANaV5i2_BLQoeUwAAAEU"] [Sun Jul 12 18:14:51.094420 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKQgAAAXk"] [Sun Jul 12 18:14:51.114275 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKQQAAAXw"] [Sun Jul 12 18:14:51.148877 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKTwAAAX8"], referer: http://67.222.42.205/Gulpfile [Sun Jul 12 18:14:51.151858 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeCQAAAHA"], referer: http://67.222.42.205/Homestead.yaml [Sun Jul 12 18:14:51.173137 2026] [security2:error] [pid 967714:tid 967958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt91_56DeKknhy7sMKWQAAAXE"], referer: http://67.222.42.205/.npmignore [Sun Jul 12 18:14:51.205986 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIeQAAASw"] [Sun Jul 12 18:14:51.207090 2026] [security2:error] [pid 960377:tid 960515] [client 125.167.21.72:61810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt-xMANaV5i2_BLQoeVgAAAAc"] [Sun Jul 12 18:14:51.207416 2026] [security2:error] [pid 960377:tid 960515] [client 125.167.21.72:61810] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQt-xMANaV5i2_BLQoeVgAAAAc"] [Sun Jul 12 18:14:51.237385 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKVgABQCo"], referer: http://67.222.42.205/app.json [Sun Jul 12 18:14:51.266494 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt91_56DeKknhy7sMKYQAAAYY"], referer: http://67.222.42.205/Rakefile [Sun Jul 12 18:14:51.282069 2026] [security2:error] [pid 967714:tid 967904] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKRAAAATs"] [Sun Jul 12 18:14:51.290066 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-V_56DeKknhy7sMLAQAAAVw"] [Sun Jul 12 18:14:51.324529 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQoeCAAAAEg"] [Sun Jul 12 18:14:51.340525 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod_AAAACw"] [Sun Jul 12 18:14:51.342863 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKYAABQDk"], referer: http://67.222.42.205/Resources.zip.manifest [Sun Jul 12 18:14:51.350952 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9hMANaV5i2_BLQod_gAAAE4"] [Sun Jul 12 18:14:51.356227 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKSAAAAYQ"], referer: http://67.222.42.205/phpunit.xml [Sun Jul 12 18:14:51.361417 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKXwABQF4"], referer: http://67.222.42.205/gruntfile.js [Sun Jul 12 18:14:51.381874 2026] [security2:error] [pid 960377:tid 960584] [client 165.154.120.89:56058] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.31.37"] [uri "/favicon.ico"] [unique_id "alQt-xMANaV5i2_BLQoeWwAAAEw"] [Sun Jul 12 18:14:51.448034 2026] [authz_core:error] [pid 967714:tid 967879] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:51.448778 2026] [authz_core:error] [pid 967714:tid 967879] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:51.460031 2026] [security2:error] [pid 960377:tid 960573] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt-hMANaV5i2_BLQoeVAAAQS0"] [Sun Jul 12 18:14:51.501782 2026] [security2:error] [pid 967714:tid 967906] [client 134.199.156.104:40312] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1578"] [id "900936"] [msg "Empty UA autodiscover"] [hostname "autodiscover.charterschoolofexcellence.org"] [uri "/.well-known/security.txt"] [unique_id "alQt-1_56DeKknhy7sMLPwAAAT0"] [Sun Jul 12 18:14:51.571785 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt-xMANaV5i2_BLQoeWAAAAFM"] [Sun Jul 12 18:14:51.744009 2026] [security2:error] [pid 967714:tid 967741] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/_static/.env"] [unique_id "alQt-1_56DeKknhy7sMLRgABEg8"] [Sun Jul 12 18:14:51.753960 2026] [security2:error] [pid 967714:tid 967869] [client 24.203.79.110:58794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt-1_56DeKknhy7sMLSAAAARg"] [Sun Jul 12 18:14:51.758984 2026] [security2:error] [pid 967714:tid 967869] [client 24.203.79.110:58794] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQt-1_56DeKknhy7sMLSAAAARg"] [Sun Jul 12 18:14:51.913536 2026] [security2:error] [pid 967714:tid 967803] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.saas/.env"] [unique_id "alQt-1_56DeKknhy7sMLUAABVU0"] [Sun Jul 12 18:14:51.964033 2026] [security2:error] [pid 960377:tid 960456] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt-xMANaV5i2_BLQoeXgAAQk0"] [Sun Jul 12 18:14:52.073545 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKpQABQHA"], referer: http://67.222.42.205/yarn-error.log [Sun Jul 12 18:14:52.116965 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKkAABQB0"], referer: http://67.222.42.205/composer.json [Sun Jul 12 18:14:52.125113 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMKvwAAAU4"], referer: http://67.222.42.205/.circleci/config.yml [Sun Jul 12 18:14:52.146129 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKlQABQHU"], referer: http://67.222.42.205/main.js [Sun Jul 12 18:14:52.154048 2026] [security2:error] [pid 979474:tid 979690] [client 165.154.120.89:56242] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.31.37"] [uri "/robots.txt"] [unique_id "alQt_HTrIlbXpLXvkNcIlAAAANU"] [Sun Jul 12 18:14:52.170053 2026] [security2:error] [pid 967714:tid 967941] [client 165.154.120.89:56244] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "69.89.31.37"] [uri "/sitemap.xml"] [unique_id "alQt_F_56DeKknhy7sMLVgAAAWA"] [Sun Jul 12 18:14:52.171114 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKpwABQHc"], referer: http://67.222.42.205/.eslintrc.json [Sun Jul 12 18:14:52.207895 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMKowABQF0"], referer: http://67.222.42.205/blog/_wpeprivate/config.json [Sun Jul 12 18:14:52.208983 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMKwAAAAWg"], referer: http://67.222.42.205/license [Sun Jul 12 18:14:52.214872 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-BMANaV5i2_BLQoeJgAAAA4"], referer: http://67.222.42.205/.mysql_history [Sun Jul 12 18:14:52.226147 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-BMANaV5i2_BLQoeJAAAAHM"], referer: http://67.222.42.205/.hg/requires [Sun Jul 12 18:14:52.235035 2026] [security2:error] [pid 979474:tid 979694] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9nTrIlbXpLXvkNcIRQAAANk"], referer: http://67.222.42.205/LICENSE.md [Sun Jul 12 18:14:52.235996 2026] [security2:error] [pid 967714:tid 967963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt9l_56DeKknhy7sMKRwAAAXY"], referer: http://67.222.42.205/.s3cfg [Sun Jul 12 18:14:52.247197 2026] [security2:error] [pid 960377:tid 960602] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-BMANaV5i2_BLQoeGQAAAF4"], referer: http://67.222.42.205/.ssh/known_hosts [Sun Jul 12 18:14:52.249055 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMKvQAAAXU"], referer: http://67.222.42.205/.ssh/id_rsa.pub [Sun Jul 12 18:14:52.253580 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMKwgAAASo"], referer: http://67.222.42.205/config.rb [Sun Jul 12 18:14:52.269967 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-F_56DeKknhy7sMKwQAAARs"], referer: http://67.222.42.205/v2/_catalog [Sun Jul 12 18:14:52.277929 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-BMANaV5i2_BLQoeJQAAADo"], referer: http://67.222.42.205/version [Sun Jul 12 18:14:52.296101 2026] [security2:error] [pid 979474:tid 979698] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt-HTrIlbXpLXvkNcIbQAAAN0"], referer: http://67.222.42.205/README.txt [Sun Jul 12 18:14:52.431379 2026] [authz_core:error] [pid 960377:tid 960630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:52.432996 2026] [authz_core:error] [pid 960377:tid 960630] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:52.499890 2026] [security2:error] [pid 979474:tid 979706] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_HTrIlbXpLXvkNcIlgAAAOU"] [Sun Jul 12 18:14:52.708233 2026] [cgid:error] [pid 967714:tid 967878] [client 202.46.62.100:30481] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-547.html?osCsid=mt1tslpigjh896av51dc0t7jc2 [Sun Jul 12 18:14:52.776524 2026] [security2:error] [pid 967714:tid 967860] [client 168.100.149.209:27172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11115/bargainor/2308_impeccance.jsp"] [unique_id "alQt_F_56DeKknhy7sMLbAAAAQ8"] [Sun Jul 12 18:14:52.966784 2026] [security2:error] [pid 967714:tid 967960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_F_56DeKknhy7sMLaAAAAXM"] [Sun Jul 12 18:14:53.294743 2026] [security2:error] [pid 979474:tid 979638] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-nTrIlbXpLXvkNcIgQAAAKI"] [Sun Jul 12 18:14:53.338359 2026] [authz_core:error] [pid 967714:tid 967885] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:53.339093 2026] [authz_core:error] [pid 967714:tid 967885] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:53.441554 2026] [security2:error] [pid 960377:tid 960588] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_RMANaV5i2_BLQoebwAAAFA"] [Sun Jul 12 18:14:53.492566 2026] [security2:error] [pid 967714:tid 967959] [client 51.68.236.94:13669] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "tristatecrush.com"] [uri "/robots.txt"] [unique_id "alQt_V_56DeKknhy7sMLiQAAAXI"] [Sun Jul 12 18:14:53.492956 2026] [security2:error] [pid 967714:tid 967959] [client 51.68.236.94:13669] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "tristatecrush.com"] [uri "/robots.txt"] [unique_id "alQt_V_56DeKknhy7sMLiQAAAXI"] [Sun Jul 12 18:14:53.520513 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt_BMANaV5i2_BLQoeaQAAJ20"] [Sun Jul 12 18:14:53.611827 2026] [security2:error] [pid 967714:tid 967733] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wallet/.env"] [unique_id "alQt_V_56DeKknhy7sMLjQABQAc"] [Sun Jul 12 18:14:53.678809 2026] [security2:error] [pid 960377:tid 960402] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app1-static/.env"] [unique_id "alQt_RMANaV5i2_BLQoeeAAAZhg"] [Sun Jul 12 18:14:53.736657 2026] [security2:error] [pid 967714:tid 967962] [client 57.141.18.57:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQt_V_56DeKknhy7sMLiAAAAXU"] [Sun Jul 12 18:14:53.839218 2026] [security2:error] [pid 960377:tid 960396] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app2-static/.env"] [unique_id "alQt_RMANaV5i2_BLQoefAAACRI"] [Sun Jul 12 18:14:53.998827 2026] [security2:error] [pid 960377:tid 960392] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app_dir/.env"] [unique_id "alQt_RMANaV5i2_BLQoefgAAfw4"] [Sun Jul 12 18:14:54.049765 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_RMANaV5i2_BLQoeewAAAGA"] [Sun Jul 12 18:14:54.082113 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-hMANaV5i2_BLQoeSgAAAFU"], referer: http://67.222.38.115/graphiql [Sun Jul 12 18:14:54.099739 2026] [security2:error] [pid 967714:tid 967968] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIeAAAAR4"] [Sun Jul 12 18:14:54.135714 2026] [security2:error] [pid 967714:tid 967936] [client 65.21.113.206:42330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YThudWNwLTQ0MjcvOG4tNzczMy9udWNw"] [unique_id "alQt_l_56DeKknhy7sMLkwAAAVs"] [Sun Jul 12 18:14:54.160080 2026] [security2:error] [pid 967714:tid 967871] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt6V_56DeKknhy7sMIdQAAARo"] [Sun Jul 12 18:14:54.166414 2026] [security2:error] [pid 960377:tid 960431] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/app_nginx_static_path/.env"] [unique_id "alQt_hMANaV5i2_BLQoeggAAbzQ"] [Sun Jul 12 18:14:54.167160 2026] [security2:error] [pid 967714:tid 967939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJgQAAAV4"], referer: http://67.222.40.58/php.ini [Sun Jul 12 18:14:54.210832 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-3TrIlbXpLXvkNcIjgAAAK4"], referer: http://67.222.38.115/graphql [Sun Jul 12 18:14:54.225989 2026] [security2:error] [pid 960377:tid 960569] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt-hMANaV5i2_BLQoeSwAAAD0"], referer: http://67.222.38.115/grafana/api/users [Sun Jul 12 18:14:54.256710 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:54.257387 2026] [authz_core:error] [pid 960377:tid 960519] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:54.406611 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sMLmwAAAR8"] [Sun Jul 12 18:14:54.443586 2026] [security2:error] [pid 960377:tid 960518] [client 202.46.62.77:29243] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQt_hMANaV5i2_BLQoehQAAAAo"], referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-547.html?osCsid=mt1tslpigjh896av51dc0t7jc2 [Sun Jul 12 18:14:54.573042 2026] [security2:error] [pid 967714:tid 967972] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sMLngAAAX8"] [Sun Jul 12 18:14:54.611795 2026] [security2:error] [pid 967714:tid 967863] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sMLpQABEkw"] [Sun Jul 12 18:14:54.647071 2026] [security2:error] [pid 967714:tid 967957] [client 216.73.217.165:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "themarkberman.sheckman.com"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sMLoAAAAXA"] [Sun Jul 12 18:14:54.744580 2026] [core:error] [pid 967714:tid 967804] [remote 109.105.210.67:55380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:14:54.744653 2026] [core:error] [pid 967714:tid 967804] [remote 109.105.210.67:55380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:14:54.771269 2026] [security2:error] [pid 967714:tid 967962] [client 168.100.149.57:47634] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11180/bargainor/2308_gunz.jsp"] [unique_id "alQt_l_56DeKknhy7sML3wAAAXU"] [Sun Jul 12 18:14:54.797850 2026] [core:error] [pid 967714:tid 967812] [remote 109.105.210.67:55380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:14:54.797908 2026] [core:error] [pid 967714:tid 967812] [remote 109.105.210.67:55380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:14:54.854031 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sML2wABKHg"] [Sun Jul 12 18:14:54.873028 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sML2gAAAS0"] [Sun Jul 12 18:14:54.982299 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sML4QABKCI"] [Sun Jul 12 18:14:55.016948 2026] [security2:error] [pid 979474:tid 979613] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_nTrIlbXpLXvkNcIqAAAAIk"] [Sun Jul 12 18:14:55.077959 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJTwAAATU"], referer: http://67.222.40.58/mailgun/sendemail [Sun Jul 12 18:14:55.122119 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:55.122859 2026] [authz_core:error] [pid 967714:tid 967887] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:55.216183 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_l_56DeKknhy7sML6gABbyw"] [Sun Jul 12 18:14:55.220474 2026] [core:error] [pid 967714:tid 967936] [client 109.105.210.68:32930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://g33kideas.com/favicon.ico [Sun Jul 12 18:14:55.220520 2026] [core:error] [pid 967714:tid 967936] [client 109.105.210.68:32930] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://g33kideas.com/favicon.ico [Sun Jul 12 18:14:55.239843 2026] [security2:error] [pid 960377:tid 960627] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt_hMANaV5i2_BLQoehgAAAHc"] [Sun Jul 12 18:14:55.239865 2026] [security2:error] [pid 967714:tid 967971] [client 65.21.113.206:33596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YThudWNwLTQ0MjcvOG4tNzczMy9udWNw"] [unique_id "alQt_l_56DeKknhy7sMLzwAAAX4"] [Sun Jul 12 18:14:55.239912 2026] [security2:error] [pid 960377:tid 960627] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt_hMANaV5i2_BLQoehgAAAHc"] [Sun Jul 12 18:14:55.260203 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt_hMANaV5i2_BLQoegwAAGl4"] [Sun Jul 12 18:14:55.503231 2026] [authz_core:error] [pid 960377:tid 960582] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/workshop/.htpasswd [Sun Jul 12 18:14:55.528994 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_1_56DeKknhy7sML9AAAAR8"] [Sun Jul 12 18:14:55.551898 2026] [security2:error] [pid 979474:tid 979661] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_3TrIlbXpLXvkNcIrQAAALk"] [Sun Jul 12 18:14:55.603463 2026] [security2:error] [pid 979474:tid 979636] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQt_3TrIlbXpLXvkNcIrgAAAKA"] [Sun Jul 12 18:14:55.960880 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:55.961483 2026] [authz_core:error] [pid 960377:tid 960574] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:55.980062 2026] [security2:error] [pid 967714:tid 967908] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQt_1_56DeKknhy7sMMBQAAAT8"] [Sun Jul 12 18:14:56.184812 2026] [security2:error] [pid 960377:tid 960522] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodpgAAADk"] [Sun Jul 12 18:14:56.188948 2026] [security2:error] [pid 979474:tid 979718] [client 31.39.164.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQt_3TrIlbXpLXvkNcItQAAAPE"] [Sun Jul 12 18:14:56.205490 2026] [security2:error] [pid 960377:tid 960575] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQt_xMANaV5i2_BLQoejAAAQ1M"] [Sun Jul 12 18:14:56.364903 2026] [security2:error] [pid 960377:tid 960501] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/apps/.env"] [unique_id "alQuABMANaV5i2_BLQoelgAAYno"] [Sun Jul 12 18:14:56.437412 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.env"] [unique_id "alQuAF_56DeKknhy7sMMHwABXDw"] [Sun Jul 12 18:14:56.441304 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAF_56DeKknhy7sMMEAAAAVo"] [Sun Jul 12 18:14:56.488017 2026] [security2:error] [pid 979474:tid 979674] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIugAAAMY"] [Sun Jul 12 18:14:56.532032 2026] [security2:error] [pid 960377:tid 960503] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/apps/client/.env"] [unique_id "alQuABMANaV5i2_BLQoemAAALnw"] [Sun Jul 12 18:14:56.546865 2026] [security2:error] [pid 967714:tid 967904] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuAF_56DeKknhy7sMMDAAAATs"] [Sun Jul 12 18:14:56.551914 2026] [security2:error] [pid 979474:tid 979627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIvAAAAJc"] [Sun Jul 12 18:14:56.601039 2026] [security2:error] [pid 979474:tid 979647] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIvwAAAKs"] [Sun Jul 12 18:14:56.651466 2026] [security2:error] [pid 979474:tid 979609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIwgAAAIU"] [Sun Jul 12 18:14:56.652617 2026] [security2:error] [pid 979474:tid 979690] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIwwAAANU"] [Sun Jul 12 18:14:56.660024 2026] [security2:error] [pid 967714:tid 967759] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAF_56DeKknhy7sMMGgABXCE"] [Sun Jul 12 18:14:56.677267 2026] [security2:error] [pid 979474:tid 979697] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIxQAAANw"] [Sun Jul 12 18:14:56.690447 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIxAAAAPM"] [Sun Jul 12 18:14:56.691696 2026] [security2:error] [pid 960377:tid 960496] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Archipel/.env"] [unique_id "alQuABMANaV5i2_BLQoenQAAEHU"] [Sun Jul 12 18:14:56.723992 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAF_56DeKknhy7sMMLQAAARM"] [Sun Jul 12 18:14:56.743511 2026] [security2:error] [pid 979474:tid 979716] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIxgAAAO8"] [Sun Jul 12 18:14:56.744991 2026] [security2:error] [pid 979474:tid 979723] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAHTrIlbXpLXvkNcIyAAAAPY"] [Sun Jul 12 18:14:56.745324 2026] [security2:error] [pid 967714:tid 967867] [client 168.100.149.14:58072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11245/bargainor/2308_monadically.jsp"] [unique_id "alQuAF_56DeKknhy7sMMNAAAARY"] [Sun Jul 12 18:14:56.754364 2026] [security2:error] [pid 979474:tid 979640] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/testregister.php"] [unique_id "alQuAHTrIlbXpLXvkNcIzQAAAKQ"] [Sun Jul 12 18:14:56.831916 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:56.832433 2026] [authz_core:error] [pid 960377:tid 960633] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:56.875052 2026] [security2:error] [pid 967714:tid 967943] [client 57.141.18.4:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "climateneutralroses.com"] [uri "/index.php"] [unique_id "alQuAF_56DeKknhy7sMMLwAAAWI"] [Sun Jul 12 18:14:57.068136 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test.php"] [unique_id "alQuAV_56DeKknhy7sMMOwABSUM"] [Sun Jul 12 18:14:57.094859 2026] [security2:error] [pid 967714:tid 967863] [client 65.21.113.206:42330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YThwLTQzMjQ1LThwemNiLTE4NTUtcHpj.cgi"] [unique_id "alQuAV_56DeKknhy7sMMPQAAARI"] [Sun Jul 12 18:14:57.132091 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodpQAAABI"], referer: http://67.222.40.58/phpinfo.txt [Sun Jul 12 18:14:57.174837 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt41_56DeKknhy7sMJLQABSFU"], referer: http://67.222.40.58/mailer_url_keys.json [Sun Jul 12 18:14:57.319399 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAV_56DeKknhy7sMMOAABSVA"] [Sun Jul 12 18:14:57.323416 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuABMANaV5i2_BLQoeogAAAFg"] [Sun Jul 12 18:14:57.334167 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt_V_56DeKknhy7sMLggAAAWo"] [Sun Jul 12 18:14:57.370880 2026] [security2:error] [pid 979474:tid 979688] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI0wAAANM"] [Sun Jul 12 18:14:57.371524 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcIzwAAAJk"] [Sun Jul 12 18:14:57.396985 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAV_56DeKknhy7sMMPwAAAQw"] [Sun Jul 12 18:14:57.450390 2026] [security2:error] [pid 960377:tid 960579] [client 170.245.163.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuABMANaV5i2_BLQoeoAAAAEc"] [Sun Jul 12 18:14:57.473292 2026] [security2:error] [pid 979474:tid 979680] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI1QAAAMs"] [Sun Jul 12 18:14:57.654531 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:57.655052 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:57.864009 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuABMANaV5i2_BLQoeoQAAVlQ"] [Sun Jul 12 18:14:57.884563 2026] [security2:error] [pid 979474:tid 979662] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI1gAAALo"] [Sun Jul 12 18:14:57.918035 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuARMANaV5i2_BLQoerwAAAH8"] [Sun Jul 12 18:14:57.946704 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAV_56DeKknhy7sMMUgAAAVE"] [Sun Jul 12 18:14:57.980099 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAV_56DeKknhy7sMMVQABbms"] [Sun Jul 12 18:14:58.003083 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI4gAAAI0"] [Sun Jul 12 18:14:58.025927 2026] [security2:error] [pid 960377:tid 960437] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/asset_img/.env"] [unique_id "alQuAhMANaV5i2_BLQoeswAAezo"] [Sun Jul 12 18:14:58.045713 2026] [security2:error] [pid 979474:tid 979616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI4wAAAIw"] [Sun Jul 12 18:14:58.090948 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJWQAAAQo"], referer: http://67.222.40.58/mandrill_keys.py [Sun Jul 12 18:14:58.110165 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAV_56DeKknhy7sMMWAAAAYY"] [Sun Jul 12 18:14:58.152504 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8hMANaV5i2_BLQodpwAAAFQ"], referer: http://67.222.40.58/portal/.env.staging [Sun Jul 12 18:14:58.200657 2026] [security2:error] [pid 960377:tid 960404] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/assets/.env"] [unique_id "alQuAhMANaV5i2_BLQoetgAAeRo"] [Sun Jul 12 18:14:58.211101 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJgwAAASU"], referer: http://67.222.40.58/php-info/phpinfo [Sun Jul 12 18:14:58.264651 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt_RMANaV5i2_BLQoedAAAAGE"], referer: http://67.222.38.115/graphql-console [Sun Jul 12 18:14:58.266314 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt_V_56DeKknhy7sMLhAAAAWA"] [Sun Jul 12 18:14:58.352477 2026] [security2:error] [pid 967714:tid 967948] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt_V_56DeKknhy7sMLhQAAAWc"] [Sun Jul 12 18:14:58.361882 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQt_V_56DeKknhy7sMLgwAAAWg"] [Sun Jul 12 18:14:58.402323 2026] [security2:error] [pid 967714:tid 967964] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMawAAAXc"] [Sun Jul 12 18:14:58.406038 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMYgABbgI"] [Sun Jul 12 18:14:58.454153 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMaAABbiY"] [Sun Jul 12 18:14:58.557279 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMdAAAATg"] [Sun Jul 12 18:14:58.586739 2026] [security2:error] [pid 979474:tid 979687] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI2AAAANI"] [Sun Jul 12 18:14:58.586822 2026] [security2:error] [pid 979474:tid 979687] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuAXTrIlbXpLXvkNcI2AAAANI"] [Sun Jul 12 18:14:58.590708 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMcQAAASM"] [Sun Jul 12 18:14:58.591017 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMcAAAAUU"] [Sun Jul 12 18:14:58.594532 2026] [security2:error] [pid 979474:tid 979638] [client 65.21.113.206:33606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YThwLTQzMjQ1LThwemNiLTE4NTUtcHpj.cgi"] [unique_id "alQuAXTrIlbXpLXvkNcI1wAAAKI"] [Sun Jul 12 18:14:58.599492 2026] [authz_core:error] [pid 967714:tid 967893] [client 4.43.184.113:24660] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:14:58.610653 2026] [authz_core:error] [pid 960377:tid 960541] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:58.611226 2026] [authz_core:error] [pid 960377:tid 960541] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:58.632913 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuAhMANaV5i2_BLQoetAAAAEs"] [Sun Jul 12 18:14:58.659057 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMcwAAAWk"] [Sun Jul 12 18:14:58.762065 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.swp"] [unique_id "alQuAl_56DeKknhy7sMMiQABai0"] [Sun Jul 12 18:14:58.787973 2026] [security2:error] [pid 967714:tid 967982] [client 168.100.149.210:24856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11310/bargainor/2308_enhalo.jsp"] [unique_id "alQuAl_56DeKknhy7sMMkAAAAYk"] [Sun Jul 12 18:14:58.875509 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMgwABakQ"] [Sun Jul 12 18:14:58.882785 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMhgAAARc"] [Sun Jul 12 18:14:58.898873 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMhQAAAQ8"] [Sun Jul 12 18:14:59.070535 2026] [security2:error] [pid 967714:tid 967920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJWAAAAUs"], referer: http://67.222.40.58/mandrill_keys.txt [Sun Jul 12 18:14:59.080467 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJYwAAASs"] [Sun Jul 12 18:14:59.091828 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJXAAAAYE"], referer: http://67.222.40.58/live/phpinfo [Sun Jul 12 18:14:59.133080 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMkQAAAXI"] [Sun Jul 12 18:14:59.152454 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMjQABaj0"] [Sun Jul 12 18:14:59.160011 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMlAAAAXA"] [Sun Jul 12 18:14:59.164499 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuAhMANaV5i2_BLQoevQAAAE4"] [Sun Jul 12 18:14:59.168752 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJWwAAAW0"], referer: http://67.222.40.58/new/.env.production [Sun Jul 12 18:14:59.198792 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJhQAAATM"] [Sun Jul 12 18:14:59.205114 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMkgAAAT8"] [Sun Jul 12 18:14:59.222127 2026] [security2:error] [pid 967714:tid 967874] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJhgAAAR0"] [Sun Jul 12 18:14:59.274975 2026] [security2:error] [pid 967714:tid 967899] [client 152.169.141.194:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_battery.php"] [unique_id "alQt-1_56DeKknhy7sMLTgABNic"] [Sun Jul 12 18:14:59.392491 2026] [security2:error] [pid 960377:tid 960533] [client 205.210.31.218:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kg-ifa.com"] [uri "/index.php"] [unique_id "alQuARMANaV5i2_BLQoesgAAABk"] [Sun Jul 12 18:14:59.429510 2026] [security2:error] [pid 960377:tid 960528] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuAhMANaV5i2_BLQoeuAAAFDM"] [Sun Jul 12 18:14:59.442422 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:14:59.443144 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:14:59.670852 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuAxMANaV5i2_BLQoewgAAACQ"] [Sun Jul 12 18:14:59.757170 2026] [security2:error] [pid 967714:tid 967927] [client 103.168.66.51:62159] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/etc/env.php"] [unique_id "alQuA1_56DeKknhy7sMMqwAAAVI"] [Sun Jul 12 18:14:59.761539 2026] [security2:error] [pid 967714:tid 967900] [client 103.168.66.51:62145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/mail.php"] [unique_id "alQuA1_56DeKknhy7sMMrgAAATc"] [Sun Jul 12 18:14:59.768223 2026] [security2:error] [pid 967714:tid 967886] [client 103.168.66.51:62190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/backend/.env"] [unique_id "alQuA1_56DeKknhy7sMMsgAAASk"] [Sun Jul 12 18:14:59.774447 2026] [security2:error] [pid 967714:tid 967884] [client 103.168.66.51:51507] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.save"] [unique_id "alQuA1_56DeKknhy7sMMtgAAASc"] [Sun Jul 12 18:14:59.799902 2026] [fcgid:warn] [pid 979474:tid 979673] (70014)End of file found: [client 18.116.101.220:37534] mod_fcgid: can't get data from http client [Sun Jul 12 18:14:59.807973 2026] [security2:error] [pid 967714:tid 967879] [client 94.187.171.125:59081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuA1_56DeKknhy7sMMuQAAASI"] [Sun Jul 12 18:14:59.808211 2026] [security2:error] [pid 967714:tid 967879] [client 94.187.171.125:59081] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuA1_56DeKknhy7sMMuQAAASI"] [Sun Jul 12 18:15:00.021275 2026] [security2:error] [pid 979474:tid 979645] [client 67.222.60.87:26574] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQuBHTrIlbXpLXvkNcJAwAAAKk"] [Sun Jul 12 18:15:00.021352 2026] [security2:error] [pid 979474:tid 979645] [client 67.222.60.87:26574] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQuBHTrIlbXpLXvkNcJAwAAAKk"] [Sun Jul 12 18:15:00.081022 2026] [security2:error] [pid 967714:tid 967910] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuA1_56DeKknhy7sMMwAAAAUE"] [Sun Jul 12 18:15:00.098234 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcHzgAAAOE"] [Sun Jul 12 18:15:00.104095 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJUwAAARU"], referer: http://67.222.40.58/media/xampp/phpinfo [Sun Jul 12 18:15:00.126945 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMMegAAAWI"], referer: http://67.222.38.115/growthbook/api/features [Sun Jul 12 18:15:00.210193 2026] [security2:error] [pid 979474:tid 979648] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcHyAAAAKw"], referer: http://67.222.40.58/mailjet_keys [Sun Jul 12 18:15:00.220092 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8nTrIlbXpLXvkNcHzQAAANs"], referer: http://67.222.40.58/old/xampp/phpinfo [Sun Jul 12 18:15:00.231754 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/api/info.php"] [unique_id "alQt9F_56DeKknhy7sMM0gABSHI"] [Sun Jul 12 18:15:00.233824 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/develop/phpinfo.php"] [unique_id "alQt9F_56DeKknhy7sMM0wABSHI"] [Sun Jul 12 18:15:00.234924 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/temp.php"] [unique_id "alQt-F_56DeKknhy7sMM1gABSBs"] [Sun Jul 12 18:15:00.235300 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/php-info.php"] [unique_id "alQt9l_56DeKknhy7sMM1AABSHw"] [Sun Jul 12 18:15:00.235488 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/xampp/phpinfo.php"] [unique_id "alQt-V_56DeKknhy7sMM2AABSBY"] [Sun Jul 12 18:15:00.237206 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/prod/current/info.php"] [unique_id "alQt-V_56DeKknhy7sMM2gABSBY"] [Sun Jul 12 18:15:00.238205 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/portal/time.php"] [unique_id "alQt-V_56DeKknhy7sMM1wABSHI"] [Sun Jul 12 18:15:00.240328 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/profiler/test.php"] [unique_id "alQt-V_56DeKknhy7sMM4AABSBQ"] [Sun Jul 12 18:15:00.241136 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/product/backup/phpinfo.php"] [unique_id "alQt-V_56DeKknhy7sMM3AABSHI"] [Sun Jul 12 18:15:00.243424 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/product/info.php"] [unique_id "alQt-V_56DeKknhy7sMM3QABSFs"] [Sun Jul 12 18:15:00.244464 2026] [security2:error] [pid 979474:tid 979676] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuAnTrIlbXpLXvkNcI7AAAAMg"] [Sun Jul 12 18:15:00.245045 2026] [security2:error] [pid 967714:tid 967915] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQt8l_56DeKknhy7sMJWgAAAUY"], referer: http://67.222.40.58/mail/phpinfo [Sun Jul 12 18:15:00.247281 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/project/development/iinfo.php"] [unique_id "alQt-V_56DeKknhy7sMM5AABSHI"] [Sun Jul 12 18:15:00.248003 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/project/infophp.php"] [unique_id "alQt-V_56DeKknhy7sMM5QABSFk"] [Sun Jul 12 18:15:00.253775 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/project_root/.env"] [unique_id "alQt-V_56DeKknhy7sMM5wABSHI"] [Sun Jul 12 18:15:00.259334 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/pub/.env"] [unique_id "alQt-V_56DeKknhy7sMM6gABSHI"] [Sun Jul 12 18:15:00.261695 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/psnlink/.env"] [unique_id "alQt-V_56DeKknhy7sMM6AABSFk"] [Sun Jul 12 18:15:00.267294 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/public/.env"] [unique_id "alQt-V_56DeKknhy7sMM6wABSHI"] [Sun Jul 12 18:15:00.268977 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public/php-info.php"] [unique_id "alQt-V_56DeKknhy7sMM8QABSA0"] [Sun Jul 12 18:15:00.269264 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public/laravel/info.php"] [unique_id "alQt-V_56DeKknhy7sMM7wABSGQ"] [Sun Jul 12 18:15:00.273103 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/qa/.env"] [unique_id "alQt-V_56DeKknhy7sMM9gABSCk"] [Sun Jul 12 18:15:00.276799 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/project/.env.bak"] [unique_id "alQt-V_56DeKknhy7sMM4QABSBQ"] [Sun Jul 12 18:15:00.279646 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public/services/info.php"] [unique_id "alQt-V_56DeKknhy7sMM8wABSA0"] [Sun Jul 12 18:15:00.281046 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public_html/current/phpinfo.php"] [unique_id "alQt-V_56DeKknhy7sMM9QABSAc"] [Sun Jul 12 18:15:00.281203 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public/linusadmin-phpinfo.php"] [unique_id "alQt-V_56DeKknhy7sMM8AABSBE"] [Sun Jul 12 18:15:00.281604 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/qa/backup/info.php"] [unique_id "alQt-V_56DeKknhy7sMM9wABSEM"] [Sun Jul 12 18:15:00.281975 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/qa/crm/info.php"] [unique_id "alQt-l_56DeKknhy7sMM-AABSGQ"] [Sun Jul 12 18:15:00.283989 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/public/backup/info.php"] [unique_id "alQt-V_56DeKknhy7sMM7gABSHI"] [Sun Jul 12 18:15:00.285340 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/qa/php.php"] [unique_id "alQt-1_56DeKknhy7sMM-QABSCk"] [Sun Jul 12 18:15:00.290254 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/root/info.php"] [unique_id "alQt_1_56DeKknhy7sMM_wABSGQ"] [Sun Jul 12 18:15:00.290493 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/repos/.env"] [unique_id "alQt_F_56DeKknhy7sMM-wABSA0"] [Sun Jul 12 18:15:00.293291 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/rasax/.env"] [unique_id "alQt-1_56DeKknhy7sMM-gABSBQ"] [Sun Jul 12 18:15:00.301525 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/resources/docker/.env"] [unique_id "alQt_F_56DeKknhy7sMM_AABSAc"] [Sun Jul 12 18:15:00.305230 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/resources/docker/rediscommander/.env"] [unique_id "alQt_V_56DeKknhy7sMM_QABSBE"] [Sun Jul 12 18:15:00.310497 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/robots/.env"] [unique_id "alQt_l_56DeKknhy7sMM_gABSEM"] [Sun Jul 12 18:15:00.319143 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/routes/.env"] [unique_id "alQuAV_56DeKknhy7sMNAAABSHI"] [Sun Jul 12 18:15:00.322569 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/saas/.env"] [unique_id "alQuAV_56DeKknhy7sMNAQABSCk"] [Sun Jul 12 18:15:00.324334 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:00.325385 2026] [authz_core:error] [pid 967714:tid 967920] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:00.327029 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "alQuAV_56DeKknhy7sMNAgABSGQ"] [Sun Jul 12 18:15:00.332644 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/scripts/.env"] [unique_id "alQuAV_56DeKknhy7sMNBQABSGQ"] [Sun Jul 12 18:15:00.343863 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/script/.env"] [unique_id "alQuAV_56DeKknhy7sMNBAABSA0"] [Sun Jul 12 18:15:00.354289 2026] [security2:error] [pid 960377:tid 960562] [client 103.168.66.51:62143] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config.php"] [unique_id "alQuBBMANaV5i2_BLQoe3AAAADY"] [Sun Jul 12 18:15:00.378015 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/sendgrid_email/.env"] [unique_id "alQuAl_56DeKknhy7sMNCwABSA0"] [Sun Jul 12 18:15:00.383003 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/server/services/phpinfo.php"] [unique_id "alQuA1_56DeKknhy7sMNEQABSEk"] [Sun Jul 12 18:15:00.383218 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/service/service/info.php"] [unique_id "alQuBF_56DeKknhy7sMNEgABSFM"] [Sun Jul 12 18:15:00.385097 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/server/laravel/phpinfo.php"] [unique_id "alQuAl_56DeKknhy7sMNEAABSBA"] [Sun Jul 12 18:15:00.385854 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/server/api/phpinfo.php"] [unique_id "alQuAl_56DeKknhy7sMNDwABSA0"] [Sun Jul 12 18:15:00.415335 2026] [security2:error] [pid 967714:tid 967935] [client 103.168.66.51:62188] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/app/.env"] [unique_id "alQuBF_56DeKknhy7sMNFQAAAVo"] [Sun Jul 12 18:15:00.416896 2026] [security2:error] [pid 967714:tid 967935] [client 103.168.66.51:62146] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/storage/.env"] [unique_id "alQuBF_56DeKknhy7sMNGAAAAVo"] [Sun Jul 12 18:15:00.417323 2026] [security2:error] [pid 967714:tid 967919] [client 103.168.66.51:62152] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/.env.development.local"] [unique_id "alQuBF_56DeKknhy7sMNFwAAAUo"] [Sun Jul 12 18:15:00.440259 2026] [security2:error] [pid 967714:tid 967912] [client 103.168.66.51:62191] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/.env.staging"] [unique_id "alQuBF_56DeKknhy7sMNGwAAAUM"] [Sun Jul 12 18:15:00.442303 2026] [security2:error] [pid 967714:tid 967891] [client 103.168.66.51:62194] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.old"] [unique_id "alQuBF_56DeKknhy7sMNHgAAAS4"] [Sun Jul 12 18:15:00.521889 2026] [security2:error] [pid 960377:tid 960621] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuAxMANaV5i2_BLQoeyAAAcX8"] [Sun Jul 12 18:15:00.700323 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuBF_56DeKknhy7sMNJQAAAYg"] [Sun Jul 12 18:15:00.701512 2026] [security2:error] [pid 960377:tid 960611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe2gAAAGc"] [Sun Jul 12 18:15:00.774134 2026] [authz_core:error] [pid 960377:tid 960606] [client 20.210.108.71:56274] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/PHPMailer/error_log, referer: binance.com [Sun Jul 12 18:15:00.818124 2026] [security2:error] [pid 979474:tid 979621] [client 168.100.149.44:61944] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11375/bargainor/2308_metalogical.jsp"] [unique_id "alQuBHTrIlbXpLXvkNcJHQAAAJE"] [Sun Jul 12 18:15:00.877068 2026] [security2:error] [pid 967714:tid 967847] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/back-end/app/.env"] [unique_id "alQuBF_56DeKknhy7sMNKQABKnk"] [Sun Jul 12 18:15:01.093868 2026] [security2:error] [pid 979474:tid 979654] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuBHTrIlbXpLXvkNcJIAAAALI"] [Sun Jul 12 18:15:01.106004 2026] [security2:error] [pid 967714:tid 967972] [client 65.21.113.206:42330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTk2LzM4MTM5Lzk2LzM4MDkvNmhu.asp"] [unique_id "alQuBV_56DeKknhy7sMNMQAAAX8"] [Sun Jul 12 18:15:01.110526 2026] [authz_core:error] [pid 979474:tid 979708] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/workshop/.htaccess [Sun Jul 12 18:15:01.242619 2026] [security2:error] [pid 967714:tid 967901] [client 103.168.66.51:56587] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/k8s-config.yml"] [unique_id "alQuBV_56DeKknhy7sMNNQAAATg"] [Sun Jul 12 18:15:01.255047 2026] [authz_core:error] [pid 979474:tid 979664] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:01.255875 2026] [authz_core:error] [pid 979474:tid 979664] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:01.394148 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/services/documents/.env"] [unique_id "alQuBV_56DeKknhy7sMNNgABSF4"] [Sun Jul 12 18:15:01.415058 2026] [security2:error] [pid 960377:tid 960564] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoezAAAADg"] [Sun Jul 12 18:15:01.468139 2026] [security2:error] [pid 960377:tid 960623] [client 66.102.6.135:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "uirvda.com"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoeywAAAHM"] [Sun Jul 12 18:15:01.489479 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe2AAAAF0"] [Sun Jul 12 18:15:01.545658 2026] [security2:error] [pid 979474:tid 979717] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuBXTrIlbXpLXvkNcJJwAAAPA"] [Sun Jul 12 18:15:01.687253 2026] [security2:error] [pid 960377:tid 960547] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe7gAAJw8"] [Sun Jul 12 18:15:01.738455 2026] [security2:error] [pid 979474:tid 979678] [client 103.168.66.51:56589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/database.php"] [unique_id "alQuBXTrIlbXpLXvkNcJPQAAAMo"] [Sun Jul 12 18:15:01.838620 2026] [authz_core:error] [pid 960377:tid 960525] [client 4.43.184.113:2358] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:15:01.865035 2026] [security2:error] [pid 960377:tid 960619] [client 125.167.21.72:62269] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuBRMANaV5i2_BLQofBAAAAG8"] [Sun Jul 12 18:15:01.865381 2026] [security2:error] [pid 960377:tid 960619] [client 125.167.21.72:62269] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuBRMANaV5i2_BLQofBAAAAG8"] [Sun Jul 12 18:15:01.876695 2026] [security2:error] [pid 979474:tid 979737] [client 103.168.66.51:62140] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/docker-compose.yml"] [unique_id "alQuBXTrIlbXpLXvkNcJPwAAAQQ"] [Sun Jul 12 18:15:01.884025 2026] [security2:error] [pid 960377:tid 960515] [client 103.168.66.51:62163] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.bak"] [unique_id "alQuBRMANaV5i2_BLQofBwAAAAc"] [Sun Jul 12 18:15:01.930929 2026] [core:error] [pid 960377:tid 960519] [client 47.245.110.93:61055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:01.930987 2026] [core:error] [pid 960377:tid 960519] [client 47.245.110.93:61055] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:02.007706 2026] [security2:error] [pid 979474:tid 979651] [client 149.202.51.38:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQuBXTrIlbXpLXvkNcJOQAAAK8"] [Sun Jul 12 18:15:02.054611 2026] [security2:error] [pid 960377:tid 960550] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQofAgAAACo"] [Sun Jul 12 18:15:02.143507 2026] [authz_core:error] [pid 979474:tid 979657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:02.144238 2026] [authz_core:error] [pid 979474:tid 979657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:02.187086 2026] [security2:error] [pid 960377:tid 960589] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQoe_gAAAFE"] [Sun Jul 12 18:15:02.187154 2026] [security2:error] [pid 960377:tid 960589] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQoe_gAAAFE"] [Sun Jul 12 18:15:02.219787 2026] [security2:error] [pid 979474:tid 979618] [client 65.21.113.206:33618] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTk2LzM4MTM5Lzk2LzM4MDkvNmhu.asp"] [unique_id "alQuBXTrIlbXpLXvkNcJNQAAAI4"] [Sun Jul 12 18:15:02.234499 2026] [security2:error] [pid 967714:tid 967757] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/*.env.example.backup"] [unique_id "alQuBl_56DeKknhy7sMNQgABMB8"] [Sun Jul 12 18:15:02.236174 2026] [security2:error] [pid 960377:tid 960534] [client 103.168.66.51:62166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/database.yml"] [unique_id "alQuBhMANaV5i2_BLQofCgAAABo"] [Sun Jul 12 18:15:02.306270 2026] [security2:error] [pid 979474:tid 979647] [client 45.205.1.223:58636] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "omnimodedigital.com"] [uri "/400.shtml"] [unique_id "alQuBnTrIlbXpLXvkNcJTAAAAKs"] [Sun Jul 12 18:15:02.437323 2026] [security2:error] [pid 979474:tid 979637] [client 24.203.79.110:59317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuBnTrIlbXpLXvkNcJTgAAAKE"] [Sun Jul 12 18:15:02.437608 2026] [security2:error] [pid 979474:tid 979637] [client 24.203.79.110:59317] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuBnTrIlbXpLXvkNcJTgAAAKE"] [Sun Jul 12 18:15:02.533332 2026] [core:error] [pid 960377:tid 960573] [client 47.245.110.93:61057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:02.533379 2026] [core:error] [pid 960377:tid 960573] [client 47.245.110.93:61057] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:02.729798 2026] [security2:error] [pid 967714:tid 967879] [client 51.75.23.120:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQuBl_56DeKknhy7sMNRQAAASI"] [Sun Jul 12 18:15:02.788645 2026] [security2:error] [pid 960377:tid 960537] [client 168.100.149.200:55100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11440/bargainor/2308_psychoreflex.jsp"] [unique_id "alQuBhMANaV5i2_BLQofFAAAAB0"] [Sun Jul 12 18:15:02.825376 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phptest.php"] [unique_id "alQuBl_56DeKknhy7sMNTAABcxI"] [Sun Jul 12 18:15:02.869005 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuBl_56DeKknhy7sMNSQABczk"] [Sun Jul 12 18:15:02.893493 2026] [security2:error] [pid 967714:tid 967906] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuBl_56DeKknhy7sMNSAAAAT0"] [Sun Jul 12 18:15:03.031925 2026] [security2:error] [pid 960377:tid 960583] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQofAwAASzk"] [Sun Jul 12 18:15:03.062939 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:03.063493 2026] [authz_core:error] [pid 967714:tid 967965] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:03.092690 2026] [security2:error] [pid 979474:tid 979653] [client 103.168.66.51:62136] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/sites/default/settings.php"] [unique_id "alQuB3TrIlbXpLXvkNcJVwAAALE"] [Sun Jul 12 18:15:03.134035 2026] [core:error] [pid 967714:tid 967918] [client 47.245.110.93:61061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.134093 2026] [core:error] [pid 967714:tid 967918] [client 47.245.110.93:61061] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.346497 2026] [security2:error] [pid 979474:tid 979625] [client 45.205.1.223:48740] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "centerofholistichealthcare.org"] [uri "/400.shtml"] [unique_id "alQuB3TrIlbXpLXvkNcJWgAAAJU"] [Sun Jul 12 18:15:03.385154 2026] [security2:error] [pid 979474:tid 979574] [remote 57.141.18.77:62020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 77.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/EicuKOXxnOb61dxSjjoaqy"] [unique_id "alQuB3TrIlbXpLXvkNcJXQAA7F4"] [Sun Jul 12 18:15:03.485567 2026] [security2:error] [pid 960377:tid 960576] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuBxMANaV5i2_BLQofGQAAAEQ"] [Sun Jul 12 18:15:03.589361 2026] [core:error] [pid 967714:tid 967935] [client 47.245.110.93:61064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.589688 2026] [core:error] [pid 967714:tid 967935] [client 47.245.110.93:61064] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.801452 2026] [security2:error] [pid 979474:tid 979644] [client 103.168.66.51:62170] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/src/.env"] [unique_id "alQuB3TrIlbXpLXvkNcJYQAAAKg"] [Sun Jul 12 18:15:03.824528 2026] [core:error] [pid 960377:tid 960538] [client 47.245.110.93:61066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.824585 2026] [core:error] [pid 960377:tid 960538] [client 47.245.110.93:61066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:03.963715 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:03.964269 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:03.965003 2026] [security2:error] [pid 960377:tid 960558] [client 103.168.66.51:59019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/wp-config.php"] [unique_id "alQuBxMANaV5i2_BLQofKAAAADI"] [Sun Jul 12 18:15:04.073321 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuB1_56DeKknhy7sMNXgAAAYY"] [Sun Jul 12 18:15:04.183196 2026] [security2:error] [pid 967714:tid 967981] [client 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQuCF_56DeKknhy7sMNZwAAAYg"] [Sun Jul 12 18:15:04.191994 2026] [core:error] [pid 960377:tid 960594] [client 47.245.110.93:61068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:04.192056 2026] [core:error] [pid 960377:tid 960594] [client 47.245.110.93:61068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:04.192488 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuBxMANaV5i2_BLQofGgAATwQ"] [Sun Jul 12 18:15:04.219187 2026] [security2:error] [pid 967714:tid 967897] [client 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "alQuCF_56DeKknhy7sMNagAAATQ"], referer: www.google.com [Sun Jul 12 18:15:04.220795 2026] [security2:error] [pid 960377:tid 960623] [client 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-plain.php"] [unique_id "alQuCBMANaV5i2_BLQofLgAAAHM"], referer: www.google.com [Sun Jul 12 18:15:04.228800 2026] [security2:error] [pid 960377:tid 960605] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQoe-wAAAGE"] [Sun Jul 12 18:15:04.234085 2026] [security2:error] [pid 979474:tid 979612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBXTrIlbXpLXvkNcJMQAAAIg"], referer: http://67.222.38.115/grpc.health.v1.Health/Check [Sun Jul 12 18:15:04.267878 2026] [cgid:error] [pid 967714:tid 967958] [client 202.46.62.6:33309] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-223.html?osCsid=pqhos027cbaqsqa6hqeov85h90 [Sun Jul 12 18:15:04.280842 2026] [security2:error] [pid 979474:tid 979708] [client 202.46.62.11:10329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQuCHTrIlbXpLXvkNcJZwAAAOc"], referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-223.html?osCsid=pqhos027cbaqsqa6hqeov85h90 [Sun Jul 12 18:15:04.404799 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin.php"] [unique_id "alQuCF_56DeKknhy7sMNdAABhFc"] [Sun Jul 12 18:15:04.435290 2026] [security2:error] [pid 979474:tid 979732] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBXTrIlbXpLXvkNcJNAAAAP8"] [Sun Jul 12 18:15:04.459495 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/php.php"] [unique_id "alQuCF_56DeKknhy7sMNeQABhBg"] [Sun Jul 12 18:15:04.462151 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.ssh/id_rsa"] [unique_id "alQuCF_56DeKknhy7sMNdwABhDM"] [Sun Jul 12 18:15:04.473264 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBRMANaV5i2_BLQoe_AAAAB8"] [Sun Jul 12 18:15:04.566055 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCF_56DeKknhy7sMNcgAAATo"] [Sun Jul 12 18:15:04.589623 2026] [security2:error] [pid 967714:tid 967911] [client 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/knnatnfm.php"] [unique_id "alQuCF_56DeKknhy7sMNfQAAAUI"], referer: www.google.com [Sun Jul 12 18:15:04.625409 2026] [security2:error] [pid 960377:tid 960620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCBMANaV5i2_BLQofMgAAAHA"] [Sun Jul 12 18:15:04.643288 2026] [security2:error] [pid 979474:tid 979733] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuCHTrIlbXpLXvkNcJawAAAQA"] [Sun Jul 12 18:15:04.719769 2026] [security2:error] [pid 960377:tid 960563] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCBMANaV5i2_BLQofNgAAADc"] [Sun Jul 12 18:15:04.780620 2026] [security2:error] [pid 967714:tid 967867] [client 168.100.149.150:49258] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11505/bargainor/2308_mailable.jsp"] [unique_id "alQuCF_56DeKknhy7sMNhgAAARY"] [Sun Jul 12 18:15:04.799222 2026] [core:error] [pid 960377:tid 960597] [client 47.245.110.93:61075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:04.799275 2026] [core:error] [pid 960377:tid 960597] [client 47.245.110.93:61075] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:04.806720 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCF_56DeKknhy7sMNgAAAAVQ"] [Sun Jul 12 18:15:04.806777 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/vendor/autoload.php"] [unique_id "alQuCF_56DeKknhy7sMNhwABhGY"] [Sun Jul 12 18:15:04.883045 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:04.883737 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:04.929258 2026] [security2:error] [pid 967714:tid 967824] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "alQuCF_56DeKknhy7sMNigABYWI"], referer: www.google.com [Sun Jul 12 18:15:04.951866 2026] [security2:error] [pid 967714:tid 967726] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/administrator/.env"] [unique_id "alQuCF_56DeKknhy7sMNiAABEAA"] [Sun Jul 12 18:15:04.975420 2026] [security2:error] [pid 967714:tid 967982] [client 65.21.113.206:42330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTk2LzM4MTM5Lzk2Lzg2ODkvNmhu.asp"] [unique_id "alQuCF_56DeKknhy7sMNjgAAAYk"] [Sun Jul 12 18:15:05.039524 2026] [security2:error] [pid 960377:tid 960591] [client 50.87.253.215:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "barrozolaw.com"] [uri "/wp-cron.php"] [unique_id "alQuCRMANaV5i2_BLQofPAAAAFM"] [Sun Jul 12 18:15:05.062690 2026] [security2:error] [pid 967714:tid 967972] [client 185.242.3.25:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "barrozolaw.com"] [uri "/index.php"] [unique_id "alQuCF_56DeKknhy7sMNcAAAAX8"], referer: www.google.com [Sun Jul 12 18:15:05.072776 2026] [security2:error] [pid 960377:tid 960514] [client 20.98.140.180:54594] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "70.40.217.108"] [uri "/index.cgi"] [unique_id "alQuCRMANaV5i2_BLQofPQAAAAY"] [Sun Jul 12 18:15:05.146353 2026] [security2:error] [pid 967714:tid 967760] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-plain.php"] [unique_id "alQuCV_56DeKknhy7sMNlAABMCI"], referer: www.google.com [Sun Jul 12 18:15:05.239571 2026] [security2:error] [pid 979474:tid 979636] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCHTrIlbXpLXvkNcJdwAAAKA"] [Sun Jul 12 18:15:05.263094 2026] [security2:error] [pid 979474:tid 979737] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCHTrIlbXpLXvkNcJdgAAAQQ"] [Sun Jul 12 18:15:05.309731 2026] [security2:error] [pid 967714:tid 967910] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNkAAAAUE"] [Sun Jul 12 18:15:05.360171 2026] [security2:error] [pid 967714:tid 967737] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/miuitxam.php"] [unique_id "alQuCV_56DeKknhy7sMNnwABPAs"], referer: www.google.com [Sun Jul 12 18:15:05.361694 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/services/portainer/.env"] [unique_id "alQuCV_56DeKknhy7sMNnQABSEU"] [Sun Jul 12 18:15:05.398879 2026] [core:error] [pid 979474:tid 979651] [client 47.245.110.93:61078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:05.398935 2026] [core:error] [pid 979474:tid 979651] [client 47.245.110.93:61078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:05.429607 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNkQABc18"] [Sun Jul 12 18:15:05.515007 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo.php"] [unique_id "alQuCV_56DeKknhy7sMNoQABc0I"] [Sun Jul 12 18:15:05.530518 2026] [security2:error] [pid 979474:tid 979645] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCXTrIlbXpLXvkNcJgAAAAKk"] [Sun Jul 12 18:15:05.544660 2026] [security2:error] [pid 967714:tid 967933] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNlwAAAVg"] [Sun Jul 12 18:15:05.567182 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/settings/.env"] [unique_id "alQuCV_56DeKknhy7sMNpAABSGM"] [Sun Jul 12 18:15:05.609942 2026] [security2:error] [pid 960377:tid 960518] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuCBMANaV5i2_BLQofMAAACg0"] [Sun Jul 12 18:15:05.732896 2026] [authz_core:error] [pid 979474:tid 979709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:05.733395 2026] [authz_core:error] [pid 979474:tid 979709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:05.776526 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Assignment3/.env"] [unique_id "alQuCRMANaV5i2_BLQofTgAAS3E"] [Sun Jul 12 18:15:05.778588 2026] [security2:error] [pid 979474:tid 979632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCXTrIlbXpLXvkNcJhAAAAJw"] [Sun Jul 12 18:15:05.940875 2026] [security2:error] [pid 960377:tid 960438] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Assignment4/.env"] [unique_id "alQuCRMANaV5i2_BLQofUAAAYzs"] [Sun Jul 12 18:15:05.956129 2026] [security2:error] [pid 967714:tid 967915] [client 185.242.3.25:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "barrozolaw.com"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNngAAAUY"], referer: www.google.com [Sun Jul 12 18:15:06.024824 2026] [security2:error] [pid 967714:tid 967974] [client 216.147.125.19:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNnAAAAYE"] [Sun Jul 12 18:15:06.030130 2026] [security2:error] [pid 967714:tid 967880] [client 155.117.163.35:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQuCF_56DeKknhy7sMNfgAAASM"], referer: https://mackinstyle.com/ [Sun Jul 12 18:15:06.074644 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNrQAAASw"] [Sun Jul 12 18:15:06.102250 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/audio/.env"] [unique_id "alQuChMANaV5i2_BLQofUwAAZ0g"] [Sun Jul 12 18:15:06.233641 2026] [security2:error] [pid 967714:tid 967786] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-content/plugins/apikey/apikey.php"] [unique_id "alQuCl_56DeKknhy7sMNugABUzw"] [Sun Jul 12 18:15:06.266211 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/shared/.env"] [unique_id "alQuCl_56DeKknhy7sMNvAABSCg"] [Sun Jul 12 18:15:06.272857 2026] [security2:error] [pid 960377:tid 960544] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuCRMANaV5i2_BLQofRQAAACQ"] [Sun Jul 12 18:15:06.272953 2026] [security2:error] [pid 960377:tid 960544] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuCRMANaV5i2_BLQofRQAAACQ"] [Sun Jul 12 18:15:06.276836 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuCF_56DeKknhy7sMNdgAAATY"] [Sun Jul 12 18:15:06.283434 2026] [security2:error] [pid 960377:tid 960573] [client 65.21.113.206:42744] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTk2LzM4MTM5Lzk2Lzg2ODkvNmhu.asp"] [unique_id "alQuCRMANaV5i2_BLQofRAAAAEE"] [Sun Jul 12 18:15:06.297898 2026] [proxy:error] [pid 960377:tid 960571] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:06.298163 2026] [proxy_http:error] [pid 960377:tid 960571] [client 74.7.175.144:55372] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:06.301309 2026] [proxy:error] [pid 960377:tid 960571] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:06.301547 2026] [proxy_http:error] [pid 960377:tid 960571] [client 74.7.175.144:55372] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:06.301887 2026] [security2:error] [pid 960377:tid 960571] [client 74.7.175.144:55372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.renepico.art"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQuChMANaV5i2_BLQofVwAAAD8"] [Sun Jul 12 18:15:06.345311 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuCBMANaV5i2_BLQofNwAAABE"] [Sun Jul 12 18:15:06.372802 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/sites/default/settings.php"] [unique_id "alQuCl_56DeKknhy7sMNxgABSFQ"] [Sun Jul 12 18:15:06.372840 2026] [security2:error] [pid 979474:tid 979713] [client 74.7.230.33:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQuCnTrIlbXpLXvkNcJlgAAAOw"] [Sun Jul 12 18:15:06.378791 2026] [security2:error] [pid 960377:tid 960538] [client 74.7.230.33:39260] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQuChMANaV5i2_BLQofWgAAAB4"] [Sun Jul 12 18:15:06.412126 2026] [security2:error] [pid 979474:tid 979725] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCnTrIlbXpLXvkNcJkAAAAPg"] [Sun Jul 12 18:15:06.459797 2026] [security2:error] [pid 967714:tid 967756] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/plugins/content/apismtp/apismtp.php"] [unique_id "alQuCl_56DeKknhy7sMNzAABbx4"] [Sun Jul 12 18:15:06.531026 2026] [core:error] [pid 960377:tid 960564] [client 74.7.175.144:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:06.531068 2026] [core:error] [pid 960377:tid 960564] [client 74.7.175.144:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:06.531386 2026] [security2:error] [pid 960377:tid 960564] [client 74.7.175.144:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.renepico.art"] [uri "/___proxy_subdomain_cpcontacts/index.php"] [unique_id "alQuChMANaV5i2_BLQofYAAAADg"] [Sun Jul 12 18:15:06.533081 2026] [security2:error] [pid 960377:tid 960558] [client 74.7.175.144:56352] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "cpcontacts.renepico.art"] [uri "/___proxy_subdomain_cpcontacts/robots.txt"] [unique_id "alQuChMANaV5i2_BLQofXgAAMkE"] [Sun Jul 12 18:15:06.566854 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:06.567489 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:06.569874 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMNxwAAASU"] [Sun Jul 12 18:15:06.612172 2026] [security2:error] [pid 960377:tid 960517] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuChMANaV5i2_BLQofWAAAAAk"] [Sun Jul 12 18:15:06.617856 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuChMANaV5i2_BLQofXQAAAAU"] [Sun Jul 12 18:15:06.695316 2026] [security2:error] [pid 967714:tid 967778] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "alQuCl_56DeKknhy7sMN0wABaTQ"] [Sun Jul 12 18:15:06.736790 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMNzwABaD8"] [Sun Jul 12 18:15:06.788406 2026] [security2:error] [pid 967714:tid 967982] [client 168.100.149.230:54310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11570/bargainor/2308_epidemiology.jsp"] [unique_id "alQuCl_56DeKknhy7sMN1gAAAYk"] [Sun Jul 12 18:15:06.863247 2026] [security2:error] [pid 967714:tid 967860] [client 20.210.108.71:51457] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/PHPMailer/DSNConfigurator.php"] [unique_id "alQuCl_56DeKknhy7sMN2QAAAQ8"], referer: binance.com [Sun Jul 12 18:15:06.939183 2026] [security2:error] [pid 967714:tid 967754] [remote 185.242.3.25:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.3.242.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "alQuCl_56DeKknhy7sMN3gABcxw"] [Sun Jul 12 18:15:06.987038 2026] [fcgid:warn] [pid 979474:tid 979681] (70014)End of file found: [client 66.132.195.114:12314] mod_fcgid: can't get data from http client [Sun Jul 12 18:15:07.124908 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMN3QAAAX0"] [Sun Jul 12 18:15:07.130135 2026] [security2:error] [pid 967714:tid 967978] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMN2AAAAYU"] [Sun Jul 12 18:15:07.254429 2026] [security2:error] [pid 960377:tid 960532] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuChMANaV5i2_BLQofVQAAGEY"] [Sun Jul 12 18:15:07.301621 2026] [security2:error] [pid 967714:tid 967955] [client 57.141.18.65:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMN0gAAAW4"] [Sun Jul 12 18:15:07.435504 2026] [security2:error] [pid 979474:tid 979693] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuC3TrIlbXpLXvkNcJnwAAANg"] [Sun Jul 12 18:15:07.475349 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:07.476065 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:07.490262 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuC1_56DeKknhy7sMN5AAAATE"] [Sun Jul 12 18:15:07.633591 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuC3TrIlbXpLXvkNcJrAAAALo"] [Sun Jul 12 18:15:07.672169 2026] [security2:error] [pid 979474:tid 979663] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuC3TrIlbXpLXvkNcJqAAAALs"] [Sun Jul 12 18:15:07.767313 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/spikes/config-material-app/.env"] [unique_id "alQuC1_56DeKknhy7sMN9QABSGU"] [Sun Jul 12 18:15:07.799950 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuCxMANaV5i2_BLQoffgAAAG4"] [Sun Jul 12 18:15:07.802775 2026] [security2:error] [pid 979474:tid 979668] [client 116.179.37.102:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.miniya.jp"] [uri "/404.php"] [unique_id "alQuC3TrIlbXpLXvkNcJtAAAwHo"], referer: https://www.miniya.jp/stysty.css [Sun Jul 12 18:15:07.817045 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test/php/test.php"] [unique_id "alQuC1_56DeKknhy7sMN9gABJnM"] [Sun Jul 12 18:15:07.934212 2026] [security2:error] [pid 960377:tid 960594] [client 74.7.230.33:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.themillennialshandbook.com"] [uri "/index.php"] [unique_id "alQuChMANaV5i2_BLQofYwAAAFY"], referer: http://www.themillennialshandbook.com/robots.txt [Sun Jul 12 18:15:07.941008 2026] [security2:error] [pid 979474:tid 979628] [client 74.7.230.33:60794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQuCnTrIlbXpLXvkNcJlwAAmG0"], referer: http://www.themillennialshandbook.com/robots.txt [Sun Jul 12 18:15:08.117289 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/src/.env"] [unique_id "alQuDF_56DeKknhy7sMOAgABSG4"] [Sun Jul 12 18:15:08.137064 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuC1_56DeKknhy7sMN_AAAATo"] [Sun Jul 12 18:15:08.172528 2026] [security2:error] [pid 979474:tid 979684] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuC3TrIlbXpLXvkNcJtgAAAM8"] [Sun Jul 12 18:15:08.196876 2026] [security2:error] [pid 979474:tid 979671] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJuAAAAMM"] [Sun Jul 12 18:15:08.266483 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuCnTrIlbXpLXvkNcJlAAAAJU"] [Sun Jul 12 18:15:08.359645 2026] [security2:error] [pid 967714:tid 967745] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/i.php"] [unique_id "alQt8F_56DeKknhy7sMODgABVhM"] [Sun Jul 12 18:15:08.369944 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuCl_56DeKknhy7sMNyQAAAS0"], referer: http://67.222.38.115/hydra/.well-known/openid-configuration [Sun Jul 12 18:15:08.397489 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDBMANaV5i2_BLQofiAAAAGY"] [Sun Jul 12 18:15:08.408077 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "alQuDF_56DeKknhy7sMOEwABSGg"] [Sun Jul 12 18:15:08.431116 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "alQuDF_56DeKknhy7sMOFQABSHk"] [Sun Jul 12 18:15:08.452562 2026] [security2:error] [pid 967714:tid 967950] [client 185.117.225.76:48908] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "www.pamelaweaver.com"] [uri "/robots.txt"] [unique_id "alQuDF_56DeKknhy7sMOGAAAAWk"] [Sun Jul 12 18:15:08.457239 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:08.457911 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:08.460949 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDBMANaV5i2_BLQofhgAAAA0"] [Sun Jul 12 18:15:08.466214 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDBMANaV5i2_BLQofhwAAACQ"] [Sun Jul 12 18:15:08.489418 2026] [security2:error] [pid 960377:tid 960573] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDBMANaV5i2_BLQofiQAAAEE"] [Sun Jul 12 18:15:08.593800 2026] [security2:error] [pid 960377:tid 960514] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuCxMANaV5i2_BLQofcgAABlc"] [Sun Jul 12 18:15:08.610120 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJxgAAAMc"] [Sun Jul 12 18:15:08.669983 2026] [security2:error] [pid 979474:tid 979674] [client 149.28.225.231:55609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 231.225.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "searchhomelongisland.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQuDHTrIlbXpLXvkNcJywAAAMY"] [Sun Jul 12 18:15:08.696610 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDF_56DeKknhy7sMOFgABgns"] [Sun Jul 12 18:15:08.704019 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDF_56DeKknhy7sMOHAAAAR8"] [Sun Jul 12 18:15:08.753693 2026] [security2:error] [pid 960377:tid 960485] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/aws/.env"] [unique_id "alQuDBMANaV5i2_BLQofjgAAVWo"] [Sun Jul 12 18:15:08.774834 2026] [security2:error] [pid 979474:tid 979643] [client 168.100.149.228:48494] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11635/bargainor/2308_secque.jsp"] [unique_id "alQuDHTrIlbXpLXvkNcJ0AAAAKc"] [Sun Jul 12 18:15:08.809918 2026] [security2:error] [pid 979474:tid 979611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJyQAAAIc"] [Sun Jul 12 18:15:08.816900 2026] [security2:error] [pid 967714:tid 967940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuDF_56DeKknhy7sMOGQAAAV8"] [Sun Jul 12 18:15:08.864178 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/src/phpinfo.php"] [unique_id "alQuDF_56DeKknhy7sMOKAABSHQ"] [Sun Jul 12 18:15:08.864722 2026] [security2:error] [pid 979474:tid 979697] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJzAAAANw"] [Sun Jul 12 18:15:08.912545 2026] [security2:error] [pid 960377:tid 960398] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/azure/.env"] [unique_id "alQuDBMANaV5i2_BLQofjwAAchQ"] [Sun Jul 12 18:15:09.072175 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQuDRMANaV5i2_BLQofkwAAI3M"] [Sun Jul 12 18:15:09.218388 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDRMANaV5i2_BLQofkQAAABc"] [Sun Jul 12 18:15:09.247718 2026] [security2:error] [pid 960377:tid 960403] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/default/.env"] [unique_id "alQuDRMANaV5i2_BLQoflwAAbRk"] [Sun Jul 12 18:15:09.276905 2026] [security2:error] [pid 967714:tid 967908] [client 45.205.1.223:50942] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "centerofholistichealthcare.org"] [uri "/400.shtml"] [unique_id "alQuDV_56DeKknhy7sMONQAAAT8"] [Sun Jul 12 18:15:09.279927 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/stage/develop/phpinfo.php"] [unique_id "alQuDV_56DeKknhy7sMOOgABSEA"] [Sun Jul 12 18:15:09.280802 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/stage/crm/phpinfo.php"] [unique_id "alQuDV_56DeKknhy7sMOOQABSGE"] [Sun Jul 12 18:15:09.283236 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/stackato-pkg/.env"] [unique_id "alQuDV_56DeKknhy7sMONgABSBI"] [Sun Jul 12 18:15:09.287152 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/stats/.env"] [unique_id "alQuDV_56DeKknhy7sMOPAABSGw"] [Sun Jul 12 18:15:09.291746 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/staging/.env.bak"] [unique_id "alQuDV_56DeKknhy7sMOOwABSC8"] [Sun Jul 12 18:15:09.295404 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/storage/.env"] [unique_id "alQuDV_56DeKknhy7sMOPgABSC0"] [Sun Jul 12 18:15:09.319144 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/system-config/.env"] [unique_id "alQuDV_56DeKknhy7sMOQgABSG8"] [Sun Jul 12 18:15:09.327313 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/templates/.env"] [unique_id "alQuDV_56DeKknhy7sMORQABSFc"] [Sun Jul 12 18:15:09.331463 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/template/.env"] [unique_id "alQuDV_56DeKknhy7sMORAABSG8"] [Sun Jul 12 18:15:09.339063 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuDXTrIlbXpLXvkNcJ0gAAAM4"] [Sun Jul 12 18:15:09.350565 2026] [security2:error] [pid 967714:tid 967764] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "alQuDV_56DeKknhy7sMORwABSCY"] [Sun Jul 12 18:15:09.352364 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test_info.php"] [unique_id "alQuDV_56DeKknhy7sMOSQABSEE"] [Sun Jul 12 18:15:09.353229 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test_phpinfo5.php"] [unique_id "alQuDV_56DeKknhy7sMOSwABSDA"] [Sun Jul 12 18:15:09.354324 2026] [security2:error] [pid 967714:tid 967764] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/test_phpinfo2.php"] [unique_id "alQuDV_56DeKknhy7sMOSgABSCY"] [Sun Jul 12 18:15:09.355863 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "alQuDV_56DeKknhy7sMOSAABSDM"] [Sun Jul 12 18:15:09.408887 2026] [security2:error] [pid 960377:tid 960491] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/dev-env/.env"] [unique_id "alQuDRMANaV5i2_BLQofowAABHA"] [Sun Jul 12 18:15:09.425463 2026] [security2:error] [pid 967714:tid 967752] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/testing/.env"] [unique_id "alQuDV_56DeKknhy7sMOTQABSBo"] [Sun Jul 12 18:15:09.438910 2026] [authz_core:error] [pid 960377:tid 960629] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:09.439472 2026] [authz_core:error] [pid 960377:tid 960629] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:09.483791 2026] [security2:error] [pid 979474:tid 979708] [client 103.168.66.51:62726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/auth.php"] [unique_id "alQuDXTrIlbXpLXvkNcJ3wAAAOc"] [Sun Jul 12 18:15:09.484434 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/tests/development/iinfo.php"] [unique_id "alQuDV_56DeKknhy7sMOUQABSGY"] [Sun Jul 12 18:15:09.485590 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/tiedostot/.env"] [unique_id "alQuDV_56DeKknhy7sMOUgABSCo"] [Sun Jul 12 18:15:09.495538 2026] [security2:error] [pid 979474:tid 979677] [client 103.168.66.51:53482] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/_profiler/phpinfo"] [unique_id "alQuDXTrIlbXpLXvkNcJ4AAAAMk"] [Sun Jul 12 18:15:09.504420 2026] [security2:error] [pid 967714:tid 967979] [client 103.168.66.51:53493] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/bootstrap/cache/config.php"] [unique_id "alQuDV_56DeKknhy7sMOVAAAAYY"] [Sun Jul 12 18:15:09.579348 2026] [security2:error] [pid 960377:tid 960378] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/empty-values/.env"] [unique_id "alQuDRMANaV5i2_BLQofpgAAMAA"] [Sun Jul 12 18:15:09.695337 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config.php.txt"] [unique_id "alQuDV_56DeKknhy7sMOYgABLD4"] [Sun Jul 12 18:15:09.740576 2026] [security2:error] [pid 960377:tid 960390] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQuDRMANaV5i2_BLQofrAAAUww"] [Sun Jul 12 18:15:09.799442 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOWwAAATY"] [Sun Jul 12 18:15:09.831809 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOXwAAAUI"] [Sun Jul 12 18:15:09.884591 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOYQAAAWw"] [Sun Jul 12 18:15:09.903482 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOWAAAAVs"] [Sun Jul 12 18:15:09.916318 2026] [security2:error] [pid 960377:tid 960458] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/override-value/.env"] [unique_id "alQuDRMANaV5i2_BLQofrQAAV08"] [Sun Jul 12 18:15:10.013217 2026] [security2:error] [pid 967714:tid 967862] [client 103.168.66.51:53485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/app.php"] [unique_id "alQuDl_56DeKknhy7sMOcgAAARE"] [Sun Jul 12 18:15:10.049068 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOawABLHg"] [Sun Jul 12 18:15:10.057136 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDXTrIlbXpLXvkNcJ5AAAAP4"] [Sun Jul 12 18:15:10.085838 2026] [security2:error] [pid 960377:tid 960421] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/babel-plugin-dotenv/test/fixtures/prod-env/.env"] [unique_id "alQuDhMANaV5i2_BLQofrwAASio"] [Sun Jul 12 18:15:10.111305 2026] [security2:error] [pid 967714:tid 967973] [client 168.100.149.206:16462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11700/bargainor/2308_dislevelment.jsp"] [unique_id "alQuDl_56DeKknhy7sMOdwAAAYA"] [Sun Jul 12 18:15:10.130936 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/tool/view/phpinfo.view.php"] [unique_id "alQuDl_56DeKknhy7sMOegABSGM"] [Sun Jul 12 18:15:10.255759 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMObwAAAVI"] [Sun Jul 12 18:15:10.291422 2026] [security2:error] [pid 960377:tid 960446] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/back-end/app/.env"] [unique_id "alQuDhMANaV5i2_BLQoftgAAKUM"] [Sun Jul 12 18:15:10.368060 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDl_56DeKknhy7sMOdAAAAU4"] [Sun Jul 12 18:15:10.452981 2026] [security2:error] [pid 960377:tid 960495] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/back/.env"] [unique_id "alQuDhMANaV5i2_BLQofugAASXQ"] [Sun Jul 12 18:15:10.503551 2026] [security2:error] [pid 979474:tid 979724] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ7AAAAPc"] [Sun Jul 12 18:15:10.510354 2026] [security2:error] [pid 967714:tid 967934] [client 94.187.171.125:59680] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuDl_56DeKknhy7sMOhgAAAVk"] [Sun Jul 12 18:15:10.510582 2026] [security2:error] [pid 967714:tid 967934] [client 94.187.171.125:59680] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuDl_56DeKknhy7sMOhgAAAVk"] [Sun Jul 12 18:15:10.514708 2026] [security2:error] [pid 979474:tid 979672] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ8AAAAMQ"] [Sun Jul 12 18:15:10.531341 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:10.532156 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:10.558163 2026] [security2:error] [pid 979474:tid 979515] [remote 117.0.21.154:57812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.21.0.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "theresilientva.wnicoleneer.com"] [uri "/xmlrpc.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ-QAAzyM"] [Sun Jul 12 18:15:10.558596 2026] [security2:error] [pid 979474:tid 979684] [client 117.0.21.154:57812] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "theresilientva.wnicoleneer.com"] [uri "/xmlrpc.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ-QAAzyM"] [Sun Jul 12 18:15:10.641641 2026] [security2:error] [pid 979474:tid 979662] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ8wAAALo"] [Sun Jul 12 18:15:10.657237 2026] [security2:error] [pid 967714:tid 967933] [client 103.168.66.51:64770] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/development/.env"] [unique_id "alQuDl_56DeKknhy7sMOiQAAAVg"] [Sun Jul 12 18:15:10.844568 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/sql/config.php"] [unique_id "alQuDl_56DeKknhy7sMOjQAAAR4"] [Sun Jul 12 18:15:10.881096 2026] [security2:error] [pid 960377:tid 960616] [client 173.239.214.103:44205] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.214.239.173.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bestdestinationweddingphotographers.com"] [uri "/wp-login.php"] [unique_id "alQuDhMANaV5i2_BLQofwgAAAGw"] [Sun Jul 12 18:15:11.013819 2026] [security2:error] [pid 979474:tid 979734] [client 103.168.66.51:53460] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/p.php"] [unique_id "alQuD3TrIlbXpLXvkNcKAgAAAQE"] [Sun Jul 12 18:15:11.045694 2026] [security2:error] [pid 960377:tid 960597] [client 105.157.175.10:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQuDRMANaV5i2_BLQofqAAAAFk"], referer: https://mackinstyle.com/ [Sun Jul 12 18:15:11.049321 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/cron.php.temp"] [unique_id "alQuD1_56DeKknhy7sMOkQAAATA"] [Sun Jul 12 18:15:11.110995 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe0QAAAF4"] [Sun Jul 12 18:15:11.311836 2026] [security2:error] [pid 979474:tid 979639] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJwAAAAKM"] [Sun Jul 12 18:15:11.318878 2026] [security2:error] [pid 960377:tid 960575] [client 205.210.31.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuDhMANaV5i2_BLQofvAAAAEM"] [Sun Jul 12 18:15:11.418817 2026] [cgid:error] [pid 960377:tid 960573] [client 62.171.167.118:0] AH01265: stderr from /home3/pacareer/public_html/workshop/cgi-bin/: attempt to invoke directory as script, referer: https://67.222.42.205/cgi-bin [Sun Jul 12 18:15:11.426190 2026] [authz_core:error] [pid 979474:tid 979643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:11.426707 2026] [authz_core:error] [pid 979474:tid 979643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:11.479007 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/tools/.env"] [unique_id "alQuD1_56DeKknhy7sMOngABSH8"] [Sun Jul 12 18:15:11.565417 2026] [security2:error] [pid 979474:tid 979611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuD3TrIlbXpLXvkNcKBwAAAIc"] [Sun Jul 12 18:15:11.622826 2026] [security2:error] [pid 960377:tid 960626] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuDhMANaV5i2_BLQofvgAAdj4"] [Sun Jul 12 18:15:11.728483 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuD1_56DeKknhy7sMOowAAAWw"] [Sun Jul 12 18:15:11.781735 2026] [security2:error] [pid 960377:tid 960448] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/backend/config/.env"] [unique_id "alQuDxMANaV5i2_BLQofyQAAT0U"] [Sun Jul 12 18:15:11.804886 2026] [security2:error] [pid 967714:tid 967976] [client 57.141.18.48:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "undameta.com"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOZgAAAYM"] [Sun Jul 12 18:15:11.995472 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuD3TrIlbXpLXvkNcKDAAAALE"] [Sun Jul 12 18:15:12.014881 2026] [security2:error] [pid 967714:tid 967879] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuD1_56DeKknhy7sMOqQAAASI"] [Sun Jul 12 18:15:12.105773 2026] [security2:error] [pid 967714:tid 967749] [remote 161.97.129.228:33244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.129.97.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cieda-co.il-rda.com"] [uri "/wp-login.php"] [unique_id "alQuEF_56DeKknhy7sMOuQABLRc"] [Sun Jul 12 18:15:12.198215 2026] [security2:error] [pid 967714:tid 967907] [client 103.168.66.51:49676] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php~"] [unique_id "alQuEF_56DeKknhy7sMOvQAAAT4"] [Sun Jul 12 18:15:12.200755 2026] [authz_core:error] [pid 979474:tid 979683] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/workshop/error_log [Sun Jul 12 18:15:12.206812 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuD1_56DeKknhy7sMOtQAAASg"] [Sun Jul 12 18:15:12.212125 2026] [security2:error] [pid 979474:tid 979619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJxwAAAI8"], referer: http://67.222.38.115/if/flow/default-authentication-flow/ [Sun Jul 12 18:15:12.250428 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:12.251057 2026] [authz_core:error] [pid 960377:tid 960588] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:12.294374 2026] [security2:error] [pid 960377:tid 960512] [client 103.168.66.51:64783] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/.docker.env"] [unique_id "alQuEBMANaV5i2_BLQof0wAAAAQ"] [Sun Jul 12 18:15:12.372797 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuDF_56DeKknhy7sMOFwAAAXw"] [Sun Jul 12 18:15:12.372806 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEHTrIlbXpLXvkNcKEwAAAJU"] [Sun Jul 12 18:15:12.479570 2026] [security2:error] [pid 979474:tid 979626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEHTrIlbXpLXvkNcKFQAAAJY"] [Sun Jul 12 18:15:12.508449 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuEBMANaV5i2_BLQof0QAAAFQ"] [Sun Jul 12 18:15:12.594137 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/tools/phpinfo.php"] [unique_id "alQuEF_56DeKknhy7sMOyAABSFo"] [Sun Jul 12 18:15:12.678739 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEF_56DeKknhy7sMOxQAAAUQ"] [Sun Jul 12 18:15:12.751514 2026] [security2:error] [pid 967714:tid 967857] [client 180.194.110.126:41938] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.cryptocurrencyisking.com"] [uri "/wp-comments-post.php"] [unique_id "alQuEF_56DeKknhy7sMOygAAAQw"] [Sun Jul 12 18:15:12.760228 2026] [security2:error] [pid 979474:tid 979615] [client 168.100.149.127:58962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11765/bargainor/2308_limnoria.jsp"] [unique_id "alQuEHTrIlbXpLXvkNcKGgAAAIs"] [Sun Jul 12 18:15:12.768322 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEF_56DeKknhy7sMOyQAAATA"] [Sun Jul 12 18:15:12.817277 2026] [security2:error] [pid 979474:tid 979700] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTlfMjgxNjNfOXk5bS95XzE4MjBfOW1u.html"] [unique_id "alQuEHTrIlbXpLXvkNcKHgAAAN8"] [Sun Jul 12 18:15:12.842330 2026] [security2:error] [pid 967714:tid 967857] [client 180.194.110.126:41938] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "www.cryptocurrencyisking.com"] [uri "/wp-comments-post.php"] [unique_id "alQuEF_56DeKknhy7sMOygAAAQw"] [Sun Jul 12 18:15:12.848935 2026] [security2:error] [pid 967714:tid 967775] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/uploads/.env"] [unique_id "alQuEF_56DeKknhy7sMO0QABSDE"] [Sun Jul 12 18:15:12.860285 2026] [security2:error] [pid 960377:tid 960531] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuDxMANaV5i2_BLQofywAAF2c"] [Sun Jul 12 18:15:12.868689 2026] [security2:error] [pid 979474:tid 979614] [client 43.163.86.65:51288] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "ifpdirect.hsaconnect.com"] [uri "/400.shtml"] [unique_id "alQuEHTrIlbXpLXvkNcKIgAAAIo"] [Sun Jul 12 18:15:12.927215 2026] [security2:error] [pid 960377:tid 960549] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuEBMANaV5i2_BLQof2gAAACk"] [Sun Jul 12 18:15:12.979930 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEHTrIlbXpLXvkNcKHQAAAQA"] [Sun Jul 12 18:15:13.014393 2026] [security2:error] [pid 979474:tid 979660] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEHTrIlbXpLXvkNcKIQAAALg"] [Sun Jul 12 18:15:13.017505 2026] [security2:error] [pid 960377:tid 960461] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/backend/src/.env"] [unique_id "alQuERMANaV5i2_BLQof3gAAIVI"] [Sun Jul 12 18:15:13.035940 2026] [security2:error] [pid 979474:tid 979634] [client 20.210.108.71:53932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/PHPMailer/OAuth.php"] [unique_id "alQuEXTrIlbXpLXvkNcKJQAAAJ4"], referer: binance.com [Sun Jul 12 18:15:13.083515 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe2wAAAF8"] [Sun Jul 12 18:15:13.117120 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:13.117617 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuDF_56DeKknhy7sMOGgAAAUw"], referer: http://67.222.38.115/hydra/health/ready [Sun Jul 12 18:15:13.117900 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:13.121977 2026] [security2:error] [pid 960377:tid 960527] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe2QAAABM"] [Sun Jul 12 18:15:13.155201 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuAl_56DeKknhy7sMNCgABSBE"] [Sun Jul 12 18:15:13.171494 2026] [security2:error] [pid 960377:tid 960560] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe1QAAADQ"] [Sun Jul 12 18:15:13.178454 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/backendfinaltest/.env"] [unique_id "alQuERMANaV5i2_BLQof4wAARDE"] [Sun Jul 12 18:15:13.218091 2026] [security2:error] [pid 979474:tid 979730] [client 24.203.79.110:59839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuEXTrIlbXpLXvkNcKJgAAAP0"] [Sun Jul 12 18:15:13.218356 2026] [security2:error] [pid 979474:tid 979730] [client 24.203.79.110:59839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuEXTrIlbXpLXvkNcKJgAAAP0"] [Sun Jul 12 18:15:13.416789 2026] [security2:error] [pid 960377:tid 960528] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuERMANaV5i2_BLQof4gAAABQ"] [Sun Jul 12 18:15:13.574038 2026] [security2:error] [pid 979474:tid 979737] [client 125.167.21.72:62721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuEXTrIlbXpLXvkNcKKwAAAQQ"] [Sun Jul 12 18:15:13.579188 2026] [security2:error] [pid 979474:tid 979737] [client 125.167.21.72:62721] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuEXTrIlbXpLXvkNcKKwAAAQQ"] [Sun Jul 12 18:15:13.648871 2026] [security2:error] [pid 967714:tid 967953] [client 103.168.66.51:53468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/mail.php"] [unique_id "alQuEV_56DeKknhy7sMO3QAAAWw"] [Sun Jul 12 18:15:13.674286 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/users/develop/info.php"] [unique_id "alQuEV_56DeKknhy7sMO3gABSGs"] [Sun Jul 12 18:15:13.876807 2026] [security2:error] [pid 979474:tid 979649] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEXTrIlbXpLXvkNcKMwAAAK0"] [Sun Jul 12 18:15:13.876857 2026] [security2:error] [pid 979474:tid 979711] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuEXTrIlbXpLXvkNcKMAAAAOo"] [Sun Jul 12 18:15:13.917877 2026] [security2:error] [pid 979474:tid 979622] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuEXTrIlbXpLXvkNcKKQAAAJI"] [Sun Jul 12 18:15:13.917943 2026] [security2:error] [pid 979474:tid 979622] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuEXTrIlbXpLXvkNcKKQAAAJI"] [Sun Jul 12 18:15:13.920257 2026] [security2:error] [pid 960377:tid 960611] [client 65.21.113.206:46600] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTlfMjgxNjNfOXk5bS95XzE4MjBfOW1u.html"] [unique_id "alQuERMANaV5i2_BLQof5QAAAGc"] [Sun Jul 12 18:15:13.989146 2026] [authz_core:error] [pid 960377:tid 960533] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:13.989650 2026] [authz_core:error] [pid 960377:tid 960533] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:14.107096 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe6AAAAFg"] [Sun Jul 12 18:15:14.215145 2026] [security2:error] [pid 979474:tid 979681] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEnTrIlbXpLXvkNcKOgAAAMw"] [Sun Jul 12 18:15:14.250079 2026] [security2:error] [pid 960377:tid 960556] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuEBMANaV5i2_BLQof1QAAADA"] [Sun Jul 12 18:15:14.375080 2026] [security2:error] [pid 960377:tid 960433] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuERMANaV5i2_BLQof5wAAWTY"] [Sun Jul 12 18:15:14.377056 2026] [security2:error] [pid 967714:tid 967963] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO6QAAAXY"] [Sun Jul 12 18:15:14.557932 2026] [security2:error] [pid 967714:tid 967763] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/run/.env"] [unique_id "alQuEl_56DeKknhy7sMO8gABeCU"] [Sun Jul 12 18:15:14.718899 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO9wAAAT4"] [Sun Jul 12 18:15:14.735770 2026] [security2:error] [pid 960377:tid 960547] [client 168.100.149.103:30898] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11830/bargainor/2308_milksopism.jsp"] [unique_id "alQuEhMANaV5i2_BLQof9QAAACc"] [Sun Jul 12 18:15:14.798212 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:14.798850 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:14.845623 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO_AAAAUo"] [Sun Jul 12 18:15:14.973139 2026] [security2:error] [pid 967714:tid 967969] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO_wAAAXw"] [Sun Jul 12 18:15:15.007949 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/server-info"] [unique_id "alQuE1_56DeKknhy7sMPAQABUnc"] [Sun Jul 12 18:15:15.033116 2026] [security2:error] [pid 967714:tid 967928] [client 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuD1_56DeKknhy7sMOmwABU0o"], referer: http://www.theprogressionplaybook.com/wp/ [Sun Jul 12 18:15:15.128139 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuERMANaV5i2_BLQof4QAAABs"] [Sun Jul 12 18:15:15.140140 2026] [security2:error] [pid 979474:tid 979667] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBHTrIlbXpLXvkNcJCgAAAL8"] [Sun Jul 12 18:15:15.252962 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE3TrIlbXpLXvkNcKSAAAAP4"] [Sun Jul 12 18:15:15.308516 2026] [security2:error] [pid 967714:tid 967881] [client 77.187.170.216:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO9gAAASQ"] [Sun Jul 12 18:15:15.428191 2026] [security2:error] [pid 979474:tid 979663] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuE3TrIlbXpLXvkNcKSQAAALs"] [Sun Jul 12 18:15:15.437763 2026] [security2:error] [pid 960377:tid 960513] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuExMANaV5i2_BLQof9wAABTc"], referer: https://www.theprogressionplaybook.com/wp/ [Sun Jul 12 18:15:15.469614 2026] [security2:error] [pid 960377:tid 960631] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuEhMANaV5i2_BLQof8AAAewM"] [Sun Jul 12 18:15:15.469798 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPCAAAATA"] [Sun Jul 12 18:15:15.559970 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPCwAAAYU"] [Sun Jul 12 18:15:15.594799 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:15.595644 2026] [authz_core:error] [pid 967714:tid 967947] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:15.605376 2026] [security2:error] [pid 967714:tid 967813] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/express-app/frontend/.env"] [unique_id "alQuE1_56DeKknhy7sMPFAABO1c"] [Sun Jul 12 18:15:15.632018 2026] [security2:error] [pid 960377:tid 960410] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/base_dir/.env"] [unique_id "alQuExMANaV5i2_BLQof-gAAYSA"] [Sun Jul 12 18:15:15.667866 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/users/infophp.php"] [unique_id "alQuE1_56DeKknhy7sMPGwABSBg"] [Sun Jul 12 18:15:15.725401 2026] [security2:error] [pid 967714:tid 967925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPFQAAAVA"] [Sun Jul 12 18:15:15.790217 2026] [security2:error] [pid 960377:tid 960493] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/basic-network/.env"] [unique_id "alQuExMANaV5i2_BLQof-wAAUnI"] [Sun Jul 12 18:15:15.826815 2026] [proxy:error] [pid 960377:tid 960553] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:15.827454 2026] [proxy_http:error] [pid 960377:tid 960553] [client 74.7.244.34:33252] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:15.830782 2026] [proxy:error] [pid 960377:tid 960553] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:15.831014 2026] [proxy_http:error] [pid 960377:tid 960553] [client 74.7.244.34:33252] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:15.831335 2026] [security2:error] [pid 960377:tid 960553] [client 74.7.244.34:33252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.sheckman.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQuExMANaV5i2_BLQof_AAAAC0"] [Sun Jul 12 18:15:15.852889 2026] [security2:error] [pid 967714:tid 967959] [client 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPHAABchU"], referer: http://www.theprogressionplaybook.com/new/ [Sun Jul 12 18:15:15.864110 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPHwAAAWw"] [Sun Jul 12 18:15:15.916405 2026] [security2:error] [pid 967714:tid 967930] [client 65.21.113.253:41298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQuE1_56DeKknhy7sMPJAAAAVU"] [Sun Jul 12 18:15:15.938198 2026] [security2:error] [pid 967714:tid 967911] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "74.220.208.93"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPFwAAAUI"] [Sun Jul 12 18:15:15.950256 2026] [security2:error] [pid 960377:tid 960481] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/bgoldd/.env"] [unique_id "alQuExMANaV5i2_BLQof_gAALGY"] [Sun Jul 12 18:15:16.010216 2026] [security2:error] [pid 967714:tid 967952] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuE1_56DeKknhy7sMPIgAAAWs"] [Sun Jul 12 18:15:16.028746 2026] [security2:error] [pid 979474:tid 979665] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuE3TrIlbXpLXvkNcKTgAAAL0"] [Sun Jul 12 18:15:16.046826 2026] [security2:error] [pid 960377:tid 960537] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuExMANaV5i2_BLQof_QAAHUo"], referer: https://www.theprogressionplaybook.com/new/ [Sun Jul 12 18:15:16.118107 2026] [security2:error] [pid 979474:tid 979644] [client 168.100.149.118:59240] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11895/bargainor/2308_capnoides.jsp"] [unique_id "alQuFHTrIlbXpLXvkNcKUgAAAKg"] [Sun Jul 12 18:15:16.123245 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/bitcoind/.env"] [unique_id "alQuFBMANaV5i2_BLQogAgAAUwg"] [Sun Jul 12 18:15:16.141813 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe6gAAAHU"] [Sun Jul 12 18:15:16.153524 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBHTrIlbXpLXvkNcJGAAAAJk"] [Sun Jul 12 18:15:16.159747 2026] [security2:error] [pid 960377:tid 960614] [client 20.210.108.71:61608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/PHPMailer/OAuthTokenProvider.php"] [unique_id "alQuFBMANaV5i2_BLQogAwAAAGo"], referer: binance.com [Sun Jul 12 18:15:16.197329 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuEl_56DeKknhy7sMO8QAAAWk"] [Sun Jul 12 18:15:16.286062 2026] [security2:error] [pid 979474:tid 979645] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTlfMjgxNjNfOXk5bS95XzE4MjdfOW1u.html"] [unique_id "alQuFHTrIlbXpLXvkNcKWAAAAKk"] [Sun Jul 12 18:15:16.290684 2026] [security2:error] [pid 960377:tid 960478] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/blankon/.env"] [unique_id "alQuFBMANaV5i2_BLQogBwAANmM"] [Sun Jul 12 18:15:16.307803 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/users/laravel/info.php"] [unique_id "alQuFF_56DeKknhy7sMPKAABSGY"] [Sun Jul 12 18:15:16.377893 2026] [authz_core:error] [pid 960377:tid 960601] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/workshop/php.ini [Sun Jul 12 18:15:16.383922 2026] [security2:error] [pid 979474:tid 979701] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuEnTrIlbXpLXvkNcKPQAAAOA"], referer: http://67.222.38.115/ignite?cmd=version [Sun Jul 12 18:15:16.400472 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuEnTrIlbXpLXvkNcKPgAAAJU"], referer: http://67.222.38.115/images/json [Sun Jul 12 18:15:16.418202 2026] [security2:error] [pid 979474:tid 979727] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFHTrIlbXpLXvkNcKVgAAAPo"] [Sun Jul 12 18:15:16.420844 2026] [authz_core:error] [pid 979474:tid 979678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:16.421605 2026] [authz_core:error] [pid 979474:tid 979678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:16.426270 2026] [security2:error] [pid 967714:tid 967862] [client 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFF_56DeKknhy7sMPJwABEXY"], referer: http://www.theprogressionplaybook.com/wordpress/ [Sun Jul 12 18:15:16.431428 2026] [security2:error] [pid 967714:tid 967910] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQuFF_56DeKknhy7sMPMAAAAUE"] [Sun Jul 12 18:15:16.432844 2026] [security2:error] [pid 960377:tid 960607] [client 65.21.113.253:49310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQuFBMANaV5i2_BLQogCgAAAGM"] [Sun Jul 12 18:15:16.452089 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogBQAAAG4"] [Sun Jul 12 18:15:16.453094 2026] [security2:error] [pid 960377:tid 960423] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/blob/.env"] [unique_id "alQuFBMANaV5i2_BLQogCwAALyw"] [Sun Jul 12 18:15:16.572794 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/users/linusadmin-phpinfo.php"] [unique_id "alQuFF_56DeKknhy7sMPMwABSAo"] [Sun Jul 12 18:15:16.591063 2026] [security2:error] [pid 960377:tid 960586] [client 103.168.66.51:52492] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/autoload.php"] [unique_id "alQuFBMANaV5i2_BLQogEgAAAE4"] [Sun Jul 12 18:15:16.608877 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/users/test.php"] [unique_id "alQuFF_56DeKknhy7sMPNAABSAA"] [Sun Jul 12 18:15:16.614200 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/blog/.env"] [unique_id "alQuFBMANaV5i2_BLQogEwAAD0s"] [Sun Jul 12 18:15:16.636502 2026] [security2:error] [pid 960377:tid 960560] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogDgAANCU"], referer: https://www.theprogressionplaybook.com/wordpress/ [Sun Jul 12 18:15:16.728835 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogEQAAABE"] [Sun Jul 12 18:15:16.741566 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Web.config"] [unique_id "alQuFF_56DeKknhy7sMPPAABSk4"] [Sun Jul 12 18:15:16.773068 2026] [security2:error] [pid 960377:tid 960399] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/blogs/.env"] [unique_id "alQuFBMANaV5i2_BLQogGQAARhU"] [Sun Jul 12 18:15:16.797835 2026] [security2:error] [pid 979474:tid 979697] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFHTrIlbXpLXvkNcKZwAAANw"] [Sun Jul 12 18:15:16.909193 2026] [security2:error] [pid 967714:tid 967861] [client 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFF_56DeKknhy7sMPPQABEHA"], referer: http://www.theprogressionplaybook.com/old/ [Sun Jul 12 18:15:16.909352 2026] [security2:error] [pid 967714:tid 967967] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuFF_56DeKknhy7sMPOAAAAXo"] [Sun Jul 12 18:15:16.932886 2026] [security2:error] [pid 960377:tid 960505] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/blue/.env"] [unique_id "alQuFBMANaV5i2_BLQogHwAAAH4"] [Sun Jul 12 18:15:17.056481 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFF_56DeKknhy7sMPQQABZWM"] [Sun Jul 12 18:15:17.100087 2026] [security2:error] [pid 960377:tid 960459] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/bookchain-client/.env"] [unique_id "alQuFRMANaV5i2_BLQogIQAAMlA"] [Sun Jul 12 18:15:17.151261 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/v1/.env"] [unique_id "alQuFV_56DeKknhy7sMPSgABSEc"] [Sun Jul 12 18:15:17.197649 2026] [security2:error] [pid 960377:tid 960514] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogIAAABmk"], referer: https://www.theprogressionplaybook.com/old/ [Sun Jul 12 18:15:17.246962 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMPRAAAAT8"] [Sun Jul 12 18:15:17.351560 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:17.352222 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:17.442151 2026] [security2:error] [pid 960377:tid 960573] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogGgAAAEE"] [Sun Jul 12 18:15:17.442216 2026] [security2:error] [pid 960377:tid 960573] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuFBMANaV5i2_BLQogGgAAAEE"] [Sun Jul 12 18:15:17.463968 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.113.206:46606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTlfMjgxNjNfOXk5bS95XzE4MjdfOW1u.html"] [unique_id "alQuFBMANaV5i2_BLQogGAAAAGs"] [Sun Jul 12 18:15:17.534367 2026] [security2:error] [pid 979474:tid 979702] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuFXTrIlbXpLXvkNcKagAAAOE"] [Sun Jul 12 18:15:17.592379 2026] [security2:error] [pid 967714:tid 967886] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMPWQAAASk"] [Sun Jul 12 18:15:17.709355 2026] [security2:error] [pid 967714:tid 967792] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/aws_key.pem"] [unique_id "alQuFV_56DeKknhy7sMPWgABDUI"] [Sun Jul 12 18:15:17.878586 2026] [security2:error] [pid 967714:tid 967786] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend-api/.env"] [unique_id "alQuFV_56DeKknhy7sMPYQABGTw"] [Sun Jul 12 18:15:17.880990 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMPWwABh0g"] [Sun Jul 12 18:15:18.016366 2026] [security2:error] [pid 967714:tid 967956] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMPZAABb00"] [Sun Jul 12 18:15:18.049502 2026] [security2:error] [pid 967714:tid 967805] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/stripe.php.old"] [unique_id "alQuFl_56DeKknhy7sMPaQABdE8"] [Sun Jul 12 18:15:18.111445 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBF_56DeKknhy7sMNGQAAARs"] [Sun Jul 12 18:15:18.115041 2026] [security2:error] [pid 960377:tid 960516] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe6QAAAAg"] [Sun Jul 12 18:15:18.121958 2026] [security2:error] [pid 960377:tid 960513] [client 168.100.149.28:46898] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/11960/bargainor/2308_deft.jsp"] [unique_id "alQuFhMANaV5i2_BLQogMQAAAAU"] [Sun Jul 12 18:15:18.127463 2026] [security2:error] [pid 979474:tid 979631] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBHTrIlbXpLXvkNcJCwAAAJs"] [Sun Jul 12 18:15:18.166711 2026] [security2:error] [pid 979474:tid 979735] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBHTrIlbXpLXvkNcJDwAAALA"] [Sun Jul 12 18:15:18.166761 2026] [security2:error] [pid 979474:tid 979612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFHTrIlbXpLXvkNcKYwAAAMc"] [Sun Jul 12 18:15:18.182558 2026] [security2:error] [pid 967714:tid 967873] [client 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMPZgABHFg"], referer: http://www.theprogressionplaybook.com/blog/ [Sun Jul 12 18:15:18.184329 2026] [authz_core:error] [pid 979474:tid 979623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:18.184857 2026] [authz_core:error] [pid 979474:tid 979623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:18.193016 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFHTrIlbXpLXvkNcKYQAAAN4"] [Sun Jul 12 18:15:18.221425 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuFRMANaV5i2_BLQogKQAAIAE"] [Sun Jul 12 18:15:18.281179 2026] [security2:error] [pid 967714:tid 967965] [client 178.238.117.178:48604] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "airqmanuals.com"] [uri "/index.php"] [unique_id "alQuFF_56DeKknhy7sMPLQAAAXg"] [Sun Jul 12 18:15:18.346080 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKdQAAAJo"] [Sun Jul 12 18:15:18.379988 2026] [security2:error] [pid 960377:tid 960400] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/bootstrap/.env"] [unique_id "alQuFhMANaV5i2_BLQogNAAAHRY"] [Sun Jul 12 18:15:18.400987 2026] [security2:error] [pid 960377:tid 960590] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFhMANaV5i2_BLQogMgAAUi4"], referer: https://www.theprogressionplaybook.com/blog/ [Sun Jul 12 18:15:18.433403 2026] [security2:error] [pid 979474:tid 979700] [client 103.168.66.51:54084] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/firebase.json"] [unique_id "alQuFnTrIlbXpLXvkNcKfgAAAN8"] [Sun Jul 12 18:15:18.451828 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPegAAAWI"] [Sun Jul 12 18:15:18.488258 2026] [security2:error] [pid 967714:tid 967885] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPeQAAASg"] [Sun Jul 12 18:15:18.540839 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKfQAAAP4"] [Sun Jul 12 18:15:18.568341 2026] [security2:error] [pid 979474:tid 979618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKgAAAAI4"] [Sun Jul 12 18:15:18.587305 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "alQuFhMANaV5i2_BLQogNgAAU0c"] [Sun Jul 12 18:15:18.594543 2026] [security2:error] [pid 979474:tid 979694] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKggAAANk"] [Sun Jul 12 18:15:18.688037 2026] [security2:error] [pid 967714:tid 967806] [remote 34.162.188.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPgwABSlA"], referer: http://www.theprogressionplaybook.com/backup/ [Sun Jul 12 18:15:18.692513 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKgwAAAQA"] [Sun Jul 12 18:15:18.746723 2026] [security2:error] [pid 960377:tid 960407] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/boxes/oracle-vagrant-boxes/Kubernetes/.env"] [unique_id "alQuFhMANaV5i2_BLQogNwAAdR0"] [Sun Jul 12 18:15:18.788948 2026] [security2:error] [pid 967714:tid 967912] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPigAAAUM"] [Sun Jul 12 18:15:18.827132 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPjwAAAS4"] [Sun Jul 12 18:15:18.880820 2026] [security2:error] [pid 960377:tid 960581] [client 34.162.188.36:38876] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuFhMANaV5i2_BLQogOAAASRM"], referer: https://www.theprogressionplaybook.com/backup/ [Sun Jul 12 18:15:18.883274 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFhMANaV5i2_BLQogOQAAADk"] [Sun Jul 12 18:15:18.905394 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/boxes/oracle-vagrant-boxes/OLCNE/.env"] [unique_id "alQuFhMANaV5i2_BLQogPAAANlg"] [Sun Jul 12 18:15:18.918720 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPjAAAAVs"] [Sun Jul 12 18:15:18.934970 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPkgABaTs"] [Sun Jul 12 18:15:19.005353 2026] [authz_core:error] [pid 967714:tid 967856] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:19.005878 2026] [authz_core:error] [pid 967714:tid 967856] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:19.014266 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKiAAAAJg"] [Sun Jul 12 18:15:19.063440 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/bucoffea/.env"] [unique_id "alQuFxMANaV5i2_BLQogPgAAXS0"] [Sun Jul 12 18:15:19.153757 2026] [security2:error] [pid 979474:tid 979730] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKigAAAP0"] [Sun Jul 12 18:15:19.187442 2026] [security2:error] [pid 979474:tid 979657] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTlfMzEwNDdfOWRsby9kXzQxN19sbzA=.html"] [unique_id "alQuF3TrIlbXpLXvkNcKjAAAALU"] [Sun Jul 12 18:15:19.294367 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF1_56DeKknhy7sMPnQAAAU8"] [Sun Jul 12 18:15:19.409403 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF1_56DeKknhy7sMPoAAAAXU"] [Sun Jul 12 18:15:19.420972 2026] [security2:error] [pid 979474:tid 979629] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuF3TrIlbXpLXvkNcKiwAAAJk"] [Sun Jul 12 18:15:19.473347 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF1_56DeKknhy7sMPogAAATg"] [Sun Jul 12 18:15:19.794895 2026] [authz_core:error] [pid 967714:tid 967900] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:19.795382 2026] [authz_core:error] [pid 967714:tid 967900] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:19.826880 2026] [security2:error] [pid 979474:tid 979613] [client 103.168.66.51:55940] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/build/.env"] [unique_id "alQuF3TrIlbXpLXvkNcKlgAAAIk"] [Sun Jul 12 18:15:19.827623 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuF1_56DeKknhy7sMPqAAAAVU"] [Sun Jul 12 18:15:19.943352 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF1_56DeKknhy7sMPsAAAAVw"] [Sun Jul 12 18:15:19.955006 2026] [security2:error] [pid 979474:tid 979673] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF3TrIlbXpLXvkNcKlwAAAMU"] [Sun Jul 12 18:15:19.972966 2026] [security2:error] [pid 960377:tid 960607] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuFxMANaV5i2_BLQogQQAAY3c"] [Sun Jul 12 18:15:19.995419 2026] [fcgid:warn] [pid 979474:tid 979640] (70014)End of file found: [client 18.116.101.220:21502] mod_fcgid: can't get data from http client [Sun Jul 12 18:15:20.024231 2026] [security2:error] [pid 967714:tid 967880] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/register.php.temp"] [unique_id "alQuGF_56DeKknhy7sMPuAAAASM"] [Sun Jul 12 18:15:20.087249 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBF_56DeKknhy7sMNEwAAAW0"] [Sun Jul 12 18:15:20.113491 2026] [security2:error] [pid 979474:tid 979625] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuF3TrIlbXpLXvkNcKkgAAAJU"] [Sun Jul 12 18:15:20.113566 2026] [security2:error] [pid 979474:tid 979625] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuF3TrIlbXpLXvkNcKkgAAAJU"] [Sun Jul 12 18:15:20.123555 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe8wAAAGU"] [Sun Jul 12 18:15:20.123877 2026] [security2:error] [pid 967714:tid 967886] [client 65.21.113.206:46612] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTlfMzEwNDdfOWRsby9kXzQxN19sbzA=.html"] [unique_id "alQuF1_56DeKknhy7sMPqgAAASk"] [Sun Jul 12 18:15:20.125486 2026] [security2:error] [pid 979474:tid 979621] [client 103.168.66.51:63142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/includes/config.php"] [unique_id "alQuGHTrIlbXpLXvkNcKngAAAJE"] [Sun Jul 12 18:15:20.126967 2026] [security2:error] [pid 979474:tid 979649] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuF3TrIlbXpLXvkNcKmQAAAK0"] [Sun Jul 12 18:15:20.140982 2026] [security2:error] [pid 960377:tid 960511] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuCRMANaV5i2_BLQofSQAAAAM"] [Sun Jul 12 18:15:20.200747 2026] [security2:error] [pid 967714:tid 967742] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test-network/.env"] [unique_id "alQuGF_56DeKknhy7sMPugABQRA"] [Sun Jul 12 18:15:20.257847 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFl_56DeKknhy7sMPcgAAATw"] [Sun Jul 12 18:15:20.284961 2026] [security2:error] [pid 979474:tid 979693] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKdgAAANg"] [Sun Jul 12 18:15:20.353955 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMPvQAAAT0"] [Sun Jul 12 18:15:20.360009 2026] [security2:error] [pid 979474:tid 979677] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKdwAAAMk"] [Sun Jul 12 18:15:20.405995 2026] [security2:error] [pid 979474:tid 979616] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuFnTrIlbXpLXvkNcKdAAAAIw"] [Sun Jul 12 18:15:20.495758 2026] [security2:error] [pid 979474:tid 979627] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGHTrIlbXpLXvkNcKoAAAAJc"] [Sun Jul 12 18:15:20.610139 2026] [authz_core:error] [pid 967714:tid 967958] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:20.610923 2026] [authz_core:error] [pid 967714:tid 967958] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:20.621418 2026] [security2:error] [pid 979474:tid 979681] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuGHTrIlbXpLXvkNcKoQAAAMw"] [Sun Jul 12 18:15:20.676956 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMP0wAAAVM"] [Sun Jul 12 18:15:20.766489 2026] [security2:error] [pid 979474:tid 979735] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGHTrIlbXpLXvkNcKpAAAAQI"] [Sun Jul 12 18:15:20.794926 2026] [security2:error] [pid 967714:tid 967727] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/server/id_dsa"] [unique_id "alQuGF_56DeKknhy7sMP1wABIAE"] [Sun Jul 12 18:15:20.806843 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMP1gABW1M"] [Sun Jul 12 18:15:20.825006 2026] [security2:error] [pid 967714:tid 967924] [client 168.100.149.153:56260] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12025/bargainor/2308_did.jsp"] [unique_id "alQuGF_56DeKknhy7sMP2gAAAU8"] [Sun Jul 12 18:15:20.938335 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGHTrIlbXpLXvkNcKpgAAALw"] [Sun Jul 12 18:15:20.943705 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuGBMANaV5i2_BLQogQwAATk0"] [Sun Jul 12 18:15:20.971035 2026] [security2:error] [pid 967714:tid 967763] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/blog-app/server/.env"] [unique_id "alQuGF_56DeKknhy7sMP3AABdSU"] [Sun Jul 12 18:15:21.105549 2026] [security2:error] [pid 960377:tid 960387] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/build/.env"] [unique_id "alQuGRMANaV5i2_BLQogRgAAEQk"] [Sun Jul 12 18:15:21.122392 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNsgAAASE"] [Sun Jul 12 18:15:21.141323 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMP3QAAAVE"] [Sun Jul 12 18:15:21.193045 2026] [security2:error] [pid 967714:tid 967856] [client 94.187.171.125:60321] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuGV_56DeKknhy7sMP4QAAAQs"] [Sun Jul 12 18:15:21.193247 2026] [security2:error] [pid 967714:tid 967856] [client 94.187.171.125:60321] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuGV_56DeKknhy7sMP4QAAAQs"] [Sun Jul 12 18:15:21.246551 2026] [security2:error] [pid 967714:tid 967950] [client 103.168.66.51:54166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/panel/.env"] [unique_id "alQuGV_56DeKknhy7sMP4gAAAWk"] [Sun Jul 12 18:15:21.391096 2026] [security2:error] [pid 979474:tid 979663] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuGXTrIlbXpLXvkNcKrgAAALs"] [Sun Jul 12 18:15:21.421900 2026] [authz_core:error] [pid 967714:tid 967858] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:21.422571 2026] [authz_core:error] [pid 967714:tid 967858] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:21.767101 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGV_56DeKknhy7sMP9QAAATk"] [Sun Jul 12 18:15:21.795654 2026] [security2:error] [pid 967714:tid 967892] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuGV_56DeKknhy7sMP8QAAAS8"] [Sun Jul 12 18:15:21.987922 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuGRMANaV5i2_BLQogRwAASAI"] [Sun Jul 12 18:15:22.094003 2026] [security2:error] [pid 979474:tid 979714] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuB3TrIlbXpLXvkNcJWwAAAO0"] [Sun Jul 12 18:15:22.096157 2026] [security2:error] [pid 960377:tid 960564] [client 103.168.66.51:53461] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/web.config"] [unique_id "alQuGhMANaV5i2_BLQogTwAAADg"] [Sun Jul 12 18:15:22.096238 2026] [security2:error] [pid 979474:tid 979628] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTliLzM2NDg3LzliLzg1NDgvYnZl.asp"] [unique_id "alQuGnTrIlbXpLXvkNcKugAAAJg"] [Sun Jul 12 18:15:22.096485 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuBBMANaV5i2_BLQoe4wAAABI"] [Sun Jul 12 18:15:22.104832 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGXTrIlbXpLXvkNcKuQAAALo"] [Sun Jul 12 18:15:22.107975 2026] [security2:error] [pid 960377:tid 960596] [client 168.100.149.17:35830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12090/bargainor/2308_delphian.jsp"] [unique_id "alQuGhMANaV5i2_BLQogUAAAAFg"] [Sun Jul 12 18:15:22.114303 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuCV_56DeKknhy7sMNqAABSF0"] [Sun Jul 12 18:15:22.132577 2026] [security2:error] [pid 967714:tid 967859] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMOQwAAAQ4"] [Sun Jul 12 18:15:22.137242 2026] [security2:error] [pid 967714:tid 967912] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMPyAAAAUM"] [Sun Jul 12 18:15:22.145995 2026] [security2:error] [pid 979474:tid 979723] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDHTrIlbXpLXvkNcJygAAAPY"] [Sun Jul 12 18:15:22.156374 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGF_56DeKknhy7sMPzgAAATA"] [Sun Jul 12 18:15:22.257796 2026] [security2:error] [pid 967714:tid 967866] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuGV_56DeKknhy7sMQAgAAARU"] [Sun Jul 12 18:15:22.263414 2026] [authz_core:error] [pid 979474:tid 979688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:22.263988 2026] [authz_core:error] [pid 979474:tid 979688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:22.406356 2026] [security2:error] [pid 967714:tid 967927] [client 103.168.66.51:59333] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/core/configuration.php"] [unique_id "alQuGl_56DeKknhy7sMQDAAAAVI"] [Sun Jul 12 18:15:22.652582 2026] [security2:error] [pid 979474:tid 979701] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuGnTrIlbXpLXvkNcKvwAAAOA"] [Sun Jul 12 18:15:22.697825 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGl_56DeKknhy7sMQFAAAAUU"] [Sun Jul 12 18:15:22.761101 2026] [security2:error] [pid 967714:tid 967925] [client 103.168.66.51:64971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/local.php"] [unique_id "alQuGl_56DeKknhy7sMQHAAAAVA"] [Sun Jul 12 18:15:22.787966 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGl_56DeKknhy7sMQGwAAAWU"] [Sun Jul 12 18:15:22.825276 2026] [security2:error] [pid 967714:tid 967773] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/vault/test/deploy.sql"] [unique_id "alQuGl_56DeKknhy7sMQIAABYy8"] [Sun Jul 12 18:15:23.006956 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuGhMANaV5i2_BLQogUQAAWTU"] [Sun Jul 12 18:15:23.007287 2026] [security2:error] [pid 967714:tid 967957] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuGl_56DeKknhy7sMQGAAAAXA"] [Sun Jul 12 18:15:23.007384 2026] [security2:error] [pid 967714:tid 967957] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuGl_56DeKknhy7sMQGAAAAXA"] [Sun Jul 12 18:15:23.008049 2026] [security2:error] [pid 967714:tid 967888] [client 65.21.113.206:42326] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTliLzM2NDg3LzliLzg1NDgvYnZl.asp"] [unique_id "alQuGl_56DeKknhy7sMQFQAAASs"] [Sun Jul 12 18:15:23.057187 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:23.057785 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:23.090035 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuC1_56DeKknhy7sMN8QAAAYE"] [Sun Jul 12 18:15:23.120703 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/web.config"] [unique_id "alQuFV_56DeKknhy7sMQKQABSFI"] [Sun Jul 12 18:15:23.128892 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/web/services/phpinfo.php"] [unique_id "alQuFV_56DeKknhy7sMQLAABSBQ"] [Sun Jul 12 18:15:23.131042 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/web/.env.bak"] [unique_id "alQuFV_56DeKknhy7sMQKgABSFI"] [Sun Jul 12 18:15:23.132207 2026] [security2:error] [pid 960377:tid 960515] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDRMANaV5i2_BLQofoAAAAAc"] [Sun Jul 12 18:15:23.134372 2026] [security2:error] [pid 967714:tid 967758] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/webstatic/.env"] [unique_id "alQuFV_56DeKknhy7sMQMAABSCA"] [Sun Jul 12 18:15:23.134921 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/whturk/.env"] [unique_id "alQuFl_56DeKknhy7sMQMwABSDY"] [Sun Jul 12 18:15:23.135254 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config-backup.php"] [unique_id "alQuFl_56DeKknhy7sMQNgABSEQ"] [Sun Jul 12 18:15:23.135425 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/well-known/.env"] [unique_id "alQuFV_56DeKknhy7sMQMgABSGY"] [Sun Jul 12 18:15:23.141331 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/webui/.env"] [unique_id "alQuFV_56DeKknhy7sMQMQABSFI"] [Sun Jul 12 18:15:23.142288 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/windows/tests/9.3.x/.env"] [unique_id "alQuFl_56DeKknhy7sMQNAABSCo"] [Sun Jul 12 18:15:23.143016 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/webdav/phpinfo.php"] [unique_id "alQuFV_56DeKknhy7sMQLwABSBQ"] [Sun Jul 12 18:15:23.144744 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/wp-admin/.env"] [unique_id "alQuFl_56DeKknhy7sMQNQABSDM"] [Sun Jul 12 18:15:23.200999 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDV_56DeKknhy7sMORgAAAYg"] [Sun Jul 12 18:15:23.295048 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogWwAAAGs"] [Sun Jul 12 18:15:23.352304 2026] [security2:error] [pid 967714:tid 967874] [client 125.167.21.72:63176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuG1_56DeKknhy7sMQSAAAAR0"] [Sun Jul 12 18:15:23.352650 2026] [security2:error] [pid 967714:tid 967874] [client 125.167.21.72:63176] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuG1_56DeKknhy7sMQSAAAAR0"] [Sun Jul 12 18:15:23.360912 2026] [security2:error] [pid 967714:tid 967864] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQJQAAARM"] [Sun Jul 12 18:15:23.437837 2026] [security2:error] [pid 979474:tid 979725] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcK0AAAAPg"] [Sun Jul 12 18:15:23.537336 2026] [security2:error] [pid 960377:tid 960605] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogagAAAGE"] [Sun Jul 12 18:15:23.700312 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQTwAAAUw"] [Sun Jul 12 18:15:23.754472 2026] [security2:error] [pid 967714:tid 967934] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQTAAAAVk"] [Sun Jul 12 18:15:23.783374 2026] [security2:error] [pid 979474:tid 979704] [client 49.183.172.170:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcK0gAAAOM"] [Sun Jul 12 18:15:23.802348 2026] [security2:error] [pid 967714:tid 967909] [client 24.203.79.110:60354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuG1_56DeKknhy7sMQVgAAAUA"] [Sun Jul 12 18:15:23.803030 2026] [security2:error] [pid 967714:tid 967909] [client 24.203.79.110:60354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuG1_56DeKknhy7sMQVgAAAUA"] [Sun Jul 12 18:15:23.803261 2026] [security2:error] [pid 960377:tid 960589] [client 149.28.47.172:65170] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.47.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "singularstudiosnj.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQuGxMANaV5i2_BLQogbQAAAFE"] [Sun Jul 12 18:15:23.889718 2026] [security2:error] [pid 979474:tid 979681] [client 20.210.108.71:50080] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/PHPMailer/POP3.php"] [unique_id "alQuG3TrIlbXpLXvkNcK2wAAAMw"], referer: binance.com [Sun Jul 12 18:15:23.898977 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQUgAAAYM"] [Sun Jul 12 18:15:23.926513 2026] [security2:error] [pid 967714:tid 967766] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/customer/.env"] [unique_id "alQuG1_56DeKknhy7sMQWAABSyg"] [Sun Jul 12 18:15:23.935993 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:23.936473 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:24.109760 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogYQAADm0"] [Sun Jul 12 18:15:24.111809 2026] [security2:error] [pid 960377:tid 960542] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDRMANaV5i2_BLQofogAAACo"] [Sun Jul 12 18:15:24.125139 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ7wAAANA"] [Sun Jul 12 18:15:24.127359 2026] [security2:error] [pid 967714:tid 967805] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/docs/web.config"] [unique_id "alQuHF_56DeKknhy7sMQWgABFU8"] [Sun Jul 12 18:15:24.202179 2026] [security2:error] [pid 960377:tid 960617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGhMANaV5i2_BLQogUwAAAG0"] [Sun Jul 12 18:15:24.280946 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGnTrIlbXpLXvkNcKvAAAAJk"] [Sun Jul 12 18:15:24.298029 2026] [security2:error] [pid 979474:tid 979699] [client 103.168.66.51:64926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/filesystems.php"] [unique_id "alQuHHTrIlbXpLXvkNcK4wAAAN4"] [Sun Jul 12 18:15:24.325529 2026] [security2:error] [pid 967714:tid 967959] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHF_56DeKknhy7sMQXgAAAXI"] [Sun Jul 12 18:15:24.517228 2026] [security2:error] [pid 979474:tid 979630] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuHHTrIlbXpLXvkNcK5QAAAJo"] [Sun Jul 12 18:15:24.682249 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHF_56DeKknhy7sMQeQAAAR8"] [Sun Jul 12 18:15:24.706642 2026] [authz_core:error] [pid 967714:tid 967877] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:24.707130 2026] [authz_core:error] [pid 967714:tid 967877] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:24.728906 2026] [security2:error] [pid 960377:tid 960594] [client 168.100.149.127:43814] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12155/bargainor/2308_anisodactyli.jsp"] [unique_id "alQuHBMANaV5i2_BLQogdgAAAFY"] [Sun Jul 12 18:15:24.881252 2026] [security2:error] [pid 979474:tid 979635] [client 103.168.66.51:49165] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/application-staging.properties"] [unique_id "alQuHHTrIlbXpLXvkNcK6gAAAJ8"] [Sun Jul 12 18:15:24.941581 2026] [security2:error] [pid 979474:tid 979619] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuHHTrIlbXpLXvkNcK5wAAAI8"] [Sun Jul 12 18:15:24.994001 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogcwAAOVY"] [Sun Jul 12 18:15:25.035597 2026] [security2:error] [pid 960377:tid 960618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogdwAAAG4"] [Sun Jul 12 18:15:25.072128 2026] [security2:error] [pid 979474:tid 979659] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDXTrIlbXpLXvkNcJ2wAAALc"] [Sun Jul 12 18:15:25.088781 2026] [security2:error] [pid 979474:tid 979669] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDnTrIlbXpLXvkNcJ7gAAAME"] [Sun Jul 12 18:15:25.103124 2026] [security2:error] [pid 979474:tid 979655] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuDXTrIlbXpLXvkNcJ2gAAALM"] [Sun Jul 12 18:15:25.110944 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHF_56DeKknhy7sMQjgAAASc"] [Sun Jul 12 18:15:25.114717 2026] [security2:error] [pid 967714:tid 967779] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ingress/.env"] [unique_id "alQuHV_56DeKknhy7sMQkQABEzU"] [Sun Jul 12 18:15:25.136145 2026] [security2:error] [pid 979474:tid 979645] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGnTrIlbXpLXvkNcKvQAAAKk"] [Sun Jul 12 18:15:25.206610 2026] [security2:error] [pid 960377:tid 960587] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuGhMANaV5i2_BLQogVgAAAE8"] [Sun Jul 12 18:15:25.271437 2026] [security2:error] [pid 967714:tid 967936] [client 175.158.203.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQuHF_56DeKknhy7sMQfQAAAVs"], referer: https://www.youtube.com/ [Sun Jul 12 18:15:25.282781 2026] [security2:error] [pid 979474:tid 979666] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHXTrIlbXpLXvkNcK7gAAAL4"] [Sun Jul 12 18:15:25.440861 2026] [security2:error] [pid 979474:tid 979610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHXTrIlbXpLXvkNcK9gAAAIY"] [Sun Jul 12 18:15:25.545562 2026] [authz_core:error] [pid 979474:tid 979736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:25.546085 2026] [authz_core:error] [pid 979474:tid 979736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:25.553792 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuHRMANaV5i2_BLQoggAAAADQ"] [Sun Jul 12 18:15:25.564902 2026] [security2:error] [pid 967714:tid 967886] [client 103.168.66.51:54166] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.env.dist"] [unique_id "alQuHV_56DeKknhy7sMQngAAASk"] [Sun Jul 12 18:15:25.725407 2026] [security2:error] [pid 967714:tid 967785] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "alQuHV_56DeKknhy7sMQoAABJTs"] [Sun Jul 12 18:15:25.753977 2026] [security2:error] [pid 979474:tid 979672] [client 105.157.210.95:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuHXTrIlbXpLXvkNcK8gAAAMQ"] [Sun Jul 12 18:15:25.859213 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHV_56DeKknhy7sMQowAAAWI"] [Sun Jul 12 18:15:25.899003 2026] [security2:error] [pid 967714:tid 967740] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.git/credentials.bak"] [unique_id "alQuHV_56DeKknhy7sMQpQABZw4"] [Sun Jul 12 18:15:25.956367 2026] [security2:error] [pid 960377:tid 960621] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuHRMANaV5i2_BLQogfAAAcRI"] [Sun Jul 12 18:15:26.153085 2026] [security2:error] [pid 960377:tid 960558] [client 103.168.66.51:49935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/info.php"] [unique_id "alQuHhMANaV5i2_BLQoghwAAADI"] [Sun Jul 12 18:15:26.203378 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHV_56DeKknhy7sMQpgABPGo"] [Sun Jul 12 18:15:26.314011 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHl_56DeKknhy7sMQrgAAARs"] [Sun Jul 12 18:15:26.371012 2026] [authz_core:error] [pid 960377:tid 960545] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:26.371767 2026] [authz_core:error] [pid 960377:tid 960545] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:26.382923 2026] [security2:error] [pid 979474:tid 979728] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTliLzM2NDg3LzliLzk2NTAvYnZl.asp"] [unique_id "alQuHnTrIlbXpLXvkNcLAgAAAPs"] [Sun Jul 12 18:15:26.390938 2026] [security2:error] [pid 967714:tid 967927] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuHl_56DeKknhy7sMQrwAAAVI"] [Sun Jul 12 18:15:26.528900 2026] [security2:error] [pid 960377:tid 960611] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHhMANaV5i2_BLQogjQAAAGc"] [Sun Jul 12 18:15:26.566523 2026] [security2:error] [pid 967714:tid 967836] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/home/admin/.ssh/aws_key.pem"] [unique_id "alQuHl_56DeKknhy7sMQtwABV24"] [Sun Jul 12 18:15:27.012111 2026] [security2:error] [pid 960377:tid 960600] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuHhMANaV5i2_BLQoghgAAXF4"] [Sun Jul 12 18:15:27.025983 2026] [security2:error] [pid 960377:tid 960569] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuHhMANaV5i2_BLQogjwAAAD0"] [Sun Jul 12 18:15:27.027610 2026] [security2:error] [pid 960377:tid 960577] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHhMANaV5i2_BLQoglAAAAEU"] [Sun Jul 12 18:15:27.178754 2026] [security2:error] [pid 960377:tid 960503] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cardea/backend/.env"] [unique_id "alQuHxMANaV5i2_BLQognAAAKHw"] [Sun Jul 12 18:15:27.235224 2026] [authz_core:error] [pid 967714:tid 967898] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:27.236102 2026] [authz_core:error] [pid 967714:tid 967898] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:27.337970 2026] [security2:error] [pid 960377:tid 960496] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cdw-backend/.env"] [unique_id "alQuHxMANaV5i2_BLQogngAAJ3U"] [Sun Jul 12 18:15:27.351621 2026] [security2:error] [pid 979474:tid 979687] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuH3TrIlbXpLXvkNcLCgAAANI"] [Sun Jul 12 18:15:27.400028 2026] [security2:error] [pid 960377:tid 960573] [client 57.141.18.121:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuHhMANaV5i2_BLQogmAAAAEE"] [Sun Jul 12 18:15:27.498107 2026] [security2:error] [pid 960377:tid 960483] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cgi-bin/.env"] [unique_id "alQuHxMANaV5i2_BLQogowAAKmg"] [Sun Jul 12 18:15:27.522174 2026] [security2:error] [pid 979474:tid 979682] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuH3TrIlbXpLXvkNcLCwAAAM0"] [Sun Jul 12 18:15:27.523290 2026] [security2:error] [pid 979474:tid 979631] [client 103.168.66.51:58516] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/services.php"] [unique_id "alQuH3TrIlbXpLXvkNcLEQAAAJs"] [Sun Jul 12 18:15:27.582474 2026] [security2:error] [pid 979474:tid 979706] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuHnTrIlbXpLXvkNcLCAAAAOU"] [Sun Jul 12 18:15:27.582529 2026] [security2:error] [pid 979474:tid 979706] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuHnTrIlbXpLXvkNcLCAAAAOU"] [Sun Jul 12 18:15:27.584332 2026] [security2:error] [pid 960377:tid 960628] [client 65.21.113.206:42332] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTliLzM2NDg3LzliLzk2NTAvYnZl.asp"] [unique_id "alQuHhMANaV5i2_BLQogkgAAAHg"] [Sun Jul 12 18:15:27.634317 2026] [security2:error] [pid 960377:tid 960546] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHxMANaV5i2_BLQogogAAACY"] [Sun Jul 12 18:15:27.664889 2026] [security2:error] [pid 960377:tid 960534] [client 57.141.18.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hangar34liverpool.co.uk"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogZwAAABo"] [Sun Jul 12 18:15:27.683610 2026] [security2:error] [pid 960377:tid 960542] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuHxMANaV5i2_BLQogpAAAACI"] [Sun Jul 12 18:15:27.696881 2026] [security2:error] [pid 967714:tid 967772] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/s3.php.bak"] [unique_id "alQuH1_56DeKknhy7sMQyQABRC4"] [Sun Jul 12 18:15:27.724820 2026] [proxy:error] [pid 967714:tid 967896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:27.725017 2026] [proxy_http:error] [pid 967714:tid 967896] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:27.727340 2026] [proxy:error] [pid 967714:tid 967896] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:27.727512 2026] [proxy_http:error] [pid 967714:tid 967896] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:27.808289 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuH1_56DeKknhy7sMQyAAAARk"] [Sun Jul 12 18:15:27.809837 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/db/structure.sql"] [unique_id "alQuH1_56DeKknhy7sMQzAABaRA"] [Sun Jul 12 18:15:27.866096 2026] [security2:error] [pid 967714:tid 967756] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/lib64/.env"] [unique_id "alQuH1_56DeKknhy7sMQ0AABaB4"] [Sun Jul 12 18:15:27.883032 2026] [security2:error] [pid 967714:tid 967902] [client 216.244.66.250:35370] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "rapports-minoritaires.net"] [uri "/robots.txt"] [unique_id "alQuH1_56DeKknhy7sMQ1AAAATk"] [Sun Jul 12 18:15:27.883233 2026] [security2:error] [pid 967714:tid 967902] [client 216.244.66.250:35370] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "rapports-minoritaires.net"] [uri "/robots.txt"] [unique_id "alQuH1_56DeKknhy7sMQ1AAAATk"] [Sun Jul 12 18:15:27.980899 2026] [security2:error] [pid 967714:tid 967904] [client 103.168.66.51:59450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/parameters.php"] [unique_id "alQuH1_56DeKknhy7sMQ2gAAATs"] [Sun Jul 12 18:15:28.069173 2026] [authz_core:error] [pid 979474:tid 979685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:28.069742 2026] [authz_core:error] [pid 979474:tid 979685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:28.076695 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuH1_56DeKknhy7sMQ2QAAAV0"] [Sun Jul 12 18:15:28.144410 2026] [authz_core:error] [pid 979474:tid 979623] [client 62.171.167.118:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/workshop/.user.ini [Sun Jul 12 18:15:28.289836 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIHTrIlbXpLXvkNcLGwAAAPM"] [Sun Jul 12 18:15:28.440684 2026] [security2:error] [pid 967714:tid 967965] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuIF_56DeKknhy7sMQ3gAAAXg"] [Sun Jul 12 18:15:28.507439 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIBMANaV5i2_BLQogrgAAAAw"] [Sun Jul 12 18:15:28.529053 2026] [security2:error] [pid 960377:tid 960537] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuHxMANaV5i2_BLQogpQAAHVE"] [Sun Jul 12 18:15:28.614771 2026] [security2:error] [pid 967714:tid 967801] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/log.sql"] [unique_id "alQuIF_56DeKknhy7sMQ5AABQUs"] [Sun Jul 12 18:15:28.618961 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIF_56DeKknhy7sMQ4gABL3k"] [Sun Jul 12 18:15:28.674337 2026] [security2:error] [pid 979474:tid 979715] [client 103.168.66.51:52450] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/html.tar.gz"] [unique_id "alQuIHTrIlbXpLXvkNcLIAAAAO4"] [Sun Jul 12 18:15:28.689036 2026] [security2:error] [pid 960377:tid 960437] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch2-mytodo/.env"] [unique_id "alQuIBMANaV5i2_BLQogsAAAczo"] [Sun Jul 12 18:15:28.711836 2026] [proxy:error] [pid 960377:tid 960587] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:28.711994 2026] [proxy_http:error] [pid 960377:tid 960587] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:28.714480 2026] [proxy:error] [pid 960377:tid 960587] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:28.714713 2026] [proxy_http:error] [pid 960377:tid 960587] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:28.768542 2026] [security2:error] [pid 960377:tid 960523] [client 168.100.149.192:34684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12285/bargainor/2308_mediator.jsp"] [unique_id "alQuIBMANaV5i2_BLQogswAAAA8"] [Sun Jul 12 18:15:28.849646 2026] [security2:error] [pid 960377:tid 960404] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch6-mytodo/.env"] [unique_id "alQuIBMANaV5i2_BLQogtQAAAxo"] [Sun Jul 12 18:15:28.889171 2026] [security2:error] [pid 979474:tid 979700] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIHTrIlbXpLXvkNcLIQAAAN8"] [Sun Jul 12 18:15:28.960687 2026] [authz_core:error] [pid 979474:tid 979619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:28.961281 2026] [authz_core:error] [pid 979474:tid 979619] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:29.010415 2026] [security2:error] [pid 960377:tid 960487] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch6a-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQogtgAAS2w"] [Sun Jul 12 18:15:29.014266 2026] [security2:error] [pid 979474:tid 979659] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIHTrIlbXpLXvkNcLKwAAALc"] [Sun Jul 12 18:15:29.032696 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuIBMANaV5i2_BLQogtAAAAC8"] [Sun Jul 12 18:15:29.075422 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIHTrIlbXpLXvkNcLLgAAALs"] [Sun Jul 12 18:15:29.161285 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIF_56DeKknhy7sMQ6gABQCU"] [Sun Jul 12 18:15:29.171730 2026] [security2:error] [pid 960377:tid 960430] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch7-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQoguAAAETM"] [Sun Jul 12 18:15:29.211032 2026] [security2:error] [pid 967714:tid 967751] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/private/sample.bak"] [unique_id "alQuIV_56DeKknhy7sMQ7AABLhk"] [Sun Jul 12 18:15:29.220568 2026] [security2:error] [pid 979474:tid 979726] [client 103.133.216.219:40784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.216.133.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-login.php"] [unique_id "alQuIXTrIlbXpLXvkNcLMAAAAPk"], referer: https://www.neighborspacebaltimorecounty.org/2021/03/30/new-grants-will-strengthen-partners-build-fundraising-capacity/ [Sun Jul 12 18:15:29.301486 2026] [proxy:error] [pid 979474:tid 979658] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:29.301737 2026] [proxy_http:error] [pid 979474:tid 979658] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:29.304567 2026] [proxy:error] [pid 979474:tid 979658] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:29.304974 2026] [proxy_http:error] [pid 979474:tid 979658] [client 2a04:c300:400::8b:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:29.330873 2026] [security2:error] [pid 960377:tid 960452] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch7a-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQogugAAQ0k"] [Sun Jul 12 18:15:29.489337 2026] [security2:error] [pid 960377:tid 960401] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch8-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQogvAAANBc"] [Sun Jul 12 18:15:29.638398 2026] [security2:error] [pid 979474:tid 979729] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuIXTrIlbXpLXvkNcLOQAAAPw"] [Sun Jul 12 18:15:29.648235 2026] [security2:error] [pid 960377:tid 960506] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch8a-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQogvwAAFH8"] [Sun Jul 12 18:15:29.765717 2026] [security2:error] [pid 979474:tid 979649] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YTltOXowLzg0NzEvOW0vNDgyNS9t"] [unique_id "alQuIXTrIlbXpLXvkNcLQgAAAK0"] [Sun Jul 12 18:15:29.782943 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:29.783511 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:29.810507 2026] [security2:error] [pid 967714:tid 967730] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/login/web.config"] [unique_id "alQuIV_56DeKknhy7sMQ8wABEAQ"] [Sun Jul 12 18:15:29.812776 2026] [security2:error] [pid 960377:tid 960469] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ch8b-mytodo/.env"] [unique_id "alQuIRMANaV5i2_BLQogwgAAZlo"] [Sun Jul 12 18:15:29.845468 2026] [proxy:error] [pid 979474:tid 979704] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:29.845656 2026] [proxy_http:error] [pid 979474:tid 979704] [client 2a09:bac1:7680:460::5e:74:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:29.847821 2026] [proxy:error] [pid 979474:tid 979704] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:15:29.847996 2026] [proxy_http:error] [pid 979474:tid 979704] [client 2a09:bac1:7680:460::5e:74:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:15:29.964572 2026] [security2:error] [pid 979474:tid 979670] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIXTrIlbXpLXvkNcLSQAAAMI"] [Sun Jul 12 18:15:29.970988 2026] [security2:error] [pid 960377:tid 960417] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Chai/.env"] [unique_id "alQuIRMANaV5i2_BLQogxAAAEiY"] [Sun Jul 12 18:15:29.993759 2026] [security2:error] [pid 967714:tid 967914] [client 168.100.149.209:47038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12220/bargainor/2308_birefraction.jsp"] [unique_id "alQuIV_56DeKknhy7sMQ9wAAAUU"] [Sun Jul 12 18:15:30.136360 2026] [security2:error] [pid 967714:tid 967863] [client 168.100.149.123:45266] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12350/bargainor/2308_gurian.jsp"] [unique_id "alQuIl_56DeKknhy7sMQ-gAAARI"] [Sun Jul 12 18:15:30.141911 2026] [security2:error] [pid 960377:tid 960393] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/challenge/.env"] [unique_id "alQuIhMANaV5i2_BLQogyAAAfg8"] [Sun Jul 12 18:15:30.165134 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuBF_56DeKknhy7sMQYQABVmA"] [Sun Jul 12 18:15:30.279941 2026] [security2:error] [pid 967714:tid 967916] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMQ-QABR1E"] [Sun Jul 12 18:15:30.301860 2026] [security2:error] [pid 960377:tid 960499] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/challenges/.env"] [unique_id "alQuIhMANaV5i2_BLQogywAAHng"] [Sun Jul 12 18:15:30.353965 2026] [security2:error] [pid 960377:tid 960621] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuIhMANaV5i2_BLQogxgAAAHE"] [Sun Jul 12 18:15:30.460195 2026] [security2:error] [pid 960377:tid 960474] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/charts/liveObjects/.env"] [unique_id "alQuIhMANaV5i2_BLQogzQAAP18"] [Sun Jul 12 18:15:30.551919 2026] [authz_core:error] [pid 979474:tid 979661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:30.552405 2026] [authz_core:error] [pid 979474:tid 979661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:30.581380 2026] [security2:error] [pid 979474:tid 979642] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuInTrIlbXpLXvkNcLUQAAAKY"] [Sun Jul 12 18:15:30.618478 2026] [security2:error] [pid 960377:tid 960497] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/chat-client/.env"] [unique_id "alQuIhMANaV5i2_BLQogzwAAGHY"] [Sun Jul 12 18:15:30.765498 2026] [security2:error] [pid 960377:tid 960535] [client 103.168.66.51:57772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/queue.php"] [unique_id "alQuIhMANaV5i2_BLQog0AAAABs"] [Sun Jul 12 18:15:30.773907 2026] [security2:error] [pid 967714:tid 967899] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMQ_AAAATY"] [Sun Jul 12 18:15:30.773976 2026] [security2:error] [pid 967714:tid 967899] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMQ_AAAATY"] [Sun Jul 12 18:15:30.775571 2026] [security2:error] [pid 960377:tid 960514] [client 65.21.113.206:42338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YTltOXowLzg0NzEvOW0vNDgyNS9t"] [unique_id "alQuIhMANaV5i2_BLQogyQAAAAY"] [Sun Jul 12 18:15:30.780873 2026] [security2:error] [pid 960377:tid 960436] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/chiminey/.env"] [unique_id "alQuIhMANaV5i2_BLQog0gAAKzk"] [Sun Jul 12 18:15:30.823448 2026] [security2:error] [pid 979474:tid 979633] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuInTrIlbXpLXvkNcLUwAAAJ0"] [Sun Jul 12 18:15:30.837778 2026] [security2:error] [pid 967714:tid 967858] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMRCQAAAQ0"] [Sun Jul 12 18:15:30.972450 2026] [security2:error] [pid 979474:tid 979618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuInTrIlbXpLXvkNcLWQAAAI4"] [Sun Jul 12 18:15:30.995448 2026] [security2:error] [pid 967714:tid 967769] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/Passportjs/.env"] [unique_id "alQuIl_56DeKknhy7sMREAABhys"] [Sun Jul 12 18:15:31.125513 2026] [security2:error] [pid 967714:tid 967871] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHF_56DeKknhy7sMQaAAAARo"] [Sun Jul 12 18:15:31.137155 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogcQAAACk"] [Sun Jul 12 18:15:31.173035 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogZgAAAHs"] [Sun Jul 12 18:15:31.182597 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHV_56DeKknhy7sMQlQAAAXk"] [Sun Jul 12 18:15:31.213056 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMREQABExI"] [Sun Jul 12 18:15:31.213906 2026] [security2:error] [pid 979474:tid 979615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHHTrIlbXpLXvkNcK5AAAAIs"] [Sun Jul 12 18:15:31.250023 2026] [security2:error] [pid 960377:tid 960531] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogcAAAABc"] [Sun Jul 12 18:15:31.278090 2026] [security2:error] [pid 979474:tid 979638] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHXTrIlbXpLXvkNcK8wAAAKI"] [Sun Jul 12 18:15:31.287287 2026] [security2:error] [pid 960377:tid 960510] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogcgAAAAI"] [Sun Jul 12 18:15:31.295031 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMREwABE2w"] [Sun Jul 12 18:15:31.305722 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMRFQABEw0"] [Sun Jul 12 18:15:31.328921 2026] [security2:error] [pid 960377:tid 960593] [client 103.168.66.51:55481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/database.php"] [unique_id "alQuIxMANaV5i2_BLQog1AAAAFU"] [Sun Jul 12 18:15:31.427275 2026] [authz_core:error] [pid 979474:tid 979703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:31.428187 2026] [authz_core:error] [pid 979474:tid 979703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:31.431122 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMRGwABEy0"] [Sun Jul 12 18:15:31.441061 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMRIAABEy8"] [Sun Jul 12 18:15:31.481727 2026] [security2:error] [pid 979474:tid 979708] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuI3TrIlbXpLXvkNcLXQAAAOc"] [Sun Jul 12 18:15:31.597796 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMRIwABJSY"] [Sun Jul 12 18:15:31.660502 2026] [security2:error] [pid 967714:tid 967726] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rollup.config.mjs.bak"] [unique_id "alQuI1_56DeKknhy7sMRKQABdwA"] [Sun Jul 12 18:15:31.852952 2026] [security2:error] [pid 967714:tid 967891] [client 50.87.253.215:52390] ModSecurity: Warning. Matched phrase "Needle" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "camelsandneedles.com"] [uri "/wp-cron.php"] [unique_id "alQuI1_56DeKknhy7sMRKwAAAS4"] [Sun Jul 12 18:15:31.886290 2026] [security2:error] [pid 960377:tid 960472] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuIhMANaV5i2_BLQog0wAAeV0"] [Sun Jul 12 18:15:31.952938 2026] [security2:error] [pid 967714:tid 967878] [client 94.187.171.125:60833] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuI1_56DeKknhy7sMRMAAAASE"] [Sun Jul 12 18:15:31.953191 2026] [security2:error] [pid 967714:tid 967878] [client 94.187.171.125:60833] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuI1_56DeKknhy7sMRMAAAASE"] [Sun Jul 12 18:15:32.044712 2026] [security2:error] [pid 960377:tid 960440] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ci/.env"] [unique_id "alQuJBMANaV5i2_BLQog2AAAaT0"] [Sun Jul 12 18:15:32.133937 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQQQAAAQw"] [Sun Jul 12 18:15:32.150949 2026] [security2:error] [pid 960377:tid 960591] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuHBMANaV5i2_BLQogbwAAAFM"] [Sun Jul 12 18:15:32.182352 2026] [security2:error] [pid 979474:tid 979665] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuI3TrIlbXpLXvkNcLZQAAAL0"] [Sun Jul 12 18:15:32.190808 2026] [security2:error] [pid 979474:tid 979672] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcKyQAAAKw"] [Sun Jul 12 18:15:32.207261 2026] [security2:error] [pid 960377:tid 960480] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/client-app/.env"] [unique_id "alQuJBMANaV5i2_BLQog2QAAQWU"] [Sun Jul 12 18:15:32.319058 2026] [security2:error] [pid 960377:tid 960524] [client 84.75.148.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJBMANaV5i2_BLQog1wAAABA"] [Sun Jul 12 18:15:32.329062 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:32.329798 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:32.347959 2026] [security2:error] [pid 979474:tid 979688] [client 103.168.66.51:49610] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/phpinfo.php"] [unique_id "alQuJHTrIlbXpLXvkNcLbQAAANM"] [Sun Jul 12 18:15:32.366595 2026] [security2:error] [pid 960377:tid 960382] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/client/mutual-fund-app/.env"] [unique_id "alQuJBMANaV5i2_BLQog2wAAawQ"] [Sun Jul 12 18:15:32.374359 2026] [security2:error] [pid 967714:tid 967788] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/data/debug.bak"] [unique_id "alQuJF_56DeKknhy7sMRPgABWj4"] [Sun Jul 12 18:15:32.412112 2026] [security2:error] [pid 979474:tid 979717] [client 103.133.216.219:40800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-login.php"] [unique_id "alQuJHTrIlbXpLXvkNcLZgAAAPA"], referer: https://www.neighborspacebaltimorecounty.org/2021/03/30/new-grants-will-strengthen-partners-build-fundraising-capacity/ [Sun Jul 12 18:15:32.525089 2026] [security2:error] [pid 960377:tid 960476] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/client/src/.env"] [unique_id "alQuJBMANaV5i2_BLQog3AAAE2E"] [Sun Jul 12 18:15:32.562196 2026] [security2:error] [pid 979474:tid 979651] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJHTrIlbXpLXvkNcLbwAAAK8"] [Sun Jul 12 18:15:32.683656 2026] [security2:error] [pid 967714:tid 967924] [client 103.168.66.51:51788] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/frontend_dev.php/$"] [unique_id "alQuJF_56DeKknhy7sMRTgAAAU8"] [Sun Jul 12 18:15:32.685272 2026] [security2:error] [pid 960377:tid 960445] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ClientApp/.env"] [unique_id "alQuJBMANaV5i2_BLQog3gAAZEI"] [Sun Jul 12 18:15:32.718913 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJF_56DeKknhy7sMRRwAAARc"] [Sun Jul 12 18:15:32.751436 2026] [security2:error] [pid 979474:tid 979656] [client 103.168.66.51:49449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/storage/configuration.php"] [unique_id "alQuJHTrIlbXpLXvkNcLcgAAALQ"] [Sun Jul 12 18:15:32.794519 2026] [security2:error] [pid 960377:tid 960550] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin.php.2"] [unique_id "alQuJBMANaV5i2_BLQog4AAAACo"] [Sun Jul 12 18:15:32.822860 2026] [security2:error] [pid 967714:tid 967856] [client 201.182.50.31:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuJF_56DeKknhy7sMRPwAAAQs"] [Sun Jul 12 18:15:32.826090 2026] [security2:error] [pid 967714:tid 967960] [client 168.100.149.246:59782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12415/bargainor/2308_monkey.jsp"] [unique_id "alQuJF_56DeKknhy7sMRVQAAAXM"] [Sun Jul 12 18:15:32.848546 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJF_56DeKknhy7sMRUgAAASc"] [Sun Jul 12 18:15:32.850242 2026] [security2:error] [pid 960377:tid 960395] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/clld_dir/.env"] [unique_id "alQuJBMANaV5i2_BLQog4QAADhE"] [Sun Jul 12 18:15:32.883739 2026] [security2:error] [pid 967714:tid 967951] [client 103.168.66.51:62025] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/web.zip"] [unique_id "alQuJF_56DeKknhy7sMRWAAAAWo"] [Sun Jul 12 18:15:32.967000 2026] [security2:error] [pid 967714:tid 967787] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/%2f/backend/.env"] [unique_id "alQuJF_56DeKknhy7sMRXQABdT0"] [Sun Jul 12 18:15:33.003083 2026] [security2:error] [pid 979474:tid 979684] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJHTrIlbXpLXvkNcLdwAAAM8"] [Sun Jul 12 18:15:33.010425 2026] [security2:error] [pid 960377:tid 960391] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cloud/.env"] [unique_id "alQuJRMANaV5i2_BLQog4gAAUg0"] [Sun Jul 12 18:15:33.029256 2026] [security2:error] [pid 960377:tid 960628] [client 103.168.66.51:63116] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/tsconfig.json"] [unique_id "alQuJRMANaV5i2_BLQog5AAAAHg"] [Sun Jul 12 18:15:33.096114 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuGxMANaV5i2_BLQogZQAAAAU"] [Sun Jul 12 18:15:33.117999 2026] [authz_core:error] [pid 979474:tid 979620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:33.119426 2026] [authz_core:error] [pid 979474:tid 979620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:33.134815 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuI3TrIlbXpLXvkNcLYAAAAQA"] [Sun Jul 12 18:15:33.135021 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcKzwAAAOE"] [Sun Jul 12 18:15:33.138122 2026] [security2:error] [pid 967714:tid 967873] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJF_56DeKknhy7sMRXAABHBU"] [Sun Jul 12 18:15:33.147120 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQRAAAAVQ"] [Sun Jul 12 18:15:33.153172 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJRMANaV5i2_BLQog4wAAAAs"] [Sun Jul 12 18:15:33.153386 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.local.php"] [unique_id "alQuGF_56DeKknhy7sMRawABSCo"] [Sun Jul 12 18:15:33.154512 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuI1_56DeKknhy7sMRIQAAAVk"] [Sun Jul 12 18:15:33.159125 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php-backup"] [unique_id "alQuGF_56DeKknhy7sMRbAABSCo"] [Sun Jul 12 18:15:33.159562 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.aws"] [unique_id "alQuGF_56DeKknhy7sMRbQABSCo"] [Sun Jul 12 18:15:33.159946 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.err"] [unique_id "alQuGV_56DeKknhy7sMRbwABSCo"] [Sun Jul 12 18:15:33.160019 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.dist"] [unique_id "alQuGV_56DeKknhy7sMRbgABSCk"] [Sun Jul 12 18:15:33.160253 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.40.58"] [uri "/wp-config.php.tar"] [unique_id "alQuGV_56DeKknhy7sMRcAABSCo"] [Sun Jul 12 18:15:33.161693 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2020"] [unique_id "alQuHF_56DeKknhy7sMRdgABSHw"] [Sun Jul 12 18:15:33.162072 2026] [security2:error] [pid 967714:tid 967762] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php3"] [unique_id "alQuGl_56DeKknhy7sMRcQABSCQ"] [Sun Jul 12 18:15:33.162692 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2010"] [unique_id "alQuG1_56DeKknhy7sMRcgABSCk"] [Sun Jul 12 18:15:33.162834 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2023"] [unique_id "alQuHl_56DeKknhy7sMRewABSAI"] [Sun Jul 12 18:15:33.163151 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2014"] [unique_id "alQuHF_56DeKknhy7sMRcwABSGc"] [Sun Jul 12 18:15:33.163524 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2024"] [unique_id "alQuIF_56DeKknhy7sMRfAABSD8"] [Sun Jul 12 18:15:33.163905 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2021"] [unique_id "alQuHV_56DeKknhy7sMRdwABSH0"] [Sun Jul 12 18:15:33.164145 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/~cats/php/phpinfo.php"] [unique_id "alQuIl_56DeKknhy7sMRgAABSAI"] [Sun Jul 12 18:15:33.164290 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2025"] [unique_id "alQuIF_56DeKknhy7sMRfQABSHw"] [Sun Jul 12 18:15:33.165022 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2016"] [unique_id "alQuHF_56DeKknhy7sMRdAABSAw"] [Sun Jul 12 18:15:33.165198 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2017"] [unique_id "alQuHF_56DeKknhy7sMRdQABSCo"] [Sun Jul 12 18:15:33.165311 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.40.58"] [uri "/www/.env"] [unique_id "alQuIl_56DeKknhy7sMRfwABSCk"] [Sun Jul 12 18:15:33.168654 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:51036] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.40.58"] [uri "/wp-config.php_old2022"] [unique_id "alQuHl_56DeKknhy7sMReQABSGQ"] [Sun Jul 12 18:15:33.169575 2026] [security2:error] [pid 967714:tid 967811] [remote 184.168.124.4:48400] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQuJV_56DeKknhy7sMRigABYFU"] [Sun Jul 12 18:15:33.170877 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cmd/testdata/expected/dot_env/.env"] [unique_id "alQuJRMANaV5i2_BLQog6QAAdX0"] [Sun Jul 12 18:15:33.169887 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuFV_56DeKknhy7sMQKwABSCk"] [Sun Jul 12 18:15:33.211651 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQQgAAAXQ"] [Sun Jul 12 18:15:33.219968 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcKywAAALE"] [Sun Jul 12 18:15:33.241313 2026] [security2:error] [pid 979474:tid 979624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuHHTrIlbXpLXvkNcK4QAAAJQ"] [Sun Jul 12 18:15:33.265436 2026] [security2:error] [pid 967714:tid 967953] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG1_56DeKknhy7sMQQwAAAWw"] [Sun Jul 12 18:15:33.267788 2026] [security2:error] [pid 979474:tid 979686] [client 103.168.66.51:60375] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/settings.php"] [unique_id "alQuJXTrIlbXpLXvkNcLhgAAANE"] [Sun Jul 12 18:15:33.284860 2026] [security2:error] [pid 979474:tid 979621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuG3TrIlbXpLXvkNcKzgAAAJE"] [Sun Jul 12 18:15:33.339498 2026] [security2:error] [pid 960377:tid 960457] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/code/api/.env"] [unique_id "alQuJRMANaV5i2_BLQog9QAADE4"] [Sun Jul 12 18:15:33.369690 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJRMANaV5i2_BLQog6gAAAEk"] [Sun Jul 12 18:15:33.500064 2026] [security2:error] [pid 960377:tid 960438] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/code/web/.env"] [unique_id "alQuJRMANaV5i2_BLQog9gAADzs"] [Sun Jul 12 18:15:33.517704 2026] [security2:error] [pid 979474:tid 979631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLewAAAJs"] [Sun Jul 12 18:15:33.597941 2026] [security2:error] [pid 967714:tid 967921] [client 125.167.21.72:61695] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuJV_56DeKknhy7sMRpAAAAUw"] [Sun Jul 12 18:15:33.598233 2026] [security2:error] [pid 967714:tid 967921] [client 125.167.21.72:61695] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuJV_56DeKknhy7sMRpAAAAUw"] [Sun Jul 12 18:15:33.651832 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLjQAAAI0"] [Sun Jul 12 18:15:33.658595 2026] [security2:error] [pid 960377:tid 960486] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/CodeGolf.Web/ClientApp/.env"] [unique_id "alQuJRMANaV5i2_BLQog9wAAfWs"] [Sun Jul 12 18:15:33.816611 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/codenames-frontend/.env"] [unique_id "alQuJRMANaV5i2_BLQog-QAAPkg"] [Sun Jul 12 18:15:33.833805 2026] [security2:error] [pid 967714:tid 967908] [client 64.176.198.37:52022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tgoffineart.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQuJV_56DeKknhy7sMRtAAAAT8"] [Sun Jul 12 18:15:33.912154 2026] [security2:error] [pid 967714:tid 967868] [client 103.168.66.51:54735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/include/config.php"] [unique_id "alQuJV_56DeKknhy7sMRtwAAARc"] [Sun Jul 12 18:15:33.927116 2026] [security2:error] [pid 967714:tid 967944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRqQAAAWM"] [Sun Jul 12 18:15:33.944947 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRsAABPBY"] [Sun Jul 12 18:15:33.949381 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:33.949886 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:33.975608 2026] [security2:error] [pid 960377:tid 960477] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/collab-connect-web-application/server/.env"] [unique_id "alQuJRMANaV5i2_BLQog-gAAS2I"] [Sun Jul 12 18:15:33.991123 2026] [security2:error] [pid 967714:tid 967916] [client 103.168.66.51:54684] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/var/SymfonyRequirements.php"] [unique_id "alQuJV_56DeKknhy7sMRuwAAAUc"] [Sun Jul 12 18:15:34.142770 2026] [security2:error] [pid 960377:tid 960444] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/collected_static/.env"] [unique_id "alQuJhMANaV5i2_BLQog_AAAXkE"] [Sun Jul 12 18:15:34.158502 2026] [security2:error] [pid 979474:tid 979618] [client 65.21.113.206:41572] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0tNjMyNy9tbTQvNTQyMS1tNHJp"] [unique_id "alQuJnTrIlbXpLXvkNcLjwAAAI4"] [Sun Jul 12 18:15:34.160534 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app/.env"] [unique_id "alQuJl_56DeKknhy7sMRwAABah0"] [Sun Jul 12 18:15:34.292223 2026] [lsapi:error] [pid 979474:tid 979655] [client 185.177.72.12:0] [host mail.idreamofjeannemarie.com] Error receiving response header (lsphp is killed?): ReceiveResponseHeader: receive pkg hdr failed: ReceivePkgHdr: nothing to read from backend (LVE ID 1149; user ID 1149), check http://docs.cloudlinux.com/mod_lsapi_troubleshooting.html [Sun Jul 12 18:15:34.312963 2026] [security2:error] [pid 960377:tid 960490] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/community/.env"] [unique_id "alQuJhMANaV5i2_BLQog_gAAd28"] [Sun Jul 12 18:15:34.395257 2026] [security2:error] [pid 967714:tid 967963] [client 24.203.79.110:60870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuJl_56DeKknhy7sMRxAAAAXY"] [Sun Jul 12 18:15:34.395533 2026] [security2:error] [pid 967714:tid 967963] [client 24.203.79.110:60870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuJl_56DeKknhy7sMRxAAAAXY"] [Sun Jul 12 18:15:34.476800 2026] [security2:error] [pid 960377:tid 960468] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/compose/.env"] [unique_id "alQuJhMANaV5i2_BLQohAAAAFFk"] [Sun Jul 12 18:15:34.588699 2026] [security2:error] [pid 967714:tid 967912] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJl_56DeKknhy7sMRxwAAAUM"] [Sun Jul 12 18:15:34.597905 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/laravel/.env"] [unique_id "alQuJl_56DeKknhy7sMR0wABCkM"] [Sun Jul 12 18:15:34.715598 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:34.716249 2026] [authz_core:error] [pid 967714:tid 967974] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:34.723292 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJl_56DeKknhy7sMRygAAAUo"] [Sun Jul 12 18:15:34.802615 2026] [security2:error] [pid 967714:tid 967941] [client 168.100.149.203:60348] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12480/bargainor/2308_impeccance.jsp"] [unique_id "alQuJl_56DeKknhy7sMR1wAAAWA"] [Sun Jul 12 18:15:34.826923 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/api/.env"] [unique_id "alQuJl_56DeKknhy7sMR2gABTAM"] [Sun Jul 12 18:15:35.174691 2026] [security2:error] [pid 979474:tid 979638] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJnTrIlbXpLXvkNcLlgAAAKI"] [Sun Jul 12 18:15:35.262281 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRkgAAAYI"] [Sun Jul 12 18:15:35.315074 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJ1_56DeKknhy7sMR4AAAATU"] [Sun Jul 12 18:15:35.324735 2026] [security2:error] [pid 967714:tid 967910] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRjgAAAUE"] [Sun Jul 12 18:15:35.427507 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJ1_56DeKknhy7sMR5QAAAU8"] [Sun Jul 12 18:15:35.450289 2026] [security2:error] [pid 960377:tid 960610] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuJhMANaV5i2_BLQohAgAAZkY"] [Sun Jul 12 18:15:35.514431 2026] [authz_core:error] [pid 960377:tid 960634] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:35.514956 2026] [authz_core:error] [pid 960377:tid 960634] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:35.623881 2026] [security2:error] [pid 979474:tid 979667] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLngAAAL8"] [Sun Jul 12 18:15:35.840712 2026] [proxy:warn] [pid 960377:tid 960514] [client 18.116.101.220:60036] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:15:35.840784 2026] [proxy:error] [pid 960377:tid 960514] (70014)End of file found: [client 18.116.101.220:60036] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 18.116.101.220 () [Sun Jul 12 18:15:35.939367 2026] [security2:error] [pid 979474:tid 979730] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLoAAAAP0"] [Sun Jul 12 18:15:36.105699 2026] [security2:error] [pid 979474:tid 979709] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLowAAAOg"] [Sun Jul 12 18:15:36.206022 2026] [security2:error] [pid 967714:tid 967920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRjAAAAUs"] [Sun Jul 12 18:15:36.316010 2026] [security2:error] [pid 979474:tid 979734] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKHTrIlbXpLXvkNcLrwAAAQE"] [Sun Jul 12 18:15:36.370306 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:36.370863 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:36.434936 2026] [security2:error] [pid 967714:tid 967807] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.env.bak"] [unique_id "alQuKF_56DeKknhy7sMSAwABdVE"] [Sun Jul 12 18:15:36.500028 2026] [security2:error] [pid 967714:tid 967890] [client 129.146.36.135:38024] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.hsaconnect.com"] [uri "/"] [unique_id "alQuKF_56DeKknhy7sMSBAAAAS0"] [Sun Jul 12 18:15:36.500250 2026] [security2:error] [pid 967714:tid 967890] [client 129.146.36.135:38024] ModSecurity: Warning. Matched phrase "Scrapy" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.hsaconnect.com"] [uri "/"] [unique_id "alQuKF_56DeKknhy7sMSBAAAAS0"] [Sun Jul 12 18:15:36.504300 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuJxMANaV5i2_BLQohDQAAHjI"] [Sun Jul 12 18:15:36.545027 2026] [security2:error] [pid 960377:tid 960631] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKBMANaV5i2_BLQohFwAAAHs"] [Sun Jul 12 18:15:36.578776 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/info.php"] [unique_id "alQuKF_56DeKknhy7sMSBQABdwg"] [Sun Jul 12 18:15:36.613444 2026] [security2:error] [pid 960377:tid 960569] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKBMANaV5i2_BLQohFgAAAD0"] [Sun Jul 12 18:15:36.806117 2026] [security2:error] [pid 979474:tid 979627] [client 168.100.149.226:58330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12545/bargainor/2308_gunz.jsp"] [unique_id "alQuKHTrIlbXpLXvkNcLvAAAAJc"] [Sun Jul 12 18:15:36.846272 2026] [security2:error] [pid 967714:tid 967802] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/administrator/config.bak"] [unique_id "alQuKF_56DeKknhy7sMSCQABUkw"] [Sun Jul 12 18:15:36.890843 2026] [security2:error] [pid 960377:tid 960593] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKBMANaV5i2_BLQohGwAAAFU"] [Sun Jul 12 18:15:36.919217 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKF_56DeKknhy7sMSCAABdF0"] [Sun Jul 12 18:15:37.005527 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKBMANaV5i2_BLQohHAAAACc"] [Sun Jul 12 18:15:37.018585 2026] [security2:error] [pid 967714:tid 967745] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/mongodb/.env"] [unique_id "alQuKV_56DeKknhy7sMSDAABQxM"] [Sun Jul 12 18:15:37.129694 2026] [security2:error] [pid 967714:tid 967937] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRlgAAAXo"] [Sun Jul 12 18:15:37.238723 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:37.239232 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:37.273430 2026] [security2:error] [pid 967714:tid 967921] [client 35.245.146.49:55764] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "thenewyorkpizzacompany.co"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQuKV_56DeKknhy7sMSFQAAAUw"] [Sun Jul 12 18:15:37.347156 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKV_56DeKknhy7sMSFAAAAWA"] [Sun Jul 12 18:15:37.476566 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKRMANaV5i2_BLQohJQAAABA"] [Sun Jul 12 18:15:37.536903 2026] [security2:error] [pid 960377:tid 960635] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuKBMANaV5i2_BLQohGQAAfwU"] [Sun Jul 12 18:15:37.566446 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKV_56DeKknhy7sMSFgABEBI"] [Sun Jul 12 18:15:37.633099 2026] [access_compat:error] [pid 960377:tid 960540] [client 193.142.147.92:39927] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php [Sun Jul 12 18:15:37.849002 2026] [security2:error] [pid 967714:tid 967930] [client 103.168.66.51:58139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/env.php"] [unique_id "alQuKV_56DeKknhy7sMSJQAAAVU"] [Sun Jul 12 18:15:37.909101 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKV_56DeKknhy7sMSHwAAAUk"] [Sun Jul 12 18:15:37.910890 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKXTrIlbXpLXvkNcLxwAAAM4"] [Sun Jul 12 18:15:37.936313 2026] [security2:error] [pid 960377:tid 960553] [client 102.98.126.26:63687] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "taramoore.org"] [uri "/.env"] [unique_id "alQuKRMANaV5i2_BLQohLAAAAC0"] [Sun Jul 12 18:15:38.003549 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:38.004070 2026] [authz_core:error] [pid 960377:tid 960576] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:38.063189 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKV_56DeKknhy7sMSKAABLBg"] [Sun Jul 12 18:15:38.175237 2026] [security2:error] [pid 967714:tid 967870] [client 168.100.149.165:60664] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12610/bargainor/2308_monadically.jsp"] [unique_id "alQuKl_56DeKknhy7sMSMAAAARk"] [Sun Jul 12 18:15:38.175719 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/db.php"] [unique_id "alQuKl_56DeKknhy7sMSMQABZS8"] [Sun Jul 12 18:15:38.388517 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKl_56DeKknhy7sMSKwABZWw"] [Sun Jul 12 18:15:38.418525 2026] [security2:error] [pid 979474:tid 979635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKnTrIlbXpLXvkNcL0wAAAJ8"] [Sun Jul 12 18:15:38.452989 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKl_56DeKknhy7sMSNQAAAXk"] [Sun Jul 12 18:15:38.510862 2026] [security2:error] [pid 979474:tid 979660] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKnTrIlbXpLXvkNcL0gAAALg"] [Sun Jul 12 18:15:38.599501 2026] [security2:error] [pid 960377:tid 960628] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuKRMANaV5i2_BLQohKgAAeAs"] [Sun Jul 12 18:15:38.626066 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/main.php"] [unique_id "alQuKl_56DeKknhy7sMSOgABbHY"] [Sun Jul 12 18:15:38.688531 2026] [security2:error] [pid 967714:tid 967764] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/backup/env.sql"] [unique_id "alQuKl_56DeKknhy7sMSPAABhiY"] [Sun Jul 12 18:15:38.740442 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/params.php"] [unique_id "alQuKl_56DeKknhy7sMSQwABVE4"] [Sun Jul 12 18:15:38.836256 2026] [access_compat:error] [pid 967714:tid 967901] [client 193.142.147.92:40784] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php [Sun Jul 12 18:15:38.888694 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:38.889427 2026] [authz_core:error] [pid 967714:tid 967961] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:38.912318 2026] [security2:error] [pid 979474:tid 979559] [remote 57.141.18.87:61148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/J9ekl0m_tvkuT"] [unique_id "alQuKnTrIlbXpLXvkNcL2wAAnE8"] [Sun Jul 12 18:15:38.913802 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app_dev.php/_profiler/phpinfo"] [unique_id "alQuKl_56DeKknhy7sMSTAABHDY"] [Sun Jul 12 18:15:38.973029 2026] [security2:error] [pid 960377:tid 960559] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuKhMANaV5i2_BLQohMQAAADM"] [Sun Jul 12 18:15:39.018610 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/etc/env.php"] [unique_id "alQuK1_56DeKknhy7sMSTgABhAo"] [Sun Jul 12 18:15:39.208518 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/secured/phpinfo.php"] [unique_id "alQuK1_56DeKknhy7sMSUQABNHg"] [Sun Jul 12 18:15:39.232085 2026] [security2:error] [pid 979474:tid 979671] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKnTrIlbXpLXvkNcL2gAAAMM"] [Sun Jul 12 18:15:39.363021 2026] [security2:error] [pid 967714:tid 967975] [client 103.168.66.51:53226] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/debug/default/view"] [unique_id "alQuK1_56DeKknhy7sMSVQAAAYI"] [Sun Jul 12 18:15:39.389172 2026] [security2:error] [pid 979474:tid 979662] [client 103.168.66.51:55260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/database.php"] [unique_id "alQuK3TrIlbXpLXvkNcL5QAAALo"] [Sun Jul 12 18:15:39.608974 2026] [security2:error] [pid 967714:tid 967948] [client 103.168.66.51:55936] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/cache.php"] [unique_id "alQuK1_56DeKknhy7sMSWgAAAWc"] [Sun Jul 12 18:15:39.720069 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:39.720804 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:39.729323 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuK1_56DeKknhy7sMSVwAAAVs"] [Sun Jul 12 18:15:39.839379 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuKhMANaV5i2_BLQohMAAAVmA"] [Sun Jul 12 18:15:40.003815 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuK1_56DeKknhy7sMSXQAAAUI"] [Sun Jul 12 18:15:40.242289 2026] [security2:error] [pid 960377:tid 960546] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuKxMANaV5i2_BLQohOgAAACY"] [Sun Jul 12 18:15:40.346111 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/config.php"] [unique_id "alQuLF_56DeKknhy7sMSbAABhSg"] [Sun Jul 12 18:15:40.391646 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/index.php/phpinfo"] [unique_id "alQuLF_56DeKknhy7sMSbwABhRU"] [Sun Jul 12 18:15:40.443017 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLF_56DeKknhy7sMSaQAAAXk"] [Sun Jul 12 18:15:40.622718 2026] [authz_core:error] [pid 967714:tid 967962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:40.623272 2026] [authz_core:error] [pid 967714:tid 967962] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:40.637424 2026] [security2:error] [pid 967714:tid 967912] [client 103.168.66.51:51220] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/kubeconfig"] [unique_id "alQuLF_56DeKknhy7sMSdwAAAUM"] [Sun Jul 12 18:15:40.641236 2026] [security2:error] [pid 967714:tid 967913] [client 103.168.66.51:54318] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.gitattributes"] [unique_id "alQuLF_56DeKknhy7sMSeAAAAUQ"] [Sun Jul 12 18:15:40.735474 2026] [security2:error] [pid 967714:tid 967874] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuLF_56DeKknhy7sMSdQAAAR0"] [Sun Jul 12 18:15:40.810184 2026] [security2:error] [pid 967714:tid 967901] [client 168.100.149.158:58586] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12675/bargainor/2308_enhalo.jsp"] [unique_id "alQuLF_56DeKknhy7sMSfQAAATg"] [Sun Jul 12 18:15:40.812096 2026] [security2:error] [pid 967714:tid 967982] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLF_56DeKknhy7sMSeQABiV8"] [Sun Jul 12 18:15:41.083137 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLmgAAAK4"] [Sun Jul 12 18:15:41.102128 2026] [security2:error] [pid 979474:tid 979652] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLggAAALA"] [Sun Jul 12 18:15:41.152916 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJ1_56DeKknhy7sMR6wAAASM"] [Sun Jul 12 18:15:41.202918 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLF_56DeKknhy7sMSgQABbkA"] [Sun Jul 12 18:15:41.216921 2026] [security2:error] [pid 960377:tid 960545] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJxMANaV5i2_BLQohCwAAACU"] [Sun Jul 12 18:15:41.233572 2026] [security2:error] [pid 979474:tid 979626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLmQAAAJY"] [Sun Jul 12 18:15:41.249946 2026] [security2:error] [pid 960377:tid 960596] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJxMANaV5i2_BLQohCQAAAFg"] [Sun Jul 12 18:15:41.275024 2026] [security2:error] [pid 960377:tid 960466] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuKxMANaV5i2_BLQohOwAAS1c"] [Sun Jul 12 18:15:41.279868 2026] [security2:error] [pid 979474:tid 979708] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJ3TrIlbXpLXvkNcLmwAAAOc"] [Sun Jul 12 18:15:41.331753 2026] [security2:error] [pid 979474:tid 979623] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuLHTrIlbXpLXvkNcL_QAAAJM"] [Sun Jul 12 18:15:41.371903 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMShwABblA"] [Sun Jul 12 18:15:41.420986 2026] [cgid:error] [pid 967714:tid 967861] [client 65.49.1.83:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:15:41.499147 2026] [authz_core:error] [pid 960377:tid 960579] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:41.499938 2026] [authz_core:error] [pid 960377:tid 960579] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:41.520591 2026] [security2:error] [pid 967714:tid 967869] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSowABGEE"] [Sun Jul 12 18:15:41.688948 2026] [security2:error] [pid 967714:tid 967868] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSqQABF1U"] [Sun Jul 12 18:15:41.821802 2026] [security2:error] [pid 967714:tid 967866] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSqAAAARU"] [Sun Jul 12 18:15:41.832067 2026] [security2:error] [pid 967714:tid 967905] [client 103.168.66.51:57335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/session.php"] [unique_id "alQuLV_56DeKknhy7sMSrAAAATw"] [Sun Jul 12 18:15:41.884993 2026] [security2:error] [pid 967714:tid 967972] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuJl_56DeKknhy7sMR1gAAAX8"] [Sun Jul 12 18:15:41.885061 2026] [security2:error] [pid 967714:tid 967972] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuJl_56DeKknhy7sMR1gAAAX8"] [Sun Jul 12 18:15:41.886251 2026] [security2:error] [pid 967714:tid 967934] [client 65.21.113.206:42096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0tNjMyNy9tbTQvNTQyMS1tNHJp"] [unique_id "alQuJl_56DeKknhy7sMR1AAAAVk"] [Sun Jul 12 18:15:42.177899 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMStAABXRY"] [Sun Jul 12 18:15:42.346450 2026] [security2:error] [pid 979474:tid 979714] [client 35.245.146.49:57775] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.146.245.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thenewyorkpizzacompany.co"] [uri "/xmlrpc.php"] [unique_id "alQuLnTrIlbXpLXvkNcMGgAAAO0"] [Sun Jul 12 18:15:42.346843 2026] [security2:error] [pid 979474:tid 979714] [client 35.245.146.49:57775] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "thenewyorkpizzacompany.co"] [uri "/xmlrpc.php"] [unique_id "alQuLnTrIlbXpLXvkNcMGgAAAO0"] [Sun Jul 12 18:15:42.364372 2026] [security2:error] [pid 967714:tid 967884] [client 103.168.66.51:60407] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/.git/logs/HEAD"] [unique_id "alQuLl_56DeKknhy7sMSwgAAASc"] [Sun Jul 12 18:15:42.369620 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMSuwABXR0"] [Sun Jul 12 18:15:42.383391 2026] [security2:error] [pid 960377:tid 960635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLhMANaV5i2_BLQohZQAAAH8"] [Sun Jul 12 18:15:42.395160 2026] [authz_core:error] [pid 967714:tid 967907] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:42.395704 2026] [authz_core:error] [pid 967714:tid 967907] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:42.396737 2026] [security2:error] [pid 967714:tid 967856] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMStgAAAQs"] [Sun Jul 12 18:15:42.451323 2026] [security2:error] [pid 960377:tid 960569] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohXAAAPRQ"] [Sun Jul 12 18:15:42.518867 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSoQAAAVM"] [Sun Jul 12 18:15:42.518889 2026] [security2:error] [pid 967714:tid 967943] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSoAAAAWI"] [Sun Jul 12 18:15:42.551333 2026] [security2:error] [pid 960377:tid 960548] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLhMANaV5i2_BLQohZwAAACg"] [Sun Jul 12 18:15:42.557814 2026] [security2:error] [pid 960377:tid 960519] [client 103.168.66.51:56428] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/common/.env"] [unique_id "alQuLhMANaV5i2_BLQohaAAAAAs"] [Sun Jul 12 18:15:42.569025 2026] [security2:error] [pid 967714:tid 967833] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/blob/.env"] [unique_id "alQuLl_56DeKknhy7sMS1QABUWs"] [Sun Jul 12 18:15:42.668744 2026] [security2:error] [pid 967714:tid 967889] [client 94.187.171.125:61322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuLl_56DeKknhy7sMS1wAAASw"] [Sun Jul 12 18:15:42.668962 2026] [security2:error] [pid 967714:tid 967889] [client 94.187.171.125:61322] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuLl_56DeKknhy7sMS1wAAASw"] [Sun Jul 12 18:15:42.697826 2026] [security2:error] [pid 967714:tid 967963] [client 103.168.66.51:55612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/sites/default/settings.local.php"] [unique_id "alQuLl_56DeKknhy7sMS2AAAAXY"] [Sun Jul 12 18:15:42.728884 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS1gABbl4"] [Sun Jul 12 18:15:42.779712 2026] [security2:error] [pid 979474:tid 979713] [client 168.100.149.125:22870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12740/bargainor/2308_metalogical.jsp"] [unique_id "alQuLnTrIlbXpLXvkNcMIAAAAOw"] [Sun Jul 12 18:15:42.926450 2026] [security2:error] [pid 979474:tid 979725] [client 103.168.66.51:54113] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/protected/.env"] [unique_id "alQuLnTrIlbXpLXvkNcMIgAAAPg"] [Sun Jul 12 18:15:42.943865 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS3wABaUs"] [Sun Jul 12 18:15:42.946971 2026] [security2:error] [pid 967714:tid 967940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS3gAAAV8"] [Sun Jul 12 18:15:42.974436 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS4gAAARU"] [Sun Jul 12 18:15:43.116229 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMRgQABSD8"] [Sun Jul 12 18:15:43.121415 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRlQAAAS4"] [Sun Jul 12 18:15:43.129957 2026] [security2:error] [pid 979474:tid 979642] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLhAAAAKY"] [Sun Jul 12 18:15:43.142133 2026] [security2:error] [pid 979474:tid 979649] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLhwAAANc"] [Sun Jul 12 18:15:43.157157 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLfAAAAMc"] [Sun Jul 12 18:15:43.174927 2026] [security2:error] [pid 960377:tid 960529] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLhMANaV5i2_BLQohbAAAABU"] [Sun Jul 12 18:15:43.187493 2026] [security2:error] [pid 979474:tid 979719] [client 103.168.66.51:63708] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/wp-config.bak"] [unique_id "alQuL3TrIlbXpLXvkNcMKAAAAPI"] [Sun Jul 12 18:15:43.194250 2026] [security2:error] [pid 979474:tid 979734] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test_phpinfo4.php"] [unique_id "alQuL3TrIlbXpLXvkNcMKQAAAQE"] [Sun Jul 12 18:15:43.217821 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:43.218517 2026] [authz_core:error] [pid 967714:tid 967967] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:43.223358 2026] [security2:error] [pid 967714:tid 967947] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS5wAAAWY"] [Sun Jul 12 18:15:43.282885 2026] [security2:error] [pid 960377:tid 960601] [client 103.168.66.51:54595] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/php_info.php"] [unique_id "alQuLxMANaV5i2_BLQohcwAAAF0"] [Sun Jul 12 18:15:43.334300 2026] [security2:error] [pid 979474:tid 979670] [client 103.168.66.51:59074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/services.php"] [unique_id "alQuL3TrIlbXpLXvkNcMLAAAAMI"] [Sun Jul 12 18:15:43.406258 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuL3TrIlbXpLXvkNcMKwAAAOE"] [Sun Jul 12 18:15:43.435654 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php"] [unique_id "alQuL1_56DeKknhy7sMS_gABJys"] [Sun Jul 12 18:15:43.441335 2026] [security2:error] [pid 967714:tid 967954] [client 103.168.66.51:53170] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.env.copy"] [unique_id "alQuL1_56DeKknhy7sMS_wAAAW0"] [Sun Jul 12 18:15:43.447922 2026] [security2:error] [pid 960377:tid 960403] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuLhMANaV5i2_BLQohaQAARBk"] [Sun Jul 12 18:15:43.639867 2026] [security2:error] [pid 979474:tid 979693] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuL3TrIlbXpLXvkNcMLwAAANg"] [Sun Jul 12 18:15:43.673760 2026] [security2:error] [pid 967714:tid 967919] [client 216.244.66.249:48318] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lcmha.org"] [uri "/ebookpdf/pdf-9752-168-Improve_Quality_and_Productivity_With_Simulation-elclubbilingue.com.html"] [unique_id "alQuL1_56DeKknhy7sMTBgAAAUo"] [Sun Jul 12 18:15:43.673975 2026] [security2:error] [pid 967714:tid 967919] [client 216.244.66.249:48318] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "lcmha.org"] [uri "/ebookpdf/pdf-9752-168-Improve_Quality_and_Productivity_With_Simulation-elclubbilingue.com.html"] [unique_id "alQuL1_56DeKknhy7sMTBgAAAUo"] [Sun Jul 12 18:15:43.755008 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuL1_56DeKknhy7sMTBAABeVg"] [Sun Jul 12 18:15:43.915055 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/config.old"] [unique_id "alQuL1_56DeKknhy7sMTDwABcBI"] [Sun Jul 12 18:15:44.022357 2026] [authz_core:error] [pid 979474:tid 979620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:44.023091 2026] [authz_core:error] [pid 979474:tid 979620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:44.069466 2026] [security2:error] [pid 967714:tid 967982] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuL1_56DeKknhy7sMTCgAAAYk"] [Sun Jul 12 18:15:44.140364 2026] [security2:error] [pid 960377:tid 960570] [client 168.100.149.219:17044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12805/bargainor/2308_psychoreflex.jsp"] [unique_id "alQuMBMANaV5i2_BLQohegAAAD4"] [Sun Jul 12 18:15:44.173897 2026] [ssl:error] [pid 960377:tid 960555] [client 54.166.204.138:62262] AH02032: Hostname dawnpedersen.com provided via SNI and hostname cdn.shortpixel.ai provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:15:44.182055 2026] [security2:error] [pid 960377:tid 960530] [client 151.243.11.245:52486] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "andrewwilkinllc.com"] [uri "/400.shtml"] [unique_id "alQuMBMANaV5i2_BLQohfQAAABY"] [Sun Jul 12 18:15:44.187408 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/config.backup"] [unique_id "alQuMF_56DeKknhy7sMTEwABNGE"] [Sun Jul 12 18:15:44.192426 2026] [security2:error] [pid 967714:tid 967901] [client 125.167.21.72:62149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuMF_56DeKknhy7sMTEgAAATg"] [Sun Jul 12 18:15:44.192761 2026] [security2:error] [pid 967714:tid 967901] [client 125.167.21.72:62149] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuMF_56DeKknhy7sMTEgAAATg"] [Sun Jul 12 18:15:44.247025 2026] [security2:error] [pid 967714:tid 967750] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/laravel.log.bak.bak"] [unique_id "alQuMF_56DeKknhy7sMTFAABERg"] [Sun Jul 12 18:15:44.417722 2026] [security2:error] [pid 967714:tid 967834] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/encode.php.old"] [unique_id "alQuMF_56DeKknhy7sMTFwABc2w"] [Sun Jul 12 18:15:44.428589 2026] [security2:error] [pid 960377:tid 960523] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuLxMANaV5i2_BLQohdQAADwA"] [Sun Jul 12 18:15:44.568140 2026] [security2:error] [pid 960377:tid 960594] [client 200.148.107.87:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuLxMANaV5i2_BLQohdwAAAFY"] [Sun Jul 12 18:15:44.745130 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMF_56DeKknhy7sMTGwABblc"] [Sun Jul 12 18:15:44.863880 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohiAAAAB4"] [Sun Jul 12 18:15:44.864711 2026] [security2:error] [pid 960377:tid 960579] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohiwAAAEc"] [Sun Jul 12 18:15:44.896987 2026] [security2:error] [pid 960377:tid 960526] [client 41.83.97.145:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "sinfully-desilicious.com"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohhAAAABI"] [Sun Jul 12 18:15:44.931288 2026] [security2:error] [pid 967714:tid 967947] [client 103.168.66.51:57666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/app.php"] [unique_id "alQuMF_56DeKknhy7sMTKQAAAWY"] [Sun Jul 12 18:15:44.934162 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:44.934948 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:45.032430 2026] [security2:error] [pid 960377:tid 960615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohjgAAAGs"] [Sun Jul 12 18:15:45.037274 2026] [security2:error] [pid 967714:tid 967921] [client 24.203.79.110:61397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuMV_56DeKknhy7sMTLwAAAUw"] [Sun Jul 12 18:15:45.037493 2026] [security2:error] [pid 967714:tid 967921] [client 24.203.79.110:61397] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuMV_56DeKknhy7sMTLwAAAUw"] [Sun Jul 12 18:15:45.077428 2026] [security2:error] [pid 979474:tid 979636] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0tNjYxNS9taGkvMTE4NjEtaGk0NA=="] [unique_id "alQuMXTrIlbXpLXvkNcMQQAAAKA"] [Sun Jul 12 18:15:45.219139 2026] [security2:error] [pid 960377:tid 960595] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohkQAAAFc"] [Sun Jul 12 18:15:45.220469 2026] [security2:error] [pid 979474:tid 979730] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLnTrIlbXpLXvkNcMHQAAAP0"] [Sun Jul 12 18:15:45.221478 2026] [security2:error] [pid 967714:tid 967873] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMSzwAAARw"] [Sun Jul 12 18:15:45.289812 2026] [access_compat:error] [pid 967714:tid 967915] [client 50.87.169.24:55500] AH01797: client denied by server configuration: /home4/voiceonc/public_html/aboneliktakip/wp-cron.php [Sun Jul 12 18:15:45.371390 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS0gAAASo"] [Sun Jul 12 18:15:45.405354 2026] [security2:error] [pid 967714:tid 967930] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuMV_56DeKknhy7sMTMwAAAVU"] [Sun Jul 12 18:15:45.442849 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuLl_56DeKknhy7sMS0QAAAYM"] [Sun Jul 12 18:15:45.481362 2026] [cgid:error] [pid 979474:tid 979736] [client 202.46.62.108:37756] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/finder-window-clings-stock-p-863.html?osCsid=173fi65s4k0ashijaobjfefek2 [Sun Jul 12 18:15:45.503886 2026] [security2:error] [pid 979474:tid 979714] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMXTrIlbXpLXvkNcMQwAAAO0"] [Sun Jul 12 18:15:45.580181 2026] [security2:error] [pid 960377:tid 960592] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuMBMANaV5i2_BLQohhgAAVHQ"] [Sun Jul 12 18:15:45.753895 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:45.754434 2026] [authz_core:error] [pid 960377:tid 960620] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:45.814978 2026] [security2:error] [pid 967714:tid 967888] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuMV_56DeKknhy7sMTWgAAASs"] [Sun Jul 12 18:15:45.899573 2026] [security2:error] [pid 967714:tid 967924] [client 103.168.66.51:49312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/log/production.log"] [unique_id "alQuMV_56DeKknhy7sMTcQAAAU8"] [Sun Jul 12 18:15:46.007549 2026] [security2:error] [pid 979474:tid 979731] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test_.php"] [unique_id "alQuMnTrIlbXpLXvkNcMTwAAAP4"] [Sun Jul 12 18:15:46.049925 2026] [security2:error] [pid 960377:tid 960573] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuMRMANaV5i2_BLQohlgAAAEE"] [Sun Jul 12 18:15:46.049998 2026] [security2:error] [pid 960377:tid 960573] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuMRMANaV5i2_BLQohlgAAAEE"] [Sun Jul 12 18:15:46.051164 2026] [security2:error] [pid 967714:tid 967966] [client 65.21.113.206:46148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0tNjYxNS9taGkvMTE4NjEtaGk0NA=="] [unique_id "alQuMV_56DeKknhy7sMTVQAAAXk"] [Sun Jul 12 18:15:46.051203 2026] [security2:error] [pid 967714:tid 967970] [client 103.168.66.51:65034] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/core/config.php"] [unique_id "alQuMl_56DeKknhy7sMTdQAAAX0"] [Sun Jul 12 18:15:46.072091 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRmgAAAX4"] [Sun Jul 12 18:15:46.101169 2026] [security2:error] [pid 979474:tid 979654] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLgQAAALI"] [Sun Jul 12 18:15:46.177981 2026] [security2:error] [pid 960377:tid 960585] [client 103.168.66.51:56858] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/filesystems.php"] [unique_id "alQuMhMANaV5i2_BLQohngAAAE0"] [Sun Jul 12 18:15:46.179357 2026] [security2:error] [pid 967714:tid 967735] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test/bdd/fixtures/did-rest/.env"] [unique_id "alQuMl_56DeKknhy7sMTdgABYAk"] [Sun Jul 12 18:15:46.190080 2026] [security2:error] [pid 967714:tid 967965] [client 103.168.66.51:51086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/global.php"] [unique_id "alQuMl_56DeKknhy7sMTeAAAAXg"] [Sun Jul 12 18:15:46.219183 2026] [security2:error] [pid 967714:tid 967907] [client 136.158.82.106:20976] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQuMV_56DeKknhy7sMTawABPhE"], referer: https://prestone.com.ph/prestone-longlife-coolant-concentrate/ [Sun Jul 12 18:15:46.260235 2026] [access_compat:error] [pid 960377:tid 960559] [client 50.87.169.24:55502] AH01797: client denied by server configuration: /home4/voiceonc/public_html/muameletakip/wp-cron.php [Sun Jul 12 18:15:46.342317 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMhMANaV5i2_BLQohnwAAACM"] [Sun Jul 12 18:15:46.355540 2026] [security2:error] [pid 967714:tid 967761] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api.php.orig"] [unique_id "alQuMl_56DeKknhy7sMTewABhyM"] [Sun Jul 12 18:15:46.509934 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuMXTrIlbXpLXvkNcMRAAAAN4"] [Sun Jul 12 18:15:46.515461 2026] [security2:error] [pid 960377:tid 960435] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuMRMANaV5i2_BLQohmgAARTg"] [Sun Jul 12 18:15:46.527960 2026] [security2:error] [pid 967714:tid 967763] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/about.php.old"] [unique_id "alQuMl_56DeKknhy7sMThgABJSU"] [Sun Jul 12 18:15:46.561849 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:46.562332 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:46.632894 2026] [security2:error] [pid 960377:tid 960599] [client 103.168.66.51:52611] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.firebaserc"] [unique_id "alQuMhMANaV5i2_BLQohsAAAAFs"] [Sun Jul 12 18:15:46.679308 2026] [security2:error] [pid 979474:tid 979690] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMUwAAANU"] [Sun Jul 12 18:15:46.800021 2026] [security2:error] [pid 979474:tid 979704] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMWAAAAOM"] [Sun Jul 12 18:15:46.822094 2026] [security2:error] [pid 960377:tid 960606] [client 168.100.149.193:48862] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12870/bargainor/2308_mailable.jsp"] [unique_id "alQuMhMANaV5i2_BLQohtAAAAGI"] [Sun Jul 12 18:15:46.893506 2026] [security2:error] [pid 979474:tid 979728] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMXwAAAPs"] [Sun Jul 12 18:15:46.992717 2026] [security2:error] [pid 979474:tid 979719] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMXAAAAPI"] [Sun Jul 12 18:15:47.073199 2026] [security2:error] [pid 960377:tid 960603] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJRMANaV5i2_BLQog7AAAAF8"] [Sun Jul 12 18:15:47.099179 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRnwAAASE"] [Sun Jul 12 18:15:47.117121 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRmwAAARs"] [Sun Jul 12 18:15:47.120501 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJRMANaV5i2_BLQog8QAAAAo"] [Sun Jul 12 18:15:47.128953 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:51036] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMRggABSH0"] [Sun Jul 12 18:15:47.193190 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMYgAAAK4"] [Sun Jul 12 18:15:47.194346 2026] [security2:error] [pid 967714:tid 967861] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuMV_56DeKknhy7sMTTwAAARA"] [Sun Jul 12 18:15:47.243822 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuMxMANaV5i2_BLQohuwAAABo"] [Sun Jul 12 18:15:47.371312 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:47.371874 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:47.483324 2026] [security2:error] [pid 967714:tid 967963] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuM1_56DeKknhy7sMToAABdgc"] [Sun Jul 12 18:15:47.507974 2026] [security2:error] [pid 967714:tid 967968] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuM1_56DeKknhy7sMTnQAAAXs"] [Sun Jul 12 18:15:47.614985 2026] [security2:error] [pid 967714:tid 967963] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuM1_56DeKknhy7sMTqQABdlg"] [Sun Jul 12 18:15:47.662058 2026] [security2:error] [pid 960377:tid 960544] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuMhMANaV5i2_BLQohsgAAJFI"] [Sun Jul 12 18:15:47.679609 2026] [security2:error] [pid 967714:tid 967853] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/rails-app/.env"] [unique_id "alQuM1_56DeKknhy7sMTrAABKH8"] [Sun Jul 12 18:15:47.800099 2026] [security2:error] [pid 967714:tid 967935] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuM1_56DeKknhy7sMTqwABWhI"] [Sun Jul 12 18:15:47.852512 2026] [security2:error] [pid 967714:tid 967810] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/test.php.old"] [unique_id "alQuM1_56DeKknhy7sMTrgABfFQ"] [Sun Jul 12 18:15:48.039399 2026] [security2:error] [pid 979474:tid 979677] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuM3TrIlbXpLXvkNcMbQAAAMk"] [Sun Jul 12 18:15:48.164104 2026] [security2:error] [pid 979474:tid 979625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJXTrIlbXpLXvkNcLiQAAALw"] [Sun Jul 12 18:15:48.166621 2026] [security2:error] [pid 979474:tid 979610] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0tOTEyOS9tbTQvNTQyMS1tNHJp"] [unique_id "alQuNHTrIlbXpLXvkNcMcgAAAIY"] [Sun Jul 12 18:15:48.207073 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:48.207561 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:48.339992 2026] [security2:error] [pid 979474:tid 979636] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNHTrIlbXpLXvkNcMdAAAAKA"] [Sun Jul 12 18:15:48.342003 2026] [security2:error] [pid 979474:tid 979644] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNHTrIlbXpLXvkNcMcAAAAKg"] [Sun Jul 12 18:15:48.385500 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuMhMANaV5i2_BLQohqwAAAAw"] [Sun Jul 12 18:15:48.401098 2026] [security2:error] [pid 979474:tid 979722] [client 103.168.66.51:65053] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/i.php"] [unique_id "alQuNHTrIlbXpLXvkNcMeAAAAPU"] [Sun Jul 12 18:15:48.421340 2026] [security2:error] [pid 979474:tid 979694] [client 103.168.66.51:53190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/production.php"] [unique_id "alQuNHTrIlbXpLXvkNcMegAAANk"] [Sun Jul 12 18:15:48.622140 2026] [security2:error] [pid 979474:tid 979707] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNHTrIlbXpLXvkNcMfQAAAOY"] [Sun Jul 12 18:15:48.634098 2026] [security2:error] [pid 960377:tid 960622] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuMxMANaV5i2_BLQohvgAAciQ"] [Sun Jul 12 18:15:48.766957 2026] [security2:error] [pid 967714:tid 967913] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTvAAAAUQ"] [Sun Jul 12 18:15:48.807538 2026] [security2:error] [pid 979474:tid 979714] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNHTrIlbXpLXvkNcMgQAAAO0"] [Sun Jul 12 18:15:48.809935 2026] [security2:error] [pid 979474:tid 979669] [client 178.156.189.249:29668] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQuNHTrIlbXpLXvkNcMggAAAME"], referer: https://nwuav.com [Sun Jul 12 18:15:48.817775 2026] [security2:error] [pid 967714:tid 967856] [client 168.100.149.105:44314] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/12935/bargainor/2308_epidemiology.jsp"] [unique_id "alQuNF_56DeKknhy7sMTxAAAAQs"] [Sun Jul 12 18:15:48.875595 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTwAABhyY"] [Sun Jul 12 18:15:48.910734 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTwwAAAWQ"] [Sun Jul 12 18:15:48.970496 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:48.971013 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:48.990129 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTxwABh04"] [Sun Jul 12 18:15:49.111313 2026] [security2:error] [pid 967714:tid 967859] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJV_56DeKknhy7sMRmAAAAQ4"] [Sun Jul 12 18:15:49.172245 2026] [security2:error] [pid 967714:tid 967978] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTvwAAAYU"] [Sun Jul 12 18:15:49.172302 2026] [security2:error] [pid 967714:tid 967978] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTvwAAAYU"] [Sun Jul 12 18:15:49.173524 2026] [security2:error] [pid 979474:tid 979672] [client 65.21.113.206:46160] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0tOTEyOS9tbTQvNTQyMS1tNHJp"] [unique_id "alQuNHTrIlbXpLXvkNcMgAAAAMQ"] [Sun Jul 12 18:15:49.190573 2026] [security2:error] [pid 960377:tid 960537] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuMhMANaV5i2_BLQohrAAAAB0"] [Sun Jul 12 18:15:49.194851 2026] [security2:error] [pid 960377:tid 960576] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuMhMANaV5i2_BLQohrQAAAEQ"] [Sun Jul 12 18:15:49.283643 2026] [security2:error] [pid 967714:tid 967915] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNF_56DeKknhy7sMTygAAAUY"] [Sun Jul 12 18:15:49.451939 2026] [security2:error] [pid 967714:tid 967959] [client 103.168.66.51:53142] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/Jenkinsfile"] [unique_id "alQuNV_56DeKknhy7sMT1wAAAXI"] [Sun Jul 12 18:15:49.451942 2026] [security2:error] [pid 979474:tid 979642] [client 103.168.66.51:58215] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/openapi.json"] [unique_id "alQuNXTrIlbXpLXvkNcMiwAAAKY"] [Sun Jul 12 18:15:49.534222 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dev/phpinfo.php"] [unique_id "alQuNV_56DeKknhy7sMT2wABah4"] [Sun Jul 12 18:15:49.559159 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNV_56DeKknhy7sMT1gAAAVk"] [Sun Jul 12 18:15:49.612961 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuNBMANaV5i2_BLQoh0AAAEwg"] [Sun Jul 12 18:15:49.732971 2026] [security2:error] [pid 967714:tid 967872] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNV_56DeKknhy7sMT2gAAARs"] [Sun Jul 12 18:15:49.736807 2026] [authz_core:error] [pid 960377:tid 960623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:49.737363 2026] [authz_core:error] [pid 960377:tid 960623] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:49.768354 2026] [security2:error] [pid 967714:tid 967982] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNV_56DeKknhy7sMT3gABiWI"] [Sun Jul 12 18:15:49.771903 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ContainerRegistry/.env"] [unique_id "alQuNRMANaV5i2_BLQoh2QAALEs"] [Sun Jul 12 18:15:49.880147 2026] [security2:error] [pid 979474:tid 979725] [client 20.63.87.152:6763] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/.dj/index.php"] [unique_id "alQuNXTrIlbXpLXvkNcMjgAAAPg"] [Sun Jul 12 18:15:49.906473 2026] [security2:error] [pid 967714:tid 967788] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/config/readme.bak"] [unique_id "alQuNV_56DeKknhy7sMT4gABYj4"] [Sun Jul 12 18:15:49.919604 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/php_info.php"] [unique_id "alQuNV_56DeKknhy7sMT4wABXT0"] [Sun Jul 12 18:15:49.924739 2026] [security2:error] [pid 960377:tid 960599] [client 103.168.66.51:55495] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/app/server/.env"] [unique_id "alQuNRMANaV5i2_BLQoh3AAAAFs"] [Sun Jul 12 18:15:49.930023 2026] [security2:error] [pid 960377:tid 960416] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/containers/.env"] [unique_id "alQuNRMANaV5i2_BLQoh3QAAdyU"] [Sun Jul 12 18:15:50.001265 2026] [security2:error] [pid 960377:tid 960633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNRMANaV5i2_BLQoh2gAAAH0"] [Sun Jul 12 18:15:50.014822 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/i.php"] [unique_id "alQuNl_56DeKknhy7sMT5AABe1M"] [Sun Jul 12 18:15:50.078375 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/php_info.php"] [unique_id "alQuNl_56DeKknhy7sMT6QABZ1I"] [Sun Jul 12 18:15:50.100699 2026] [security2:error] [pid 960377:tid 960385] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/content/.env"] [unique_id "alQuNhMANaV5i2_BLQoh3gAAMQc"] [Sun Jul 12 18:15:50.149788 2026] [security2:error] [pid 967714:tid 967869] [client 103.168.66.51:50185] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/broadcasting.php"] [unique_id "alQuNl_56DeKknhy7sMT7AAAARg"] [Sun Jul 12 18:15:50.248371 2026] [security2:error] [pid 967714:tid 967932] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNV_56DeKknhy7sMT0gAAAVc"] [Sun Jul 12 18:15:50.260614 2026] [security2:error] [pid 960377:tid 960399] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/control/.env"] [unique_id "alQuNhMANaV5i2_BLQoh4QAAbRU"] [Sun Jul 12 18:15:50.274236 2026] [security2:error] [pid 979474:tid 979652] [client 20.63.87.152:6741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/.trash7206/index.php"] [unique_id "alQuNnTrIlbXpLXvkNcMlwAAALA"] [Sun Jul 12 18:15:50.359436 2026] [security2:error] [pid 979474:tid 979609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNXTrIlbXpLXvkNcMhQAAAIU"] [Sun Jul 12 18:15:50.420235 2026] [security2:error] [pid 960377:tid 960409] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/core/app/.env"] [unique_id "alQuNhMANaV5i2_BLQoh5gAAOx8"] [Sun Jul 12 18:15:50.420806 2026] [security2:error] [pid 967714:tid 967955] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMT7QAAAW4"] [Sun Jul 12 18:15:50.424729 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNnTrIlbXpLXvkNcMlAAAANs"] [Sun Jul 12 18:15:50.444309 2026] [security2:error] [pid 967714:tid 967877] [client 103.168.66.51:51228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/view.php"] [unique_id "alQuNl_56DeKknhy7sMT_AAAASA"] [Sun Jul 12 18:15:50.538767 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:50.539255 2026] [authz_core:error] [pid 960377:tid 960554] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:50.577950 2026] [security2:error] [pid 960377:tid 960459] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/core/Datavase/.env"] [unique_id "alQuNhMANaV5i2_BLQoh6QAAClA"] [Sun Jul 12 18:15:50.583143 2026] [security2:error] [pid 979474:tid 979623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNnTrIlbXpLXvkNcMnQAAAJM"] [Sun Jul 12 18:15:50.589156 2026] [security2:error] [pid 967714:tid 967838] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMT_gABN3A"] [Sun Jul 12 18:15:50.647419 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test2.php"] [unique_id "alQuNl_56DeKknhy7sMUBgABN2k"] [Sun Jul 12 18:15:50.714063 2026] [security2:error] [pid 967714:tid 967900] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMUAAABNxU"] [Sun Jul 12 18:15:50.760447 2026] [security2:error] [pid 960377:tid 960484] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/core/persistence/.env"] [unique_id "alQuNhMANaV5i2_BLQoh6gAACGk"] [Sun Jul 12 18:15:50.785474 2026] [security2:error] [pid 960377:tid 960594] [client 168.100.149.193:29056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13000/bargainor/2308_secque.jsp"] [unique_id "alQuNhMANaV5i2_BLQoh7QAAAFY"] [Sun Jul 12 18:15:50.853324 2026] [security2:error] [pid 979474:tid 979661] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzIxNjQvbTIvMzg3MDUvMg=="] [unique_id "alQuNnTrIlbXpLXvkNcMpAAAALk"] [Sun Jul 12 18:15:50.853604 2026] [security2:error] [pid 979474:tid 979724] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuNnTrIlbXpLXvkNcMoAAAAPc"] [Sun Jul 12 18:15:50.921658 2026] [security2:error] [pid 960377:tid 960426] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/core/src/main/resources/org/jobrunr/dashboard/frontend/.env"] [unique_id "alQuNhMANaV5i2_BLQoh7wAAES8"] [Sun Jul 12 18:15:50.975833 2026] [security2:error] [pid 967714:tid 967911] [client 20.63.87.152:19344] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQuNl_56DeKknhy7sMUFAAAAUI"] [Sun Jul 12 18:15:51.088034 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test1.php"] [unique_id "alQuN1_56DeKknhy7sMUGQABglU"] [Sun Jul 12 18:15:51.100709 2026] [security2:error] [pid 960377:tid 960419] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/counterblockd/.env"] [unique_id "alQuNxMANaV5i2_BLQoh8AAABCg"] [Sun Jul 12 18:15:51.223265 2026] [security2:error] [pid 960377:tid 960544] [client 20.63.87.152:19938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQuNxMANaV5i2_BLQoh9AAAACQ"] [Sun Jul 12 18:15:51.225996 2026] [security2:error] [pid 960377:tid 960528] [client 20.63.87.152:5411] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/.dj/index.php"] [unique_id "alQuNxMANaV5i2_BLQoh9QAAABQ"] [Sun Jul 12 18:15:51.269105 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/counterwallet/.env"] [unique_id "alQuNxMANaV5i2_BLQoh9gAANwE"] [Sun Jul 12 18:15:51.303065 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUGgABWU0"] [Sun Jul 12 18:15:51.317225 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:51.317741 2026] [authz_core:error] [pid 960377:tid 960508] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:51.339118 2026] [security2:error] [pid 967714:tid 967979] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUGAAAAYY"] [Sun Jul 12 18:15:51.429620 2026] [security2:error] [pid 960377:tid 960425] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cp/.env"] [unique_id "alQuNxMANaV5i2_BLQoh-wAAdC4"] [Sun Jul 12 18:15:51.443587 2026] [core:error] [pid 960377:tid 960584] [client 20.63.87.152:4914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:51.443650 2026] [core:error] [pid 960377:tid 960584] [client 20.63.87.152:4914] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:15:51.453647 2026] [security2:error] [pid 967714:tid 967929] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUHQABVCc"] [Sun Jul 12 18:15:51.494337 2026] [security2:error] [pid 960377:tid 960593] [client 20.63.87.152:19975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQuNxMANaV5i2_BLQoh_wAAAFU"] [Sun Jul 12 18:15:51.592132 2026] [security2:error] [pid 960377:tid 960400] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cronlab/.env"] [unique_id "alQuNxMANaV5i2_BLQoiAQAAURY"] [Sun Jul 12 18:15:51.634823 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUHwABcEY"] [Sun Jul 12 18:15:51.683302 2026] [security2:error] [pid 967714:tid 967902] [client 20.63.87.152:39662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/.trash7206/index.php"] [unique_id "alQuN1_56DeKknhy7sMULAAAATk"] [Sun Jul 12 18:15:51.752264 2026] [security2:error] [pid 960377:tid 960407] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/cryo_project/.env"] [unique_id "alQuNxMANaV5i2_BLQoiBAAAVB0"] [Sun Jul 12 18:15:51.769253 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.bak"] [unique_id "alQuN1_56DeKknhy7sMULwABXTc"] [Sun Jul 12 18:15:51.782708 2026] [security2:error] [pid 960377:tid 960513] [client 103.168.66.51:63708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/var/.env"] [unique_id "alQuNxMANaV5i2_BLQoiBQAAAAU"] [Sun Jul 12 18:15:51.799993 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUJwAAASw"] [Sun Jul 12 18:15:51.800078 2026] [security2:error] [pid 967714:tid 967901] [client 103.168.66.51:49978] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/wp-login.php"] [unique_id "alQuN1_56DeKknhy7sMUMAAAATg"] [Sun Jul 12 18:15:51.847757 2026] [security2:error] [pid 960377:tid 960561] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuNxMANaV5i2_BLQoh-AAAADU"] [Sun Jul 12 18:15:51.847808 2026] [security2:error] [pid 960377:tid 960561] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuNxMANaV5i2_BLQoh-AAAADU"] [Sun Jul 12 18:15:51.851496 2026] [security2:error] [pid 979474:tid 979644] [client 65.21.113.206:46166] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzIxNjQvbTIvMzg3MDUvMg=="] [unique_id "alQuN3TrIlbXpLXvkNcMqQAAAKg"] [Sun Jul 12 18:15:51.885100 2026] [security2:error] [pid 967714:tid 967944] [client 20.63.87.152:11986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/0.kb-v3.php"] [unique_id "alQuN1_56DeKknhy7sMUNAAAAWM"] [Sun Jul 12 18:15:51.910575 2026] [security2:error] [pid 960377:tid 960397] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/css/.env"] [unique_id "alQuNxMANaV5i2_BLQoiBgAAcBM"] [Sun Jul 12 18:15:52.008927 2026] [autoindex:error] [pid 967714:tid 967966] [client 20.63.87.152:5420] AH01276: Cannot serve directory /home4/homeyeat/public_html/homeyeats/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:15:52.040254 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.save"] [unique_id "alQuOF_56DeKknhy7sMUPAABFQM"] [Sun Jul 12 18:15:52.074988 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/custom/.env"] [unique_id "alQuOBMANaV5i2_BLQoiCgAAQS0"] [Sun Jul 12 18:15:52.078766 2026] [security2:error] [pid 960377:tid 960565] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuJRMANaV5i2_BLQog7gAAADk"] [Sun Jul 12 18:15:52.155426 2026] [authz_core:error] [pid 960377:tid 960568] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:52.157366 2026] [authz_core:error] [pid 960377:tid 960568] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:52.160534 2026] [autoindex:error] [pid 967714:tid 967981] [client 20.63.87.152:5420] AH01276: Cannot serve directory /home4/homeyeat/public_html/homeyeats/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:15:52.182760 2026] [security2:error] [pid 960377:tid 960548] [client 20.63.87.152:3009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/0.php"] [unique_id "alQuOBMANaV5i2_BLQoiCwAAACg"] [Sun Jul 12 18:15:52.214764 2026] [security2:error] [pid 967714:tid 967858] [client 94.73.34.126:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuN1_56DeKknhy7sMUKAAAAQ0"] [Sun Jul 12 18:15:52.216749 2026] [security2:error] [pid 967714:tid 967912] [client 20.63.87.152:5420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQuOF_56DeKknhy7sMUPwAAAUM"] [Sun Jul 12 18:15:52.244481 2026] [security2:error] [pid 960377:tid 960498] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/d/.env"] [unique_id "alQuOBMANaV5i2_BLQoiDAAAeHc"] [Sun Jul 12 18:15:52.288315 2026] [security2:error] [pid 967714:tid 967972] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuOF_56DeKknhy7sMUOwAAAX8"] [Sun Jul 12 18:15:52.373105 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMT9AAAAXo"] [Sun Jul 12 18:15:52.448474 2026] [security2:error] [pid 979474:tid 979723] [client 20.63.87.152:2092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQuOHTrIlbXpLXvkNcMtgAAAPY"] [Sun Jul 12 18:15:52.465290 2026] [security2:error] [pid 979474:tid 979651] [client 57.141.18.117:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuMnTrIlbXpLXvkNcMWQAAAK8"] [Sun Jul 12 18:15:52.469321 2026] [security2:error] [pid 967714:tid 967945] [client 202.76.175.144:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMUCQAAAWQ"] [Sun Jul 12 18:15:52.657293 2026] [security2:error] [pid 979474:tid 979709] [client 20.63.87.152:20022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/002.php"] [unique_id "alQuOHTrIlbXpLXvkNcMuQAAAOg"] [Sun Jul 12 18:15:52.684654 2026] [security2:error] [pid 967714:tid 967911] [client 20.63.87.152:42081] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQuOF_56DeKknhy7sMURgAAAUI"] [Sun Jul 12 18:15:52.696735 2026] [security2:error] [pid 967714:tid 967980] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuOF_56DeKknhy7sMUQwAAAYc"] [Sun Jul 12 18:15:52.707525 2026] [security2:error] [pid 967714:tid 967730] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/app.php"] [unique_id "alQuOF_56DeKknhy7sMUSAABNAQ"] [Sun Jul 12 18:15:52.856086 2026] [security2:error] [pid 979474:tid 979670] [client 168.100.149.150:21678] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13065/bargainor/2308_dislevelment.jsp"] [unique_id "alQuOHTrIlbXpLXvkNcMvwAAAMI"] [Sun Jul 12 18:15:52.871052 2026] [security2:error] [pid 967714:tid 967734] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dump/api_keys.sql"] [unique_id "alQuOF_56DeKknhy7sMUSgABcgg"] [Sun Jul 12 18:15:52.948868 2026] [security2:error] [pid 979474:tid 979682] [client 20.63.87.152:26320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/0.kb-v3.php"] [unique_id "alQuOHTrIlbXpLXvkNcMxQAAAM0"] [Sun Jul 12 18:15:52.962407 2026] [security2:error] [pid 979474:tid 979634] [client 20.63.87.152:12011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/01.php"] [unique_id "alQuOHTrIlbXpLXvkNcMxgAAAJ4"] [Sun Jul 12 18:15:53.015129 2026] [authz_core:error] [pid 979474:tid 979716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:53.015621 2026] [authz_core:error] [pid 979474:tid 979716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:53.042160 2026] [security2:error] [pid 967714:tid 967845] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/application/.env"] [unique_id "alQuOV_56DeKknhy7sMUTQABR3c"] [Sun Jul 12 18:15:53.164383 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMT-gAAAUA"] [Sun Jul 12 18:15:53.186584 2026] [security2:error] [pid 967714:tid 967872] [client 20.63.87.152:2052] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/0.php"] [unique_id "alQuOV_56DeKknhy7sMUUQAAARs"] [Sun Jul 12 18:15:53.198479 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNnTrIlbXpLXvkNcMmAAAAJk"] [Sun Jul 12 18:15:53.269783 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuNl_56DeKknhy7sMT8wAAATE"] [Sun Jul 12 18:15:53.276080 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/.config/mail.php"] [unique_id "alQuOV_56DeKknhy7sMUWwABeEo"] [Sun Jul 12 18:15:53.310550 2026] [security2:error] [pid 960377:tid 960576] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuOBMANaV5i2_BLQoiDgAARE0"] [Sun Jul 12 18:15:53.316020 2026] [security2:error] [pid 979474:tid 979626] [client 20.63.87.152:36364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/0x.php"] [unique_id "alQuOXTrIlbXpLXvkNcM0QAAAJY"] [Sun Jul 12 18:15:53.333190 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOV_56DeKknhy7sMUUwAAAWg"] [Sun Jul 12 18:15:53.384764 2026] [security2:error] [pid 979474:tid 979724] [client 20.63.87.152:26317] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/002.php"] [unique_id "alQuOXTrIlbXpLXvkNcM0gAAAPc"] [Sun Jul 12 18:15:53.405386 2026] [security2:error] [pid 979474:tid 979704] [client 94.187.171.125:61815] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuOXTrIlbXpLXvkNcM1AAAAOM"] [Sun Jul 12 18:15:53.405701 2026] [security2:error] [pid 979474:tid 979704] [client 94.187.171.125:61815] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuOXTrIlbXpLXvkNcM1AAAAOM"] [Sun Jul 12 18:15:53.532780 2026] [security2:error] [pid 967714:tid 967925] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOV_56DeKknhy7sMUXgABUFE"] [Sun Jul 12 18:15:53.535953 2026] [security2:error] [pid 979474:tid 979635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuOXTrIlbXpLXvkNcMzAAAAJ8"] [Sun Jul 12 18:15:53.575563 2026] [security2:error] [pid 960377:tid 960586] [client 20.63.87.152:39660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/01.php"] [unique_id "alQuORMANaV5i2_BLQoiFwAAAE4"] [Sun Jul 12 18:15:53.591817 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOXTrIlbXpLXvkNcM1gAAAPM"] [Sun Jul 12 18:15:53.619345 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.env.old"] [unique_id "alQuOV_56DeKknhy7sMUawABUFg"] [Sun Jul 12 18:15:53.679255 2026] [security2:error] [pid 967714:tid 967938] [client 20.63.87.152:31975] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.hhworld-net.earn2give.com"] [uri "/1.php"] [unique_id "alQuOV_56DeKknhy7sMUbQAAAV0"] [Sun Jul 12 18:15:53.679996 2026] [security2:error] [pid 967714:tid 967938] [client 20.63.87.152:31975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/1.php"] [unique_id "alQuOV_56DeKknhy7sMUbQAAAV0"] [Sun Jul 12 18:15:53.695139 2026] [security2:error] [pid 960377:tid 960546] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuORMANaV5i2_BLQoiFgAAACY"] [Sun Jul 12 18:15:53.720370 2026] [security2:error] [pid 979474:tid 979645] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOXTrIlbXpLXvkNcM2QAAAKk"] [Sun Jul 12 18:15:53.762516 2026] [security2:error] [pid 979474:tid 979638] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzUzNjUvbTIvMzg3MDUvMg=="] [unique_id "alQuOXTrIlbXpLXvkNcM3AAAAKI"] [Sun Jul 12 18:15:53.796142 2026] [authz_core:error] [pid 979474:tid 979730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:53.796643 2026] [authz_core:error] [pid 979474:tid 979730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:53.801160 2026] [security2:error] [pid 979474:tid 979655] [client 20.63.87.152:42065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/0x.php"] [unique_id "alQuOXTrIlbXpLXvkNcM3gAAALM"] [Sun Jul 12 18:15:53.942451 2026] [security2:error] [pid 960377:tid 960618] [client 152.42.236.38:36982] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuORMANaV5i2_BLQoiGgAAAG4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:53.971234 2026] [security2:error] [pid 967714:tid 967867] [client 20.63.87.152:2966] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/100.php"] [unique_id "alQuOV_56DeKknhy7sMUegAAARY"] [Sun Jul 12 18:15:54.007517 2026] [security2:error] [pid 967714:tid 967863] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOV_56DeKknhy7sMUdAAAARI"] [Sun Jul 12 18:15:54.013915 2026] [security2:error] [pid 967714:tid 967871] [client 165.22.105.143:59974] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOV_56DeKknhy7sMUbgAAARo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.081159 2026] [security2:error] [pid 967714:tid 967904] [client 20.63.87.152:2812] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.homeyeats.com"] [uri "/1.php"] [unique_id "alQuOl_56DeKknhy7sMUfQAAATs"] [Sun Jul 12 18:15:54.081545 2026] [security2:error] [pid 967714:tid 967904] [client 20.63.87.152:2812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/1.php"] [unique_id "alQuOl_56DeKknhy7sMUfQAAATs"] [Sun Jul 12 18:15:54.090088 2026] [security2:error] [pid 967714:tid 967944] [client 152.42.230.88:35100] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOV_56DeKknhy7sMUcQAAAWM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.188254 2026] [security2:error] [pid 967714:tid 967869] [client 178.128.103.219:38728] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOV_56DeKknhy7sMUbwAAARg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.202510 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOnTrIlbXpLXvkNcM4QAAAJg"] [Sun Jul 12 18:15:54.221600 2026] [security2:error] [pid 967714:tid 967930] [client 20.63.87.152:13538] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/122.php"] [unique_id "alQuOl_56DeKknhy7sMUjwAAAVU"] [Sun Jul 12 18:15:54.266748 2026] [security2:error] [pid 967714:tid 967921] [client 142.93.207.248:53408] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUfgAAAUw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.354782 2026] [security2:error] [pid 960377:tid 960521] [client 20.63.87.152:32692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/100.php"] [unique_id "alQuOhMANaV5i2_BLQoiKAAAAA0"] [Sun Jul 12 18:15:54.357355 2026] [security2:error] [pid 967714:tid 967885] [client 157.230.50.157:37944] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUfwAAASg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.375312 2026] [security2:error] [pid 960377:tid 960599] [client 114.119.146.109:48409] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.tonypena.net"] [uri "/portfolio/ole-decor-magazine-design"] [unique_id "alQuOhMANaV5i2_BLQoiKQAAAFs"], referer: http://tonypena.net/ [Sun Jul 12 18:15:54.439964 2026] [security2:error] [pid 979474:tid 979648] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOnTrIlbXpLXvkNcM4wAAAKw"] [Sun Jul 12 18:15:54.444910 2026] [security2:error] [pid 960377:tid 960625] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuORMANaV5i2_BLQoiDwAAAHU"] [Sun Jul 12 18:15:54.451995 2026] [security2:error] [pid 960377:tid 960617] [client 198.211.96.118:45990] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiHQAAAG0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.488012 2026] [security2:error] [pid 960377:tid 960623] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuORMANaV5i2_BLQoiFAAAcwk"] [Sun Jul 12 18:15:54.506085 2026] [security2:error] [pid 979474:tid 979659] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuOXTrIlbXpLXvkNcM0AAAALc"] [Sun Jul 12 18:15:54.519033 2026] [security2:error] [pid 979474:tid 979722] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuOXTrIlbXpLXvkNcM2wAAAPU"] [Sun Jul 12 18:15:54.524244 2026] [security2:error] [pid 967714:tid 967955] [client 134.209.113.159:59610] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUggAAAW4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.525311 2026] [security2:error] [pid 960377:tid 960510] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOhMANaV5i2_BLQoiJwAAAAI"] [Sun Jul 12 18:15:54.530711 2026] [security2:error] [pid 960377:tid 960531] [client 20.63.87.152:2967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/123.php"] [unique_id "alQuOhMANaV5i2_BLQoiMQAAABc"] [Sun Jul 12 18:15:54.585533 2026] [security2:error] [pid 967714:tid 967912] [client 64.227.27.43:42286] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUgAAAAUM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.598647 2026] [authz_core:error] [pid 960377:tid 960547] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:54.599395 2026] [authz_core:error] [pid 960377:tid 960547] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:54.602062 2026] [security2:error] [pid 960377:tid 960508] [client 103.168.66.51:65317] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/staging/.env"] [unique_id "alQuOhMANaV5i2_BLQoiMgAAAAA"] [Sun Jul 12 18:15:54.622537 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOnTrIlbXpLXvkNcM5wAAALo"] [Sun Jul 12 18:15:54.645963 2026] [security2:error] [pid 960377:tid 960584] [client 20.63.87.152:26359] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/122.php"] [unique_id "alQuOhMANaV5i2_BLQoiNAAAAEw"] [Sun Jul 12 18:15:54.653170 2026] [security2:error] [pid 967714:tid 967898] [client 134.209.113.159:59594] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUgwAAATU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.692854 2026] [security2:error] [pid 967714:tid 967737] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/auth-app/backend/.env"] [unique_id "alQuOl_56DeKknhy7sMUpAABWAs"] [Sun Jul 12 18:15:54.724942 2026] [security2:error] [pid 967714:tid 967948] [client 198.211.102.67:42962] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUgQAAAWc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.756354 2026] [security2:error] [pid 960377:tid 960554] [client 125.167.21.72:62609] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuOhMANaV5i2_BLQoiNgAAAC4"] [Sun Jul 12 18:15:54.756596 2026] [security2:error] [pid 960377:tid 960554] [client 125.167.21.72:62609] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuOhMANaV5i2_BLQoiNgAAAC4"] [Sun Jul 12 18:15:54.772868 2026] [security2:error] [pid 960377:tid 960520] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOhMANaV5i2_BLQoiNQAAAAw"] [Sun Jul 12 18:15:54.798072 2026] [security2:error] [pid 960377:tid 960626] [client 142.93.207.248:53424] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiHgAAAHY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.808528 2026] [security2:error] [pid 967714:tid 967956] [client 20.63.87.152:2990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/13.php"] [unique_id "alQuOl_56DeKknhy7sMUqQAAAW8"] [Sun Jul 12 18:15:54.813800 2026] [security2:error] [pid 967714:tid 967889] [client 168.100.149.15:21878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13130/bargainor/2308_limnoria.jsp"] [unique_id "alQuOl_56DeKknhy7sMUqgAAASw"] [Sun Jul 12 18:15:54.860257 2026] [security2:error] [pid 960377:tid 960629] [client 103.168.66.51:55263] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/environments/staging.rb"] [unique_id "alQuOhMANaV5i2_BLQoiNwAAAHk"] [Sun Jul 12 18:15:54.861694 2026] [security2:error] [pid 960377:tid 960587] [client 206.81.13.198:50460] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiIAAAAE8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.906480 2026] [security2:error] [pid 967714:tid 967909] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuOl_56DeKknhy7sMUlAAAAUA"] [Sun Jul 12 18:15:54.911288 2026] [security2:error] [pid 979474:tid 979723] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOnTrIlbXpLXvkNcM6QAAAPY"] [Sun Jul 12 18:15:54.912989 2026] [autoindex:error] [pid 967714:tid 967926] [client 43.136.86.241:43036] AH01276: Cannot serve directory /home4/homeyeat/public_html/homeyeats/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:15:54.922992 2026] [security2:error] [pid 967714:tid 967969] [client 65.21.113.206:58882] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzUzNjUvbTIvMzg3MDUvMg=="] [unique_id "alQuOl_56DeKknhy7sMUkgAAAXw"] [Sun Jul 12 18:15:54.968882 2026] [security2:error] [pid 967714:tid 967909] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuOl_56DeKknhy7sMUlAAAAUA"] [Sun Jul 12 18:15:54.934933 2026] [security2:error] [pid 960377:tid 960567] [client 198.211.96.118:45978] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiHwAAADs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:54.962467 2026] [security2:error] [pid 979474:tid 979616] [client 20.63.87.152:42061] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/123.php"] [unique_id "alQuOnTrIlbXpLXvkNcM7gAAAIw"] [Sun Jul 12 18:15:55.004187 2026] [security2:error] [pid 960377:tid 960406] [remote 47.128.57.253:47344] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.shiromi.com"] [uri "/origami/gallery/Misc/Roosterss"] [unique_id "alQuOxMANaV5i2_BLQoiOQAAEhw"] [Sun Jul 12 18:15:55.013264 2026] [security2:error] [pid 967714:tid 967905] [client 142.93.207.248:53436] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUhQAAATw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.083381 2026] [security2:error] [pid 960377:tid 960583] [client 64.227.27.43:42274] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiIgAAAEs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.107970 2026] [security2:error] [pid 960377:tid 960561] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohTgAAADg"] [Sun Jul 12 18:15:55.110295 2026] [security2:error] [pid 967714:tid 967947] [client 20.63.87.152:14255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/133.php"] [unique_id "alQuO1_56DeKknhy7sMUtwAAAWY"] [Sun Jul 12 18:15:55.114356 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuOl_56DeKknhy7sMUtgAAAW0"] [Sun Jul 12 18:15:55.142958 2026] [security2:error] [pid 960377:tid 960558] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohUgAAACs"] [Sun Jul 12 18:15:55.148029 2026] [security2:error] [pid 967714:tid 967911] [client 103.168.66.51:59381] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/storage/logs/laravel.log"] [unique_id "alQuO1_56DeKknhy7sMUuAAAAUI"] [Sun Jul 12 18:15:55.156649 2026] [security2:error] [pid 960377:tid 960622] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuOhMANaV5i2_BLQoiOAAAAHI"] [Sun Jul 12 18:15:55.191580 2026] [security2:error] [pid 960377:tid 960545] [client 192.241.138.251:52726] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOhMANaV5i2_BLQoiIQAAACU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.240450 2026] [security2:error] [pid 979474:tid 979639] [client 20.63.87.152:26331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/13.php"] [unique_id "alQuO3TrIlbXpLXvkNcM8QAAAKM"] [Sun Jul 12 18:15:55.242470 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/.gitlab-ci/.env"] [unique_id "alQuO1_56DeKknhy7sMUugABEns"] [Sun Jul 12 18:15:55.264191 2026] [security2:error] [pid 967714:tid 967890] [client 206.81.13.198:50466] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUhgAAAS0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.317348 2026] [security2:error] [pid 967714:tid 967967] [client 198.211.102.67:42966] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUiAAAAXo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.385253 2026] [security2:error] [pid 967714:tid 967950] [client 142.93.207.248:53418] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUhwAAAWk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.411802 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:55.412289 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:55.456876 2026] [security2:error] [pid 967714:tid 967970] [client 192.241.138.251:52710] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUiQAAAX0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.467393 2026] [security2:error] [pid 967714:tid 967888] [client 20.63.87.152:19918] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/155.php"] [unique_id "alQuO1_56DeKknhy7sMUwQAAASs"] [Sun Jul 12 18:15:55.505096 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuOl_56DeKknhy7sMUmwAAAXQ"] [Sun Jul 12 18:15:55.521759 2026] [security2:error] [pid 967714:tid 967976] [client 20.63.87.152:26306] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/133.php"] [unique_id "alQuO1_56DeKknhy7sMUxAAAAYM"] [Sun Jul 12 18:15:55.522434 2026] [security2:error] [pid 960377:tid 960601] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuOhMANaV5i2_BLQoiMwAAXTU"] [Sun Jul 12 18:15:55.540035 2026] [security2:error] [pid 967714:tid 967856] [client 198.211.96.118:45996] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUigAAAQs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.564896 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuOl_56DeKknhy7sMUnwAAATE"] [Sun Jul 12 18:15:55.587681 2026] [security2:error] [pid 967714:tid 967882] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuO1_56DeKknhy7sMUvQAAASU"] [Sun Jul 12 18:15:55.599974 2026] [security2:error] [pid 967714:tid 967945] [client 198.211.102.67:42970] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUjAAAAWQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.618288 2026] [security2:error] [pid 967714:tid 967912] [client 103.168.66.51:49832] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/env.yaml"] [unique_id "alQuO1_56DeKknhy7sMUxwAAAUM"] [Sun Jul 12 18:15:55.653061 2026] [security2:error] [pid 967714:tid 967879] [client 134.209.127.251:49332] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUjQAAASI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.704989 2026] [security2:error] [pid 967714:tid 967872] [client 24.203.79.110:61915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuO1_56DeKknhy7sMUyAAAARs"] [Sun Jul 12 18:15:55.706969 2026] [security2:error] [pid 967714:tid 967913] [client 134.209.127.251:49336] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUjgAAAUQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.711134 2026] [security2:error] [pid 967714:tid 967872] [client 24.203.79.110:61915] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuO1_56DeKknhy7sMUyAAAARs"] [Sun Jul 12 18:15:55.712935 2026] [security2:error] [pid 967714:tid 967920] [client 20.63.87.152:11992] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/177.php"] [unique_id "alQuO1_56DeKknhy7sMUyQAAAUs"] [Sun Jul 12 18:15:55.772159 2026] [security2:error] [pid 967714:tid 967906] [client 20.63.87.152:2389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/155.php"] [unique_id "alQuO1_56DeKknhy7sMUzAAAAT0"] [Sun Jul 12 18:15:55.772692 2026] [security2:error] [pid 967714:tid 967980] [client 198.211.102.67:42946] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUkQAAAYc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.832154 2026] [security2:error] [pid 967714:tid 967919] [client 134.209.113.159:59620] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUkAAAAUo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.942909 2026] [security2:error] [pid 967714:tid 967968] [client 165.22.243.62:34988] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuOl_56DeKknhy7sMUoAAAAXs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:55.961015 2026] [security2:error] [pid 967714:tid 967966] [client 20.63.87.152:2988] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/1index.php"] [unique_id "alQuO1_56DeKknhy7sMU0QAAAXk"] [Sun Jul 12 18:15:55.984599 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuO1_56DeKknhy7sMUzQAAASw"] [Sun Jul 12 18:15:56.002803 2026] [security2:error] [pid 960377:tid 960616] [client 20.63.87.152:25296] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/177.php"] [unique_id "alQuPBMANaV5i2_BLQoiRwAAAGw"] [Sun Jul 12 18:15:56.117010 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSmQAAAQo"] [Sun Jul 12 18:15:56.196881 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuPBMANaV5i2_BLQoiRgAAAE4"] [Sun Jul 12 18:15:56.216035 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:56.216517 2026] [authz_core:error] [pid 967714:tid 967896] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:56.235023 2026] [security2:error] [pid 960377:tid 960557] [client 20.63.87.152:4917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/1index.php"] [unique_id "alQuPBMANaV5i2_BLQoiSgAAADE"] [Sun Jul 12 18:15:56.260778 2026] [security2:error] [pid 967714:tid 967867] [client 20.63.87.152:24715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/2.php"] [unique_id "alQuPF_56DeKknhy7sMU4AAAARY"] [Sun Jul 12 18:15:56.314818 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuPF_56DeKknhy7sMU2gAAARQ"] [Sun Jul 12 18:15:56.434921 2026] [security2:error] [pid 967714:tid 967897] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPF_56DeKknhy7sMU2wAAATQ"] [Sun Jul 12 18:15:56.452655 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/API/.env.bak"] [unique_id "alQuPF_56DeKknhy7sMU6AABcXo"] [Sun Jul 12 18:15:56.489805 2026] [security2:error] [pid 967714:tid 967975] [client 20.63.87.152:32701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/2.php"] [unique_id "alQuPF_56DeKknhy7sMU7QAAAYI"] [Sun Jul 12 18:15:56.512751 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Helmetjs/.env"] [unique_id "alQuPF_56DeKknhy7sMU7wABYVI"] [Sun Jul 12 18:15:56.532277 2026] [security2:error] [pid 960377:tid 960519] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuOxMANaV5i2_BLQoiQgAAC1Y"] [Sun Jul 12 18:15:56.538295 2026] [security2:error] [pid 979474:tid 979682] [client 20.63.87.152:19363] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/222.php"] [unique_id "alQuPHTrIlbXpLXvkNcM8wAAAM0"] [Sun Jul 12 18:15:56.570167 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuOxMANaV5i2_BLQoiPgAAAFI"] [Sun Jul 12 18:15:56.576598 2026] [security2:error] [pid 979474:tid 979702] [client 14.249.95.156:58955] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuO3TrIlbXpLXvkNcM7wAAAOE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:56.589648 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Imagebord/.env"] [unique_id "alQuPF_56DeKknhy7sMU9gABaDk"] [Sun Jul 12 18:15:56.660336 2026] [security2:error] [pid 979474:tid 979672] [client 14.226.204.132:41554] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuO3TrIlbXpLXvkNcM8AAAAMQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:56.692925 2026] [security2:error] [pid 960377:tid 960392] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/data/.env"] [unique_id "alQuPBMANaV5i2_BLQoiTQAAWw4"] [Sun Jul 12 18:15:56.722544 2026] [security2:error] [pid 960377:tid 960521] [client 20.63.87.152:5401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/222.php"] [unique_id "alQuPBMANaV5i2_BLQoiTgAAAA0"] [Sun Jul 12 18:15:56.808180 2026] [security2:error] [pid 967714:tid 967963] [client 14.165.65.143:39556] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuO1_56DeKknhy7sMU0AAAAXY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:56.816578 2026] [security2:error] [pid 967714:tid 967891] [client 168.100.149.69:26190] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13195/bargainor/2308_milksopism.jsp"] [unique_id "alQuPF_56DeKknhy7sMVAQAAAS4"] [Sun Jul 12 18:15:56.827451 2026] [security2:error] [pid 967714:tid 967906] [client 20.63.87.152:2960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/2p.update.php"] [unique_id "alQuPF_56DeKknhy7sMVAgAAAT0"] [Sun Jul 12 18:15:56.851419 2026] [security2:error] [pid 960377:tid 960431] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/database/.env"] [unique_id "alQuPBMANaV5i2_BLQoiTwAASDQ"] [Sun Jul 12 18:15:56.861546 2026] [security2:error] [pid 967714:tid 967956] [client 51.68.111.245:34737] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "carolinasdepressionclinic.com"] [uri "/robots.txt"] [unique_id "alQuPF_56DeKknhy7sMVBAAAAW8"] [Sun Jul 12 18:15:56.861872 2026] [security2:error] [pid 967714:tid 967956] [client 51.68.111.245:34737] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "carolinasdepressionclinic.com"] [uri "/robots.txt"] [unique_id "alQuPF_56DeKknhy7sMVBAAAAW8"] [Sun Jul 12 18:15:56.865659 2026] [security2:error] [pid 967714:tid 967948] [client 138.118.107.130:55764] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU2QAAAWc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:56.870872 2026] [security2:error] [pid 979474:tid 979650] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPHTrIlbXpLXvkNcM9wAAAK4"] [Sun Jul 12 18:15:56.883742 2026] [security2:error] [pid 960377:tid 960535] [client 57.141.18.66:28788] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "suralaconsulting.com"] [uri "/index.php"] [unique_id "alQuPBMANaV5i2_BLQoiSwAAGxg"] [Sun Jul 12 18:15:56.906376 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/InstantCV/server/.env"] [unique_id "alQuPF_56DeKknhy7sMVCwABiEA"] [Sun Jul 12 18:15:56.929106 2026] [security2:error] [pid 979474:tid 979678] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzY3NjgvbTIvMzg3MDUvMg=="] [unique_id "alQuPHTrIlbXpLXvkNcM-AAAAMo"] [Sun Jul 12 18:15:56.934273 2026] [security2:error] [pid 967714:tid 967939] [client 197.185.161.63:33065] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU3AAAAV4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.004063 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:57.004581 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:57.011609 2026] [security2:error] [pid 960377:tid 960396] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dataset1/.env"] [unique_id "alQuPRMANaV5i2_BLQoiUQAAcxI"] [Sun Jul 12 18:15:57.021080 2026] [security2:error] [pid 967714:tid 967858] [client 20.63.87.152:2803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/2p.update.php"] [unique_id "alQuPV_56DeKknhy7sMVFAAAAQ0"] [Sun Jul 12 18:15:57.116248 2026] [security2:error] [pid 967714:tid 967940] [client 20.63.87.152:14227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/3.php"] [unique_id "alQuPV_56DeKknhy7sMVGAAAAV8"] [Sun Jul 12 18:15:57.118517 2026] [security2:error] [pid 960377:tid 960574] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuOxMANaV5i2_BLQoiQQAAAEI"] [Sun Jul 12 18:15:57.171457 2026] [security2:error] [pid 960377:tid 960414] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dataset2/.env"] [unique_id "alQuPRMANaV5i2_BLQoiUwAAXiM"] [Sun Jul 12 18:15:57.277409 2026] [security2:error] [pid 967714:tid 967909] [client 46.98.144.106:40615] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU5wAAAUA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.340098 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Kubernetes/.env"] [unique_id "alQuPV_56DeKknhy7sMVHQABQTA"] [Sun Jul 12 18:15:57.350895 2026] [security2:error] [pid 960377:tid 960627] [client 14.240.164.16:56311] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPBMANaV5i2_BLQoiTAAAAHc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.369611 2026] [security2:error] [pid 967714:tid 967884] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPV_56DeKknhy7sMVFwAAASc"] [Sun Jul 12 18:15:57.375045 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Serve_time_server/.env"] [unique_id "alQuPV_56DeKknhy7sMVHgABTRY"] [Sun Jul 12 18:15:57.385218 2026] [security2:error] [pid 967714:tid 967911] [client 20.63.87.152:20015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQuPV_56DeKknhy7sMVIAAAAUI"] [Sun Jul 12 18:15:57.433841 2026] [security2:error] [pid 967714:tid 967930] [client 196.188.36.204:4173] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU7AAAAVU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.452118 2026] [security2:error] [pid 967714:tid 967868] [client 20.63.87.152:2787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/3.php"] [unique_id "alQuPV_56DeKknhy7sMVIwAAARc"] [Sun Jul 12 18:15:57.496203 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Server_with_db/.env"] [unique_id "alQuPV_56DeKknhy7sMVJQABdy4"] [Sun Jul 12 18:15:57.517066 2026] [security2:error] [pid 967714:tid 967947] [client 40.223.155.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuPF_56DeKknhy7sMVEgAAAWY"] [Sun Jul 12 18:15:57.591431 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Simple_server/.env"] [unique_id "alQuPV_56DeKknhy7sMVJwABMUI"] [Sun Jul 12 18:15:57.597255 2026] [security2:error] [pid 967714:tid 967976] [client 125.235.231.134:5664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU_gAAAYM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.655467 2026] [security2:error] [pid 967714:tid 967892] [client 20.63.87.152:20002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/403.php"] [unique_id "alQuPV_56DeKknhy7sMVKAAAAS8"] [Sun Jul 12 18:15:57.669739 2026] [security2:error] [pid 967714:tid 967900] [client 181.163.43.137:40008] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMU_wAAATc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.673595 2026] [security2:error] [pid 967714:tid 967869] [client 20.63.87.152:20103] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQuPV_56DeKknhy7sMVKQAAARg"] [Sun Jul 12 18:15:57.715415 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Socketio/.env"] [unique_id "alQuPV_56DeKknhy7sMVKwABTlU"] [Sun Jul 12 18:15:57.740109 2026] [security2:error] [pid 967714:tid 967916] [client 186.57.78.155:41854] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPF_56DeKknhy7sMVAwAAAUc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:57.800788 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/Sources/API/.env"] [unique_id "alQuPV_56DeKknhy7sMVMAABczg"] [Sun Jul 12 18:15:57.810457 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/__info.php"] [unique_id "alQuPV_56DeKknhy7sMVMgABPR0"] [Sun Jul 12 18:15:57.846380 2026] [security2:error] [pid 979474:tid 979687] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPXTrIlbXpLXvkNcM-wAAANI"] [Sun Jul 12 18:15:57.866529 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:57.867053 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:57.870836 2026] [security2:error] [pid 960377:tid 960632] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuPRMANaV5i2_BLQoiWAAAAHw"] [Sun Jul 12 18:15:57.870906 2026] [security2:error] [pid 960377:tid 960632] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuPRMANaV5i2_BLQoiWAAAAHw"] [Sun Jul 12 18:15:57.872129 2026] [security2:error] [pid 960377:tid 960516] [client 65.21.113.206:58888] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW0yMWVlLzY3NjgvbTIvMzg3MDUvMg=="] [unique_id "alQuPRMANaV5i2_BLQoiVQAAAAg"] [Sun Jul 12 18:15:57.928226 2026] [security2:error] [pid 979474:tid 979719] [client 124.31.106.250:35732] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "69.195.73.131"] [uri "/"] [unique_id "alQuPXTrIlbXpLXvkNcNAAAAAPI"] [Sun Jul 12 18:15:57.943043 2026] [security2:error] [pid 960377:tid 960626] [client 20.63.87.152:4895] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/403.php"] [unique_id "alQuPRMANaV5i2_BLQoiXgAAAHY"] [Sun Jul 12 18:15:57.992304 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/__tests__/test-become/.env"] [unique_id "alQuPV_56DeKknhy7sMVNwABiHM"] [Sun Jul 12 18:15:58.056159 2026] [core:error] [pid 960377:tid 960549] [client 3.129.187.38:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50.87.16.240/ [Sun Jul 12 18:15:58.060486 2026] [core:error] [pid 960377:tid 960549] [client 3.129.187.38:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: http://50.87.16.240/ [Sun Jul 12 18:15:58.056256 2026] [security2:error] [pid 960377:tid 960605] [client 20.63.87.152:20020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.hhworld-net.earn2give.com"] [uri "/404.php"] [unique_id "alQuPhMANaV5i2_BLQoiYQAAAGE"] [Sun Jul 12 18:15:58.065365 2026] [security2:error] [pid 960377:tid 960589] [client 103.168.66.51:60729] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/test.php"] [unique_id "alQuPhMANaV5i2_BLQoiYgAAAFE"] [Sun Jul 12 18:15:58.090398 2026] [security2:error] [pid 979474:tid 979698] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMDgAAAN0"] [Sun Jul 12 18:15:58.092881 2026] [security2:error] [pid 979474:tid 979680] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuL3TrIlbXpLXvkNcMKgAAAMs"] [Sun Jul 12 18:15:58.104056 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMCAAAAPQ"] [Sun Jul 12 18:15:58.106985 2026] [security2:error] [pid 967714:tid 967858] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLV_56DeKknhy7sMSmgAAAUU"] [Sun Jul 12 18:15:58.117574 2026] [security2:error] [pid 960377:tid 960513] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohSQAAAHE"] [Sun Jul 12 18:15:58.210939 2026] [security2:error] [pid 979474:tid 979711] [client 20.63.87.152:25340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.homeyeats.com"] [uri "/404.php"] [unique_id "alQuPnTrIlbXpLXvkNcNCQAAAOo"] [Sun Jul 12 18:15:58.212861 2026] [security2:error] [pid 960377:tid 960531] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuPRMANaV5i2_BLQoiVAAAF1M"] [Sun Jul 12 18:15:58.233611 2026] [security2:error] [pid 960377:tid 960582] [client 196.83.22.184:49394] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPRMANaV5i2_BLQoiUgAAAEo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.297716 2026] [security2:error] [pid 960377:tid 960540] [client 103.168.66.51:59323] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config.inc.php"] [unique_id "alQuPhMANaV5i2_BLQoiZAAAACA"] [Sun Jul 12 18:15:58.299724 2026] [security2:error] [pid 967714:tid 967902] [client 189.172.184.179:43720] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPV_56DeKknhy7sMVGwAAATk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.350124 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuPnTrIlbXpLXvkNcNCAAAALE"] [Sun Jul 12 18:15:58.351571 2026] [security2:error] [pid 967714:tid 967855] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPl_56DeKknhy7sMVOgAAAQo"] [Sun Jul 12 18:15:58.362801 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/acme-challenge/.env"] [unique_id "alQuPl_56DeKknhy7sMVPwABaVA"] [Sun Jul 12 18:15:58.382932 2026] [security2:error] [pid 979474:tid 979621] [client 177.71.27.231:59102] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPXTrIlbXpLXvkNcM-QAAAJE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.410564 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/acme/.env"] [unique_id "alQuPl_56DeKknhy7sMVQgABRjI"] [Sun Jul 12 18:15:58.447555 2026] [security2:error] [pid 967714:tid 967860] [client 186.224.57.167:21901] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPV_56DeKknhy7sMVJAAAAQ8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.495790 2026] [security2:error] [pid 967714:tid 967979] [client 202.76.143.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuPV_56DeKknhy7sMVOAAAAYY"] [Sun Jul 12 18:15:58.513048 2026] [security2:error] [pid 967714:tid 967883] [client 138.255.197.11:48738] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPV_56DeKknhy7sMVLAAAASY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.644473 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:58.644987 2026] [authz_core:error] [pid 960377:tid 960536] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:58.674921 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/acme_challenges/.env"] [unique_id "alQuPl_56DeKknhy7sMVRwABYAM"] [Sun Jul 12 18:15:58.744783 2026] [security2:error] [pid 979474:tid 979706] [client 177.35.193.63:1220] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPXTrIlbXpLXvkNcM_AAAAOU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.804260 2026] [security2:error] [pid 967714:tid 967965] [client 191.6.104.220:63746] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPV_56DeKknhy7sMVMwAAAXg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.829987 2026] [security2:error] [pid 967714:tid 967930] [client 168.100.149.102:24394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13260/bargainor/2308_capnoides.jsp"] [unique_id "alQuPl_56DeKknhy7sMVSwAAAVU"] [Sun Jul 12 18:15:58.867805 2026] [security2:error] [pid 967714:tid 967966] [client 176.122.109.176:53146] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPV_56DeKknhy7sMVNQAAAXk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:58.910358 2026] [security2:error] [pid 979474:tid 979703] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuPnTrIlbXpLXvkNcNEQAAAOI"] [Sun Jul 12 18:15:59.058605 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/actions-server/.env"] [unique_id "alQuP1_56DeKknhy7sMVTwABHxE"] [Sun Jul 12 18:15:59.119193 2026] [security2:error] [pid 979474:tid 979615] [client 60.166.83.150:57273] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "69.195.73.131"] [uri "/"] [unique_id "alQuP3TrIlbXpLXvkNcNFgAAAIs"] [Sun Jul 12 18:15:59.161262 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMDAAAAKo"] [Sun Jul 12 18:15:59.200237 2026] [security2:error] [pid 960377:tid 960557] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohTQAAAG8"] [Sun Jul 12 18:15:59.203653 2026] [security2:error] [pid 960377:tid 960609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohUQAAAAY"] [Sun Jul 12 18:15:59.230043 2026] [security2:error] [pid 960377:tid 960496] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuPhMANaV5i2_BLQoiZQAAEHU"] [Sun Jul 12 18:15:59.249778 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/adm/.env"] [unique_id "alQuP1_56DeKknhy7sMVVAABVxc"] [Sun Jul 12 18:15:59.273754 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuIl_56DeKknhy7sMU8gABVg8"] [Sun Jul 12 18:15:59.369150 2026] [security2:error] [pid 960377:tid 960511] [client 200.152.88.76:59159] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPhMANaV5i2_BLQoiZgAAAAM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:59.378586 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuPF_56DeKknhy7sMU-AAAAUQ"] [Sun Jul 12 18:15:59.390269 2026] [security2:error] [pid 960377:tid 960463] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/db.sql"] [unique_id "alQuPxMANaV5i2_BLQoigAAAUlQ"] [Sun Jul 12 18:15:59.397998 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuPF_56DeKknhy7sMU9wAAASo"] [Sun Jul 12 18:15:59.442613 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:15:59.463575 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/adm/.env.bak"] [unique_id "alQuP1_56DeKknhy7sMVYAABG0s"] [Sun Jul 12 18:15:59.479765 2026] [authz_core:error] [pid 967714:tid 967942] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:15:59.522393 2026] [security2:error] [pid 967714:tid 967944] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuP1_56DeKknhy7sMVUwAAAWM"] [Sun Jul 12 18:15:59.531994 2026] [security2:error] [pid 960377:tid 960534] [client 179.60.64.47:12920] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPhMANaV5i2_BLQoicAAAABo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:59.551366 2026] [security2:error] [pid 960377:tid 960413] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/db_backup.sql"] [unique_id "alQuPxMANaV5i2_BLQoigQAAYyI"] [Sun Jul 12 18:15:59.581078 2026] [security2:error] [pid 979474:tid 979717] [client 103.168.66.51:49850] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/demo/.env"] [unique_id "alQuP3TrIlbXpLXvkNcNGQAAAPA"] [Sun Jul 12 18:15:59.593173 2026] [security2:error] [pid 979474:tid 979626] [client 160.20.204.109:63058] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPnTrIlbXpLXvkNcNDwAAAJY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:59.687737 2026] [security2:error] [pid 960377:tid 960572] [client 200.140.237.235:45987] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPhMANaV5i2_BLQoicwAAAEA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:59.734405 2026] [security2:error] [pid 979474:tid 979736] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuP3TrIlbXpLXvkNcNGgAAAQM"] [Sun Jul 12 18:15:59.756012 2026] [security2:error] [pid 967714:tid 967865] [client 181.63.27.95:6043] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPl_56DeKknhy7sMVSAAAARQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:15:59.797961 2026] [security2:error] [pid 967714:tid 967971] [client 103.168.66.51:49688] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/bootstrap-dev.yml"] [unique_id "alQuP1_56DeKknhy7sMVZwAAAX4"] [Sun Jul 12 18:15:59.936565 2026] [security2:error] [pid 979474:tid 979662] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuP3TrIlbXpLXvkNcNHgAAALo"] [Sun Jul 12 18:16:00.030528 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuPxMANaV5i2_BLQoihgAAAEg"] [Sun Jul 12 18:16:00.095008 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuPV_56DeKknhy7sMVHAAAAX8"] [Sun Jul 12 18:16:00.105507 2026] [security2:error] [pid 960377:tid 960604] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohVQAAAGA"] [Sun Jul 12 18:16:00.115839 2026] [security2:error] [pid 960377:tid 960532] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohTAAAABg"] [Sun Jul 12 18:16:00.120988 2026] [security2:error] [pid 979474:tid 979685] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMCQAAANw"] [Sun Jul 12 18:16:00.138354 2026] [security2:error] [pid 979474:tid 979683] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMBgAAAM4"] [Sun Jul 12 18:16:00.140245 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuL1_56DeKknhy7sMS9QAAAVs"] [Sun Jul 12 18:16:00.158472 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLxMANaV5i2_BLQohcgAAADo"] [Sun Jul 12 18:16:00.162867 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMBwAAAI0"] [Sun Jul 12 18:16:00.165432 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLXTrIlbXpLXvkNcMAwAAAJo"] [Sun Jul 12 18:16:00.180465 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuL1_56DeKknhy7sMS9gAAARk"] [Sun Jul 12 18:16:00.191091 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/adm/help/info.php"] [unique_id "alQuQF_56DeKknhy7sMVeAABQAE"] [Sun Jul 12 18:16:00.259213 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuL1_56DeKknhy7sMS9AAAATI"] [Sun Jul 12 18:16:00.262133 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQuLRMANaV5i2_BLQohUwAAAFw"] [Sun Jul 12 18:16:00.283861 2026] [security2:error] [pid 960377:tid 960631] [client 186.5.243.25:43264] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuPxMANaV5i2_BLQoifwAAAHs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:00.296048 2026] [authz_core:error] [pid 967714:tid 967915] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:00.296613 2026] [authz_core:error] [pid 967714:tid 967915] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:00.434400 2026] [security2:error] [pid 967714:tid 967926] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQF_56DeKknhy7sMVdgAAAVE"] [Sun Jul 12 18:16:00.460364 2026] [security2:error] [pid 960377:tid 960613] [client 103.168.66.51:59176] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/env.json"] [unique_id "alQuQBMANaV5i2_BLQoijgAAAGk"] [Sun Jul 12 18:16:00.536351 2026] [security2:error] [pid 960377:tid 960521] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuPxMANaV5i2_BLQoigwAADVE"] [Sun Jul 12 18:16:00.617348 2026] [security2:error] [pid 967714:tid 967826] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin.php.swp"] [unique_id "alQuQF_56DeKknhy7sMVgwABGmQ"] [Sun Jul 12 18:16:00.620492 2026] [security2:error] [pid 967714:tid 967738] [remote 184.168.124.4:50316] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQuQF_56DeKknhy7sMVhAABDAw"] [Sun Jul 12 18:16:00.709640 2026] [security2:error] [pid 967714:tid 967807] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/adm/infophp.php"] [unique_id "alQuQF_56DeKknhy7sMViwABN1E"] [Sun Jul 12 18:16:00.788495 2026] [security2:error] [pid 967714:tid 967852] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/connection.php.copy"] [unique_id "alQuQF_56DeKknhy7sMVjAABTn4"] [Sun Jul 12 18:16:00.790790 2026] [security2:error] [pid 967714:tid 967904] [client 103.168.66.51:50447] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/adminer.php"] [unique_id "alQuQF_56DeKknhy7sMVjgAAATs"] [Sun Jul 12 18:16:00.791002 2026] [security2:error] [pid 967714:tid 967879] [client 168.100.149.30:24850] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13325/bargainor/2308_deft.jsp"] [unique_id "alQuQF_56DeKknhy7sMVjQAAASI"] [Sun Jul 12 18:16:00.957705 2026] [security2:error] [pid 967714:tid 967790] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/promo/.env"] [unique_id "alQuQF_56DeKknhy7sMVwQABZEA"] [Sun Jul 12 18:16:00.961554 2026] [security2:error] [pid 960377:tid 960608] [client 103.168.66.51:57906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/queue.php"] [unique_id "alQuQBMANaV5i2_BLQoikgAAAGQ"] [Sun Jul 12 18:16:00.992685 2026] [security2:error] [pid 979474:tid 979690] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1fNDE3L205dy8zMTE2NV85dw==.htm"] [unique_id "alQuQHTrIlbXpLXvkNcNKAAAANU"] [Sun Jul 12 18:16:01.098816 2026] [authz_core:error] [pid 979474:tid 979613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:01.099327 2026] [authz_core:error] [pid 979474:tid 979613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:01.106563 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/adm/services/phpinfo.php"] [unique_id "alQuQV_56DeKknhy7sMVxgABdHw"] [Sun Jul 12 18:16:01.145407 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuP1_56DeKknhy7sMVXwAAAT0"] [Sun Jul 12 18:16:01.207159 2026] [security2:error] [pid 979474:tid 979709] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuQHTrIlbXpLXvkNcNIwAAAOg"] [Sun Jul 12 18:16:01.465524 2026] [security2:error] [pid 979474:tid 979668] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQXTrIlbXpLXvkNcNLAAAAMA"] [Sun Jul 12 18:16:01.468284 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/adm/temp.php"] [unique_id "alQuQV_56DeKknhy7sMV2AABWkI"] [Sun Jul 12 18:16:01.504135 2026] [security2:error] [pid 960377:tid 960626] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuQBMANaV5i2_BLQoikQAAdho"] [Sun Jul 12 18:16:01.536188 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/admin-app/.env"] [unique_id "alQuQV_56DeKknhy7sMV2gABElU"] [Sun Jul 12 18:16:01.660213 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/admin/.env.bak"] [unique_id "alQuQV_56DeKknhy7sMV3AABUh0"] [Sun Jul 12 18:16:01.722596 2026] [security2:error] [pid 979474:tid 979645] [client 201.254.15.221:40658] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuQHTrIlbXpLXvkNcNJAAAAKk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:01.797161 2026] [security2:error] [pid 967714:tid 967878] [client 113.176.220.190:34622] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuQF_56DeKknhy7sMVjwAAASE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:01.975404 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:01.976182 2026] [authz_core:error] [pid 960377:tid 960582] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:02.046277 2026] [security2:error] [pid 979474:tid 979624] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQXTrIlbXpLXvkNcNOgAAAJQ"] [Sun Jul 12 18:16:02.129427 2026] [security2:error] [pid 960377:tid 960592] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuQRMANaV5i2_BLQoilQAAAFQ"] [Sun Jul 12 18:16:02.129503 2026] [security2:error] [pid 960377:tid 960592] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuQRMANaV5i2_BLQoilQAAAFQ"] [Sun Jul 12 18:16:02.152831 2026] [security2:error] [pid 967714:tid 967874] [client 65.21.113.206:58900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1fNDE3L205dy8zMTE2NV85dw==.htm"] [unique_id "alQuQV_56DeKknhy7sMV2QAAAR0"] [Sun Jul 12 18:16:02.198029 2026] [security2:error] [pid 967714:tid 967864] [client 91.191.1.183:54335] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuQV_56DeKknhy7sMV5AAAARM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:02.305494 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQhMANaV5i2_BLQoinQAAABY"] [Sun Jul 12 18:16:02.536021 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQl_56DeKknhy7sMV7QAAATI"] [Sun Jul 12 18:16:02.591184 2026] [security2:error] [pid 979474:tid 979706] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQnTrIlbXpLXvkNcNRwAAAOU"] [Sun Jul 12 18:16:02.664920 2026] [security2:error] [pid 960377:tid 960585] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQhMANaV5i2_BLQoiogAAAE0"] [Sun Jul 12 18:16:02.706945 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQhMANaV5i2_BLQoipAAAAEk"] [Sun Jul 12 18:16:02.742538 2026] [security2:error] [pid 960377:tid 960471] [remote 47.128.32.234:49226] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "nanjaladesign.com"] [uri "/ushirika/blog/"] [unique_id "alQuQhMANaV5i2_BLQoipgAAJFw"] [Sun Jul 12 18:16:02.749352 2026] [security2:error] [pid 967714:tid 967949] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQl_56DeKknhy7sMV9gAAAWg"] [Sun Jul 12 18:16:02.772548 2026] [security2:error] [pid 967714:tid 967894] [client 168.100.149.199:27458] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13390/bargainor/2308_did.jsp"] [unique_id "alQuQl_56DeKknhy7sMV_wAAATE"] [Sun Jul 12 18:16:02.940407 2026] [authz_core:error] [pid 979474:tid 979626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:02.941258 2026] [authz_core:error] [pid 979474:tid 979626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:02.952075 2026] [security2:error] [pid 979474:tid 979725] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQnTrIlbXpLXvkNcNUQAAAPg"] [Sun Jul 12 18:16:02.954526 2026] [security2:error] [pid 960377:tid 960556] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuQRMANaV5i2_BLQoilwAAMGw"] [Sun Jul 12 18:16:02.968268 2026] [security2:error] [pid 979474:tid 979685] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/new/settings.php"] [unique_id "alQuQnTrIlbXpLXvkNcNWwAAANA"] [Sun Jul 12 18:16:03.208136 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuQ1_56DeKknhy7sMWBgAAASI"] [Sun Jul 12 18:16:03.280410 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/api/info.php"] [unique_id "alQuQ1_56DeKknhy7sMWCwABZwU"] [Sun Jul 12 18:16:03.445060 2026] [security2:error] [pid 967714:tid 967888] [client 65.21.237.125:57958] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.johndmurray.org"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMV0gAAASs"], referer: http://www.johndmurray.org/robots.txt [Sun Jul 12 18:16:03.445131 2026] [security2:error] [pid 967714:tid 967888] [client 65.21.237.125:57958] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.johndmurray.org"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMV0gAAASs"], referer: http://www.johndmurray.org/robots.txt [Sun Jul 12 18:16:03.461331 2026] [security2:error] [pid 967714:tid 967933] [client 65.21.237.125:57956] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMVzgAAAVg"], referer: http://johndmurray.org/robots.txt [Sun Jul 12 18:16:03.486907 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/asdf.php"] [unique_id "alQuQ1_56DeKknhy7sMWEAABFGU"] [Sun Jul 12 18:16:03.534923 2026] [security2:error] [pid 967714:tid 967929] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQ1_56DeKknhy7sMWCgAAAVQ"] [Sun Jul 12 18:16:03.726842 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/backend/info.php"] [unique_id "alQuQ1_56DeKknhy7sMWGAABEXQ"] [Sun Jul 12 18:16:03.729097 2026] [security2:error] [pid 979474:tid 979682] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1fNDQ0NTlfbTIwci8yXzMwNThfMHI3.html"] [unique_id "alQuQ3TrIlbXpLXvkNcNYQAAAM0"] [Sun Jul 12 18:16:03.733605 2026] [security2:error] [pid 967714:tid 967928] [client 103.168.66.51:58069] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/requirements.txt"] [unique_id "alQuQ1_56DeKknhy7sMWGQAAAVM"] [Sun Jul 12 18:16:03.881212 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:03.881836 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:03.888496 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/backend/phpinfo.php"] [unique_id "alQuQ1_56DeKknhy7sMWGwABX0s"] [Sun Jul 12 18:16:04.006219 2026] [security2:error] [pid 979474:tid 979672] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuQ3TrIlbXpLXvkNcNYgAAAMQ"] [Sun Jul 12 18:16:04.078492 2026] [security2:error] [pid 979474:tid 979658] [client 94.187.171.125:62304] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuRHTrIlbXpLXvkNcNZQAAALY"] [Sun Jul 12 18:16:04.078817 2026] [security2:error] [pid 979474:tid 979658] [client 94.187.171.125:62304] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuRHTrIlbXpLXvkNcNZQAAALY"] [Sun Jul 12 18:16:04.079801 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuQxMANaV5i2_BLQoipwAAL0k"] [Sun Jul 12 18:16:04.094500 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMVywAAAUo"] [Sun Jul 12 18:16:04.112501 2026] [security2:error] [pid 979474:tid 979696] [client 64.176.198.37:57581] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "fraudvanguard.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQuRHTrIlbXpLXvkNcNZgAAANs"] [Sun Jul 12 18:16:04.142109 2026] [security2:error] [pid 979474:tid 979609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuQXTrIlbXpLXvkNcNLwAAAIU"] [Sun Jul 12 18:16:04.142167 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/backup/info.php"] [unique_id "alQuRF_56DeKknhy7sMWHgABDyM"] [Sun Jul 12 18:16:04.189517 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuQXTrIlbXpLXvkNcNMwAAAOE"] [Sun Jul 12 18:16:04.221807 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMVzAAAAU8"] [Sun Jul 12 18:16:04.515397 2026] [security2:error] [pid 960377:tid 960511] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRBMANaV5i2_BLQoisAAAAAM"] [Sun Jul 12 18:16:04.571119 2026] [security2:error] [pid 979474:tid 979716] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNbwAAAO8"] [Sun Jul 12 18:16:04.658499 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/crm/info.php"] [unique_id "alQuRF_56DeKknhy7sMWRQABQ38"] [Sun Jul 12 18:16:04.705945 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:04.706458 2026] [authz_core:error] [pid 979474:tid 979653] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:04.827553 2026] [security2:error] [pid 967714:tid 967895] [client 168.100.149.93:38694] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13455/bargainor/2308_delphian.jsp"] [unique_id "alQuRF_56DeKknhy7sMWYAAAATI"] [Sun Jul 12 18:16:04.838327 2026] [security2:error] [pid 979474:tid 979675] [client 66.9.160.208:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNcQAAAMc"] [Sun Jul 12 18:16:04.859743 2026] [security2:error] [pid 979474:tid 979650] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNagAAAK4"] [Sun Jul 12 18:16:04.859808 2026] [security2:error] [pid 979474:tid 979650] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNagAAAK4"] [Sun Jul 12 18:16:04.861960 2026] [security2:error] [pid 979474:tid 979634] [client 65.21.113.206:42138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1fNDQ0NTlfbTIwci8yXzMwNThfMHI3.html"] [unique_id "alQuRHTrIlbXpLXvkNcNaAAAAJ4"] [Sun Jul 12 18:16:05.052777 2026] [security2:error] [pid 979474:tid 979710] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNeQAAAOk"] [Sun Jul 12 18:16:05.194285 2026] [security2:error] [pid 960377:tid 960590] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuRBMANaV5i2_BLQoisgAAUn8"] [Sun Jul 12 18:16:05.324865 2026] [security2:error] [pid 967714:tid 967884] [client 125.167.21.72:63063] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuRV_56DeKknhy7sMWfgAAASc"] [Sun Jul 12 18:16:05.325155 2026] [security2:error] [pid 967714:tid 967884] [client 125.167.21.72:63063] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuRV_56DeKknhy7sMWfgAAASc"] [Sun Jul 12 18:16:05.351213 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/current/info.php"] [unique_id "alQuRV_56DeKknhy7sMWgAABIlI"] [Sun Jul 12 18:16:05.369424 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/login.php"] [unique_id "alQuJ1_56DeKknhy7sMWggABVlk"] [Sun Jul 12 18:16:05.370624 2026] [security2:error] [pid 979474:tid 979661] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuRHTrIlbXpLXvkNcNaQAAALk"] [Sun Jul 12 18:16:05.424264 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/dashboard/info.php"] [unique_id "alQuRV_56DeKknhy7sMWiwABTjk"] [Sun Jul 12 18:16:05.440074 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuJl_56DeKknhy7sMWIAABVl8"] [Sun Jul 12 18:16:05.514600 2026] [authz_core:error] [pid 967714:tid 967960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:05.515188 2026] [authz_core:error] [pid 967714:tid 967960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:05.520695 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRV_56DeKknhy7sMWfAAAAR4"] [Sun Jul 12 18:16:05.629017 2026] [security2:error] [pid 967714:tid 967888] [client 147.185.132.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.akkupc-ch.huakionline.com"] [uri "/404.php"] [unique_id "alQuRV_56DeKknhy7sMWkQAAASs"] [Sun Jul 12 18:16:05.635200 2026] [security2:error] [pid 960377:tid 960603] [client 147.185.132.96:64788] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.akkupc-ch.huakionline.com"] [uri "/webshell.php"] [unique_id "alQuRRMANaV5i2_BLQoivAAAAF8"] [Sun Jul 12 18:16:05.670217 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/database.php"] [unique_id "alQuRV_56DeKknhy7sMWmwABWFU"] [Sun Jul 12 18:16:05.777298 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuRV_56DeKknhy7sMWmAAAAX4"] [Sun Jul 12 18:16:05.832588 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/help/info.php"] [unique_id "alQuRV_56DeKknhy7sMWnwABIDg"] [Sun Jul 12 18:16:05.845510 2026] [security2:error] [pid 967714:tid 967973] [client 202.46.62.97:30062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQuRV_56DeKknhy7sMWoAAAAYA"], referer: https://www.stephenspublishing.com/economy-round-pencils-custom-p-487.html?osCsid=1epu76aenodiv8j5fpitgcfsi1 [Sun Jul 12 18:16:05.900342 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/helper/info.php"] [unique_id "alQuRV_56DeKknhy7sMWoQABZRA"] [Sun Jul 12 18:16:05.955821 2026] [security2:error] [pid 967714:tid 967886] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRV_56DeKknhy7sMWngAAASk"] [Sun Jul 12 18:16:06.067833 2026] [security2:error] [pid 967714:tid 967919] [client 147.185.132.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.akkupc-ch.huakionline.com"] [uri "/404.php"] [unique_id "alQuRV_56DeKknhy7sMWpQAAAUo"] [Sun Jul 12 18:16:06.136003 2026] [security2:error] [pid 967714:tid 967831] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/networks/.env"] [unique_id "alQuRl_56DeKknhy7sMWqQABQGk"] [Sun Jul 12 18:16:06.173522 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/infos.php"] [unique_id "alQuRl_56DeKknhy7sMWqgABMHM"] [Sun Jul 12 18:16:06.174034 2026] [security2:error] [pid 960377:tid 960594] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuRRMANaV5i2_BLQoiuAAAVlo"] [Sun Jul 12 18:16:06.284590 2026] [authz_core:error] [pid 979474:tid 979721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:06.285064 2026] [security2:error] [pid 979474:tid 979713] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1fNDQ0NTlfbTIwci8yXzk3XzByNw==.html"] [unique_id "alQuRnTrIlbXpLXvkNcNiwAAAOw"] [Sun Jul 12 18:16:06.285157 2026] [authz_core:error] [pid 979474:tid 979721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:06.328818 2026] [security2:error] [pid 979474:tid 979664] [client 24.203.79.110:62428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuRnTrIlbXpLXvkNcNjQAAALw"] [Sun Jul 12 18:16:06.335854 2026] [security2:error] [pid 979474:tid 979664] [client 24.203.79.110:62428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuRnTrIlbXpLXvkNcNjQAAALw"] [Sun Jul 12 18:16:06.468817 2026] [security2:error] [pid 979474:tid 979732] [client 65.21.237.125:57974] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.johndmurray.org"] [uri "/index.php"] [unique_id "alQuRnTrIlbXpLXvkNcNigAAAP8"], referer: http://www.johndmurray.org/ [Sun Jul 12 18:16:06.506996 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuRnTrIlbXpLXvkNcNkAAAALo"] [Sun Jul 12 18:16:06.646908 2026] [security2:error] [pid 979474:tid 979685] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRnTrIlbXpLXvkNcNjwAAANA"] [Sun Jul 12 18:16:06.657642 2026] [security2:error] [pid 960377:tid 960535] [client 65.21.237.125:57984] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuRhMANaV5i2_BLQoivwAAABs"], referer: http://johndmurray.org/ [Sun Jul 12 18:16:06.657968 2026] [security2:error] [pid 967714:tid 967785] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/lara/info.php"] [unique_id "alQuRl_56DeKknhy7sMWrgABXjs"] [Sun Jul 12 18:16:06.821151 2026] [security2:error] [pid 979474:tid 979673] [client 168.100.149.190:29894] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13520/bargainor/2308_anisodactyli.jsp"] [unique_id "alQuRnTrIlbXpLXvkNcNnAAAAMU"] [Sun Jul 12 18:16:06.939202 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/laravel/info.php"] [unique_id "alQuRl_56DeKknhy7sMWswABMkU"] [Sun Jul 12 18:16:07.098164 2026] [security2:error] [pid 967714:tid 967870] [client 57.141.18.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuQV_56DeKknhy7sMV4wAAARk"] [Sun Jul 12 18:16:07.116548 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/laravel/phpinfo.php"] [unique_id "alQuR1_56DeKknhy7sMWtQABaQY"] [Sun Jul 12 18:16:07.124355 2026] [authz_core:error] [pid 979474:tid 979734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:07.125130 2026] [authz_core:error] [pid 979474:tid 979734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:07.203522 2026] [security2:error] [pid 967714:tid 967873] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuRl_56DeKknhy7sMWsAAAARw"] [Sun Jul 12 18:16:07.463508 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/linusadmin-phpinfo.php"] [unique_id "alQuR1_56DeKknhy7sMWvgABSE0"] [Sun Jul 12 18:16:07.514209 2026] [security2:error] [pid 960377:tid 960574] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuRhMANaV5i2_BLQoiwAAAQm4"] [Sun Jul 12 18:16:07.571490 2026] [security2:error] [pid 979474:tid 979689] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuRnTrIlbXpLXvkNcNmgAAANQ"] [Sun Jul 12 18:16:07.571561 2026] [security2:error] [pid 979474:tid 979689] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuRnTrIlbXpLXvkNcNmgAAANQ"] [Sun Jul 12 18:16:07.572282 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/mail.php"] [unique_id "alQuR1_56DeKknhy7sMWygABJ2s"] [Sun Jul 12 18:16:07.574616 2026] [security2:error] [pid 979474:tid 979722] [client 65.21.113.206:42148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1fNDQ0NTlfbTIwci8yXzk3XzByNw==.html"] [unique_id "alQuRnTrIlbXpLXvkNcNmAAAAPU"] [Sun Jul 12 18:16:07.630003 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/old_phpinfo.php"] [unique_id "alQuR1_56DeKknhy7sMWzAABHjA"] [Sun Jul 12 18:16:07.674778 2026] [security2:error] [pid 960377:tid 960497] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/default/.env"] [unique_id "alQuRxMANaV5i2_BLQoizgAAKnY"] [Sun Jul 12 18:16:07.838494 2026] [security2:error] [pid 960377:tid 960436] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/delivery/.env"] [unique_id "alQuRxMANaV5i2_BLQoi0AAAKTk"] [Sun Jul 12 18:16:07.971370 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuR1_56DeKknhy7sMWvQAAAWI"] [Sun Jul 12 18:16:07.973992 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/php-info.php"] [unique_id "alQuR1_56DeKknhy7sMW2gABYm0"] [Sun Jul 12 18:16:07.997070 2026] [security2:error] [pid 960377:tid 960472] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/demo-app/.env"] [unique_id "alQuRxMANaV5i2_BLQoi0gAAJ10"] [Sun Jul 12 18:16:08.012122 2026] [security2:error] [pid 960377:tid 960624] [client 47.128.54.76:15356] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.raid-n-trade.de"] [uri "/robots.txt"] [unique_id "alQuSBMANaV5i2_BLQoi0wAAAHQ"] [Sun Jul 12 18:16:08.060875 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:08.061566 2026] [authz_core:error] [pid 960377:tid 960563] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:08.145549 2026] [security2:error] [pid 967714:tid 967974] [client 168.100.149.18:23976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13585/bargainor/2308_birefraction.jsp"] [unique_id "alQuSF_56DeKknhy7sMW3AAAAYE"] [Sun Jul 12 18:16:08.170076 2026] [security2:error] [pid 960377:tid 960480] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/demo/.env"] [unique_id "alQuSBMANaV5i2_BLQoi1wAAS2U"] [Sun Jul 12 18:16:08.198074 2026] [security2:error] [pid 967714:tid 967931] [client 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuKl_56DeKknhy7sMWjQABVl8"] [Sun Jul 12 18:16:08.209086 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuRV_56DeKknhy7sMWiAAAAWQ"] [Sun Jul 12 18:16:08.273162 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/phpinfo.php"] [unique_id "alQuSF_56DeKknhy7sMW4gABIFs"] [Sun Jul 12 18:16:08.307760 2026] [security2:error] [pid 960377:tid 960580] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuRRMANaV5i2_BLQoiugAAAEg"] [Sun Jul 12 18:16:08.333028 2026] [security2:error] [pid 960377:tid 960512] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuRRMANaV5i2_BLQoiuwAAAAQ"] [Sun Jul 12 18:16:08.376843 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/phpversion.php"] [unique_id "alQuSF_56DeKknhy7sMW5gABggE"] [Sun Jul 12 18:16:08.448330 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/pinfo.php"] [unique_id "alQuSF_56DeKknhy7sMW6QABGEQ"] [Sun Jul 12 18:16:08.451519 2026] [security2:error] [pid 967714:tid 967855] [client 172.252.91.126:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuR1_56DeKknhy7sMW1gAAAQo"] [Sun Jul 12 18:16:08.811101 2026] [security2:error] [pid 967714:tid 967897] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuSF_56DeKknhy7sMW4QAAATQ"] [Sun Jul 12 18:16:08.864729 2026] [security2:error] [pid 967714:tid 967978] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuSF_56DeKknhy7sMW7QAAAYU"] [Sun Jul 12 18:16:08.955940 2026] [authz_core:error] [pid 960377:tid 960614] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:08.956571 2026] [authz_core:error] [pid 960377:tid 960614] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:09.003604 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/server/info.php"] [unique_id "alQuSF_56DeKknhy7sMW8gABMHI"] [Sun Jul 12 18:16:09.090437 2026] [security2:error] [pid 967714:tid 967763] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/service/info.php"] [unique_id "alQuSV_56DeKknhy7sMW8wABFiU"] [Sun Jul 12 18:16:09.211983 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/service/phpinfo.php"] [unique_id "alQuSV_56DeKknhy7sMW9QABYF0"] [Sun Jul 12 18:16:09.217249 2026] [security2:error] [pid 960377:tid 960565] [client 65.21.237.125:58000] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuSBMANaV5i2_BLQoi4gAAADk"], referer: https://johndmurray.org/ [Sun Jul 12 18:16:09.262869 2026] [security2:error] [pid 960377:tid 960382] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuSBMANaV5i2_BLQoi2QAALQQ"] [Sun Jul 12 18:16:09.313944 2026] [security2:error] [pid 979474:tid 979714] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuSXTrIlbXpLXvkNcNugAAAO0"] [Sun Jul 12 18:16:09.316264 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/services/info.php"] [unique_id "alQuSV_56DeKknhy7sMW9wABeH4"] [Sun Jul 12 18:16:09.474658 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/settings.php"] [unique_id "alQuSV_56DeKknhy7sMW-QABQ2A"] [Sun Jul 12 18:16:09.521011 2026] [security2:error] [pid 967714:tid 967874] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/upgrade/index.php"] [unique_id "alQuSV_56DeKknhy7sMW_QAAAR0"] [Sun Jul 12 18:16:09.524007 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/smtp.php"] [unique_id "alQuSV_56DeKknhy7sMW_gABMgw"] [Sun Jul 12 18:16:09.568866 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/temp.php"] [unique_id "alQuSV_56DeKknhy7sMXAAABbSs"] [Sun Jul 12 18:16:09.727427 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/time.php"] [unique_id "alQuSV_56DeKknhy7sMXIwABJT4"] [Sun Jul 12 18:16:09.877608 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:09.878368 2026] [authz_core:error] [pid 967714:tid 967950] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:09.967496 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuSV_56DeKknhy7sMXJQAAAVE"] [Sun Jul 12 18:16:10.047820 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuSRMANaV5i2_BLQoi7AAAAGE"] [Sun Jul 12 18:16:10.053119 2026] [autoindex:error] [pid 960377:tid 960607] [client 148.222.130.145:56203] AH01276: Cannot serve directory /home3/acedevne/public_html/acedev/firefoxpreload_source/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:16:10.166428 2026] [security2:error] [pid 979474:tid 979693] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuSXTrIlbXpLXvkNcNywAAANg"] [Sun Jul 12 18:16:10.197722 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuKl_56DeKknhy7sMW4wABVlk"] [Sun Jul 12 18:16:10.216568 2026] [security2:error] [pid 960377:tid 960628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuSBMANaV5i2_BLQoi2wAAAHg"] [Sun Jul 12 18:16:10.324576 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/xampp/info.php"] [unique_id "alQuSl_56DeKknhy7sMXRwABRS4"] [Sun Jul 12 18:16:10.439756 2026] [security2:error] [pid 960377:tid 960618] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuSRMANaV5i2_BLQoi6wAAbn0"] [Sun Jul 12 18:16:10.518396 2026] [security2:error] [pid 967714:tid 967885] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuSl_56DeKknhy7sMXRgAAASg"] [Sun Jul 12 18:16:10.599118 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/deploy/.env"] [unique_id "alQuShMANaV5i2_BLQoi-AAAQ3E"] [Sun Jul 12 18:16:10.643718 2026] [security2:error] [pid 967714:tid 967928] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuSl_56DeKknhy7sMXTAAAAVM"] [Sun Jul 12 18:16:10.652090 2026] [security2:error] [pid 979474:tid 979651] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1oLTM2NDEzLW1oYzM0LTg1NDgtaGMz.cgi"] [unique_id "alQuSnTrIlbXpLXvkNcN1gAAAK8"] [Sun Jul 12 18:16:10.707037 2026] [authz_core:error] [pid 979474:tid 979696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:10.707710 2026] [authz_core:error] [pid 979474:tid 979696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:10.710279 2026] [security2:error] [pid 967714:tid 967956] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dev/index.php"] [unique_id "alQuSl_56DeKknhy7sMXUwAAAW8"] [Sun Jul 12 18:16:10.733191 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admin/xampp/phpinfo.php"] [unique_id "alQuSl_56DeKknhy7sMXVAABZUI"] [Sun Jul 12 18:16:10.792129 2026] [security2:error] [pid 979474:tid 979728] [client 168.100.149.95:15946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13650/bargainor/2308_mediator.jsp"] [unique_id "alQuSnTrIlbXpLXvkNcN2AAAAPs"] [Sun Jul 12 18:16:11.174143 2026] [security2:error] [pid 979474:tid 979722] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuSnTrIlbXpLXvkNcN3QAAAPU"] [Sun Jul 12 18:16:11.234189 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/adminer/.env"] [unique_id "alQuS1_56DeKknhy7sMXWgABWR0"] [Sun Jul 12 18:16:11.348390 2026] [security2:error] [pid 967714:tid 967784] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env"] [unique_id "alQuS1_56DeKknhy7sMXWwABhTo"] [Sun Jul 12 18:16:11.379647 2026] [security2:error] [pid 960377:tid 960610] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuShMANaV5i2_BLQoi9gAAAGY"] [Sun Jul 12 18:16:11.385029 2026] [security2:error] [pid 960377:tid 960509] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuShMANaV5i2_BLQoi9QAAAAE"] [Sun Jul 12 18:16:11.414878 2026] [security2:error] [pid 960377:tid 960615] [client 65.21.237.125:40008] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojAwAAAGs"], referer: https://johndmurray.org/ [Sun Jul 12 18:16:11.554460 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:11.555164 2026] [authz_core:error] [pid 960377:tid 960613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:11.638606 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojCQAAAHM"] [Sun Jul 12 18:16:11.651981 2026] [security2:error] [pid 960377:tid 960515] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuShMANaV5i2_BLQoi-wAABzs"] [Sun Jul 12 18:16:11.661328 2026] [security2:error] [pid 979474:tid 979655] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuS3TrIlbXpLXvkNcN6AAAALM"] [Sun Jul 12 18:16:11.720971 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojAQAAAAo"] [Sun Jul 12 18:16:11.721044 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojAQAAAAo"] [Sun Jul 12 18:16:11.722242 2026] [security2:error] [pid 967714:tid 967886] [client 65.21.113.206:42158] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1oLTM2NDEzLW1oYzM0LTg1NDgtaGMz.cgi"] [unique_id "alQuS1_56DeKknhy7sMXWAAAASk"] [Sun Jul 12 18:16:11.800004 2026] [security2:error] [pid 979474:tid 979676] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuS3TrIlbXpLXvkNcN7AAAAMg"] [Sun Jul 12 18:16:11.914431 2026] [security2:error] [pid 967714:tid 967941] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuS1_56DeKknhy7sMXZgAAAWA"] [Sun Jul 12 18:16:12.152908 2026] [security2:error] [pid 967714:tid 967969] [client 168.100.149.194:17566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13715/bargainor/2308_gurian.jsp"] [unique_id "alQuTF_56DeKknhy7sMXcQAAAXw"] [Sun Jul 12 18:16:12.165161 2026] [cgid:error] [pid 967714:tid 967962] [client 65.49.1.88:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:16:12.235737 2026] [security2:error] [pid 979474:tid 979735] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTHTrIlbXpLXvkNcN8QAAAQI"] [Sun Jul 12 18:16:12.247423 2026] [security2:error] [pid 967714:tid 967967] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuS1_56DeKknhy7sMXbQAAAXo"] [Sun Jul 12 18:16:12.281895 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/administrator/.env"] [unique_id "alQuTF_56DeKknhy7sMXcwABJEc"] [Sun Jul 12 18:16:12.367594 2026] [authz_core:error] [pid 979474:tid 979721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:12.368126 2026] [authz_core:error] [pid 979474:tid 979721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:12.492550 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojBwAAAHk"] [Sun Jul 12 18:16:12.502953 2026] [security2:error] [pid 979474:tid 979634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuS3TrIlbXpLXvkNcN5gAAAJ4"] [Sun Jul 12 18:16:12.521084 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/administrator/info.php"] [unique_id "alQuTF_56DeKknhy7sMXfQABJ3Q"] [Sun Jul 12 18:16:12.587947 2026] [security2:error] [pid 967714:tid 967827] [remote 184.168.124.4:55288] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQuTF_56DeKknhy7sMXgAABV2U"] [Sun Jul 12 18:16:12.704894 2026] [security2:error] [pid 967714:tid 967879] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuTF_56DeKknhy7sMXegAAASI"] [Sun Jul 12 18:16:12.708088 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuSxMANaV5i2_BLQojDgAANUE"] [Sun Jul 12 18:16:12.805835 2026] [security2:error] [pid 960377:tid 960530] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTBMANaV5i2_BLQojFQAAABY"] [Sun Jul 12 18:16:12.866976 2026] [security2:error] [pid 960377:tid 960468] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dev-env/.env"] [unique_id "alQuTBMANaV5i2_BLQojFgAAIVk"] [Sun Jul 12 18:16:12.883124 2026] [security2:error] [pid 967714:tid 967749] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/community/.env"] [unique_id "alQuTF_56DeKknhy7sMXhgABfhc"] [Sun Jul 12 18:16:13.000053 2026] [security2:error] [pid 960377:tid 960614] [client 216.244.66.196:59298] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sheehycares.com"] [uri "/robots.txt"] [unique_id "alQuTBMANaV5i2_BLQojGgAAAGo"] [Sun Jul 12 18:16:13.000262 2026] [security2:error] [pid 960377:tid 960614] [client 216.244.66.196:59298] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "sheehycares.com"] [uri "/robots.txt"] [unique_id "alQuTBMANaV5i2_BLQojGgAAAGo"] [Sun Jul 12 18:16:13.010030 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/administrator/phpinfo.php"] [unique_id "alQuTV_56DeKknhy7sMXiQABKms"] [Sun Jul 12 18:16:13.150007 2026] [authz_core:error] [pid 960377:tid 960543] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:13.150541 2026] [authz_core:error] [pid 960377:tid 960543] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:13.360747 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuTXTrIlbXpLXvkNcOAwAAAM4"] [Sun Jul 12 18:16:13.490835 2026] [security2:error] [pid 979474:tid 979641] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTXTrIlbXpLXvkNcOCAAAAKU"] [Sun Jul 12 18:16:13.495010 2026] [security2:error] [pid 967714:tid 967892] [client 65.21.237.125:40016] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuTV_56DeKknhy7sMXjQAAAS8"], referer: https://johndmurray.org/ [Sun Jul 12 18:16:13.510975 2026] [security2:error] [pid 979474:tid 979620] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1oLTM2NDEzLW1oYzM0LTk2NTAtaGMz.cgi"] [unique_id "alQuTXTrIlbXpLXvkNcOCwAAAJA"] [Sun Jul 12 18:16:13.562405 2026] [security2:error] [pid 979474:tid 979678] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/public/settings.php"] [unique_id "alQuTXTrIlbXpLXvkNcODAAAAMo"] [Sun Jul 12 18:16:13.681802 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTRMANaV5i2_BLQojIgAAAGI"] [Sun Jul 12 18:16:13.701934 2026] [core:error] [pid 979474:tid 979648] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/search?q=cpanel.redwolfaudio.com [Sun Jul 12 18:16:13.701984 2026] [core:error] [pid 979474:tid 979648] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/search?q=cpanel.redwolfaudio.com [Sun Jul 12 18:16:13.786894 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/api/phpinfo.php"] [unique_id "alQuTV_56DeKknhy7sMXmAABiSo"] [Sun Jul 12 18:16:13.857823 2026] [security2:error] [pid 960377:tid 960526] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuTRMANaV5i2_BLQojHAAAEkY"] [Sun Jul 12 18:16:13.929738 2026] [authz_core:error] [pid 979474:tid 979724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:13.930282 2026] [authz_core:error] [pid 979474:tid 979724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:13.994212 2026] [security2:error] [pid 967714:tid 967899] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuTV_56DeKknhy7sMXlwAAATY"] [Sun Jul 12 18:16:14.127226 2026] [security2:error] [pid 979474:tid 979618] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuTHTrIlbXpLXvkNcN_QAAAI4"] [Sun Jul 12 18:16:14.196110 2026] [security2:error] [pid 979474:tid 979666] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTnTrIlbXpLXvkNcOFQAAAL4"] [Sun Jul 12 18:16:14.227080 2026] [security2:error] [pid 967714:tid 967864] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/profile/test.php"] [unique_id "alQuTl_56DeKknhy7sMXqgAAARM"] [Sun Jul 12 18:16:14.228115 2026] [security2:error] [pid 979474:tid 979730] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuTHTrIlbXpLXvkNcN_gAAAP0"] [Sun Jul 12 18:16:14.331225 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/dashboard/phpinfo.php"] [unique_id "alQuTl_56DeKknhy7sMXtgABcEo"] [Sun Jul 12 18:16:14.401235 2026] [security2:error] [pid 967714:tid 967751] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/ghost/.env"] [unique_id "alQuTl_56DeKknhy7sMXuQABdRk"] [Sun Jul 12 18:16:14.464170 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/info.php"] [unique_id "alQuTl_56DeKknhy7sMXwgABcVc"] [Sun Jul 12 18:16:14.536905 2026] [security2:error] [pid 979474:tid 979731] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuTnTrIlbXpLXvkNcOFgAAAP4"] [Sun Jul 12 18:16:14.536968 2026] [security2:error] [pid 979474:tid 979731] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuTnTrIlbXpLXvkNcOFgAAAP4"] [Sun Jul 12 18:16:14.544324 2026] [security2:error] [pid 960377:tid 960556] [client 65.21.113.206:46030] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1oLTM2NDEzLW1oYzM0LTk2NTAtaGMz.cgi"] [unique_id "alQuTRMANaV5i2_BLQojKAAAADA"] [Sun Jul 12 18:16:14.567057 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/old_phpinfo.php"] [unique_id "alQuTl_56DeKknhy7sMXxQABORI"] [Sun Jul 12 18:16:14.601173 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/beta/test.php"] [unique_id "alQuThMANaV5i2_BLQojMgAAAHU"] [Sun Jul 12 18:16:14.790087 2026] [authz_core:error] [pid 960377:tid 960538] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:14.790602 2026] [authz_core:error] [pid 960377:tid 960538] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:14.799402 2026] [security2:error] [pid 967714:tid 967918] [client 168.100.149.153:25926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13780/bargainor/2308_monkey.jsp"] [unique_id "alQuTl_56DeKknhy7sMYBwAAAUk"] [Sun Jul 12 18:16:14.821798 2026] [security2:error] [pid 960377:tid 960523] [client 94.187.171.125:62795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuThMANaV5i2_BLQojNgAAAA8"] [Sun Jul 12 18:16:14.822130 2026] [security2:error] [pid 960377:tid 960523] [client 94.187.171.125:62795] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuThMANaV5i2_BLQojNgAAAA8"] [Sun Jul 12 18:16:14.975060 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMYCAAAARs"] [Sun Jul 12 18:16:14.980360 2026] [security2:error] [pid 960377:tid 960511] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuThMANaV5i2_BLQojKQAAA2Q"] [Sun Jul 12 18:16:15.013764 2026] [security2:error] [pid 967714:tid 967959] [client 74.7.241.166:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "carolinasdepressionclinic.org"] [uri "/index.php"] [unique_id "alQuRV_56DeKknhy7sMWkAAAAXI"] [Sun Jul 12 18:16:15.016649 2026] [security2:error] [pid 967714:tid 967871] [client 74.7.241.166:52642] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "carolinasdepressionclinic.org"] [uri "/robots.txt"] [unique_id "alQuRV_56DeKknhy7sMWjwABGhs"] [Sun Jul 12 18:16:15.108288 2026] [security2:error] [pid 979474:tid 979636] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuTnTrIlbXpLXvkNcOIwAAAKA"] [Sun Jul 12 18:16:15.128645 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMYCgAAASI"] [Sun Jul 12 18:16:15.160916 2026] [security2:error] [pid 960377:tid 960384] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dev_env/.env"] [unique_id "alQuTxMANaV5i2_BLQojOAAAGAY"] [Sun Jul 12 18:16:15.216357 2026] [security2:error] [pid 979474:tid 979715] [client 103.168.66.51:50408] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/sites/default/settings.php"] [unique_id "alQuT3TrIlbXpLXvkNcOKQAAAO4"] [Sun Jul 12 18:16:15.229105 2026] [security2:error] [pid 967714:tid 967867] [client 91.92.42.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMXqQABFkQ"], referer: http://hopeaboveall.com/server.js [Sun Jul 12 18:16:15.256548 2026] [security2:error] [pid 967714:tid 967852] [remote 91.92.42.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMXtwABFn4"], referer: http://hopeaboveall.com/app.js [Sun Jul 12 18:16:15.286691 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMXpgAAAUA"] [Sun Jul 12 18:16:15.302603 2026] [security2:error] [pid 967714:tid 967776] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/sample.bak"] [unique_id "alQuT1_56DeKknhy7sMYDgABWDI"] [Sun Jul 12 18:16:15.319651 2026] [security2:error] [pid 967714:tid 967973] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuTl_56DeKknhy7sMXrQAAAYA"] [Sun Jul 12 18:16:15.359258 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/test.php"] [unique_id "alQuT1_56DeKknhy7sMYGAABPgY"] [Sun Jul 12 18:16:15.605300 2026] [security2:error] [pid 967714:tid 967947] [client 103.168.66.51:53759] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/mail.php"] [unique_id "alQuT1_56DeKknhy7sMYIwAAAWY"] [Sun Jul 12 18:16:15.617083 2026] [security2:error] [pid 967714:tid 967882] [client 103.168.66.51:52790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/public/.env"] [unique_id "alQuT1_56DeKknhy7sMYJgAAASU"] [Sun Jul 12 18:16:15.693687 2026] [authz_core:error] [pid 967714:tid 967953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:15.694227 2026] [authz_core:error] [pid 967714:tid 967953] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:15.714534 2026] [security2:error] [pid 979474:tid 979626] [client 65.21.237.125:40026] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuT3TrIlbXpLXvkNcOOAAAAJY"], referer: https://johndmurray.org/ [Sun Jul 12 18:16:15.750352 2026] [security2:error] [pid 979474:tid 979659] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuT3TrIlbXpLXvkNcONgAAALc"] [Sun Jul 12 18:16:15.821698 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/admins/xampp/info.php"] [unique_id "alQuT1_56DeKknhy7sMYKgABhHQ"] [Sun Jul 12 18:16:16.014257 2026] [security2:error] [pid 979474:tid 979693] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW1yLzE1OTM1L21yLzY4MTYvcnFo.asp"] [unique_id "alQuUHTrIlbXpLXvkNcOQQAAANg"] [Sun Jul 12 18:16:16.148390 2026] [security2:error] [pid 960377:tid 960524] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuTxMANaV5i2_BLQojOgAAEAU"] [Sun Jul 12 18:16:16.231511 2026] [security2:error] [pid 960377:tid 960597] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuTxMANaV5i2_BLQojTwAAAFk"] [Sun Jul 12 18:16:16.307119 2026] [security2:error] [pid 960377:tid 960446] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/developer/.env"] [unique_id "alQuUBMANaV5i2_BLQojWQAAM0M"] [Sun Jul 12 18:16:16.322033 2026] [security2:error] [pid 979474:tid 979620] [client 103.168.66.51:59344] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config.php"] [unique_id "alQuUHTrIlbXpLXvkNcORwAAAJA"] [Sun Jul 12 18:16:16.347879 2026] [security2:error] [pid 979474:tid 979726] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUHTrIlbXpLXvkNcORQAAAPk"] [Sun Jul 12 18:16:16.351553 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/agora/.env"] [unique_id "alQuUF_56DeKknhy7sMYMgABeF4"] [Sun Jul 12 18:16:16.412459 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/apache/phpinfo.php"] [unique_id "alQuUF_56DeKknhy7sMYNQABGQU"] [Sun Jul 12 18:16:16.456924 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:16.457484 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:16.465235 2026] [security2:error] [pid 960377:tid 960378] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/developerslv/.env"] [unique_id "alQuUBMANaV5i2_BLQojXgAAMgA"] [Sun Jul 12 18:16:16.502380 2026] [security2:error] [pid 979474:tid 979520] [remote 57.141.18.69:64035] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/g/ObEEztE_7OK9k.lWez"] [unique_id "alQuUHTrIlbXpLXvkNcOSgAA-yg"] [Sun Jul 12 18:16:16.624787 2026] [security2:error] [pid 960377:tid 960443] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/development/.env"] [unique_id "alQuUBMANaV5i2_BLQojYAAAOEA"] [Sun Jul 12 18:16:16.637519 2026] [security2:error] [pid 967714:tid 967857] [client 125.167.21.72:61547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuUF_56DeKknhy7sMYPwAAAQw"] [Sun Jul 12 18:16:16.637818 2026] [security2:error] [pid 967714:tid 967857] [client 125.167.21.72:61547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuUF_56DeKknhy7sMYPwAAAQw"] [Sun Jul 12 18:16:16.644695 2026] [security2:error] [pid 967714:tid 967962] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuUF_56DeKknhy7sMYNgAAAXU"] [Sun Jul 12 18:16:16.799865 2026] [security2:error] [pid 967714:tid 967729] [remote 171.244.34.240:43800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 240.34.244.171.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dawnartist.com"] [uri "/wp-login.php"] [unique_id "alQuUF_56DeKknhy7sMYRQABMgM"] [Sun Jul 12 18:16:16.817427 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUF_56DeKknhy7sMYQgAAAUk"] [Sun Jul 12 18:16:16.828643 2026] [security2:error] [pid 967714:tid 967961] [client 168.100.149.219:26200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13845/bargainor/2308_impeccance.jsp"] [unique_id "alQuUF_56DeKknhy7sMYSgAAAXQ"] [Sun Jul 12 18:16:16.953317 2026] [security2:error] [pid 979474:tid 979677] [client 24.203.79.110:62943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuUHTrIlbXpLXvkNcOUAAAAMk"] [Sun Jul 12 18:16:16.953624 2026] [security2:error] [pid 979474:tid 979677] [client 24.203.79.110:62943] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuUHTrIlbXpLXvkNcOUAAAAMk"] [Sun Jul 12 18:16:16.967901 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUF_56DeKknhy7sMYSwAAAT0"] [Sun Jul 12 18:16:16.989237 2026] [security2:error] [pid 967714:tid 967970] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuUF_56DeKknhy7sMYPQAAAX0"] [Sun Jul 12 18:16:16.989315 2026] [security2:error] [pid 967714:tid 967970] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuUF_56DeKknhy7sMYPQAAAX0"] [Sun Jul 12 18:16:16.991236 2026] [security2:error] [pid 979474:tid 979701] [client 65.21.113.206:46046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW1yLzE1OTM1L21yLzY4MTYvcnFo.asp"] [unique_id "alQuUHTrIlbXpLXvkNcOSQAAAOA"] [Sun Jul 12 18:16:17.076794 2026] [security2:error] [pid 979474:tid 979648] [client 89.242.223.103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuUHTrIlbXpLXvkNcOSwAAAKw"] [Sun Jul 12 18:16:17.134005 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/api/crm/info.php"] [unique_id "alQuUV_56DeKknhy7sMYUAABb20"] [Sun Jul 12 18:16:17.190564 2026] [security2:error] [pid 979474:tid 979652] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuUHTrIlbXpLXvkNcOTwAAALA"] [Sun Jul 12 18:16:17.324339 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:17.324973 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:17.360322 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/api/info.php"] [unique_id "alQuUV_56DeKknhy7sMYWQABP3E"] [Sun Jul 12 18:16:17.369606 2026] [security2:error] [pid 967714:tid 967830] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sql/restore.sql"] [unique_id "alQuUV_56DeKknhy7sMYXAABSmg"] [Sun Jul 12 18:16:17.610429 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/api/lara/phpinfo.php"] [unique_id "alQuUV_56DeKknhy7sMYZQABd2c"] [Sun Jul 12 18:16:17.697192 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/api/php-info.php"] [unique_id "alQuUV_56DeKknhy7sMYZwABf30"] [Sun Jul 12 18:16:17.706788 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuUBMANaV5i2_BLQojYQAAOXQ"] [Sun Jul 12 18:16:17.780799 2026] [security2:error] [pid 960377:tid 960599] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuURMANaV5i2_BLQojcQAAAFs"] [Sun Jul 12 18:16:17.817384 2026] [security2:error] [pid 960377:tid 960555] [client 65.21.237.125:40028] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuURMANaV5i2_BLQojcgAAAC8"], referer: https://johndmurray.org/ [Sun Jul 12 18:16:17.882090 2026] [security2:error] [pid 960377:tid 960447] [remote 147.135.138.90:44318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.138.135.147.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "themarkberman.com"] [uri "/wp-login.php"] [unique_id "alQuURMANaV5i2_BLQojdwAAP0Q"] [Sun Jul 12 18:16:17.907055 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/api/src/.env"] [unique_id "alQuUV_56DeKknhy7sMYbwABOlw"] [Sun Jul 12 18:16:18.078428 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuT1_56DeKknhy7sMYFQAAAQ8"] [Sun Jul 12 18:16:18.102289 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuT1_56DeKknhy7sMYEwAAAQo"] [Sun Jul 12 18:16:18.136471 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:18.137025 2026] [authz_core:error] [pid 967714:tid 967883] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:18.152792 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/api/temp.php"] [unique_id "alQuUl_56DeKknhy7sMYegABbjw"] [Sun Jul 12 18:16:18.197066 2026] [security2:error] [pid 967714:tid 967869] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuT1_56DeKknhy7sMYFwAAARg"] [Sun Jul 12 18:16:18.218913 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuT1_56DeKknhy7sMYFgAAASs"] [Sun Jul 12 18:16:18.238843 2026] [security2:error] [pid 960377:tid 960511] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuURMANaV5i2_BLQojfgAAAAM"] [Sun Jul 12 18:16:18.257192 2026] [security2:error] [pid 979474:tid 979675] [client 74.7.244.39:39298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.codingfiend.com"] [uri "/robots.txt"] [unique_id "alQuUnTrIlbXpLXvkNcOWQAAAMc"] [Sun Jul 12 18:16:18.338055 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUnTrIlbXpLXvkNcOVwAAAPM"] [Sun Jul 12 18:16:18.345730 2026] [security2:error] [pid 967714:tid 967856] [client 103.168.66.51:62035] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.save"] [unique_id "alQuUl_56DeKknhy7sMYgwAAAQs"] [Sun Jul 12 18:16:18.358990 2026] [security2:error] [pid 967714:tid 967959] [client 103.168.66.51:58006] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/backend/.env"] [unique_id "alQuUl_56DeKknhy7sMYhAAAAXI"] [Sun Jul 12 18:16:18.366253 2026] [security2:error] [pid 967714:tid 967887] [client 103.168.66.51:52790] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/config/.env"] [unique_id "alQuUl_56DeKknhy7sMYhQAAASo"] [Sun Jul 12 18:16:18.402191 2026] [security2:error] [pid 967714:tid 967955] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYgAABbkk"] [Sun Jul 12 18:16:18.412031 2026] [security2:error] [pid 967714:tid 967789] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-content/plugins/wp-mail-smtp/.env"] [unique_id "alQuUl_56DeKknhy7sMYhgABOD8"] [Sun Jul 12 18:16:18.440855 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/apis/development/phpinfo.php"] [unique_id "alQuUl_56DeKknhy7sMYhwABbko"] [Sun Jul 12 18:16:18.452952 2026] [security2:error] [pid 960377:tid 960510] [client 74.7.244.39:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.codingfiend.com"] [uri "/cgi-sys/404.html"] [unique_id "alQuUhMANaV5i2_BLQojgwAAAAI"], referer: http://www.codingfiend.com/robots.txt [Sun Jul 12 18:16:18.454406 2026] [security2:error] [pid 979474:tid 979554] [remote 74.7.244.39:52178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.codingfiend.com"] [uri "/robots.txt"] [unique_id "alQuUnTrIlbXpLXvkNcOWgAA00o"], referer: http://www.codingfiend.com/robots.txt [Sun Jul 12 18:16:18.464681 2026] [security2:error] [pid 967714:tid 967763] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYggABbiU"] [Sun Jul 12 18:16:18.535049 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/apis/test.php"] [unique_id "alQuUl_56DeKknhy7sMYiQABEGQ"] [Sun Jul 12 18:16:18.646992 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app-order-client/.env"] [unique_id "alQuUl_56DeKknhy7sMYjgABalo"] [Sun Jul 12 18:16:18.677920 2026] [security2:error] [pid 960377:tid 960625] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuURMANaV5i2_BLQojdgAAdT4"] [Sun Jul 12 18:16:18.724306 2026] [security2:error] [pid 967714:tid 967807] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app/.env.bak"] [unique_id "alQuUl_56DeKknhy7sMYkAABb1E"] [Sun Jul 12 18:16:18.789703 2026] [security2:error] [pid 967714:tid 967909] [client 168.100.149.194:40132] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13910/bargainor/2308_gunz.jsp"] [unique_id "alQuUl_56DeKknhy7sMYlgAAAUA"] [Sun Jul 12 18:16:18.809879 2026] [security2:error] [pid 960377:tid 960574] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuUhMANaV5i2_BLQojiAAAAEI"] [Sun Jul 12 18:16:18.834884 2026] [security2:error] [pid 960377:tid 960415] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/directories/.env"] [unique_id "alQuUhMANaV5i2_BLQojlAAATyQ"] [Sun Jul 12 18:16:18.890846 2026] [security2:error] [pid 967714:tid 967877] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYlQAAASA"] [Sun Jul 12 18:16:18.943435 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:18.943953 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:18.992509 2026] [security2:error] [pid 960377:tid 960402] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dist/.env"] [unique_id "alQuUhMANaV5i2_BLQojuQAAbRg"] [Sun Jul 12 18:16:19.120898 2026] [security2:error] [pid 979474:tid 979646] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW41bDdyLTM1MjgvbjUtMTUyNjUvNWw3cg=="] [unique_id "alQuU3TrIlbXpLXvkNcOYgAAAKo"] [Sun Jul 12 18:16:19.177914 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYnQAAAU8"] [Sun Jul 12 18:16:19.249723 2026] [security2:error] [pid 967714:tid 967846] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app/client/.env"] [unique_id "alQuU1_56DeKknhy7sMYqgABSng"] [Sun Jul 12 18:16:19.251942 2026] [security2:error] [pid 967714:tid 967944] [client 41.98.9.239:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQuUV_56DeKknhy7sMYYAAAAWM"] [Sun Jul 12 18:16:19.295193 2026] [security2:error] [pid 967714:tid 967963] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuU1_56DeKknhy7sMYqQAAAXY"] [Sun Jul 12 18:16:19.305621 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuU1_56DeKknhy7sMYoAAAATc"] [Sun Jul 12 18:16:19.330852 2026] [security2:error] [pid 967714:tid 967942] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYgQAAAWE"] [Sun Jul 12 18:16:19.345310 2026] [security2:error] [pid 967714:tid 967958] [client 103.168.66.51:58006] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.env.dev"] [unique_id "alQuU1_56DeKknhy7sMYrQAAAXE"] [Sun Jul 12 18:16:19.365102 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuUl_56DeKknhy7sMYfgAAAS4"] [Sun Jul 12 18:16:19.477062 2026] [security2:error] [pid 967714:tid 967755] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "alQuU1_56DeKknhy7sMYtAABQx0"] [Sun Jul 12 18:16:19.490876 2026] [security2:error] [pid 979474:tid 979619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuU3TrIlbXpLXvkNcOZgAAAI8"] [Sun Jul 12 18:16:19.541826 2026] [security2:error] [pid 967714:tid 967758] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/config.php"] [unique_id "alQuU1_56DeKknhy7sMYtgABRiA"] [Sun Jul 12 18:16:19.749539 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:19.750191 2026] [authz_core:error] [pid 960377:tid 960516] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:19.877882 2026] [security2:error] [pid 960377:tid 960541] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUxMANaV5i2_BLQojwQAAACE"] [Sun Jul 12 18:16:19.901877 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuUxMANaV5i2_BLQojugAASBI"] [Sun Jul 12 18:16:19.910350 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuUxMANaV5i2_BLQojwwAAAGo"] [Sun Jul 12 18:16:19.931959 2026] [security2:error] [pid 960377:tid 960558] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuUxMANaV5i2_BLQojvgAAADI"] [Sun Jul 12 18:16:19.959349 2026] [security2:error] [pid 967714:tid 967853] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app/config/.env"] [unique_id "alQuU1_56DeKknhy7sMYvwABc38"] [Sun Jul 12 18:16:19.989333 2026] [security2:error] [pid 960377:tid 960595] [client 103.168.66.51:59567] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.backup.old"] [unique_id "alQuUxMANaV5i2_BLQojxQAAAFc"] [Sun Jul 12 18:16:19.993601 2026] [security2:error] [pid 960377:tid 960559] [client 65.21.237.125:40030] ModSecurity: Warning. Matched phrase "SEOkicks" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQuUxMANaV5i2_BLQojxAAAADM"], referer: https://johndmurray.org/contact/ [Sun Jul 12 18:16:20.033586 2026] [security2:error] [pid 967714:tid 967926] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuU1_56DeKknhy7sMYugAAAVE"] [Sun Jul 12 18:16:20.033656 2026] [security2:error] [pid 967714:tid 967926] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuU1_56DeKknhy7sMYugAAAVE"] [Sun Jul 12 18:16:20.034863 2026] [security2:error] [pid 960377:tid 960597] [client 65.21.113.206:46058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW41bDdyLTM1MjgvbjUtMTUyNjUvNWw3cg=="] [unique_id "alQuUxMANaV5i2_BLQojuwAAAFk"] [Sun Jul 12 18:16:20.059217 2026] [security2:error] [pid 960377:tid 960394] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/django-blog/.env"] [unique_id "alQuVBMANaV5i2_BLQojyQAAIxA"] [Sun Jul 12 18:16:20.106719 2026] [security2:error] [pid 967714:tid 967737] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/blog-app/frontend/.env"] [unique_id "alQuVF_56DeKknhy7sMYwAABNAs"] [Sun Jul 12 18:16:20.168425 2026] [security2:error] [pid 967714:tid 967948] [client 168.100.149.17:26764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/13975/bargainor/2308_monadically.jsp"] [unique_id "alQuVF_56DeKknhy7sMYwwAAAWc"] [Sun Jul 12 18:16:20.219399 2026] [security2:error] [pid 960377:tid 960414] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/django/.env"] [unique_id "alQuVBMANaV5i2_BLQojzgAAXSM"] [Sun Jul 12 18:16:20.276760 2026] [security2:error] [pid 967714:tid 967775] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/uSeRs/.EnV"] [unique_id "alQuVF_56DeKknhy7sMYyAABhTE"] [Sun Jul 12 18:16:20.281468 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/config/parameters.php"] [unique_id "alQuVF_56DeKknhy7sMYyQABgS4"] [Sun Jul 12 18:16:20.288587 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMYwgABgWw"] [Sun Jul 12 18:16:20.379771 2026] [security2:error] [pid 960377:tid 960473] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/django_project_path/.env"] [unique_id "alQuVBMANaV5i2_BLQojzwAABl4"] [Sun Jul 12 18:16:20.385773 2026] [security2:error] [pid 967714:tid 967849] [remote 107.175.94.125:38064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.94.175.107.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dawnartist.com"] [uri "/wp-login.php"] [unique_id "alQuVF_56DeKknhy7sMYywABTns"] [Sun Jul 12 18:16:20.389936 2026] [security2:error] [pid 979474:tid 979732] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuU3TrIlbXpLXvkNcOZQAAAP8"] [Sun Jul 12 18:16:20.423996 2026] [security2:error] [pid 979474:tid 979662] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuU3TrIlbXpLXvkNcOZwAAALo"] [Sun Jul 12 18:16:20.538243 2026] [security2:error] [pid 960377:tid 960503] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/doc/.env"] [unique_id "alQuVBMANaV5i2_BLQoj0wAAGnw"] [Sun Jul 12 18:16:20.543277 2026] [authz_core:error] [pid 967714:tid 967892] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:20.543963 2026] [authz_core:error] [pid 967714:tid 967892] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:20.566194 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMY0AABSU8"] [Sun Jul 12 18:16:20.698878 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/helper/phpinfo.php"] [unique_id "alQuVF_56DeKknhy7sMY2QABZUI"] [Sun Jul 12 18:16:20.728874 2026] [security2:error] [pid 979474:tid 979659] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuVHTrIlbXpLXvkNcObAAAALc"] [Sun Jul 12 18:16:20.921843 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/info.php"] [unique_id "alQuVF_56DeKknhy7sMY3gABJx4"] [Sun Jul 12 18:16:21.226353 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/lara/phpinfo.php"] [unique_id "alQuVV_56DeKknhy7sMY5wABR1U"] [Sun Jul 12 18:16:21.228943 2026] [security2:error] [pid 967714:tid 967977] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMY3wAAAYQ"] [Sun Jul 12 18:16:21.345503 2026] [authz_core:error] [pid 967714:tid 967944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:21.346013 2026] [authz_core:error] [pid 967714:tid 967944] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:21.412860 2026] [security2:error] [pid 967714:tid 967845] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/laravel/.env"] [unique_id "alQuVV_56DeKknhy7sMY6QABHHc"] [Sun Jul 12 18:16:21.473299 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMYzgAAAYI"] [Sun Jul 12 18:16:21.491867 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/old_phpinfo.php"] [unique_id "alQuVV_56DeKknhy7sMY7QABN2o"] [Sun Jul 12 18:16:21.547728 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVBMANaV5i2_BLQoj0QAAAGI"] [Sun Jul 12 18:16:21.551259 2026] [security2:error] [pid 960377:tid 960578] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuVBMANaV5i2_BLQoj1AAARic"] [Sun Jul 12 18:16:21.593281 2026] [security2:error] [pid 967714:tid 967847] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.aws/credentials.backup"] [unique_id "alQuVV_56DeKknhy7sMY9AABNXk"] [Sun Jul 12 18:16:21.710837 2026] [security2:error] [pid 960377:tid 960460] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker-compose/.env"] [unique_id "alQuVRMANaV5i2_BLQoj4QAAflE"] [Sun Jul 12 18:16:21.728596 2026] [security2:error] [pid 960377:tid 960572] [client 103.168.66.51:55659] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/laravel/.env"] [unique_id "alQuVRMANaV5i2_BLQoj4gAAAEA"] [Sun Jul 12 18:16:21.737952 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/service/phpinfo.php"] [unique_id "alQuVV_56DeKknhy7sMY9wABCj0"] [Sun Jul 12 18:16:21.768992 2026] [security2:error] [pid 967714:tid 967982] [client 37.56.100.84:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuVV_56DeKknhy7sMY6AAAAYk"] [Sun Jul 12 18:16:21.870397 2026] [security2:error] [pid 960377:tid 960404] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker-compose/platform/.env"] [unique_id "alQuVRMANaV5i2_BLQoj4wAAXBo"] [Sun Jul 12 18:16:21.902085 2026] [security2:error] [pid 960377:tid 960570] [client 103.168.66.51:50243] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.bak"] [unique_id "alQuVRMANaV5i2_BLQoj5AAAAD4"] [Sun Jul 12 18:16:21.988474 2026] [security2:error] [pid 967714:tid 967920] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuVV_56DeKknhy7sMY-wAAAUs"] [Sun Jul 12 18:16:22.028393 2026] [security2:error] [pid 960377:tid 960430] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker-elk/.env"] [unique_id "alQuVhMANaV5i2_BLQoj6AAAdzM"] [Sun Jul 12 18:16:22.057885 2026] [security2:error] [pid 979474:tid 979701] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW41bDdyLTgyNDEvbjUtMTUyNjUvNWw3cg=="] [unique_id "alQuVnTrIlbXpLXvkNcOiQAAAOA"] [Sun Jul 12 18:16:22.165925 2026] [security2:error] [pid 960377:tid 960532] [client 168.100.149.234:34546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14040/bargainor/2308_enhalo.jsp"] [unique_id "alQuVhMANaV5i2_BLQoj6QAAABg"] [Sun Jul 12 18:16:22.172659 2026] [authz_core:error] [pid 960377:tid 960591] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:22.173167 2026] [authz_core:error] [pid 960377:tid 960591] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:22.195331 2026] [security2:error] [pid 960377:tid 960471] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker-network-healthcheck/.env"] [unique_id "alQuVhMANaV5i2_BLQoj6gAAZVw"] [Sun Jul 12 18:16:22.207533 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/services/phpinfo.php"] [unique_id "alQuVl_56DeKknhy7sMZBwABOBA"] [Sun Jul 12 18:16:22.338529 2026] [security2:error] [pid 960377:tid 960510] [client 103.168.66.51:61880] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.old"] [unique_id "alQuVhMANaV5i2_BLQoj7gAAAAI"] [Sun Jul 12 18:16:22.353554 2026] [security2:error] [pid 960377:tid 960487] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker-node-mongo-redis/.env"] [unique_id "alQuVhMANaV5i2_BLQoj7wAAa2w"] [Sun Jul 12 18:16:22.406140 2026] [security2:error] [pid 979474:tid 979689] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuVnTrIlbXpLXvkNcOiwAAANQ"] [Sun Jul 12 18:16:22.407166 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuVl_56DeKknhy7sMZCgAAATQ"] [Sun Jul 12 18:16:22.516454 2026] [security2:error] [pid 960377:tid 960452] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQuVhMANaV5i2_BLQoj8AAAaEk"] [Sun Jul 12 18:16:22.523985 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuVl_56DeKknhy7sMZDQAAAYE"] [Sun Jul 12 18:16:22.623080 2026] [security2:error] [pid 967714:tid 967945] [client 74.7.230.63:47808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "ambassadors.nke.rvq.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQuVl_56DeKknhy7sMZGAABZD4"] [Sun Jul 12 18:16:22.676971 2026] [security2:error] [pid 960377:tid 960401] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/compose/withPostgres/.env"] [unique_id "alQuVhMANaV5i2_BLQoj8gAANhc"] [Sun Jul 12 18:16:22.679443 2026] [security2:error] [pid 960377:tid 960521] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuVhMANaV5i2_BLQoj8QAAAA0"] [Sun Jul 12 18:16:22.814585 2026] [security2:error] [pid 967714:tid 967868] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuVl_56DeKknhy7sMZFwAAARc"] [Sun Jul 12 18:16:22.835249 2026] [security2:error] [pid 960377:tid 960417] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/database/.env"] [unique_id "alQuVhMANaV5i2_BLQoj9QAASyY"] [Sun Jul 12 18:16:22.907115 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:22.907582 2026] [authz_core:error] [pid 967714:tid 967884] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:22.958618 2026] [security2:error] [pid 967714:tid 967921] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuVl_56DeKknhy7sMZFAAAAUw"] [Sun Jul 12 18:16:22.958727 2026] [security2:error] [pid 967714:tid 967921] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuVl_56DeKknhy7sMZFAAAAUw"] [Sun Jul 12 18:16:22.959851 2026] [security2:error] [pid 979474:tid 979730] [client 65.21.113.206:46070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW41bDdyLTgyNDEvbjUtMTUyNjUvNWw3cg=="] [unique_id "alQuVnTrIlbXpLXvkNcOjwAAAP0"] [Sun Jul 12 18:16:22.992907 2026] [security2:error] [pid 960377:tid 960393] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/db/.env"] [unique_id "alQuVhMANaV5i2_BLQoj-AAAXg8"] [Sun Jul 12 18:16:23.026115 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/app/xampp/phpinfo.php"] [unique_id "alQuV1_56DeKknhy7sMZHwABKC0"] [Sun Jul 12 18:16:23.138787 2026] [security2:error] [pid 967714:tid 967964] [client 20.226.22.37:4702] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/.dj/index.php"] [unique_id "alQuV1_56DeKknhy7sMZIAAAAXc"] [Sun Jul 12 18:16:23.159045 2026] [security2:error] [pid 960377:tid 960489] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/dev/.env"] [unique_id "alQuVxMANaV5i2_BLQoj-gAAF24"] [Sun Jul 12 18:16:23.221847 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app1-static/.env"] [unique_id "alQuV1_56DeKknhy7sMZJAABGQc"] [Sun Jul 12 18:16:23.276465 2026] [security2:error] [pid 967714:tid 967871] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuV1_56DeKknhy7sMZHgAAARo"] [Sun Jul 12 18:16:23.317761 2026] [security2:error] [pid 960377:tid 960472] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/examples/compose/.env"] [unique_id "alQuVxMANaV5i2_BLQoj_QAAIF0"] [Sun Jul 12 18:16:23.325967 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVV_56DeKknhy7sMY7gAAAUo"] [Sun Jul 12 18:16:23.476475 2026] [security2:error] [pid 960377:tid 960440] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/postgres/.env"] [unique_id "alQuVxMANaV5i2_BLQokAQAABz0"] [Sun Jul 12 18:16:23.517608 2026] [security2:error] [pid 967714:tid 967831] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app2-static/.env"] [unique_id "alQuV1_56DeKknhy7sMZKQABDmk"] [Sun Jul 12 18:16:23.539172 2026] [security2:error] [pid 979474:tid 979673] [client 103.168.66.51:55427] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/database.php"] [unique_id "alQuV3TrIlbXpLXvkNcOmgAAAMU"] [Sun Jul 12 18:16:23.635432 2026] [security2:error] [pid 960377:tid 960382] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docker/webdav/.env"] [unique_id "alQuVxMANaV5i2_BLQokAgAABAQ"] [Sun Jul 12 18:16:23.672988 2026] [authz_core:error] [pid 979474:tid 979650] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:23.673529 2026] [authz_core:error] [pid 979474:tid 979650] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:23.698730 2026] [security2:error] [pid 979474:tid 979675] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuV3TrIlbXpLXvkNcOlgAAAMc"] [Sun Jul 12 18:16:23.717706 2026] [core:error] [pid 967714:tid 967912] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:23.717757 2026] [core:error] [pid 967714:tid 967912] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:23.765010 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/app_dir/.env"] [unique_id "alQuV1_56DeKknhy7sMZLAABJBs"] [Sun Jul 12 18:16:23.794275 2026] [security2:error] [pid 960377:tid 960395] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/docs/.env"] [unique_id "alQuVxMANaV5i2_BLQokBAAAEhE"] [Sun Jul 12 18:16:23.953012 2026] [security2:error] [pid 960377:tid 960445] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dodoswap-client/.env"] [unique_id "alQuVxMANaV5i2_BLQokBQAAckI"] [Sun Jul 12 18:16:24.122693 2026] [security2:error] [pid 960377:tid 960476] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dotfiles/.env"] [unique_id "alQuWBMANaV5i2_BLQokBgAAR2E"] [Sun Jul 12 18:16:24.168510 2026] [security2:error] [pid 979474:tid 979649] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVXTrIlbXpLXvkNcOewAAAPk"] [Sun Jul 12 18:16:24.169726 2026] [security2:error] [pid 960377:tid 960564] [client 168.100.149.187:34606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14105/bargainor/2308_metalogical.jsp"] [unique_id "alQuWBMANaV5i2_BLQokBwAAADg"] [Sun Jul 12 18:16:24.184466 2026] [security2:error] [pid 967714:tid 967982] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuV1_56DeKknhy7sMZMQAAAYk"] [Sun Jul 12 18:16:24.283303 2026] [security2:error] [pid 967714:tid 967961] [client 20.226.22.37:4672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/.trash7206/index.php"] [unique_id "alQuWF_56DeKknhy7sMZOgAAAXQ"] [Sun Jul 12 18:16:24.284147 2026] [security2:error] [pid 960377:tid 960391] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/download/.env"] [unique_id "alQuWBMANaV5i2_BLQokCAAAfQ0"] [Sun Jul 12 18:16:24.287471 2026] [security2:error] [pid 979474:tid 979620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVXTrIlbXpLXvkNcOegAAAJA"] [Sun Jul 12 18:16:24.296958 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuVV_56DeKknhy7sMY9QAAATk"] [Sun Jul 12 18:16:24.341887 2026] [security2:error] [pid 979474:tid 979736] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWHTrIlbXpLXvkNcOogAAAQM"] [Sun Jul 12 18:16:24.444831 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/downloads/.env"] [unique_id "alQuWBMANaV5i2_BLQokCwAAIX0"] [Sun Jul 12 18:16:24.541409 2026] [authz_core:error] [pid 967714:tid 967960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:24.542118 2026] [authz_core:error] [pid 967714:tid 967960] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:24.605470 2026] [security2:error] [pid 960377:tid 960486] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/drupal/.env"] [unique_id "alQuWBMANaV5i2_BLQokDwAAams"] [Sun Jul 12 18:16:24.627749 2026] [security2:error] [pid 960377:tid 960558] [client 103.168.66.51:55659] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.backup"] [unique_id "alQuWBMANaV5i2_BLQokEAAAADI"] [Sun Jul 12 18:16:24.648659 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuWF_56DeKknhy7sMZRgAAAWI"] [Sun Jul 12 18:16:24.729364 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/application/config/constants.php/"] [unique_id "alQuWF_56DeKknhy7sMZTQABTk0"] [Sun Jul 12 18:16:24.736252 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWF_56DeKknhy7sMZTAAAAS8"] [Sun Jul 12 18:16:24.763293 2026] [security2:error] [pid 979474:tid 979599] [remote 47.128.20.146:12872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fatir.tj"] [uri "/recipes/"] [unique_id "alQuWHTrIlbXpLXvkNcOsgAAy3c"] [Sun Jul 12 18:16:24.766313 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/dump.sql"] [unique_id "alQuWBMANaV5i2_BLQokEgAAWUg"] [Sun Jul 12 18:16:24.873441 2026] [proxy:warn] [pid 960377:tid 960601] [client 185.100.87.136:42114] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be staging.redplatefoods.com for uri /400.shtml [Sun Jul 12 18:16:24.875845 2026] [core:error] [pid 967714:tid 967924] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:24.875888 2026] [core:error] [pid 967714:tid 967924] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:24.889690 2026] [security2:error] [pid 960377:tid 960601] [client 185.100.87.136:42114] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "staging.redplatefoods.com"] [uri "/400.shtml"] [unique_id "alQuWBMANaV5i2_BLQokGgAAAF0"] [Sun Jul 12 18:16:24.926230 2026] [security2:error] [pid 960377:tid 960427] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/e2e/.env"] [unique_id "alQuWBMANaV5i2_BLQokHQAAQTA"] [Sun Jul 12 18:16:24.928358 2026] [security2:error] [pid 967714:tid 967980] [client 139.59.89.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "neighborspacebaltimorecounty.org"] [uri "/index.php"] [unique_id "alQuWF_56DeKknhy7sMZSQAAAYc"], referer: https://neighborspacebaltimorecounty.org/ [Sun Jul 12 18:16:24.956999 2026] [security2:error] [pid 979474:tid 979686] [client 103.168.66.51:63552] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.old"] [unique_id "alQuWHTrIlbXpLXvkNcOuAAAANE"] [Sun Jul 12 18:16:25.094306 2026] [security2:error] [pid 979474:tid 979652] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW43NHQzLTQzMDMvbjctMTg3MzcvNzR0Mw=="] [unique_id "alQuWXTrIlbXpLXvkNcOvAAAALA"] [Sun Jul 12 18:16:25.098346 2026] [security2:error] [pid 967714:tid 967925] [client 43.172.197.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQuV1_56DeKknhy7sMZMAABUDo"] [Sun Jul 12 18:16:25.107390 2026] [security2:error] [pid 960377:tid 960449] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/en/.env"] [unique_id "alQuWRMANaV5i2_BLQokHwAAOUY"] [Sun Jul 12 18:16:25.128039 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuWF_56DeKknhy7sMZTwAAAVo"] [Sun Jul 12 18:16:25.273834 2026] [security2:error] [pid 960377:tid 960384] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/engine/.env"] [unique_id "alQuWRMANaV5i2_BLQokJgAAMAY"] [Sun Jul 12 18:16:25.310877 2026] [security2:error] [pid 967714:tid 967729] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/examples/08-performance/.env"] [unique_id "alQuWV_56DeKknhy7sMZVgABKAM"] [Sun Jul 12 18:16:25.319165 2026] [authz_core:error] [pid 960377:tid 960618] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:25.319735 2026] [authz_core:error] [pid 960377:tid 960618] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:25.354992 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/apps/client/.env"] [unique_id "alQuWV_56DeKknhy7sMZVwABJyc"] [Sun Jul 12 18:16:25.447043 2026] [security2:error] [pid 979474:tid 979724] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWXTrIlbXpLXvkNcOwQAAAPc"] [Sun Jul 12 18:16:25.461214 2026] [security2:error] [pid 979474:tid 979677] [client 94.187.171.125:63282] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuWXTrIlbXpLXvkNcOxAAAAMk"] [Sun Jul 12 18:16:25.461578 2026] [security2:error] [pid 979474:tid 979677] [client 94.187.171.125:63282] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuWXTrIlbXpLXvkNcOxAAAAMk"] [Sun Jul 12 18:16:25.482879 2026] [core:error] [pid 967714:tid 967861] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:25.482936 2026] [core:error] [pid 967714:tid 967861] [client 20.226.22.37:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:25.508581 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/audio/.env"] [unique_id "alQuWV_56DeKknhy7sMZaAABGmc"] [Sun Jul 12 18:16:25.518865 2026] [security2:error] [pid 979474:tid 979732] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuWHTrIlbXpLXvkNcOpQAAAP8"] [Sun Jul 12 18:16:25.578720 2026] [security2:error] [pid 967714:tid 967887] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuWF_56DeKknhy7sMZQAAAASo"] [Sun Jul 12 18:16:25.740920 2026] [security2:error] [pid 960377:tid 960580] [client 86.120.114.156:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQuWBMANaV5i2_BLQokEQAASE4"] [Sun Jul 12 18:16:25.790949 2026] [security2:error] [pid 967714:tid 967870] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuWV_56DeKknhy7sMZagAAARk"] [Sun Jul 12 18:16:25.859712 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWXTrIlbXpLXvkNcOywAAAN4"] [Sun Jul 12 18:16:25.964589 2026] [security2:error] [pid 967714:tid 967807] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/travel-app/server/.env"] [unique_id "alQuWV_56DeKknhy7sMZhQABQ1E"] [Sun Jul 12 18:16:25.985514 2026] [security2:error] [pid 967714:tid 967859] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWV_56DeKknhy7sMZggABDiM"] [Sun Jul 12 18:16:26.002131 2026] [security2:error] [pid 979474:tid 979625] [client 20.226.22.37:2037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQuWXTrIlbXpLXvkNcOzwAAAJU"] [Sun Jul 12 18:16:26.148604 2026] [authz_core:error] [pid 967714:tid 967890] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:26.149346 2026] [authz_core:error] [pid 967714:tid 967890] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:26.252480 2026] [security2:error] [pid 979474:tid 979735] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWnTrIlbXpLXvkNcO0AAAAQI"] [Sun Jul 12 18:16:26.367511 2026] [security2:error] [pid 967714:tid 967903] [client 172.252.84.133:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuWV_56DeKknhy7sMZgQAAATo"] [Sun Jul 12 18:16:26.411003 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuWRMANaV5i2_BLQokMQAAAAo"] [Sun Jul 12 18:16:26.411072 2026] [security2:error] [pid 960377:tid 960518] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuWRMANaV5i2_BLQokMQAAAAo"] [Sun Jul 12 18:16:26.416394 2026] [security2:error] [pid 960377:tid 960555] [client 65.21.113.206:54738] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW43NHQzLTQzMDMvbjctMTg3MzcvNzR0Mw=="] [unique_id "alQuWRMANaV5i2_BLQokLgAAAC8"] [Sun Jul 12 18:16:26.438968 2026] [security2:error] [pid 967714:tid 967969] [client 185.177.72.12:57322] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuWl_56DeKknhy7sMZjAABfFc"] [Sun Jul 12 18:16:26.480804 2026] [security2:error] [pid 979474:tid 979708] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuWnTrIlbXpLXvkNcO0gAAAOc"] [Sun Jul 12 18:16:26.526242 2026] [security2:error] [pid 960377:tid 960615] [client 20.226.22.37:4904] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQuWhMANaV5i2_BLQokRAAAAGs"] [Sun Jul 12 18:16:26.568723 2026] [security2:error] [pid 979474:tid 979675] [client 77.228.50.151:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuWXTrIlbXpLXvkNcOzQAAAMc"] [Sun Jul 12 18:16:26.582307 2026] [security2:error] [pid 960377:tid 960537] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuWRMANaV5i2_BLQokKgAAHWA"] [Sun Jul 12 18:16:26.638935 2026] [security2:error] [pid 979474:tid 979632] [client 125.167.21.72:62013] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuWnTrIlbXpLXvkNcO2AAAAJw"] [Sun Jul 12 18:16:26.639740 2026] [security2:error] [pid 979474:tid 979632] [client 125.167.21.72:62013] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuWnTrIlbXpLXvkNcO2AAAAJw"] [Sun Jul 12 18:16:26.801812 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/babel-plugin-dotenv/test/fixtures/as-alias/.env"] [unique_id "alQuWl_56DeKknhy7sMZoQABLHY"] [Sun Jul 12 18:16:26.836890 2026] [security2:error] [pid 979474:tid 979613] [client 168.100.149.30:33496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14170/bargainor/2308_psychoreflex.jsp"] [unique_id "alQuWnTrIlbXpLXvkNcO2QAAAIk"] [Sun Jul 12 18:16:26.950253 2026] [security2:error] [pid 979474:tid 979639] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuWnTrIlbXpLXvkNcO1QAAAKM"] [Sun Jul 12 18:16:26.953737 2026] [security2:error] [pid 979474:tid 979617] [client 103.168.66.51:55098] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/server/.env"] [unique_id "alQuWnTrIlbXpLXvkNcO3wAAAI0"] [Sun Jul 12 18:16:26.956396 2026] [security2:error] [pid 967714:tid 967974] [client 103.168.66.51:52172] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/config/.env"] [unique_id "alQuWl_56DeKknhy7sMZpwAAAYE"] [Sun Jul 12 18:16:27.011268 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:27.011866 2026] [authz_core:error] [pid 967714:tid 967926] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:27.030961 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/babel-plugin-dotenv/test/fixtures/filename/.env"] [unique_id "alQuW1_56DeKknhy7sMZrwABcmw"] [Sun Jul 12 18:16:27.037301 2026] [security2:error] [pid 979474:tid 979662] [client 20.226.22.37:7048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQuW3TrIlbXpLXvkNcO4AAAALo"] [Sun Jul 12 18:16:27.047053 2026] [security2:error] [pid 960377:tid 960629] [client 34.182.248.12:63976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQuWxMANaV5i2_BLQokTQAAAHk"] [Sun Jul 12 18:16:27.182206 2026] [security2:error] [pid 967714:tid 967960] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/install.php"] [unique_id "alQuW1_56DeKknhy7sMZsQAAAXM"] [Sun Jul 12 18:16:27.202242 2026] [security2:error] [pid 960377:tid 960576] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuWRMANaV5i2_BLQokLAAAAEQ"] [Sun Jul 12 18:16:27.243659 2026] [security2:error] [pid 967714:tid 967869] [client 57.141.18.90:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuWl_56DeKknhy7sMZoAAAARg"] [Sun Jul 12 18:16:27.277659 2026] [security2:error] [pid 960377:tid 960572] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuWRMANaV5i2_BLQokLwAAAEA"] [Sun Jul 12 18:16:27.377209 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/usr/info.php"] [unique_id "alQuW3TrIlbXpLXvkNcO5wAAAM4"] [Sun Jul 12 18:16:27.529621 2026] [security2:error] [pid 967714:tid 967946] [client 24.203.79.110:63450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuW1_56DeKknhy7sMZwAAAAWU"] [Sun Jul 12 18:16:27.534208 2026] [security2:error] [pid 967714:tid 967946] [client 24.203.79.110:63450] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuW1_56DeKknhy7sMZwAAAAWU"] [Sun Jul 12 18:16:27.553365 2026] [security2:error] [pid 967714:tid 967848] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "alQuW1_56DeKknhy7sMZwQABHHo"] [Sun Jul 12 18:16:27.557458 2026] [security2:error] [pid 967714:tid 967921] [client 20.226.22.37:4879] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/0.kb-v3.php"] [unique_id "alQuW1_56DeKknhy7sMZwwAAAUw"] [Sun Jul 12 18:16:27.578298 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/api/info.php"] [unique_id "alQuW1_56DeKknhy7sMZxgABKB4"] [Sun Jul 12 18:16:27.665619 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/help/phpinfo.php"] [unique_id "alQuW1_56DeKknhy7sMZyAABPlU"] [Sun Jul 12 18:16:27.718244 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/infos.php"] [unique_id "alQuW1_56DeKknhy7sMZywABQnc"] [Sun Jul 12 18:16:27.723389 2026] [security2:error] [pid 967714:tid 967838] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/orgs/.env"] [unique_id "alQuW1_56DeKknhy7sMZzAABG3A"] [Sun Jul 12 18:16:27.748262 2026] [security2:error] [pid 960377:tid 960513] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuWhMANaV5i2_BLQokSAAABRQ"] [Sun Jul 12 18:16:27.855907 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:27.856397 2026] [authz_core:error] [pid 967714:tid 967875] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:27.874521 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/old_phpinfo.php"] [unique_id "alQuW1_56DeKknhy7sMZ0gABR2E"] [Sun Jul 12 18:16:27.886544 2026] [security2:error] [pid 979474:tid 979610] [client 66.249.64.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "ophtek.com"] [uri "/index.php"] [unique_id "alQuWnTrIlbXpLXvkNcO3gAAAIY"] [Sun Jul 12 18:16:27.932292 2026] [security2:error] [pid 979474:tid 979721] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW4tMjg3OS9uODEvMTA3NjktODF1Zw=="] [unique_id "alQuW3TrIlbXpLXvkNcO6gAAAPQ"] [Sun Jul 12 18:16:28.012785 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/pinfo.php"] [unique_id "alQuXF_56DeKknhy7sMZ3wABJnk"] [Sun Jul 12 18:16:28.115539 2026] [security2:error] [pid 967714:tid 967934] [client 20.226.22.37:4872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/0.php"] [unique_id "alQuXF_56DeKknhy7sMZ4wAAAVk"] [Sun Jul 12 18:16:28.140840 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/server/phpinfo.php"] [unique_id "alQuXF_56DeKknhy7sMZ5gABLDY"] [Sun Jul 12 18:16:28.243210 2026] [security2:error] [pid 967714:tid 967859] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuW1_56DeKknhy7sMZ1QAAAQ4"] [Sun Jul 12 18:16:28.268817 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/time.php"] [unique_id "alQuXF_56DeKknhy7sMZ6AABg0A"] [Sun Jul 12 18:16:28.288703 2026] [security2:error] [pid 967714:tid 967882] [client 47.128.50.18:21190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "torigorosave.com"] [uri "/robots.txt"] [unique_id "alQuXF_56DeKknhy7sMZ6QAAASU"] [Sun Jul 12 18:16:28.353990 2026] [security2:error] [pid 979474:tid 979680] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuW3TrIlbXpLXvkNcO4wAAAMs"] [Sun Jul 12 18:16:28.416363 2026] [security2:error] [pid 967714:tid 967837] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/static/readme.bak"] [unique_id "alQuXF_56DeKknhy7sMZ7gABNG8"] [Sun Jul 12 18:16:28.461341 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/back/xampp/phpinfo.php"] [unique_id "alQuXF_56DeKknhy7sMZ8QABLy8"] [Sun Jul 12 18:16:28.516053 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuW1_56DeKknhy7sMZtQAAAU4"] [Sun Jul 12 18:16:28.566192 2026] [security2:error] [pid 979474:tid 979717] [client 192.178.4.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ophtek.com"] [uri "/index.php"] [unique_id "alQuXHTrIlbXpLXvkNcO7AAAAPA"] [Sun Jul 12 18:16:28.646464 2026] [security2:error] [pid 967714:tid 967940] [client 20.226.22.37:1984] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/002.php"] [unique_id "alQuXF_56DeKknhy7sMZ-wAAAV8"] [Sun Jul 12 18:16:28.665734 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/backend/.env.bak"] [unique_id "alQuXF_56DeKknhy7sMZ_AABZWI"] [Sun Jul 12 18:16:28.696938 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:28.697713 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:28.884616 2026] [security2:error] [pid 960377:tid 960619] [client 168.100.149.109:56400] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14235/bargainor/2308_mailable.jsp"] [unique_id "alQuXBMANaV5i2_BLQokYgAAAG8"] [Sun Jul 12 18:16:28.885142 2026] [security2:error] [pid 960377:tid 960522] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuWxMANaV5i2_BLQokUQAADgA"] [Sun Jul 12 18:16:28.885164 2026] [security2:error] [pid 967714:tid 967945] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuXF_56DeKknhy7sMZ-gAAAWQ"] [Sun Jul 12 18:16:29.044296 2026] [security2:error] [pid 960377:tid 960495] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env/dockers/mariadb-test/.env"] [unique_id "alQuXRMANaV5i2_BLQokYwAAFnQ"] [Sun Jul 12 18:16:29.165763 2026] [security2:error] [pid 967714:tid 967960] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuXF_56DeKknhy7sMZ8AAAAXM"] [Sun Jul 12 18:16:29.165846 2026] [security2:error] [pid 967714:tid 967960] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuXF_56DeKknhy7sMZ8AAAAXM"] [Sun Jul 12 18:16:29.169512 2026] [security2:error] [pid 967714:tid 967978] [client 65.21.113.206:54752] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW4tMjg3OS9uODEvMTA3NjktODF1Zw=="] [unique_id "alQuXF_56DeKknhy7sMZ7QAAAYU"] [Sun Jul 12 18:16:29.172943 2026] [security2:error] [pid 967714:tid 967936] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXF_56DeKknhy7sMaAAAAAVs"] [Sun Jul 12 18:16:29.177800 2026] [security2:error] [pid 967714:tid 967907] [client 20.226.22.37:2002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/01.php"] [unique_id "alQuXV_56DeKknhy7sMaEwAAAT4"] [Sun Jul 12 18:16:29.223348 2026] [security2:error] [pid 960377:tid 960421] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env/dockers/php-apache/.env"] [unique_id "alQuXRMANaV5i2_BLQokaAAATio"] [Sun Jul 12 18:16:29.261430 2026] [security2:error] [pid 967714:tid 967863] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXF_56DeKknhy7sMaBQAAARI"] [Sun Jul 12 18:16:29.336953 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backend/helper/info.php"] [unique_id "alQuXV_56DeKknhy7sMaGAABEHU"] [Sun Jul 12 18:16:29.393474 2026] [security2:error] [pid 960377:tid 960441] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env/example/.env"] [unique_id "alQuXRMANaV5i2_BLQokagAARj4"] [Sun Jul 12 18:16:29.414813 2026] [security2:error] [pid 967714:tid 967893] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXV_56DeKknhy7sMaDgAAATA"] [Sun Jul 12 18:16:29.437050 2026] [security2:error] [pid 967714:tid 967968] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuXV_56DeKknhy7sMaDQAAAXs"] [Sun Jul 12 18:16:29.553517 2026] [security2:error] [pid 960377:tid 960597] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuXBMANaV5i2_BLQokWQAAAFk"] [Sun Jul 12 18:16:29.556543 2026] [security2:error] [pid 960377:tid 960408] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/env/template/.env"] [unique_id "alQuXRMANaV5i2_BLQokcAAAOx4"] [Sun Jul 12 18:16:29.558369 2026] [authz_core:error] [pid 960377:tid 960604] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:29.559081 2026] [authz_core:error] [pid 960377:tid 960604] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:29.572804 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/backend/src/.env"] [unique_id "alQuXV_56DeKknhy7sMaHQABEEU"] [Sun Jul 12 18:16:29.575027 2026] [security2:error] [pid 979474:tid 979633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXXTrIlbXpLXvkNcO_QAAAJ0"] [Sun Jul 12 18:16:29.643740 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backend/temp.php"] [unique_id "alQuXV_56DeKknhy7sMaIAABEEg"] [Sun Jul 12 18:16:29.696852 2026] [security2:error] [pid 967714:tid 967901] [client 20.226.22.37:2019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/0x.php"] [unique_id "alQuXV_56DeKknhy7sMaIgAAATg"] [Sun Jul 12 18:16:29.716342 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/environments/local/.env"] [unique_id "alQuXRMANaV5i2_BLQokdQAAVjE"] [Sun Jul 12 18:16:29.776571 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXV_56DeKknhy7sMaHgAAAXU"] [Sun Jul 12 18:16:29.782247 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backend/xampp/info.php"] [unique_id "alQuXV_56DeKknhy7sMaIwABgzU"] [Sun Jul 12 18:16:29.897892 2026] [security2:error] [pid 960377:tid 960410] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/environments/production/.env"] [unique_id "alQuXRMANaV5i2_BLQokeAAAQiA"] [Sun Jul 12 18:16:29.912523 2026] [security2:error] [pid 967714:tid 967879] [client 64.89.163.25:63597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.163.89.64.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tekbevy.com"] [uri "/wp-login.php"] [unique_id "alQuXV_56DeKknhy7sMaKgAAASI"] [Sun Jul 12 18:16:29.929113 2026] [security2:error] [pid 967714:tid 967971] [client 205.210.31.218:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMY1QAAAX4"] [Sun Jul 12 18:16:29.935141 2026] [security2:error] [pid 967714:tid 967904] [client 205.210.31.218:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/index.php"] [unique_id "alQuVF_56DeKknhy7sMYxwAAATs"] [Sun Jul 12 18:16:30.007612 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/backendfinaltest/.env"] [unique_id "alQuXl_56DeKknhy7sMaLgABI0E"] [Sun Jul 12 18:16:30.057531 2026] [security2:error] [pid 960377:tid 960461] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/envs/.env"] [unique_id "alQuXhMANaV5i2_BLQokewAAGFI"] [Sun Jul 12 18:16:30.072927 2026] [security2:error] [pid 960377:tid 960509] [client 205.210.31.218:59578] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.maternalark.com"] [uri "/shell.php"] [unique_id "alQuVBMANaV5i2_BLQojzQAAAAE"] [Sun Jul 12 18:16:30.158848 2026] [security2:error] [pid 979474:tid 979726] [client 34.182.248.12:54485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.248.182.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXnTrIlbXpLXvkNcPDwAAAPk"] [Sun Jul 12 18:16:30.159187 2026] [security2:error] [pid 979474:tid 979726] [client 34.182.248.12:54485] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXnTrIlbXpLXvkNcPDwAAAPk"] [Sun Jul 12 18:16:30.164372 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/backup/.env"] [unique_id "alQuXl_56DeKknhy7sMaMQABIxE"] [Sun Jul 12 18:16:30.182390 2026] [security2:error] [pid 979474:tid 979671] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXXTrIlbXpLXvkNcPCwAAAMM"] [Sun Jul 12 18:16:30.244754 2026] [security2:error] [pid 960377:tid 960585] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuXRMANaV5i2_BLQokdAAAAE0"] [Sun Jul 12 18:16:30.248894 2026] [security2:error] [pid 960377:tid 960570] [client 20.226.22.37:2005] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/1.php"] [unique_id "alQuXhMANaV5i2_BLQokfgAAAD4"] [Sun Jul 12 18:16:30.249273 2026] [security2:error] [pid 960377:tid 960570] [client 20.226.22.37:2005] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/1.php"] [unique_id "alQuXhMANaV5i2_BLQokfgAAAD4"] [Sun Jul 12 18:16:30.275362 2026] [security2:error] [pid 960377:tid 960624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuXBMANaV5i2_BLQokWgAAAHQ"] [Sun Jul 12 18:16:30.348332 2026] [security2:error] [pid 960377:tid 960566] [client 47.128.39.210:62634] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "beats.codenamehippie.com"] [uri "/robots.txt"] [unique_id "alQuXhMANaV5i2_BLQokgwAAADo"] [Sun Jul 12 18:16:30.362975 2026] [authz_core:error] [pid 979474:tid 979647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:30.363464 2026] [authz_core:error] [pid 979474:tid 979647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:30.399642 2026] [security2:error] [pid 967714:tid 967856] [client 34.182.248.12:54422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.248.182.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXl_56DeKknhy7sMaOgAAAQs"] [Sun Jul 12 18:16:30.399925 2026] [security2:error] [pid 967714:tid 967856] [client 34.182.248.12:54422] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXl_56DeKknhy7sMaOgAAAQs"] [Sun Jul 12 18:16:30.574076 2026] [security2:error] [pid 960377:tid 960549] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXhMANaV5i2_BLQokggAAACk"] [Sun Jul 12 18:16:30.610621 2026] [security2:error] [pid 979474:tid 979626] [client 34.182.248.12:51307] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.248.182.34.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXnTrIlbXpLXvkNcPHgAAAJY"] [Sun Jul 12 18:16:30.611056 2026] [security2:error] [pid 979474:tid 979626] [client 34.182.248.12:51307] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuXnTrIlbXpLXvkNcPHgAAAJY"] [Sun Jul 12 18:16:30.722774 2026] [security2:error] [pid 967714:tid 967865] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuXl_56DeKknhy7sMaPQAAARQ"] [Sun Jul 12 18:16:30.735144 2026] [security2:error] [pid 967714:tid 967935] [client 57.141.18.101:37242] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.grpls.com"] [uri "/index.php"] [unique_id "alQuW1_56DeKknhy7sMZxQABWhg"] [Sun Jul 12 18:16:30.769776 2026] [security2:error] [pid 979474:tid 979705] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXnTrIlbXpLXvkNcPHQAAAOQ"] [Sun Jul 12 18:16:30.784759 2026] [security2:error] [pid 979474:tid 979733] [client 20.226.22.37:4292] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/100.php"] [unique_id "alQuXnTrIlbXpLXvkNcPIgAAAQA"] [Sun Jul 12 18:16:30.881495 2026] [security2:error] [pid 960377:tid 960615] [client 168.100.149.156:47042] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14300/bargainor/2308_epidemiology.jsp"] [unique_id "alQuXhMANaV5i2_BLQokhwAAAGs"] [Sun Jul 12 18:16:30.901565 2026] [security2:error] [pid 979474:tid 979719] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuXnTrIlbXpLXvkNcPIQAAAPI"] [Sun Jul 12 18:16:31.058483 2026] [security2:error] [pid 979474:tid 979702] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW5yLTIxMDk3LW5yeWhmLTMwNzktcnlo.cgi"] [unique_id "alQuX3TrIlbXpLXvkNcPLQAAAOE"] [Sun Jul 12 18:16:31.162939 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuXXTrIlbXpLXvkNcPBwAAAJk"] [Sun Jul 12 18:16:31.219714 2026] [security2:error] [pid 979474:tid 979680] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuXnTrIlbXpLXvkNcPKAAAAMs"] [Sun Jul 12 18:16:31.239830 2026] [authz_core:error] [pid 979474:tid 979698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:31.240718 2026] [authz_core:error] [pid 979474:tid 979698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:31.294883 2026] [security2:error] [pid 979474:tid 979696] [client 20.226.22.37:6236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/122.php"] [unique_id "alQuX3TrIlbXpLXvkNcPNAAAANs"] [Sun Jul 12 18:16:31.326827 2026] [security2:error] [pid 960377:tid 960627] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuXhMANaV5i2_BLQokfAAAd2Y"] [Sun Jul 12 18:16:31.357078 2026] [security2:error] [pid 979474:tid 979682] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuX3TrIlbXpLXvkNcPLgAAAM0"] [Sun Jul 12 18:16:31.485471 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/error/.env"] [unique_id "alQuXxMANaV5i2_BLQokkgAAVUs"] [Sun Jul 12 18:16:31.524130 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/backend/info.php"] [unique_id "alQuX1_56DeKknhy7sMaUgABDFw"] [Sun Jul 12 18:16:31.575393 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuXhMANaV5i2_BLQokfwAAACQ"] [Sun Jul 12 18:16:31.602010 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/help/phpinfo.php"] [unique_id "alQuX1_56DeKknhy7sMaWAABDF8"] [Sun Jul 12 18:16:31.619999 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaTQABDGc"] [Sun Jul 12 18:16:31.644849 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/errors/.env"] [unique_id "alQuXxMANaV5i2_BLQokkwAAFwg"] [Sun Jul 12 18:16:31.669388 2026] [security2:error] [pid 967714:tid 967875] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaTgAAAR4"] [Sun Jul 12 18:16:31.794564 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/helper/phpinfo.php"] [unique_id "alQuX1_56DeKknhy7sMaXgABSzw"] [Sun Jul 12 18:16:31.808084 2026] [security2:error] [pid 960377:tid 960419] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/example/.env"] [unique_id "alQuXxMANaV5i2_BLQoklQAAfSg"] [Sun Jul 12 18:16:31.820351 2026] [security2:error] [pid 960377:tid 960572] [client 20.226.22.37:7057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/123.php"] [unique_id "alQuXxMANaV5i2_BLQoklgAAAEA"] [Sun Jul 12 18:16:31.918929 2026] [core:error] [pid 960377:tid 960465] (13)Permission denied: [remote 2001:ee0:56ef:65d0:6a8f:c9ff:fe01:a7c6:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/events/list/page/2/?tribe-bar-date=2025-12-03 [Sun Jul 12 18:16:31.944576 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/info.php"] [unique_id "alQuX1_56DeKknhy7sMaYwABOT8"] [Sun Jul 12 18:16:31.966936 2026] [security2:error] [pid 960377:tid 960484] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/example02-golang-package/import-underscore/.env"] [unique_id "alQuXxMANaV5i2_BLQokmwAAFWk"] [Sun Jul 12 18:16:32.051388 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:32.051926 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:32.054698 2026] [security2:error] [pid 979474:tid 979676] [client 66.249.64.70:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "ophtek.com"] [uri "/index.php"] [unique_id "alQuX3TrIlbXpLXvkNcPMQAAAMg"] [Sun Jul 12 18:16:32.064818 2026] [core:error] [pid 967714:tid 967800] (13)Permission denied: [remote 95.102.195.75:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/events/list/page/2/?tribe-bar-date=2025-12-03 [Sun Jul 12 18:16:32.110413 2026] [security2:error] [pid 967714:tid 967895] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaYQAAATI"] [Sun Jul 12 18:16:32.134090 2026] [security2:error] [pid 960377:tid 960425] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/example27-how-to-load-env/sample01/.env"] [unique_id "alQuYBMANaV5i2_BLQoknAAAJS4"] [Sun Jul 12 18:16:32.171354 2026] [security2:error] [pid 967714:tid 967903] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaVQAAATo"] [Sun Jul 12 18:16:32.171432 2026] [security2:error] [pid 967714:tid 967903] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaVQAAATo"] [Sun Jul 12 18:16:32.176494 2026] [security2:error] [pid 967714:tid 967938] [client 65.21.113.206:54764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW5yLTIxMDk3LW5yeWhmLTMwNzktcnlo.cgi"] [unique_id "alQuX1_56DeKknhy7sMaUwAAAV0"] [Sun Jul 12 18:16:32.201648 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/lara/info.php"] [unique_id "alQuYF_56DeKknhy7sMaaAABIgg"] [Sun Jul 12 18:16:32.276478 2026] [core:error] [pid 979474:tid 979666] [client 103.82.20.130:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/search?q=cpanel.redwolfaudio.com [Sun Jul 12 18:16:32.276526 2026] [core:error] [pid 979474:tid 979666] [client 103.82.20.130:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.google.com/search?q=cpanel.redwolfaudio.com [Sun Jul 12 18:16:32.298911 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "alQuYBMANaV5i2_BLQoknQAAMi0"] [Sun Jul 12 18:16:32.349374 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuX1_56DeKknhy7sMaSAAAASg"] [Sun Jul 12 18:16:32.380515 2026] [security2:error] [pid 967714:tid 967930] [client 20.226.22.37:6231] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/13.php"] [unique_id "alQuYF_56DeKknhy7sMacQAAAVU"] [Sun Jul 12 18:16:32.384959 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/lara/phpinfo.php"] [unique_id "alQuYF_56DeKknhy7sMacgABNGs"] [Sun Jul 12 18:16:32.458265 2026] [security2:error] [pid 960377:tid 960423] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/.env"] [unique_id "alQuYBMANaV5i2_BLQokpAAADiw"] [Sun Jul 12 18:16:32.561218 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/laravel/phpinfo.php"] [unique_id "alQuYF_56DeKknhy7sMadwABC0k"] [Sun Jul 12 18:16:32.580321 2026] [security2:error] [pid 979474:tid 979664] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYHTrIlbXpLXvkNcPQQAAALw"] [Sun Jul 12 18:16:32.619749 2026] [security2:error] [pid 960377:tid 960387] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/01-simple-model/.env"] [unique_id "alQuYBMANaV5i2_BLQokpgAASQk"] [Sun Jul 12 18:16:32.634915 2026] [security2:error] [pid 979474:tid 979727] [client 170.231.56.243:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "brujobites.com"] [uri "/index.php"] [unique_id "alQuWHTrIlbXpLXvkNcOrAAAAPo"] [Sun Jul 12 18:16:32.752123 2026] [security2:error] [pid 967714:tid 967768] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/examples/01-simple-model/.env"] [unique_id "alQuYF_56DeKknhy7sMaewABUCo"] [Sun Jul 12 18:16:32.778064 2026] [security2:error] [pid 960377:tid 960407] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/02-complex-example/.env"] [unique_id "alQuYBMANaV5i2_BLQokqgAATh0"] [Sun Jul 12 18:16:32.799385 2026] [security2:error] [pid 967714:tid 967862] [client 168.100.149.121:17504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14365/bargainor/2308_secque.jsp"] [unique_id "alQuYF_56DeKknhy7sMafQAAARE"] [Sun Jul 12 18:16:32.827549 2026] [authz_core:error] [pid 960377:tid 960599] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:32.828313 2026] [authz_core:error] [pid 960377:tid 960599] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:32.888551 2026] [security2:error] [pid 967714:tid 967921] [client 20.226.22.37:6230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/133.php"] [unique_id "alQuYF_56DeKknhy7sMafwAAAUw"] [Sun Jul 12 18:16:32.936219 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/03-one-to-many-relationship/.env"] [unique_id "alQuYBMANaV5i2_BLQokrwAAWQE"] [Sun Jul 12 18:16:32.973436 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/linusadmin-phpinfo.php"] [unique_id "alQuYF_56DeKknhy7sMaggABdiM"] [Sun Jul 12 18:16:33.101484 2026] [security2:error] [pid 960377:tid 960478] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/04-many-to-many-relationship/.env"] [unique_id "alQuYRMANaV5i2_BLQoksQAAeGM"] [Sun Jul 12 18:16:33.180806 2026] [security2:error] [pid 960377:tid 960539] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYBMANaV5i2_BLQoksAAAAB8"] [Sun Jul 12 18:16:33.261980 2026] [security2:error] [pid 960377:tid 960456] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/05-migrations/.env"] [unique_id "alQuYRMANaV5i2_BLQoktAAAcU0"] [Sun Jul 12 18:16:33.266256 2026] [security2:error] [pid 979474:tid 979624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuX3TrIlbXpLXvkNcPNQAAAJQ"] [Sun Jul 12 18:16:33.349122 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/backup/pinfo.php"] [unique_id "alQuYV_56DeKknhy7sMaiQABGww"] [Sun Jul 12 18:16:33.399869 2026] [security2:error] [pid 967714:tid 967952] [client 20.226.22.37:1999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/155.php"] [unique_id "alQuYV_56DeKknhy7sMaiwAAAWs"] [Sun Jul 12 18:16:33.423208 2026] [security2:error] [pid 960377:tid 960431] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/06-base-service/.env"] [unique_id "alQuYRMANaV5i2_BLQoktgAAATQ"] [Sun Jul 12 18:16:33.444085 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYBMANaV5i2_BLQokoQAAADw"] [Sun Jul 12 18:16:33.532346 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuYV_56DeKknhy7sMaiAABGzg"] [Sun Jul 12 18:16:33.582047 2026] [security2:error] [pid 960377:tid 960432] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/07-feature-flags/.env"] [unique_id "alQuYRMANaV5i2_BLQokuwAAUzU"] [Sun Jul 12 18:16:33.598733 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:33.599323 2026] [authz_core:error] [pid 960377:tid 960577] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:33.624148 2026] [security2:error] [pid 979474:tid 979690] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYXTrIlbXpLXvkNcPUgAAANU"] [Sun Jul 12 18:16:33.742435 2026] [security2:error] [pid 960377:tid 960400] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/08-performance/.env"] [unique_id "alQuYRMANaV5i2_BLQokvAAAUhY"] [Sun Jul 12 18:16:33.805793 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/base/.env"] [unique_id "alQuYV_56DeKknhy7sMajwABKlc"] [Sun Jul 12 18:16:33.851547 2026] [security2:error] [pid 979474:tid 979634] [client 65.21.113.253:37508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/robots.txt"] [unique_id "alQuYXTrIlbXpLXvkNcPVwAAAJ4"] [Sun Jul 12 18:16:33.901009 2026] [security2:error] [pid 960377:tid 960439] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/09-production/.env"] [unique_id "alQuYRMANaV5i2_BLQokvwAAKTw"] [Sun Jul 12 18:16:33.906351 2026] [security2:error] [pid 960377:tid 960547] [client 20.226.22.37:6252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/177.php"] [unique_id "alQuYRMANaV5i2_BLQokwAAAACc"] [Sun Jul 12 18:16:33.985394 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYRMANaV5i2_BLQokvgAAAGg"] [Sun Jul 12 18:16:34.059553 2026] [security2:error] [pid 960377:tid 960505] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/10-subscriptions/.env"] [unique_id "alQuYhMANaV5i2_BLQokwgAAZn4"] [Sun Jul 12 18:16:34.099602 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/base_dir/.env"] [unique_id "alQuYl_56DeKknhy7sMakgABgCw"] [Sun Jul 12 18:16:34.184583 2026] [security2:error] [pid 967714:tid 967949] [client 168.100.149.115:21868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14430/bargainor/2308_dislevelment.jsp"] [unique_id "alQuYl_56DeKknhy7sMalQAAAWg"] [Sun Jul 12 18:16:34.218145 2026] [security2:error] [pid 960377:tid 960488] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/11-transactions/.env"] [unique_id "alQuYhMANaV5i2_BLQokwwAAYW0"] [Sun Jul 12 18:16:34.294939 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/basic-network/.env"] [unique_id "alQuYl_56DeKknhy7sMamQABQxY"] [Sun Jul 12 18:16:34.359580 2026] [authz_core:error] [pid 979474:tid 979717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:34.360172 2026] [authz_core:error] [pid 979474:tid 979717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:34.378168 2026] [security2:error] [pid 960377:tid 960392] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/drupal-separate-services/.env"] [unique_id "alQuYhMANaV5i2_BLQokxgAAew4"] [Sun Jul 12 18:16:34.400526 2026] [security2:error] [pid 967714:tid 967968] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYl_56DeKknhy7sMalgAAAXs"] [Sun Jul 12 18:16:34.423315 2026] [security2:error] [pid 967714:tid 967964] [client 20.226.22.37:7099] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/1index.php"] [unique_id "alQuYl_56DeKknhy7sManQAAAXc"] [Sun Jul 12 18:16:34.454552 2026] [security2:error] [pid 979474:tid 979615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYXTrIlbXpLXvkNcPUAAAAIs"] [Sun Jul 12 18:16:34.517839 2026] [security2:error] [pid 979474:tid 979709] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYXTrIlbXpLXvkNcPVQAAAOg"] [Sun Jul 12 18:16:34.536525 2026] [security2:error] [pid 960377:tid 960426] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQuYhMANaV5i2_BLQokzAAAei8"] [Sun Jul 12 18:16:34.696444 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/sdl-first/.env"] [unique_id "alQuYhMANaV5i2_BLQok0QAAVUc"] [Sun Jul 12 18:16:34.837865 2026] [security2:error] [pid 979474:tid 979653] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuYnTrIlbXpLXvkNcPZgAAALE"] [Sun Jul 12 18:16:34.838306 2026] [security2:error] [pid 979474:tid 979609] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuYnTrIlbXpLXvkNcPaAAAAIU"] [Sun Jul 12 18:16:34.860431 2026] [security2:error] [pid 960377:tid 960402] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/sdl-first/prisma/.env"] [unique_id "alQuYhMANaV5i2_BLQok1QAAShg"] [Sun Jul 12 18:16:34.901812 2026] [security2:error] [pid 979474:tid 979702] [client 136.144.19.135:26211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.19.144.136.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQuYnTrIlbXpLXvkNcPcQAAAOE"] [Sun Jul 12 18:16:34.921412 2026] [security2:error] [pid 960377:tid 960544] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuYhMANaV5i2_BLQok1AAAACQ"] [Sun Jul 12 18:16:34.940216 2026] [security2:error] [pid 979474:tid 979699] [client 20.226.22.37:6250] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/2.php"] [unique_id "alQuYnTrIlbXpLXvkNcPdQAAAN4"] [Sun Jul 12 18:16:35.018844 2026] [security2:error] [pid 960377:tid 960435] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/vue-dashboard/backend/.env"] [unique_id "alQuYxMANaV5i2_BLQok1gAAfTg"] [Sun Jul 12 18:16:35.111875 2026] [security2:error] [pid 967714:tid 967730] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/backend/phpinfo.php"] [unique_id "alQuY1_56DeKknhy7sMaswABOgQ"] [Sun Jul 12 18:16:35.134479 2026] [security2:error] [pid 979474:tid 979673] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuYnTrIlbXpLXvkNcPdAAAAMU"] [Sun Jul 12 18:16:35.180033 2026] [security2:error] [pid 960377:tid 960434] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/web/.env"] [unique_id "alQuYxMANaV5i2_BLQok2QAAKjc"] [Sun Jul 12 18:16:35.255315 2026] [authz_core:error] [pid 960377:tid 960541] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:35.256059 2026] [authz_core:error] [pid 960377:tid 960541] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:35.338583 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/infos.php"] [unique_id "alQuY1_56DeKknhy7sMatQABQHo"] [Sun Jul 12 18:16:35.340478 2026] [security2:error] [pid 979474:tid 979730] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW80eGJ3LzY4MjMvbzQvMzU4NDkvNA=="] [unique_id "alQuY3TrIlbXpLXvkNcPewAAAP0"] [Sun Jul 12 18:16:35.341643 2026] [security2:error] [pid 960377:tid 960396] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-cookie-auth-fauna/.env"] [unique_id "alQuYxMANaV5i2_BLQok3gAAJRI"] [Sun Jul 12 18:16:35.377226 2026] [security2:error] [pid 967714:tid 967864] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuY1_56DeKknhy7sMasgAAARM"] [Sun Jul 12 18:16:35.393394 2026] [security2:error] [pid 960377:tid 960598] [client 103.168.66.51:52715] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/next.config.js"] [unique_id "alQuYxMANaV5i2_BLQok4AAAAFo"] [Sun Jul 12 18:16:35.478578 2026] [security2:error] [pid 960377:tid 960561] [client 20.226.22.37:7075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/222.php"] [unique_id "alQuYxMANaV5i2_BLQok5AAAADU"] [Sun Jul 12 18:16:35.500939 2026] [security2:error] [pid 960377:tid 960394] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-dotenv/.env"] [unique_id "alQuYxMANaV5i2_BLQok5QAAFBA"] [Sun Jul 12 18:16:35.659737 2026] [security2:error] [pid 960377:tid 960414] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-firebase-authentication-serverless/.env"] [unique_id "alQuYxMANaV5i2_BLQok6AAAEyM"] [Sun Jul 12 18:16:35.682704 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/linusadmin-phpinfo.php"] [unique_id "alQuY1_56DeKknhy7sMauwABUVU"] [Sun Jul 12 18:16:35.698998 2026] [security2:error] [pid 979474:tid 979662] [client 103.168.66.51:52710] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/cache/.env"] [unique_id "alQuY3TrIlbXpLXvkNcPhAAAALo"] [Sun Jul 12 18:16:35.779844 2026] [security2:error] [pid 960377:tid 960540] [client 186.225.69.228:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuYxMANaV5i2_BLQok3QAAACA"] [Sun Jul 12 18:16:35.819176 2026] [security2:error] [pid 960377:tid 960473] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-react-relay-network-modern/.env"] [unique_id "alQuYxMANaV5i2_BLQok6gAAWV4"] [Sun Jul 12 18:16:35.824513 2026] [security2:error] [pid 979474:tid 979642] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuY3TrIlbXpLXvkNcPfwAAAKY"] [Sun Jul 12 18:16:35.976159 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/old_phpinfo.php"] [unique_id "alQuY1_56DeKknhy7sMawQABQUI"] [Sun Jul 12 18:16:35.977208 2026] [security2:error] [pid 960377:tid 960503] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-relay-modern/.env"] [unique_id "alQuYxMANaV5i2_BLQok7AAAO3w"] [Sun Jul 12 18:16:35.983734 2026] [security2:error] [pid 967714:tid 967945] [client 20.226.22.37:6254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/2p.update.php"] [unique_id "alQuY1_56DeKknhy7sMawwAAAWQ"] [Sun Jul 12 18:16:35.997737 2026] [security2:error] [pid 967714:tid 967808] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/login.sql"] [unique_id "alQuY1_56DeKknhy7sMaxAABf1I"] [Sun Jul 12 18:16:36.075193 2026] [security2:error] [pid 967714:tid 967955] [client 94.187.171.125:63781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuZF_56DeKknhy7sMazAAAAW4"] [Sun Jul 12 18:16:36.075510 2026] [security2:error] [pid 967714:tid 967955] [client 94.187.171.125:63781] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuZF_56DeKknhy7sMazAAAAW4"] [Sun Jul 12 18:16:36.085854 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/services/info.php"] [unique_id "alQuZF_56DeKknhy7sMazQABFBQ"] [Sun Jul 12 18:16:36.108571 2026] [authz_core:error] [pid 979474:tid 979690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:36.109561 2026] [authz_core:error] [pid 979474:tid 979690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:36.145361 2026] [security2:error] [pid 960377:tid 960463] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "alQuZBMANaV5i2_BLQok7wAALFQ"] [Sun Jul 12 18:16:36.180726 2026] [security2:error] [pid 979474:tid 979693] [client 168.100.149.19:52388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14495/bargainor/2308_limnoria.jsp"] [unique_id "alQuZHTrIlbXpLXvkNcPjQAAANg"] [Sun Jul 12 18:16:36.203986 2026] [security2:error] [pid 967714:tid 967764] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/beta/temp.php"] [unique_id "alQuZF_56DeKknhy7sMa0gABQiY"] [Sun Jul 12 18:16:36.310448 2026] [security2:error] [pid 960377:tid 960501] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/exapi/.env"] [unique_id "alQuZBMANaV5i2_BLQok8AAAeHo"] [Sun Jul 12 18:16:36.314838 2026] [security2:error] [pid 960377:tid 960594] [client 103.168.66.51:52717] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/builds/.env"] [unique_id "alQuZBMANaV5i2_BLQok8QAAAFY"] [Sun Jul 12 18:16:36.453815 2026] [security2:error] [pid 967714:tid 967918] [client 57.141.18.64:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuZF_56DeKknhy7sMaygAAAUk"] [Sun Jul 12 18:16:36.456522 2026] [security2:error] [pid 979474:tid 979656] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZHTrIlbXpLXvkNcPjgAAALQ"] [Sun Jul 12 18:16:36.470621 2026] [security2:error] [pid 960377:tid 960470] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Exercise.Frontend/.env"] [unique_id "alQuZBMANaV5i2_BLQok8gAAdVs"] [Sun Jul 12 18:16:36.474935 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuY1_56DeKknhy7sMavgAAARw"] [Sun Jul 12 18:16:36.474988 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuY1_56DeKknhy7sMavgAAARw"] [Sun Jul 12 18:16:36.476069 2026] [security2:error] [pid 979474:tid 979647] [client 65.21.113.206:46084] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW80eGJ3LzY4MjMvbzQvMzU4NDkvNA=="] [unique_id "alQuY3TrIlbXpLXvkNcPhgAAAKs"] [Sun Jul 12 18:16:36.534156 2026] [security2:error] [pid 967714:tid 967927] [client 20.226.22.37:6226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/3.php"] [unique_id "alQuZF_56DeKknhy7sMa4AAAAVI"] [Sun Jul 12 18:16:36.622318 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuZF_56DeKknhy7sMa2gAAAXw"] [Sun Jul 12 18:16:36.630358 2026] [security2:error] [pid 960377:tid 960462] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Exercise.Frontend/train/.env"] [unique_id "alQuZBMANaV5i2_BLQok9AAAblM"] [Sun Jul 12 18:16:36.723759 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuZF_56DeKknhy7sMa4wAAAYE"] [Sun Jul 12 18:16:36.790210 2026] [security2:error] [pid 960377:tid 960418] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/export/.env"] [unique_id "alQuZBMANaV5i2_BLQok9QAAQic"] [Sun Jul 12 18:16:36.814545 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:57322] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZF_56DeKknhy7sMa5gABMC8"] [Sun Jul 12 18:16:36.865999 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuZF_56DeKknhy7sMa6QABPT4"] [Sun Jul 12 18:16:36.899846 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/bookchain-client/.env"] [unique_id "alQuZF_56DeKknhy7sMa7gABOwI"] [Sun Jul 12 18:16:36.949843 2026] [security2:error] [pid 960377:tid 960483] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fastlane/.env"] [unique_id "alQuZBMANaV5i2_BLQok9gAACGg"] [Sun Jul 12 18:16:36.963206 2026] [authz_core:error] [pid 967714:tid 967934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:36.963742 2026] [authz_core:error] [pid 967714:tid 967934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:37.064408 2026] [security2:error] [pid 967714:tid 967959] [client 20.226.22.37:4791] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQuZV_56DeKknhy7sMa9AAAAXI"] [Sun Jul 12 18:16:37.101488 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/bootstrap/.env"] [unique_id "alQuZV_56DeKknhy7sMa9QABNDQ"] [Sun Jul 12 18:16:37.122044 2026] [security2:error] [pid 967714:tid 967965] [client 125.167.21.72:62471] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuZV_56DeKknhy7sMa9gAAAXg"] [Sun Jul 12 18:16:37.122327 2026] [security2:error] [pid 967714:tid 967965] [client 125.167.21.72:62471] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuZV_56DeKknhy7sMa9gAAAXg"] [Sun Jul 12 18:16:37.145058 2026] [security2:error] [pid 960377:tid 960413] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/favicons/.env"] [unique_id "alQuZRMANaV5i2_BLQok-gAASCI"] [Sun Jul 12 18:16:37.211835 2026] [core:error] [pid 979474:tid 979689] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:37.211881 2026] [core:error] [pid 979474:tid 979689] [client 2a06:98c0:3600::103:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:37.219554 2026] [security2:error] [pid 960377:tid 960563] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYhMANaV5i2_BLQokzQAAADc"] [Sun Jul 12 18:16:37.287532 2026] [security2:error] [pid 960377:tid 960537] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYhMANaV5i2_BLQokyQAAAB0"] [Sun Jul 12 18:16:37.305880 2026] [security2:error] [pid 979474:tid 979621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYnTrIlbXpLXvkNcPYQAAAJE"] [Sun Jul 12 18:16:37.315272 2026] [security2:error] [pid 960377:tid 960412] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/favs/.env"] [unique_id "alQuZRMANaV5i2_BLQok_AAAUiE"] [Sun Jul 12 18:16:37.323980 2026] [security2:error] [pid 967714:tid 967864] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZV_56DeKknhy7sMa8gAAARM"] [Sun Jul 12 18:16:37.368579 2026] [security2:error] [pid 960377:tid 960562] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuYhMANaV5i2_BLQokyAAAADY"] [Sun Jul 12 18:16:37.453026 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/develop/info.php"] [unique_id "alQuZV_56DeKknhy7sMa_QABbwc"] [Sun Jul 12 18:16:37.473624 2026] [security2:error] [pid 960377:tid 960460] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/FE/huey/.env"] [unique_id "alQuZRMANaV5i2_BLQolAAAAfFE"] [Sun Jul 12 18:16:37.572114 2026] [security2:error] [pid 979474:tid 979717] [client 20.226.22.37:7094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/403.php"] [unique_id "alQuZXTrIlbXpLXvkNcPsAAAAPA"] [Sun Jul 12 18:16:37.631551 2026] [security2:error] [pid 960377:tid 960496] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fedex/.env"] [unique_id "alQuZRMANaV5i2_BLQolAgAAdnU"] [Sun Jul 12 18:16:37.747029 2026] [security2:error] [pid 967714:tid 967950] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZV_56DeKknhy7sMbBAAAAWk"] [Sun Jul 12 18:16:37.789954 2026] [security2:error] [pid 960377:tid 960404] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fhir-api/.env"] [unique_id "alQuZRMANaV5i2_BLQolAwAAWBo"] [Sun Jul 12 18:16:37.837528 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/infos.php"] [unique_id "alQuZV_56DeKknhy7sMbDgABXxs"] [Sun Jul 12 18:16:37.849969 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:37.850444 2026] [authz_core:error] [pid 967714:tid 967981] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:37.948788 2026] [security2:error] [pid 960377:tid 960471] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/files/.env"] [unique_id "alQuZRMANaV5i2_BLQolBwAAbVw"] [Sun Jul 12 18:16:38.090837 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/old_phpinfo.php"] [unique_id "alQuZl_56DeKknhy7sMbGQABUiI"] [Sun Jul 12 18:16:38.112980 2026] [security2:error] [pid 967714:tid 967918] [client 24.203.79.110:63951] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuZl_56DeKknhy7sMbGgAAAUk"] [Sun Jul 12 18:16:38.113259 2026] [security2:error] [pid 967714:tid 967918] [client 24.203.79.110:63951] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuZl_56DeKknhy7sMbGgAAAUk"] [Sun Jul 12 18:16:38.113819 2026] [security2:error] [pid 960377:tid 960437] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fileserver/.env"] [unique_id "alQuZhMANaV5i2_BLQolCAAAdzo"] [Sun Jul 12 18:16:38.129740 2026] [security2:error] [pid 967714:tid 967935] [client 20.226.22.37:7177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.writtenbyjca.com"] [uri "/404.php"] [unique_id "alQuZl_56DeKknhy7sMbGwAAAVo"] [Sun Jul 12 18:16:38.225554 2026] [security2:error] [pid 967714:tid 967917] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZV_56DeKknhy7sMbEgAAAUg"] [Sun Jul 12 18:16:38.244129 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/php-info.php"] [unique_id "alQuZl_56DeKknhy7sMbHAABDwY"] [Sun Jul 12 18:16:38.274227 2026] [security2:error] [pid 960377:tid 960452] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/films/.env"] [unique_id "alQuZhMANaV5i2_BLQolCgAAfUk"] [Sun Jul 12 18:16:38.345259 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/pinfo.php"] [unique_id "alQuZl_56DeKknhy7sMbHwABJjU"] [Sun Jul 12 18:16:38.415838 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/bot/service/phpinfo.php"] [unique_id "alQuZl_56DeKknhy7sMbJgABIn4"] [Sun Jul 12 18:16:38.434380 2026] [security2:error] [pid 960377:tid 960417] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Final_Project/Airflow_Dag/.env"] [unique_id "alQuZhMANaV5i2_BLQolDgAAJSY"] [Sun Jul 12 18:16:38.447589 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/boxes/oracle-vagrant-boxes/ContainerRegistry/.env"] [unique_id "alQuZl_56DeKknhy7sMbKAABeTc"] [Sun Jul 12 18:16:38.550470 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuZV_56DeKknhy7sMa-gAAASM"] [Sun Jul 12 18:16:38.587365 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/cache/.env"] [unique_id "alQuZl_56DeKknhy7sMbNQABchE"] [Sun Jul 12 18:16:38.596412 2026] [security2:error] [pid 960377:tid 960393] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Final_Project/kafka_twitter/.env"] [unique_id "alQuZhMANaV5i2_BLQolEAAAeQ8"] [Sun Jul 12 18:16:38.665134 2026] [security2:error] [pid 967714:tid 967960] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZl_56DeKknhy7sMbJwAAAXM"] [Sun Jul 12 18:16:38.681855 2026] [authz_core:error] [pid 967714:tid 967903] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:38.682323 2026] [authz_core:error] [pid 967714:tid 967903] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:38.758850 2026] [security2:error] [pid 960377:tid 960469] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Final_Project/StartingFile/.env"] [unique_id "alQuZhMANaV5i2_BLQolEQAAWlo"] [Sun Jul 12 18:16:38.804403 2026] [security2:error] [pid 979474:tid 979710] [client 168.100.149.17:39460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14560/bargainor/2308_milksopism.jsp"] [unique_id "alQuZnTrIlbXpLXvkNcP8AAAAOk"] [Sun Jul 12 18:16:38.917818 2026] [security2:error] [pid 960377:tid 960489] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQuZhMANaV5i2_BLQolEgAADG4"] [Sun Jul 12 18:16:38.920904 2026] [security2:error] [pid 967714:tid 967757] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/cgi-bin/.env"] [unique_id "alQuZl_56DeKknhy7sMbPAABEx8"] [Sun Jul 12 18:16:39.008002 2026] [core:error] [pid 967714:tid 967926] [client 195.96.139.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:39.008057 2026] [core:error] [pid 967714:tid 967926] [client 195.96.139.142:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:39.047286 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/ch6-mytodo/.env"] [unique_id "alQuZ1_56DeKknhy7sMbQwABEV4"] [Sun Jul 12 18:16:39.108548 2026] [security2:error] [pid 967714:tid 967899] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZl_56DeKknhy7sMbOwAAATY"] [Sun Jul 12 18:16:39.278185 2026] [security2:error] [pid 960377:tid 960612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuZRMANaV5i2_BLQok_gAAAGg"] [Sun Jul 12 18:16:39.385578 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/ch8-mytodo/.env"] [unique_id "alQuZ1_56DeKknhy7sMbUQABKhg"] [Sun Jul 12 18:16:39.479450 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:39.479987 2026] [authz_core:error] [pid 967714:tid 967876] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:39.513311 2026] [security2:error] [pid 979474:tid 979618] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW81LzM1OTU1L281LzM3NTQvNWo0.asp"] [unique_id "alQuZ3TrIlbXpLXvkNcP_QAAAI4"] [Sun Jul 12 18:16:39.591485 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/client/server/phpinfo.php"] [unique_id "alQuZ1_56DeKknhy7sMbWAABORw"] [Sun Jul 12 18:16:39.648465 2026] [security2:error] [pid 967714:tid 967933] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZ1_56DeKknhy7sMbTAAAAVg"] [Sun Jul 12 18:16:39.748037 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuZxMANaV5i2_BLQolGQAAABQ"] [Sun Jul 12 18:16:39.774488 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/backup/info.php"] [unique_id "alQuZ1_56DeKknhy7sMbWQABaHE"] [Sun Jul 12 18:16:39.957977 2026] [security2:error] [pid 960377:tid 960561] [client 40.223.200.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuZxMANaV5i2_BLQolGAAAADU"] [Sun Jul 12 18:16:40.159707 2026] [security2:error] [pid 979474:tid 979736] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuZ3TrIlbXpLXvkNcQBAAAAQM"] [Sun Jul 12 18:16:40.201986 2026] [security2:error] [pid 960377:tid 960619] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuZxMANaV5i2_BLQolFAAAbzk"] [Sun Jul 12 18:16:40.219772 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/config.php"] [unique_id "alQuaF_56DeKknhy7sMbaQABTWc"] [Sun Jul 12 18:16:40.300787 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/current/info.php"] [unique_id "alQuaF_56DeKknhy7sMbawABcn0"] [Sun Jul 12 18:16:40.361504 2026] [security2:error] [pid 960377:tid 960480] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/first-network/.env"] [unique_id "alQuaBMANaV5i2_BLQolHQAAY2U"] [Sun Jul 12 18:16:40.381391 2026] [authz_core:error] [pid 979474:tid 979626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:40.381957 2026] [authz_core:error] [pid 979474:tid 979626] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:40.433457 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/dev/info.php"] [unique_id "alQuaF_56DeKknhy7sMbcQABXTw"] [Sun Jul 12 18:16:40.442102 2026] [security2:error] [pid 967714:tid 967882] [client 74.7.241.165:51060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cpanel.umiwelder.com.br"] [uri "/___proxy_subdomain_cpanel/robots.txt"] [unique_id "alQuaF_56DeKknhy7sMbbwAAASU"] [Sun Jul 12 18:16:40.521814 2026] [security2:error] [pid 960377:tid 960420] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/FIRST_CONFIG/.env"] [unique_id "alQuaBMANaV5i2_BLQolHwAAEyk"] [Sun Jul 12 18:16:40.679691 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/develop/info.php"] [unique_id "alQuaF_56DeKknhy7sMbeQABE0o"] [Sun Jul 12 18:16:40.682825 2026] [security2:error] [pid 960377:tid 960499] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fisdom/fisdom/.env"] [unique_id "alQuaBMANaV5i2_BLQolIAAAIHg"] [Sun Jul 12 18:16:40.686771 2026] [security2:error] [pid 967714:tid 967877] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuaF_56DeKknhy7sMbcAAAASA"] [Sun Jul 12 18:16:40.745903 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/develop/phpinfo.php"] [unique_id "alQuaF_56DeKknhy7sMbfgABgCg"] [Sun Jul 12 18:16:40.837438 2026] [security2:error] [pid 979474:tid 979630] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuaHTrIlbXpLXvkNcQBgAAAJo"] [Sun Jul 12 18:16:40.837499 2026] [security2:error] [pid 979474:tid 979630] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuaHTrIlbXpLXvkNcQBgAAAJo"] [Sun Jul 12 18:16:40.838480 2026] [security2:error] [pid 967714:tid 967964] [client 65.21.113.206:46090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW81LzM1OTU1L281LzM3NTQvNWo0.asp"] [unique_id "alQuZ1_56DeKknhy7sMbXwAAAXc"] [Sun Jul 12 18:16:40.844057 2026] [security2:error] [pid 960377:tid 960382] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fixtures/blocks/.env"] [unique_id "alQuaBMANaV5i2_BLQolIwAAWQQ"] [Sun Jul 12 18:16:40.861726 2026] [security2:error] [pid 967714:tid 967892] [client 168.100.149.94:37766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14625/bargainor/2308_capnoides.jsp"] [unique_id "alQuaF_56DeKknhy7sMbgAAAAS8"] [Sun Jul 12 18:16:41.003652 2026] [security2:error] [pid 960377:tid 960395] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQuaBMANaV5i2_BLQolJAAAOxE"] [Sun Jul 12 18:16:41.151016 2026] [security2:error] [pid 967714:tid 967971] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuaF_56DeKknhy7sMbgwAAAX4"] [Sun Jul 12 18:16:41.174002 2026] [security2:error] [pid 967714:tid 967791] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuSV_56DeKknhy7sMbMAABVkE"] [Sun Jul 12 18:16:41.190378 2026] [security2:error] [pid 960377:tid 960445] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fixtures/flight/.env"] [unique_id "alQuaRMANaV5i2_BLQolJwAABkI"] [Sun Jul 12 18:16:41.244129 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/help/info.php"] [unique_id "alQuaV_56DeKknhy7sMbigABQms"] [Sun Jul 12 18:16:41.262177 2026] [security2:error] [pid 967714:tid 967759] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/helper/info.php"] [unique_id "alQuaV_56DeKknhy7sMbiwABCyE"] [Sun Jul 12 18:16:41.263491 2026] [authz_core:error] [pid 960377:tid 960611] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:41.264036 2026] [authz_core:error] [pid 960377:tid 960611] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:41.275240 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuZl_56DeKknhy7sMbMwAAAUA"] [Sun Jul 12 18:16:41.339286 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuZl_56DeKknhy7sMbNwAAARk"] [Sun Jul 12 18:16:41.350313 2026] [security2:error] [pid 960377:tid 960476] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQuaRMANaV5i2_BLQolKAAANGE"] [Sun Jul 12 18:16:41.399261 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/lara/info.php"] [unique_id "alQuaV_56DeKknhy7sMbkgABhyo"] [Sun Jul 12 18:16:41.469068 2026] [security2:error] [pid 979474:tid 979648] [client 103.168.66.51:52714] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/protected/.env"] [unique_id "alQuaXTrIlbXpLXvkNcQEAAAAKw"] [Sun Jul 12 18:16:41.511529 2026] [security2:error] [pid 960377:tid 960391] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/flask/.env"] [unique_id "alQuaRMANaV5i2_BLQolKgAAHw0"] [Sun Jul 12 18:16:41.598398 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/laravel/info.php"] [unique_id "alQuaV_56DeKknhy7sMblgABJxk"] [Sun Jul 12 18:16:41.602216 2026] [security2:error] [pid 967714:tid 967857] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuaV_56DeKknhy7sMbkQAAAQw"] [Sun Jul 12 18:16:41.670586 2026] [security2:error] [pid 960377:tid 960492] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/flask_test_uploads/.env"] [unique_id "alQuaRMANaV5i2_BLQolLQAAcXE"] [Sun Jul 12 18:16:41.829593 2026] [security2:error] [pid 960377:tid 960486] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fm/.env"] [unique_id "alQuaRMANaV5i2_BLQolLgAACGs"] [Sun Jul 12 18:16:41.883032 2026] [security2:error] [pid 967714:tid 967769] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/register.php.copy"] [unique_id "alQuaV_56DeKknhy7sMbmwABMis"] [Sun Jul 12 18:16:41.899841 2026] [security2:error] [pid 967714:tid 967740] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cms/temp.php"] [unique_id "alQuaV_56DeKknhy7sMbnQABJg4"] [Sun Jul 12 18:16:41.987681 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/font-icons/.env"] [unique_id "alQuaRMANaV5i2_BLQolMAAAGEg"] [Sun Jul 12 18:16:42.026041 2026] [security2:error] [pid 967714:tid 967802] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/collected_static/.env"] [unique_id "alQual_56DeKknhy7sMboQABGEw"] [Sun Jul 12 18:16:42.032576 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:42.033122 2026] [authz_core:error] [pid 979474:tid 979687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:42.133877 2026] [security2:error] [pid 979474:tid 979651] [client 152.171.139.101:55600] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQuanTrIlbXpLXvkNcQGQAAAK8"], referer: https://www.portables-batterie.fr/lenovo/5B10W67318-portable-batterie.htm [Sun Jul 12 18:16:42.182036 2026] [security2:error] [pid 960377:tid 960490] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/fonts/.env"] [unique_id "alQuahMANaV5i2_BLQolMQAAG28"] [Sun Jul 12 18:16:42.188065 2026] [security2:error] [pid 967714:tid 967959] [client 114.119.139.167:34807] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "opportunityalliance.com"] [uri "/logo-oa-02-orica/"] [unique_id "alQual_56DeKknhy7sMbpAAAAXI"] [Sun Jul 12 18:16:42.193420 2026] [security2:error] [pid 967714:tid 967953] [client 168.100.149.68:39116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14690/bargainor/2308_deft.jsp"] [unique_id "alQual_56DeKknhy7sMbpQAAAWw"] [Sun Jul 12 18:16:42.246012 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/common/.env.bak"] [unique_id "alQual_56DeKknhy7sMbpwABLTg"] [Sun Jul 12 18:16:42.337427 2026] [security2:error] [pid 979474:tid 979621] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuanTrIlbXpLXvkNcQGgAAAJE"] [Sun Jul 12 18:16:42.341144 2026] [security2:error] [pid 960377:tid 960444] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/framework/.env"] [unique_id "alQuahMANaV5i2_BLQolMwAATUE"] [Sun Jul 12 18:16:42.384400 2026] [security2:error] [pid 979474:tid 979641] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuaXTrIlbXpLXvkNcQDQAAAKU"] [Sun Jul 12 18:16:42.473377 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/common/backend/phpinfo.php"] [unique_id "alQual_56DeKknhy7sMbsAABO1c"] [Sun Jul 12 18:16:42.499552 2026] [security2:error] [pid 960377:tid 960438] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/front-app/.env"] [unique_id "alQuahMANaV5i2_BLQolNgAAOjs"] [Sun Jul 12 18:16:42.593245 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuaV_56DeKknhy7sMbjwAAAR8"] [Sun Jul 12 18:16:42.621592 2026] [security2:error] [pid 979474:tid 979682] [client 66.249.66.39:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQuanTrIlbXpLXvkNcQHQAAAM0"] [Sun Jul 12 18:16:42.658869 2026] [security2:error] [pid 960377:tid 960468] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/front-empathy/.env"] [unique_id "alQuahMANaV5i2_BLQolNwAAClk"] [Sun Jul 12 18:16:42.703422 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/common/backup/phpinfo.php"] [unique_id "alQual_56DeKknhy7sMbtgABNRY"] [Sun Jul 12 18:16:42.739872 2026] [security2:error] [pid 979474:tid 979644] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuanTrIlbXpLXvkNcQIAAAAKg"] [Sun Jul 12 18:16:42.816983 2026] [security2:error] [pid 960377:tid 960474] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/front-end/.env"] [unique_id "alQuahMANaV5i2_BLQolPAAANl8"] [Sun Jul 12 18:16:42.841904 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:42.889413 2026] [authz_core:error] [pid 960377:tid 960549] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:42.916393 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/community/.env"] [unique_id "alQual_56DeKknhy7sMbuQABhAo"] [Sun Jul 12 18:16:42.916721 2026] [security2:error] [pid 979474:tid 979652] [client 103.168.66.51:50216] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/api/config/.env"] [unique_id "alQuanTrIlbXpLXvkNcQKgAAALA"] [Sun Jul 12 18:16:42.974844 2026] [security2:error] [pid 960377:tid 960449] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/front/.env"] [unique_id "alQuahMANaV5i2_BLQolRgAAYUY"] [Sun Jul 12 18:16:43.048861 2026] [cgid:error] [pid 979474:tid 979702] [client 45.156.128.173:53724] AH01264: stderr from /home2/versatil/public_html/bluehive/cgi-bin: script not found or unable to stat [Sun Jul 12 18:16:43.139761 2026] [security2:error] [pid 960377:tid 960384] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/front/src/.env"] [unique_id "alQuaxMANaV5i2_BLQolTAAAdwY"] [Sun Jul 12 18:16:43.151920 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/conf/api/info.php"] [unique_id "alQua1_56DeKknhy7sMbvgABgk4"] [Sun Jul 12 18:16:43.190595 2026] [security2:error] [pid 960377:tid 960610] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuahMANaV5i2_BLQolQQAAAGY"] [Sun Jul 12 18:16:43.288883 2026] [cgid:error] [pid 967714:tid 967874] [client 199.45.155.81:0] AH01265: stderr from /home4/globalf1/public_html/climateneutralflower/cgi-bin/: attempt to invoke directory as script, referer: https://www.climateneutralflower.globalflower.net:443/cgi-bin [Sun Jul 12 18:16:43.297844 2026] [security2:error] [pid 960377:tid 960479] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/frontend/momentum-fe/.env"] [unique_id "alQuaxMANaV5i2_BLQolTQAAJWQ"] [Sun Jul 12 18:16:43.365940 2026] [security2:error] [pid 967714:tid 967834] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/plugin_static/.env"] [unique_id "alQua1_56DeKknhy7sMbwwABVGw"] [Sun Jul 12 18:16:43.449353 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/conf/dashboard/phpinfo.php"] [unique_id "alQua1_56DeKknhy7sMbxQABgVM"] [Sun Jul 12 18:16:43.457621 2026] [security2:error] [pid 960377:tid 960429] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/frontend/react/.env"] [unique_id "alQuaxMANaV5i2_BLQolTwAAMjI"] [Sun Jul 12 18:16:43.485169 2026] [security2:error] [pid 979474:tid 979645] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW81LzM1OTU1L281LzY4MjMvNWo0.asp"] [unique_id "alQua3TrIlbXpLXvkNcQNQAAAKk"] [Sun Jul 12 18:16:43.485862 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQual_56DeKknhy7sMbrwAAARM"] [Sun Jul 12 18:16:43.536447 2026] [security2:error] [pid 967714:tid 967814] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/seeds/.env"] [unique_id "alQua1_56DeKknhy7sMbzAABYVg"] [Sun Jul 12 18:16:43.601088 2026] [security2:error] [pid 960377:tid 960584] [client 190.86.73.77:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuahMANaV5i2_BLQolRQAAAEw"] [Sun Jul 12 18:16:43.616551 2026] [security2:error] [pid 960377:tid 960422] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/frontend/vue/.env"] [unique_id "alQuaxMANaV5i2_BLQolUgAAais"] [Sun Jul 12 18:16:43.680514 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:43.681104 2026] [authz_core:error] [pid 960377:tid 960575] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:43.705537 2026] [security2:error] [pid 967714:tid 967730] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/edge/.env"] [unique_id "alQua1_56DeKknhy7sMbzgABewQ"] [Sun Jul 12 18:16:44.005006 2026] [security2:error] [pid 960377:tid 960526] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuaxMANaV5i2_BLQolVQAAABI"] [Sun Jul 12 18:16:44.125527 2026] [security2:error] [pid 967714:tid 967917] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQua1_56DeKknhy7sMb1gAAAUg"] [Sun Jul 12 18:16:44.171256 2026] [security2:error] [pid 979474:tid 979644] [client 103.168.66.51:52586] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/storage/logs/laravel.log"] [unique_id "alQubHTrIlbXpLXvkNcQPQAAAKg"] [Sun Jul 12 18:16:44.173055 2026] [security2:error] [pid 967714:tid 967958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQua1_56DeKknhy7sMb2wAAAXE"] [Sun Jul 12 18:16:44.176837 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config.php"] [unique_id "alQubF_56DeKknhy7sMb5gABWno"] [Sun Jul 12 18:16:44.208057 2026] [security2:error] [pid 960377:tid 960612] [client 168.100.149.197:45698] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14755/bargainor/2308_did.jsp"] [unique_id "alQubBMANaV5i2_BLQolWAAAAGg"] [Sun Jul 12 18:16:44.209802 2026] [security2:error] [pid 967714:tid 967811] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config.php.original"] [unique_id "alQubF_56DeKknhy7sMb5wABHlU"] [Sun Jul 12 18:16:44.278544 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuanTrIlbXpLXvkNcQIwAAAJk"] [Sun Jul 12 18:16:44.301274 2026] [security2:error] [pid 967714:tid 967961] [client 103.168.66.51:51186] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/django/.env"] [unique_id "alQubF_56DeKknhy7sMb6QAAAXQ"] [Sun Jul 12 18:16:44.428618 2026] [security2:error] [pid 967714:tid 967845] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config.php.zip"] [unique_id "alQubF_56DeKknhy7sMb9QABG3c"] [Sun Jul 12 18:16:44.487982 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:44.488559 2026] [authz_core:error] [pid 967714:tid 967973] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:44.600449 2026] [security2:error] [pid 967714:tid 967919] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQua1_56DeKknhy7sMbyAAAAUo"] [Sun Jul 12 18:16:44.617070 2026] [security2:error] [pid 967714:tid 967896] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubF_56DeKknhy7sMb8gAAATM"] [Sun Jul 12 18:16:44.653476 2026] [security2:error] [pid 967714:tid 967879] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQua1_56DeKknhy7sMb3gAAASI"] [Sun Jul 12 18:16:44.653539 2026] [security2:error] [pid 967714:tid 967879] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQua1_56DeKknhy7sMb3gAAASI"] [Sun Jul 12 18:16:44.654811 2026] [security2:error] [pid 967714:tid 967902] [client 65.21.113.206:52568] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW81LzM1OTU1L281LzY4MjMvNWo0.asp"] [unique_id "alQua1_56DeKknhy7sMb2gAAATk"] [Sun Jul 12 18:16:44.656517 2026] [security2:error] [pid 967714:tid 967979] [client 103.168.66.51:62290] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/app/config/app.php"] [unique_id "alQubF_56DeKknhy7sMb_AAAAYY"] [Sun Jul 12 18:16:44.793784 2026] [security2:error] [pid 967714:tid 967780] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.orig$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1266"] [id "390584"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .orig)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/upload.php.orig"] [unique_id "alQubF_56DeKknhy7sMcBQABaTY"] [Sun Jul 12 18:16:44.872407 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuaxMANaV5i2_BLQolUwAAGmo"] [Sun Jul 12 18:16:44.949481 2026] [security2:error] [pid 960377:tid 960581] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubBMANaV5i2_BLQolYAAAAEk"] [Sun Jul 12 18:16:45.031482 2026] [security2:error] [pid 960377:tid 960502] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/frontendfinaltest/.env"] [unique_id "alQubRMANaV5i2_BLQolZQAAWXs"] [Sun Jul 12 18:16:45.087363 2026] [security2:error] [pid 967714:tid 967897] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubF_56DeKknhy7sMcCQABND0"] [Sun Jul 12 18:16:45.191898 2026] [security2:error] [pid 960377:tid 960442] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ftp/.env"] [unique_id "alQubRMANaV5i2_BLQolZwAABj8"] [Sun Jul 12 18:16:45.289639 2026] [security2:error] [pid 979474:tid 979701] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubHTrIlbXpLXvkNcQSgAAAOA"] [Sun Jul 12 18:16:45.322466 2026] [authz_core:error] [pid 979474:tid 979686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:45.323009 2026] [authz_core:error] [pid 979474:tid 979686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:45.350073 2026] [security2:error] [pid 960377:tid 960475] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ftpmaster/.env"] [unique_id "alQubRMANaV5i2_BLQolaAAAVGA"] [Sun Jul 12 18:16:45.403584 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubV_56DeKknhy7sMcFwAAAX4"] [Sun Jul 12 18:16:45.513777 2026] [security2:error] [pid 960377:tid 960464] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/functions/.env"] [unique_id "alQubRMANaV5i2_BLQolbQAAdVU"] [Sun Jul 12 18:16:45.561384 2026] [security2:error] [pid 960377:tid 960519] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubBMANaV5i2_BLQolXQAAAAs"] [Sun Jul 12 18:16:45.607079 2026] [security2:error] [pid 967714:tid 967970] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubV_56DeKknhy7sMcGwAAAX0"] [Sun Jul 12 18:16:45.719916 2026] [security2:error] [pid 979474:tid 979732] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubXTrIlbXpLXvkNcQVAAAAP8"] [Sun Jul 12 18:16:45.910142 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/helper/phpinfo.php"] [unique_id "alQubV_56DeKknhy7sMcKwABdC4"] [Sun Jul 12 18:16:46.101225 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/mail.php"] [unique_id "alQubl_56DeKknhy7sMcOwABdWI"] [Sun Jul 12 18:16:46.105893 2026] [authz_core:error] [pid 967714:tid 967904] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:46.106464 2026] [authz_core:error] [pid 967714:tid 967904] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:46.115241 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubF_56DeKknhy7sMb-wAAAYQ"] [Sun Jul 12 18:16:46.160882 2026] [security2:error] [pid 960377:tid 960580] [client 103.168.66.51:63252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config.inc.php"] [unique_id "alQubhMANaV5i2_BLQoldAAAAEg"] [Sun Jul 12 18:16:46.171291 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubV_56DeKknhy7sMcLAAAAVs"] [Sun Jul 12 18:16:46.189058 2026] [security2:error] [pid 967714:tid 967874] [client 168.100.149.220:18976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14820/bargainor/2308_delphian.jsp"] [unique_id "alQubl_56DeKknhy7sMcRAAAAR0"] [Sun Jul 12 18:16:46.465595 2026] [security2:error] [pid 967714:tid 967950] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcRgABaQA"] [Sun Jul 12 18:16:46.608274 2026] [security2:error] [pid 979474:tid 979673] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubnTrIlbXpLXvkNcQYwAAAMU"] [Sun Jul 12 18:16:46.624118 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQubRMANaV5i2_BLQolbwAACAw"] [Sun Jul 12 18:16:46.701802 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcTwAAAYg"] [Sun Jul 12 18:16:46.781312 2026] [security2:error] [pid 967714:tid 967797] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/drush/drush~"] [unique_id "alQubl_56DeKknhy7sMcUQABKkc"] [Sun Jul 12 18:16:46.782226 2026] [security2:error] [pid 960377:tid 960491] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/gcp/.env"] [unique_id "alQubhMANaV5i2_BLQoldgAAN3A"] [Sun Jul 12 18:16:46.912242 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/pinfo.php"] [unique_id "alQubl_56DeKknhy7sMcVgABhwY"] [Sun Jul 12 18:16:46.926904 2026] [security2:error] [pid 967714:tid 967908] [client 94.187.171.125:64273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQubl_56DeKknhy7sMcVwAAAT8"] [Sun Jul 12 18:16:46.927131 2026] [security2:error] [pid 967714:tid 967908] [client 94.187.171.125:64273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQubl_56DeKknhy7sMcVwAAAT8"] [Sun Jul 12 18:16:46.958681 2026] [authz_core:error] [pid 960377:tid 960624] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:46.959180 2026] [authz_core:error] [pid 960377:tid 960624] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:47.235456 2026] [cgid:error] [pid 960377:tid 960626] [client 65.49.1.80:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:16:47.258691 2026] [security2:error] [pid 967714:tid 967895] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcWgAAATI"] [Sun Jul 12 18:16:47.275211 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMcXQABbTc"] [Sun Jul 12 18:16:47.392213 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMcYgABbRE"] [Sun Jul 12 18:16:47.488814 2026] [security2:error] [pid 979474:tid 979576] [remote 103.75.185.95:45868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.185.75.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/wp-login.php"] [unique_id "alQub3TrIlbXpLXvkNcQdgAAjGA"] [Sun Jul 12 18:16:47.557100 2026] [security2:error] [pid 967714:tid 967890] [client 125.167.21.72:62926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQub1_56DeKknhy7sMcaAAAAS0"] [Sun Jul 12 18:16:47.576444 2026] [security2:error] [pid 967714:tid 967890] [client 125.167.21.72:62926] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQub1_56DeKknhy7sMcaAAAAS0"] [Sun Jul 12 18:16:47.668620 2026] [security2:error] [pid 967714:tid 967878] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMcZQAAASE"] [Sun Jul 12 18:16:47.780145 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:47.780643 2026] [authz_core:error] [pid 979474:tid 979642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:47.816471 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMcawABdXQ"] [Sun Jul 12 18:16:47.835276 2026] [security2:error] [pid 960377:tid 960562] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQubhMANaV5i2_BLQoleQAANgU"] [Sun Jul 12 18:16:47.846595 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/config/temp.php"] [unique_id "alQub1_56DeKknhy7sMcbgABd1Q"] [Sun Jul 12 18:16:48.027111 2026] [security2:error] [pid 967714:tid 967872] [client 107.191.36.209:53948] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "medicafricaonline.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQucF_56DeKknhy7sMcdQAAARs"] [Sun Jul 12 18:16:48.091530 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMccAAAATA"] [Sun Jul 12 18:16:48.137262 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/configuration/.env"] [unique_id "alQucF_56DeKknhy7sMceQABc20"] [Sun Jul 12 18:16:48.144142 2026] [security2:error] [pid 967714:tid 967892] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQub1_56DeKknhy7sMccwAAAS8"] [Sun Jul 12 18:16:48.171699 2026] [security2:error] [pid 979474:tid 979690] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW92cjZoLTY2MTUvb3YtMjg4NzMvdnI2aA=="] [unique_id "alQucHTrIlbXpLXvkNcQgQAAANU"] [Sun Jul 12 18:16:48.183545 2026] [security2:error] [pid 967714:tid 967940] [client 168.100.149.48:34624] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14885/bargainor/2308_anisodactyli.jsp"] [unique_id "alQucF_56DeKknhy7sMcegAAAV8"] [Sun Jul 12 18:16:48.227160 2026] [security2:error] [pid 967714:tid 967967] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcQgAAAXo"] [Sun Jul 12 18:16:48.266313 2026] [security2:error] [pid 967714:tid 967850] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/node-app/api/.env"] [unique_id "alQucF_56DeKknhy7sMcfgABXnw"] [Sun Jul 12 18:16:48.310851 2026] [security2:error] [pid 967714:tid 967934] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubV_56DeKknhy7sMcIQAAAVk"] [Sun Jul 12 18:16:48.355263 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcQwAAAT4"] [Sun Jul 12 18:16:48.383859 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcRQAAAYY"] [Sun Jul 12 18:16:48.421724 2026] [security2:error] [pid 967714:tid 967951] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQucF_56DeKknhy7sMcfQAAAWo"] [Sun Jul 12 18:16:48.440308 2026] [security2:error] [pid 967714:tid 967839] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/phpinfo.bak"] [unique_id "alQucF_56DeKknhy7sMcgwABPXE"] [Sun Jul 12 18:16:48.556179 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:48.564733 2026] [security2:error] [pid 979474:tid 979692] [client 103.168.66.51:51294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/info.php"] [unique_id "alQucHTrIlbXpLXvkNcQjgAAANc"] [Sun Jul 12 18:16:48.586342 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:48.669284 2026] [security2:error] [pid 979474:tid 979684] [client 24.203.79.110:64461] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQucHTrIlbXpLXvkNcQlgAAAM8"] [Sun Jul 12 18:16:48.669509 2026] [security2:error] [pid 979474:tid 979684] [client 24.203.79.110:64461] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQucHTrIlbXpLXvkNcQlgAAAM8"] [Sun Jul 12 18:16:48.705812 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/configure.php.orig"] [unique_id "alQucF_56DeKknhy7sMchgABWDA"] [Sun Jul 12 18:16:48.823775 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQubxMANaV5i2_BLQolgAAAT0M"] [Sun Jul 12 18:16:48.910840 2026] [security2:error] [pid 979474:tid 979677] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucHTrIlbXpLXvkNcQkgAAAMk"] [Sun Jul 12 18:16:49.037127 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQucF_56DeKknhy7sMchwABfw8"] [Sun Jul 12 18:16:49.117039 2026] [security2:error] [pid 967714:tid 967972] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQucF_56DeKknhy7sMciAABf2c"] [Sun Jul 12 18:16:49.257415 2026] [security2:error] [pid 979474:tid 979650] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQucHTrIlbXpLXvkNcQlwAAAK4"] [Sun Jul 12 18:16:49.257500 2026] [security2:error] [pid 979474:tid 979650] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQucHTrIlbXpLXvkNcQlwAAAK4"] [Sun Jul 12 18:16:49.263982 2026] [security2:error] [pid 979474:tid 979663] [client 65.21.113.206:52570] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW92cjZoLTY2MTUvb3YtMjg4NzMvdnI2aA=="] [unique_id "alQucHTrIlbXpLXvkNcQlAAAALs"] [Sun Jul 12 18:16:49.289189 2026] [security2:error] [pid 960377:tid 960614] [client 71.6.146.185:44560] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "50.87.17.225"] [uri "/robots.txt"] [unique_id "alQucRMANaV5i2_BLQolkwAAAGo"] [Sun Jul 12 18:16:49.336487 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/content/.env"] [unique_id "alQucV_56DeKknhy7sMclAABFEo"] [Sun Jul 12 18:16:49.385133 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQucV_56DeKknhy7sMckAABFAU"] [Sun Jul 12 18:16:49.388883 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:49.389436 2026] [authz_core:error] [pid 960377:tid 960521] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:49.401764 2026] [security2:error] [pid 967714:tid 967925] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucV_56DeKknhy7sMcjAAAAVA"] [Sun Jul 12 18:16:49.481697 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/core/.env"] [unique_id "alQucV_56DeKknhy7sMclQABSGg"] [Sun Jul 12 18:16:49.622891 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/core/persistence/.env"] [unique_id "alQucV_56DeKknhy7sMcnQABGAg"] [Sun Jul 12 18:16:49.635156 2026] [security2:error] [pid 967714:tid 967930] [client 57.141.18.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kahonuamomona.org"] [uri "/index.php"] [unique_id "alQuZV_56DeKknhy7sMa8wAAAVU"] [Sun Jul 12 18:16:49.807101 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/counterblockd/.env"] [unique_id "alQucV_56DeKknhy7sMcoAABbV0"] [Sun Jul 12 18:16:49.810442 2026] [security2:error] [pid 967714:tid 967921] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucV_56DeKknhy7sMcnAAAAUw"] [Sun Jul 12 18:16:49.868247 2026] [security2:error] [pid 960377:tid 960559] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQucBMANaV5i2_BLQoljAAAM3M"] [Sun Jul 12 18:16:50.029557 2026] [security2:error] [pid 960377:tid 960421] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/github-connect/.env"] [unique_id "alQuchMANaV5i2_BLQollQAAJCo"] [Sun Jul 12 18:16:50.084540 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/cp/.env"] [unique_id "alQucl_56DeKknhy7sMcqgABY0k"] [Sun Jul 12 18:16:50.197811 2026] [security2:error] [pid 960377:tid 960447] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/google/.env"] [unique_id "alQuchMANaV5i2_BLQollgAAEkQ"] [Sun Jul 12 18:16:50.207015 2026] [security2:error] [pid 979474:tid 979673] [client 168.100.149.182:23684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/14950/bargainor/2308_birefraction.jsp"] [unique_id "alQucnTrIlbXpLXvkNcQpAAAAMU"] [Sun Jul 12 18:16:50.216713 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQucHTrIlbXpLXvkNcQhQAAAOA"] [Sun Jul 12 18:16:50.236070 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:50.236597 2026] [authz_core:error] [pid 967714:tid 967881] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:50.272734 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQucF_56DeKknhy7sMcgQAAARM"] [Sun Jul 12 18:16:50.322040 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/crm/.env"] [unique_id "alQucl_56DeKknhy7sMcsQABSlk"] [Sun Jul 12 18:16:50.333909 2026] [security2:error] [pid 967714:tid 967949] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucl_56DeKknhy7sMcpQAAAWg"] [Sun Jul 12 18:16:50.441810 2026] [security2:error] [pid 979474:tid 979694] [client 103.168.66.51:58840] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/staging/.env"] [unique_id "alQucnTrIlbXpLXvkNcQqAAAANk"] [Sun Jul 12 18:16:50.495200 2026] [security2:error] [pid 979474:tid 979626] [client 71.6.146.185:45112] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "50.87.17.225"] [uri "/sitemap.xml"] [unique_id "alQucnTrIlbXpLXvkNcQrQAAAJY"] [Sun Jul 12 18:16:50.501213 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/crm/crm/info.php"] [unique_id "alQucl_56DeKknhy7sMcuAABFmQ"] [Sun Jul 12 18:16:50.683355 2026] [security2:error] [pid 979474:tid 979625] [client 71.6.146.185:45232] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "50.87.17.225"] [uri "/404.shtml"] [unique_id "alQucnTrIlbXpLXvkNcQswAAAJU"] [Sun Jul 12 18:16:50.755418 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/crm/info.php"] [unique_id "alQucl_56DeKknhy7sMcwAABNgw"] [Sun Jul 12 18:16:50.784340 2026] [security2:error] [pid 967714:tid 967940] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucl_56DeKknhy7sMcuwAAAV8"] [Sun Jul 12 18:16:50.825246 2026] [security2:error] [pid 960377:tid 960579] [client 1.53.88.186:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuchMANaV5i2_BLQollwAAAEc"] [Sun Jul 12 18:16:50.979618 2026] [security2:error] [pid 960377:tid 960612] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ini.php"] [unique_id "alQuchMANaV5i2_BLQolnAAAAGg"] [Sun Jul 12 18:16:51.041190 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cron/development/phpinfo.php"] [unique_id "alQuc1_56DeKknhy7sMcxgABQGA"] [Sun Jul 12 18:16:51.140179 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:51.140867 2026] [authz_core:error] [pid 960377:tid 960602] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:51.226828 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/cron/services/info.php"] [unique_id "alQuc1_56DeKknhy7sMczAABUh0"] [Sun Jul 12 18:16:51.295485 2026] [security2:error] [pid 960377:tid 960524] [client 65.21.113.206:40506] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQucxMANaV5i2_BLQoloAAAABA"] [Sun Jul 12 18:16:51.343024 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuchMANaV5i2_BLQolmQAAKz4"] [Sun Jul 12 18:16:51.369331 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/cronlab/.env"] [unique_id "alQuc1_56DeKknhy7sMczgABf2Y"] [Sun Jul 12 18:16:51.393956 2026] [security2:error] [pid 967714:tid 967889] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQucl_56DeKknhy7sMcrgAAASw"] [Sun Jul 12 18:16:51.410286 2026] [security2:error] [pid 967714:tid 967875] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQucl_56DeKknhy7sMcsAAAAR4"] [Sun Jul 12 18:16:51.422086 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucxMANaV5i2_BLQolnwAAADU"] [Sun Jul 12 18:16:51.462387 2026] [security2:error] [pid 979474:tid 979640] [client 143.14.6.217:47690] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuc3TrIlbXpLXvkNcQwgAAAKQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.475428 2026] [security2:error] [pid 979474:tid 979690] [client 143.20.253.82:48634] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuc3TrIlbXpLXvkNcQwwAAANU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.576834 2026] [security2:error] [pid 967714:tid 967775] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/current/crm/phpinfo.php"] [unique_id "alQuc1_56DeKknhy7sMc1wABQTE"] [Sun Jul 12 18:16:51.658713 2026] [security2:error] [pid 967714:tid 967877] [client 144.31.35.227:23480] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuc1_56DeKknhy7sMc2AAAASA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.674827 2026] [security2:error] [pid 967714:tid 967901] [client 103.168.66.51:59451] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/tsconfig.json"] [unique_id "alQuc1_56DeKknhy7sMc2gAAATg"] [Sun Jul 12 18:16:51.679084 2026] [security2:error] [pid 979474:tid 979724] [client 143.20.253.64:60684] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuc3TrIlbXpLXvkNcQygAAAPc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.702224 2026] [security2:error] [pid 960377:tid 960588] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQucxMANaV5i2_BLQolpQAAAFA"] [Sun Jul 12 18:16:51.721982 2026] [security2:error] [pid 960377:tid 960534] [client 144.31.35.28:49100] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQucxMANaV5i2_BLQolqAAAABo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.740275 2026] [security2:error] [pid 967714:tid 967872] [client 103.168.66.51:61620] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/auth.php"] [unique_id "alQuc1_56DeKknhy7sMc2wAAARs"] [Sun Jul 12 18:16:51.788689 2026] [security2:error] [pid 979474:tid 979621] [client 143.14.6.74:34230] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQuc3TrIlbXpLXvkNcQzQAAAJE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:51.805466 2026] [security2:error] [pid 960377:tid 960586] [client 103.168.66.51:60397] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/firebase.json"] [unique_id "alQucxMANaV5i2_BLQolrgAAAE4"] [Sun Jul 12 18:16:51.806016 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/current/develop/info.php"] [unique_id "alQuc1_56DeKknhy7sMc3QABU2w"] [Sun Jul 12 18:16:51.831909 2026] [security2:error] [pid 979474:tid 979633] [client 65.21.113.206:52580] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQuc3TrIlbXpLXvkNcQ0QAAAJ0"] [Sun Jul 12 18:16:51.876714 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/current/laravel/phpinfo.php"] [unique_id "alQuc1_56DeKknhy7sMc3wABGFM"] [Sun Jul 12 18:16:51.911864 2026] [security2:error] [pid 960377:tid 960576] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQucxMANaV5i2_BLQolqwAAAEQ"] [Sun Jul 12 18:16:51.956111 2026] [authz_core:error] [pid 979474:tid 979641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:51.956690 2026] [authz_core:error] [pid 979474:tid 979641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:52.003923 2026] [security2:error] [pid 979474:tid 979660] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW93LTQ4OS1vd3RjNy05MTQ2LXd0Yw==.cgi"] [unique_id "alQuc3TrIlbXpLXvkNcQ1AAAALg"] [Sun Jul 12 18:16:52.182390 2026] [security2:error] [pid 979474:tid 979614] [client 65.21.113.206:52580] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQudHTrIlbXpLXvkNcQ2AAAAIo"] [Sun Jul 12 18:16:52.184049 2026] [security2:error] [pid 979474:tid 979638] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudHTrIlbXpLXvkNcQ1gAAAKI"] [Sun Jul 12 18:16:52.186096 2026] [security2:error] [pid 967714:tid 967966] [client 168.100.149.114:27960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15015/bargainor/2308_mediator.jsp"] [unique_id "alQudF_56DeKknhy7sMc5gAAAXk"] [Sun Jul 12 18:16:52.208095 2026] [security2:error] [pid 967714:tid 967886] [client 103.168.66.51:50776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/include/config.php"] [unique_id "alQudF_56DeKknhy7sMc6QAAASk"] [Sun Jul 12 18:16:52.222379 2026] [security2:error] [pid 979474:tid 979695] [client 103.168.66.51:58840] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/mail.php"] [unique_id "alQudHTrIlbXpLXvkNcQ2QAAANo"] [Sun Jul 12 18:16:52.262212 2026] [security2:error] [pid 967714:tid 967876] [client 103.168.66.51:54651] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.dockerignore"] [unique_id "alQudF_56DeKknhy7sMc6wAAAR8"] [Sun Jul 12 18:16:52.316505 2026] [security2:error] [pid 967714:tid 967923] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc5AAAAU4"] [Sun Jul 12 18:16:52.352581 2026] [security2:error] [pid 967714:tid 967921] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc6gAAAUw"] [Sun Jul 12 18:16:52.357146 2026] [security2:error] [pid 967714:tid 967816] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dashboard/admin/phpinfo.php"] [unique_id "alQudF_56DeKknhy7sMc7QABRFo"] [Sun Jul 12 18:16:52.429659 2026] [security2:error] [pid 960377:tid 960530] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQucxMANaV5i2_BLQolowAAFmc"] [Sun Jul 12 18:16:52.436521 2026] [security2:error] [pid 967714:tid 967913] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc7AABRHs"] [Sun Jul 12 18:16:52.461998 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuc1_56DeKknhy7sMc0wAAAYc"] [Sun Jul 12 18:16:52.465855 2026] [security2:error] [pid 967714:tid 967961] [client 198.235.24.238:60534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 238.24.235.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.20.93.115"] [uri "/wp-login.php"] [unique_id "alQudF_56DeKknhy7sMc7gAAAXQ"] [Sun Jul 12 18:16:52.471772 2026] [security2:error] [pid 979474:tid 979722] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuc3TrIlbXpLXvkNcQxAAAAPU"] [Sun Jul 12 18:16:52.587520 2026] [security2:error] [pid 960377:tid 960428] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/grems-api/.env"] [unique_id "alQudBMANaV5i2_BLQolswAATTE"] [Sun Jul 12 18:16:52.626253 2026] [security2:error] [pid 979474:tid 979653] [client 103.168.66.51:56095] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/public.tar.gz"] [unique_id "alQudHTrIlbXpLXvkNcQ3QAAALE"] [Sun Jul 12 18:16:52.659691 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dashboard/phpinfo.php"] [unique_id "alQudF_56DeKknhy7sMdBgABIh4"] [Sun Jul 12 18:16:52.712873 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:52.713379 2026] [authz_core:error] [pid 967714:tid 967943] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:52.716679 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc_QAAATA"] [Sun Jul 12 18:16:52.745400 2026] [security2:error] [pid 960377:tid 960410] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/grems-frontend/.env"] [unique_id "alQudBMANaV5i2_BLQoltAAALSA"] [Sun Jul 12 18:16:52.831470 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dashboard/test.php"] [unique_id "alQudF_56DeKknhy7sMdDAABO1I"] [Sun Jul 12 18:16:52.868598 2026] [security2:error] [pid 967714:tid 967792] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dashboardadmin/info.php"] [unique_id "alQudF_56DeKknhy7sMdDwABO0I"] [Sun Jul 12 18:16:52.889584 2026] [security2:error] [pid 967714:tid 967746] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/config/index.sql"] [unique_id "alQudF_56DeKknhy7sMdEQABLRQ"] [Sun Jul 12 18:16:52.903741 2026] [security2:error] [pid 960377:tid 960461] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Hash/.env"] [unique_id "alQudBMANaV5i2_BLQoltgAAU1I"] [Sun Jul 12 18:16:52.931324 2026] [security2:error] [pid 960377:tid 960543] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudBMANaV5i2_BLQoltQAAACM"] [Sun Jul 12 18:16:52.992701 2026] [security2:error] [pid 967714:tid 967948] [client 74.7.244.2:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.fatir.tj"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcNwAAAWc"] [Sun Jul 12 18:16:52.992765 2026] [security2:error] [pid 967714:tid 967948] [client 74.7.244.2:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mail.fatir.tj"] [uri "/index.php"] [unique_id "alQubl_56DeKknhy7sMcNwAAAWc"] [Sun Jul 12 18:16:52.993333 2026] [security2:error] [pid 967714:tid 967976] [client 74.7.244.2:55282] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.fatir.tj"] [uri "/robots.txt"] [unique_id "alQubl_56DeKknhy7sMcNAAAAYM"] [Sun Jul 12 18:16:53.046389 2026] [security2:error] [pid 967714:tid 967739] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/database/.env"] [unique_id "alQudV_56DeKknhy7sMdGAABfw0"] [Sun Jul 12 18:16:53.061979 2026] [security2:error] [pid 960377:tid 960455] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/hasura/.env"] [unique_id "alQudRMANaV5i2_BLQoltwAAZUw"] [Sun Jul 12 18:16:53.249809 2026] [security2:error] [pid 967714:tid 967888] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMdCQAAASs"] [Sun Jul 12 18:16:53.249877 2026] [security2:error] [pid 967714:tid 967888] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMdCQAAASs"] [Sun Jul 12 18:16:53.250821 2026] [security2:error] [pid 967714:tid 967956] [client 65.21.113.206:41008] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW93LTQ4OS1vd3RjNy05MTQ2LXd0Yw==.cgi"] [unique_id "alQudF_56DeKknhy7sMdBwAAAW8"] [Sun Jul 12 18:16:53.285449 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/dataset1/.env"] [unique_id "alQudV_56DeKknhy7sMdHQABFDY"] [Sun Jul 12 18:16:53.375516 2026] [security2:error] [pid 960377:tid 960604] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudRMANaV5i2_BLQoluAAAAGA"] [Sun Jul 12 18:16:53.461545 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:53.462072 2026] [authz_core:error] [pid 960377:tid 960590] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:53.526721 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudRMANaV5i2_BLQolwwAAAGI"] [Sun Jul 12 18:16:53.579310 2026] [security2:error] [pid 967714:tid 967950] [client 79.235.220.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMdFQAAAWk"] [Sun Jul 12 18:16:53.604342 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/default/help/phpinfo.php"] [unique_id "alQudV_56DeKknhy7sMdJwABSBA"] [Sun Jul 12 18:16:53.754892 2026] [security2:error] [pid 967714:tid 967871] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudV_56DeKknhy7sMdJgAAARo"] [Sun Jul 12 18:16:53.931915 2026] [security2:error] [pid 967714:tid 967773] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/supabase/.env"] [unique_id "alQudV_56DeKknhy7sMdLwABKS8"] [Sun Jul 12 18:16:53.935358 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQudV_56DeKknhy7sMdKwAAAWU"] [Sun Jul 12 18:16:53.960319 2026] [security2:error] [pid 960377:tid 960516] [client 38.250.157.117:54652] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQudRMANaV5i2_BLQolygAAAAg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:53.961356 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/demo/helper/info.php"] [unique_id "alQudV_56DeKknhy7sMdMAABTT4"] [Sun Jul 12 18:16:54.065171 2026] [security2:error] [pid 960377:tid 960620] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQudRMANaV5i2_BLQoluwAAcHI"] [Sun Jul 12 18:16:54.103279 2026] [security2:error] [pid 967714:tid 967778] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/laravel-app/server/.env"] [unique_id "alQudl_56DeKknhy7sMdNAABXTQ"] [Sun Jul 12 18:16:54.107157 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/demo/lara/info.php"] [unique_id "alQudl_56DeKknhy7sMdNQABTGo"] [Sun Jul 12 18:16:54.174773 2026] [security2:error] [pid 967714:tid 967954] [client 168.100.149.170:59336] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15080/bargainor/2308_gurian.jsp"] [unique_id "alQudl_56DeKknhy7sMdNgAAAW0"] [Sun Jul 12 18:16:54.224758 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Helmetjs/.env"] [unique_id "alQudhMANaV5i2_BLQolzQAAaUs"] [Sun Jul 12 18:16:54.227438 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:54.227966 2026] [authz_core:error] [pid 960377:tid 960617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:54.323775 2026] [security2:error] [pid 967714:tid 967926] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc9gAAAVE"] [Sun Jul 12 18:16:54.339614 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/demo/laravel/info.php"] [unique_id "alQudl_56DeKknhy7sMdOAABJC4"] [Sun Jul 12 18:16:54.382826 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/hgs-static/.env"] [unique_id "alQudhMANaV5i2_BLQolzwAADQg"] [Sun Jul 12 18:16:54.386552 2026] [security2:error] [pid 960377:tid 960545] [client 41.208.128.37:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQudRMANaV5i2_BLQolyQAAACU"] [Sun Jul 12 18:16:54.483934 2026] [security2:error] [pid 979474:tid 979715] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudnTrIlbXpLXvkNcQ6gAAAO4"] [Sun Jul 12 18:16:54.544517 2026] [security2:error] [pid 960377:tid 960467] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/higlass-website/.env"] [unique_id "alQudhMANaV5i2_BLQol0AAAM1g"] [Sun Jul 12 18:16:54.558101 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/demo/services/info.php"] [unique_id "alQudl_56DeKknhy7sMdOwABbi0"] [Sun Jul 12 18:16:54.625789 2026] [security2:error] [pid 979474:tid 979654] [client 31.173.84.91:16558] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.84.173.31.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "singularstudiosnj.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQudnTrIlbXpLXvkNcQ7gAAALI"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:16:54.703502 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/deploy/.env.bak"] [unique_id "alQudl_56DeKknhy7sMdQAABNgA"] [Sun Jul 12 18:16:54.706441 2026] [security2:error] [pid 960377:tid 960419] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/home/.env"] [unique_id "alQudhMANaV5i2_BLQol1AAARyg"] [Sun Jul 12 18:16:54.864516 2026] [security2:error] [pid 960377:tid 960433] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/horde/.env"] [unique_id "alQudhMANaV5i2_BLQol1wAAVTY"] [Sun Jul 12 18:16:54.873581 2026] [security2:error] [pid 979474:tid 979728] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQudnTrIlbXpLXvkNcQ8gAAAPs"] [Sun Jul 12 18:16:54.879884 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/api/phpinfo.php"] [unique_id "alQudl_56DeKknhy7sMdQgABL1A"] [Sun Jul 12 18:16:54.947351 2026] [security2:error] [pid 960377:tid 960616] [client 201.81.235.129:10336] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQudhMANaV5i2_BLQol1gAAAGw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:55.016043 2026] [authz_core:error] [pid 979474:tid 979669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:55.016748 2026] [authz_core:error] [pid 979474:tid 979669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:55.022558 2026] [security2:error] [pid 960377:tid 960498] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/hotpot-app-frontend/.env"] [unique_id "alQudxMANaV5i2_BLQol2QAAF3c"] [Sun Jul 12 18:16:55.052996 2026] [security2:error] [pid 979474:tid 979627] [client 74.7.244.2:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.fatir.tj"] [uri "/index.php"] [unique_id "alQudXTrIlbXpLXvkNcQ3wAAAJc"], referer: http://mail.fatir.tj/robots.txt [Sun Jul 12 18:16:55.054733 2026] [security2:error] [pid 979474:tid 979718] [client 74.7.244.2:38922] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.fatir.tj"] [uri "/robots.txt"] [unique_id "alQudXTrIlbXpLXvkNcQ3gAA8QI"], referer: http://mail.fatir.tj/robots.txt [Sun Jul 12 18:16:55.146087 2026] [security2:error] [pid 967714:tid 967760] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/backup/phpinfo.php"] [unique_id "alQud1_56DeKknhy7sMdSQABHSI"] [Sun Jul 12 18:16:55.161606 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc-QAAATM"] [Sun Jul 12 18:16:55.181157 2026] [security2:error] [pid 960377:tid 960465] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/htdocs/.env"] [unique_id "alQudxMANaV5i2_BLQol2wAAMlY"] [Sun Jul 12 18:16:55.188981 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQudHTrIlbXpLXvkNcQ3AAAAJg"] [Sun Jul 12 18:16:55.207486 2026] [security2:error] [pid 979474:tid 979649] [client 213.154.71.172:48945] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQud3TrIlbXpLXvkNcQ9wAAAK0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:55.256143 2026] [security2:error] [pid 967714:tid 967885] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQudF_56DeKknhy7sMc-wAAASg"] [Sun Jul 12 18:16:55.290008 2026] [autoindex:error] [pid 960377:tid 960623] [client 200.2.29.49:12352] AH01276: Cannot serve directory /home3/acedevne/public_html/acedev/files/insurgency/maps/: No matching DirectoryIndex (index.php,index.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:16:55.295270 2026] [security2:error] [pid 967714:tid 967866] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQud1_56DeKknhy7sMdSAAAARU"] [Sun Jul 12 18:16:55.351504 2026] [security2:error] [pid 960377:tid 960484] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/html/.env"] [unique_id "alQudxMANaV5i2_BLQol4QAAHGk"] [Sun Jul 12 18:16:55.376435 2026] [security2:error] [pid 960377:tid 960555] [client 41.90.111.233:53561] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQudxMANaV5i2_BLQol3wAAAC8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:55.488223 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQud1_56DeKknhy7sMdUQAAASU"] [Sun Jul 12 18:16:55.509647 2026] [security2:error] [pid 960377:tid 960405] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/http/.env"] [unique_id "alQudxMANaV5i2_BLQol4gAAPRs"] [Sun Jul 12 18:16:55.556008 2026] [security2:error] [pid 979474:tid 979686] [client 103.168.66.51:53104] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/bootstrap-dev.yml"] [unique_id "alQud3TrIlbXpLXvkNcQ_gAAANE"] [Sun Jul 12 18:16:55.671367 2026] [security2:error] [pid 960377:tid 960425] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/httpboot/.env"] [unique_id "alQudxMANaV5i2_BLQol5AAAHi4"] [Sun Jul 12 18:16:55.681148 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/dashboard/phpinfo.php"] [unique_id "alQud1_56DeKknhy7sMdWgABPjc"] [Sun Jul 12 18:16:55.703742 2026] [security2:error] [pid 979474:tid 979652] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQud3TrIlbXpLXvkNcQ_AAAALA"] [Sun Jul 12 18:16:55.818381 2026] [security2:error] [pid 979474:tid 979665] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW93LTQ4OS1vd3RjNy0xOTQwLXd0Yw==.cgi"] [unique_id "alQud3TrIlbXpLXvkNcRAgAAAL0"] [Sun Jul 12 18:16:55.821381 2026] [security2:error] [pid 967714:tid 967776] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/dev/info.php"] [unique_id "alQud1_56DeKknhy7sMdXwABbDI"] [Sun Jul 12 18:16:55.829366 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:55.829888 2026] [authz_core:error] [pid 967714:tid 967868] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:55.830586 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/httpdocs/.env"] [unique_id "alQudxMANaV5i2_BLQol5wAAAC0"] [Sun Jul 12 18:16:55.863237 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/infophp.php"] [unique_id "alQud1_56DeKknhy7sMdYAABfUQ"] [Sun Jul 12 18:16:55.895287 2026] [security2:error] [pid 967714:tid 967859] [client 103.168.66.51:51322] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/phpinfo.php"] [unique_id "alQud1_56DeKknhy7sMdYgAAAQ4"] [Sun Jul 12 18:16:55.943166 2026] [security2:error] [pid 960377:tid 960608] [client 102.141.42.220:24419] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQudxMANaV5i2_BLQol6AAAAGQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:16:55.990513 2026] [security2:error] [pid 960377:tid 960387] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/HUNIV_migration/.env"] [unique_id "alQudxMANaV5i2_BLQol6gAADwk"] [Sun Jul 12 18:16:56.009268 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/services/phpinfo.php"] [unique_id "alQueF_56DeKknhy7sMdZAABfnQ"] [Sun Jul 12 18:16:56.009294 2026] [security2:error] [pid 979474:tid 979710] [client 103.168.66.51:61062] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/uploads/.env"] [unique_id "alQueHTrIlbXpLXvkNcRBgAAAOk"] [Sun Jul 12 18:16:56.103815 2026] [security2:error] [pid 979474:tid 979633] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQud3TrIlbXpLXvkNcRBAAAAJ0"] [Sun Jul 12 18:16:56.279939 2026] [security2:error] [pid 967714:tid 967749] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/process.php.old"] [unique_id "alQueF_56DeKknhy7sMdZwABGxc"] [Sun Jul 12 18:16:56.329687 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/deploy/test.php"] [unique_id "alQueF_56DeKknhy7sMdawABMRg"] [Sun Jul 12 18:16:56.348280 2026] [security2:error] [pid 967714:tid 967898] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQud1_56DeKknhy7sMdTAAAATU"] [Sun Jul 12 18:16:56.349914 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/nextcloud/ocs/v2.php/cloud/capabilities"] [unique_id "alQuW1_56DeKknhy7sMdbAABVgc"] [Sun Jul 12 18:16:56.351636 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/nextcloud/ocs/v2.php/cloud/users"] [unique_id "alQuW1_56DeKknhy7sMdbQABVgc"] [Sun Jul 12 18:16:56.353244 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/nextcloud/status.php"] [unique_id "alQuW1_56DeKknhy7sMdbgABVgc"] [Sun Jul 12 18:16:56.371342 2026] [security2:error] [pid 967714:tid 967914] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQud1_56DeKknhy7sMdTgAAAUU"] [Sun Jul 12 18:16:56.715428 2026] [authz_core:error] [pid 967714:tid 967891] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:56.715984 2026] [authz_core:error] [pid 967714:tid 967891] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:56.764409 2026] [security2:error] [pid 960377:tid 960534] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol7wAAABo"] [Sun Jul 12 18:16:56.811394 2026] [security2:error] [pid 967714:tid 967964] [client 168.100.149.201:24200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15145/bargainor/2308_monkey.jsp"] [unique_id "alQueF_56DeKknhy7sMdfgAAAXc"] [Sun Jul 12 18:16:56.821408 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol8wAAAFw"] [Sun Jul 12 18:16:56.833522 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcRGgAAALE"] [Sun Jul 12 18:16:56.908801 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dev/help/phpinfo.php"] [unique_id "alQueF_56DeKknhy7sMdhAABcEo"] [Sun Jul 12 18:16:56.942691 2026] [security2:error] [pid 967714:tid 967869] [client 65.21.113.206:41022] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW93LTQ4OS1vd3RjNy0xOTQwLXd0Yw==.cgi"] [unique_id "alQueF_56DeKknhy7sMdagAAARg"] [Sun Jul 12 18:16:56.942691 2026] [security2:error] [pid 979474:tid 979632] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcRCwAAAJw"] [Sun Jul 12 18:16:56.942769 2026] [security2:error] [pid 979474:tid 979632] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcRCwAAAJw"] [Sun Jul 12 18:16:56.948311 2026] [security2:error] [pid 960377:tid 960552] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol9QAAACw"] [Sun Jul 12 18:16:56.969240 2026] [security2:error] [pid 967714:tid 967856] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/test/setup.php"] [unique_id "alQueF_56DeKknhy7sMdhgAAAQs"] [Sun Jul 12 18:16:56.989803 2026] [security2:error] [pid 967714:tid 967912] [client 114.119.133.34:62577] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "falconaviation.org"] [uri "/the-cockpit/contact"] [unique_id "alQueF_56DeKknhy7sMdhwAAAUM"], referer: https://falconaviation.org/the-cockpit/contact [Sun Jul 12 18:16:57.026395 2026] [security2:error] [pid 960377:tid 960540] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol-QAAACA"] [Sun Jul 12 18:16:57.031891 2026] [security2:error] [pid 979474:tid 979675] [client 103.168.66.51:51659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/includes/config.php"] [unique_id "alQueXTrIlbXpLXvkNcRHgAAAMc"] [Sun Jul 12 18:16:57.124414 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/dev/pinfo.php"] [unique_id "alQueV_56DeKknhy7sMdiwABcGg"] [Sun Jul 12 18:16:57.162988 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/develop/info.php"] [unique_id "alQueV_56DeKknhy7sMdjgABcAg"] [Sun Jul 12 18:16:57.174647 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol-wAAABs"] [Sun Jul 12 18:16:57.181051 2026] [security2:error] [pid 967714:tid 967879] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/of.php"] [unique_id "alQueV_56DeKknhy7sMdjwAAASI"] [Sun Jul 12 18:16:57.267041 2026] [security2:error] [pid 960377:tid 960406] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQueBMANaV5i2_BLQol7QAARhw"] [Sun Jul 12 18:16:57.276407 2026] [security2:error] [pid 979474:tid 979696] [client 103.168.66.51:51203] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.swp"] [unique_id "alQueXTrIlbXpLXvkNcRIQAAANs"] [Sun Jul 12 18:16:57.292207 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/developer/.env"] [unique_id "alQueV_56DeKknhy7sMdkAABMCg"] [Sun Jul 12 18:16:57.363202 2026] [security2:error] [pid 967714:tid 967735] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/user/.env.bak"] [unique_id "alQueV_56DeKknhy7sMdkwABKAk"] [Sun Jul 12 18:16:57.389265 2026] [security2:error] [pid 967714:tid 967892] [client 103.168.66.51:58624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/mysite/.env"] [unique_id "alQueV_56DeKknhy7sMdlQAAAS8"] [Sun Jul 12 18:16:57.395185 2026] [security2:error] [pid 967714:tid 967878] [client 103.168.66.51:63414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/initializers/secret_token.rb"] [unique_id "alQueV_56DeKknhy7sMdlgAAASE"] [Sun Jul 12 18:16:57.395396 2026] [security2:error] [pid 967714:tid 967974] [client 103.168.66.51:54619] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/session.php"] [unique_id "alQueV_56DeKknhy7sMdlwAAAYE"] [Sun Jul 12 18:16:57.402060 2026] [security2:error] [pid 967714:tid 967890] [client 103.168.66.51:54886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/settings.py"] [unique_id "alQueV_56DeKknhy7sMdmQAAAS0"] [Sun Jul 12 18:16:57.426312 2026] [security2:error] [pid 960377:tid 960409] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/icon/.env"] [unique_id "alQueRMANaV5i2_BLQol_QAAYB8"] [Sun Jul 12 18:16:57.459500 2026] [security2:error] [pid 967714:tid 967789] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/developer/.env.bak"] [unique_id "alQueV_56DeKknhy7sMdngABJT8"] [Sun Jul 12 18:16:57.520679 2026] [security2:error] [pid 967714:tid 967980] [client 94.187.171.125:64757] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQueV_56DeKknhy7sMdnwAAAYc"] [Sun Jul 12 18:16:57.520918 2026] [security2:error] [pid 967714:tid 967980] [client 94.187.171.125:64757] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQueV_56DeKknhy7sMdnwAAAYc"] [Sun Jul 12 18:16:57.528410 2026] [security2:error] [pid 979474:tid 979713] [client 103.168.66.51:61062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/laravel/bootstrap/cache/config.php"] [unique_id "alQueXTrIlbXpLXvkNcRIwAAAOw"] [Sun Jul 12 18:16:57.558821 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:57.559300 2026] [authz_core:error] [pid 967714:tid 967880] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:57.595292 2026] [security2:error] [pid 960377:tid 960379] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/icons/.env"] [unique_id "alQueRMANaV5i2_BLQomAAAABwE"] [Sun Jul 12 18:16:57.755530 2026] [security2:error] [pid 960377:tid 960459] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ikiwiki/.env"] [unique_id "alQueRMANaV5i2_BLQomAQAAS1A"] [Sun Jul 12 18:16:57.770277 2026] [security2:error] [pid 960377:tid 960606] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueRMANaV5i2_BLQol_wAAAGI"] [Sun Jul 12 18:16:57.795878 2026] [security2:error] [pid 967714:tid 967972] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQueV_56DeKknhy7sMdpwAAAX8"] [Sun Jul 12 18:16:57.915453 2026] [security2:error] [pid 960377:tid 960385] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/image_data/.env"] [unique_id "alQueRMANaV5i2_BLQomAgAAegc"] [Sun Jul 12 18:16:57.934408 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueV_56DeKknhy7sMdrQAAASs"] [Sun Jul 12 18:16:58.061071 2026] [core:error] [pid 960377:tid 960601] [client 65.49.1.80:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:58.061129 2026] [core:error] [pid 960377:tid 960601] [client 65.49.1.80:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:16:58.074935 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/development/.env.bak"] [unique_id "alQuel_56DeKknhy7sMdsgABfWs"] [Sun Jul 12 18:16:58.078046 2026] [security2:error] [pid 960377:tid 960478] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Imagebord/.env"] [unique_id "alQuehMANaV5i2_BLQomCAAAUWM"] [Sun Jul 12 18:16:58.081291 2026] [security2:error] [pid 960377:tid 960590] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQueRMANaV5i2_BLQomBAAAAFI"] [Sun Jul 12 18:16:58.101171 2026] [security2:error] [pid 967714:tid 967865] [client 125.167.21.72:61405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuel_56DeKknhy7sMdtAAAARQ"] [Sun Jul 12 18:16:58.101462 2026] [security2:error] [pid 967714:tid 967865] [client 125.167.21.72:61405] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuel_56DeKknhy7sMdtAAAARQ"] [Sun Jul 12 18:16:58.194065 2026] [security2:error] [pid 967714:tid 967898] [client 168.100.149.166:61708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15210/bargainor/2308_impeccance.jsp"] [unique_id "alQuel_56DeKknhy7sMdugAAATU"] [Sun Jul 12 18:16:58.251325 2026] [security2:error] [pid 960377:tid 960456] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/images/.env"] [unique_id "alQuehMANaV5i2_BLQomCgAAFU0"] [Sun Jul 12 18:16:58.284418 2026] [security2:error] [pid 960377:tid 960634] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQueRMANaV5i2_BLQomBQAAAH4"] [Sun Jul 12 18:16:58.306498 2026] [security2:error] [pid 967714:tid 967873] [client 103.168.66.51:57142] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/wp-config.old"] [unique_id "alQuel_56DeKknhy7sMdvgAAARw"] [Sun Jul 12 18:16:58.363906 2026] [security2:error] [pid 960377:tid 960510] [client 147.185.132.97:65400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 97.132.185.147.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jointusecalc.com"] [uri "/shell.php"] [unique_id "alQuehMANaV5i2_BLQomDAAAAAI"] [Sun Jul 12 18:16:58.372306 2026] [security2:error] [pid 960377:tid 960633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuehMANaV5i2_BLQomCQAAAH0"] [Sun Jul 12 18:16:58.380407 2026] [authz_core:error] [pid 967714:tid 967959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:58.380928 2026] [authz_core:error] [pid 967714:tid 967959] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:58.409611 2026] [security2:error] [pid 960377:tid 960399] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/img/.env"] [unique_id "alQuehMANaV5i2_BLQomDgAAPxU"] [Sun Jul 12 18:16:58.456751 2026] [security2:error] [pid 967714:tid 967740] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/parcel.config.js.bak"] [unique_id "alQuel_56DeKknhy7sMdwgABfA4"] [Sun Jul 12 18:16:58.569951 2026] [security2:error] [pid 967714:tid 967858] [client 104.194.8.156:62614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mail.randw.ie"] [uri "/wp-login.php"] [unique_id "alQuel_56DeKknhy7sMdxAAAAQ0"] [Sun Jul 12 18:16:58.591100 2026] [security2:error] [pid 967714:tid 967864] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuel_56DeKknhy7sMdwwAAARM"] [Sun Jul 12 18:16:58.854618 2026] [security2:error] [pid 979474:tid 979717] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuenTrIlbXpLXvkNcROQAAAPA"] [Sun Jul 12 18:16:58.857028 2026] [security2:error] [pid 960377:tid 960513] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuehMANaV5i2_BLQomEgAAAAU"] [Sun Jul 12 18:16:59.005768 2026] [security2:error] [pid 979474:tid 979697] [client 103.168.66.51:51203] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/html/.env"] [unique_id "alQue3TrIlbXpLXvkNcRQgAAANw"] [Sun Jul 12 18:16:59.048372 2026] [security2:error] [pid 960377:tid 960559] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/testqueue.php"] [unique_id "alQuexMANaV5i2_BLQomFwAAADM"] [Sun Jul 12 18:16:59.091387 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcREAAAALs"] [Sun Jul 12 18:16:59.101432 2026] [security2:error] [pid 967714:tid 967886] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQueF_56DeKknhy7sMdcwAAASk"] [Sun Jul 12 18:16:59.137722 2026] [security2:error] [pid 979474:tid 979684] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuenTrIlbXpLXvkNcRQQAAAM8"] [Sun Jul 12 18:16:59.137926 2026] [authz_core:error] [pid 979474:tid 979692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:59.138588 2026] [authz_core:error] [pid 979474:tid 979692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:16:59.198130 2026] [security2:error] [pid 967714:tid 967745] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/docker/app/.env"] [unique_id "alQue1_56DeKknhy7sMd0gABXhM"] [Sun Jul 12 18:16:59.207149 2026] [security2:error] [pid 979474:tid 979650] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcREgAAAK4"] [Sun Jul 12 18:16:59.224191 2026] [security2:error] [pid 967714:tid 967807] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/account.php.bak"] [unique_id "alQue1_56DeKknhy7sMd1AABVFE"] [Sun Jul 12 18:16:59.275207 2026] [security2:error] [pid 979474:tid 979695] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQueHTrIlbXpLXvkNcREQAAANo"] [Sun Jul 12 18:16:59.310265 2026] [security2:error] [pid 967714:tid 967870] [client 24.203.79.110:64972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQue1_56DeKknhy7sMd2AAAARk"] [Sun Jul 12 18:16:59.310531 2026] [security2:error] [pid 967714:tid 967870] [client 24.203.79.110:64972] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQue1_56DeKknhy7sMd2AAAARk"] [Sun Jul 12 18:16:59.378582 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/docker/compose/withMongo/.env"] [unique_id "alQue1_56DeKknhy7sMd3AABLwo"] [Sun Jul 12 18:16:59.393726 2026] [security2:error] [pid 967714:tid 967846] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/erp-app/src/.env"] [unique_id "alQue1_56DeKknhy7sMd3gABe3g"] [Sun Jul 12 18:16:59.478373 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuehMANaV5i2_BLQomEQAAaTU"] [Sun Jul 12 18:16:59.490225 2026] [security2:error] [pid 967714:tid 967775] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/docker/database/.env"] [unique_id "alQue1_56DeKknhy7sMd4gABhzE"] [Sun Jul 12 18:16:59.567058 2026] [security2:error] [pid 967714:tid 967804] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/db/config.bak"] [unique_id "alQue1_56DeKknhy7sMd4wABbE4"] [Sun Jul 12 18:16:59.586997 2026] [security2:error] [pid 979474:tid 979730] [client 103.168.66.51:64998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/sites/default/settings.local.php"] [unique_id "alQue3TrIlbXpLXvkNcRSQAAAP0"] [Sun Jul 12 18:16:59.589326 2026] [security2:error] [pid 979474:tid 979682] [client 103.168.66.51:65345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/filesystems.php"] [unique_id "alQue3TrIlbXpLXvkNcRSgAAAM0"] [Sun Jul 12 18:16:59.748615 2026] [security2:error] [pid 967714:tid 967834] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db_backup.sql"] [unique_id "alQue1_56DeKknhy7sMd6gABPWw"] [Sun Jul 12 18:16:59.818551 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/docker/db/.env"] [unique_id "alQue1_56DeKknhy7sMd7gABflM"] [Sun Jul 12 18:16:59.862399 2026] [security2:error] [pid 979474:tid 979691] [client 65.21.113.206:37004] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW95OGVzLzU0NTQvb3kvNDIyMzMveQ=="] [unique_id "alQue3TrIlbXpLXvkNcRTwAAANY"] [Sun Jul 12 18:16:59.943051 2026] [authz_core:error] [pid 967714:tid 967910] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:16:59.943777 2026] [authz_core:error] [pid 967714:tid 967910] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:00.021325 2026] [security2:error] [pid 967714:tid 967737] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/docker/postgres/.env"] [unique_id "alQufF_56DeKknhy7sMd9AABaQs"] [Sun Jul 12 18:17:00.203122 2026] [security2:error] [pid 960377:tid 960541] [client 41.217.41.166:44994] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQufBMANaV5i2_BLQomIgAAACE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:00.325650 2026] [security2:error] [pid 979474:tid 979710] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQue3TrIlbXpLXvkNcRRQAAAOk"] [Sun Jul 12 18:17:00.401074 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQue1_56DeKknhy7sMd2QAAAUk"] [Sun Jul 12 18:17:00.454985 2026] [security2:error] [pid 967714:tid 967871] [client 103.168.66.51:58624] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/hashing.php"] [unique_id "alQufF_56DeKknhy7sMeAwAAARo"] [Sun Jul 12 18:17:00.530969 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQufHTrIlbXpLXvkNcRVgAAALw"] [Sun Jul 12 18:17:00.617610 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuexMANaV5i2_BLQomHgAAL20"] [Sun Jul 12 18:17:00.680448 2026] [security2:error] [pid 960377:tid 960525] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQufBMANaV5i2_BLQomKwAAABE"] [Sun Jul 12 18:17:00.727243 2026] [authz_core:error] [pid 960377:tid 960512] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:00.727957 2026] [authz_core:error] [pid 960377:tid 960512] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:00.775721 2026] [security2:error] [pid 960377:tid 960450] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/includes/.env"] [unique_id "alQufBMANaV5i2_BLQomMQAAcUc"] [Sun Jul 12 18:17:00.783813 2026] [security2:error] [pid 967714:tid 967895] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMeBAABMk8"] [Sun Jul 12 18:17:00.809446 2026] [security2:error] [pid 979474:tid 979685] [client 168.100.149.180:24188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15275/bargainor/2308_gunz.jsp"] [unique_id "alQufHTrIlbXpLXvkNcRWwAAANA"] [Sun Jul 12 18:17:00.949006 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMeCQAAAQw"] [Sun Jul 12 18:17:00.971248 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/dodoswap-client/.env"] [unique_id "alQufF_56DeKknhy7sMeCwABch4"] [Sun Jul 12 18:17:01.010073 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMeAAAAARw"] [Sun Jul 12 18:17:01.010142 2026] [security2:error] [pid 967714:tid 967873] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMeAAAAARw"] [Sun Jul 12 18:17:01.011355 2026] [security2:error] [pid 960377:tid 960527] [client 65.21.113.206:41038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW95OGVzLzU0NTQvb3kvNDIyMzMveQ=="] [unique_id "alQufBMANaV5i2_BLQomJwAAABM"] [Sun Jul 12 18:17:01.609024 2026] [authz_core:error] [pid 960377:tid 960628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:01.609780 2026] [authz_core:error] [pid 960377:tid 960628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:01.780402 2026] [security2:error] [pid 960377:tid 960578] [client 103.168.66.51:55260] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/telescope/requests"] [unique_id "alQufRMANaV5i2_BLQomQgAAAEY"] [Sun Jul 12 18:17:01.812152 2026] [security2:error] [pid 960377:tid 960539] [client 86.200.234.57:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQufRMANaV5i2_BLQomNwAAAB8"] [Sun Jul 12 18:17:01.895289 2026] [security2:error] [pid 960377:tid 960519] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQufBMANaV5i2_BLQomMgAACxg"] [Sun Jul 12 18:17:02.244271 2026] [security2:error] [pid 967714:tid 967901] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMd_QAAATg"] [Sun Jul 12 18:17:02.350640 2026] [security2:error] [pid 967714:tid 967975] [client 103.168.66.51:50862] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/cms/.env"] [unique_id "alQufl_56DeKknhy7sMeKgAAAYI"] [Sun Jul 12 18:17:02.424758 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:02.425249 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:02.761113 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/downloads/.env"] [unique_id "alQufl_56DeKknhy7sMeMwABQG4"] [Sun Jul 12 18:17:02.761564 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/env/.env"] [unique_id "alQufl_56DeKknhy7sMeNAABQBA"] [Sun Jul 12 18:17:02.776442 2026] [security2:error] [pid 967714:tid 967933] [client 103.168.66.51:54622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/dist/.env"] [unique_id "alQufl_56DeKknhy7sMeNgAAAVg"] [Sun Jul 12 18:17:02.826031 2026] [security2:error] [pid 967714:tid 967863] [client 168.100.149.212:62330] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15340/bargainor/2308_monadically.jsp"] [unique_id "alQufl_56DeKknhy7sMeOgAAARI"] [Sun Jul 12 18:17:02.927893 2026] [security2:error] [pid 960377:tid 960627] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQufhMANaV5i2_BLQomQwAAdwM"] [Sun Jul 12 18:17:02.967989 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQufl_56DeKknhy7sMeOQAAASs"] [Sun Jul 12 18:17:03.089100 2026] [security2:error] [pid 960377:tid 960394] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/index.php~"] [unique_id "alQufxMANaV5i2_BLQomSgAAZhA"] [Sun Jul 12 18:17:03.146094 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMeAQAAAUI"] [Sun Jul 12 18:17:03.246679 2026] [authz_core:error] [pid 979474:tid 979613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:03.247198 2026] [authz_core:error] [pid 979474:tid 979613] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:03.289167 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/environments/local/.env"] [unique_id "alQuf1_56DeKknhy7sMeSgABYkA"] [Sun Jul 12 18:17:03.317428 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/erp/.env"] [unique_id "alQuf1_56DeKknhy7sMeSwABXzQ"] [Sun Jul 12 18:17:03.536061 2026] [security2:error] [pid 967714:tid 967926] [client 103.168.66.51:50862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/bootstrap/cache/config.php"] [unique_id "alQuf1_56DeKknhy7sMeUAAAAVE"] [Sun Jul 12 18:17:03.554902 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/erp/.env.bak"] [unique_id "alQuf1_56DeKknhy7sMeUQABKXY"] [Sun Jul 12 18:17:03.969306 2026] [security2:error] [pid 967714:tid 967929] [client 103.168.66.51:53341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/includes/configure.php"] [unique_id "alQuf1_56DeKknhy7sMeWQAAAVQ"] [Sun Jul 12 18:17:03.975414 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQufxMANaV5i2_BLQomSwAAayM"] [Sun Jul 12 18:17:04.051741 2026] [security2:error] [pid 960377:tid 960473] [remote 57.141.18.17:58074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 17.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/MqhnxkY6FVamKXXWP4"] [unique_id "alQugBMANaV5i2_BLQomUAAAbV4"] [Sun Jul 12 18:17:04.055885 2026] [authz_core:error] [pid 967714:tid 967870] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:04.056371 2026] [authz_core:error] [pid 967714:tid 967870] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:04.102870 2026] [security2:error] [pid 960377:tid 960508] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufBMANaV5i2_BLQomJQAAAAA"] [Sun Jul 12 18:17:04.163512 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufF_56DeKknhy7sMd_gAAAQ8"] [Sun Jul 12 18:17:04.338020 2026] [security2:error] [pid 979474:tid 979658] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugHTrIlbXpLXvkNcRfQAAALY"] [Sun Jul 12 18:17:04.365244 2026] [authz_core:error] [pid 960377:tid 960526] [client 103.168.66.51:0] AH01630: client denied by server configuration: /home1/prcmanag/public_html/error_log [Sun Jul 12 18:17:04.370097 2026] [security2:error] [pid 979474:tid 979686] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugHTrIlbXpLXvkNcRfwAAANE"] [Sun Jul 12 18:17:04.395448 2026] [security2:error] [pid 979474:tid 979724] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugHTrIlbXpLXvkNcRgAAAAPc"] [Sun Jul 12 18:17:04.554718 2026] [security2:error] [pid 979474:tid 979695] [client 103.168.66.51:65438] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/var/SymfonyRequirements.php"] [unique_id "alQugHTrIlbXpLXvkNcRhgAAANo"] [Sun Jul 12 18:17:04.559507 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/erp/backend/info.php"] [unique_id "alQugF_56DeKknhy7sMeYwABLC0"] [Sun Jul 12 18:17:04.594584 2026] [fcgid:warn] [pid 979474:tid 979698] (70014)End of file found: [client 18.116.101.220:12832] mod_fcgid: can't get data from http client [Sun Jul 12 18:17:04.649891 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/erp/temp.php"] [unique_id "alQugF_56DeKknhy7sMeZgABEAA"] [Sun Jul 12 18:17:04.728562 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/errors/.env"] [unique_id "alQugF_56DeKknhy7sMeaQABEFA"] [Sun Jul 12 18:17:04.740201 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/example/.env"] [unique_id "alQugF_56DeKknhy7sMeawABEBs"] [Sun Jul 12 18:17:04.778081 2026] [security2:error] [pid 967714:tid 967950] [client 103.168.66.51:53971] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/services.php"] [unique_id "alQugF_56DeKknhy7sMecAAAAWk"] [Sun Jul 12 18:17:04.842428 2026] [security2:error] [pid 967714:tid 967906] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugF_56DeKknhy7sMeZwAAAT0"] [Sun Jul 12 18:17:04.870194 2026] [security2:error] [pid 979474:tid 979691] [client 168.100.149.47:48646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15405/bargainor/2308_enhalo.jsp"] [unique_id "alQugHTrIlbXpLXvkNcRjAAAANY"] [Sun Jul 12 18:17:04.922012 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/example27-how-to-load-env/sample02/.env"] [unique_id "alQugF_56DeKknhy7sMedQABZjk"] [Sun Jul 12 18:17:04.927390 2026] [security2:error] [pid 960377:tid 960584] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQugBMANaV5i2_BLQomUQAATHw"] [Sun Jul 12 18:17:04.928103 2026] [authz_core:error] [pid 960377:tid 960573] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:04.928570 2026] [authz_core:error] [pid 960377:tid 960573] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:04.955547 2026] [security2:error] [pid 967714:tid 967963] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQue1_56DeKknhy7sMd8gAAAXY"] [Sun Jul 12 18:17:04.996194 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/examples/01-simple-model/.env"] [unique_id "alQugF_56DeKknhy7sMedwABbkc"] [Sun Jul 12 18:17:05.167787 2026] [security2:error] [pid 967714:tid 967911] [client 145.239.10.137:59860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lifeisdelicio.us"] [uri "/sc.php"] [unique_id "alQugV_56DeKknhy7sMeeQAAAUI"], referer: http://lifeisdelicio.us/sc.php [Sun Jul 12 18:17:05.244336 2026] [security2:error] [pid 967714:tid 967876] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9fMzgwNDdfbzlobS85XzM4MDlfaG1x.html"] [unique_id "alQugV_56DeKknhy7sMefQAAAR8"] [Sun Jul 12 18:17:05.370364 2026] [security2:error] [pid 960377:tid 960528] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugRMANaV5i2_BLQomWwAAABQ"] [Sun Jul 12 18:17:05.597745 2026] [security2:error] [pid 967714:tid 967785] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/examples/react-dashboard/backend/.env"] [unique_id "alQugV_56DeKknhy7sMehgABfDs"] [Sun Jul 12 18:17:05.663293 2026] [security2:error] [pid 979474:tid 979680] [client 103.168.66.51:65441] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/logging.php"] [unique_id "alQugXTrIlbXpLXvkNcRlAAAAMs"] [Sun Jul 12 18:17:05.692801 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:05.693273 2026] [authz_core:error] [pid 960377:tid 960557] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:05.741520 2026] [security2:error] [pid 967714:tid 967922] [client 103.168.66.51:63673] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/service/.env"] [unique_id "alQugV_56DeKknhy7sMeiQAAAU0"] [Sun Jul 12 18:17:05.757974 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/examples/sdl-first/.env"] [unique_id "alQugV_56DeKknhy7sMeiwABUzc"] [Sun Jul 12 18:17:05.785294 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugV_56DeKknhy7sMehQAAAQ0"] [Sun Jul 12 18:17:05.826796 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/exapi/.env"] [unique_id "alQugV_56DeKknhy7sMejAABIkg"] [Sun Jul 12 18:17:05.862241 2026] [security2:error] [pid 960377:tid 960536] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQugRMANaV5i2_BLQomWAAAHFQ"] [Sun Jul 12 18:17:05.878540 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/favicons/.env"] [unique_id "alQugV_56DeKknhy7sMejQABQzU"] [Sun Jul 12 18:17:05.979999 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/favs/.env"] [unique_id "alQugV_56DeKknhy7sMekQABeUQ"] [Sun Jul 12 18:17:06.060216 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/feature/.env"] [unique_id "alQugl_56DeKknhy7sMekgABehE"] [Sun Jul 12 18:17:06.113171 2026] [security2:error] [pid 960377:tid 960601] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufhMANaV5i2_BLQomRQAAAF0"] [Sun Jul 12 18:17:06.166824 2026] [security2:error] [pid 967714:tid 967961] [client 103.168.66.51:54542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/config/production/.env"] [unique_id "alQugl_56DeKknhy7sMekwAAAXQ"] [Sun Jul 12 18:17:06.193293 2026] [security2:error] [pid 979474:tid 979619] [client 168.100.149.239:35540] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15470/bargainor/2308_metalogical.jsp"] [unique_id "alQugnTrIlbXpLXvkNcRmwAAAI8"] [Sun Jul 12 18:17:06.209892 2026] [security2:error] [pid 967714:tid 967951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugV_56DeKknhy7sMekAAAAWo"] [Sun Jul 12 18:17:06.246032 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufnTrIlbXpLXvkNcRZwAAAPQ"] [Sun Jul 12 18:17:06.261901 2026] [security2:error] [pid 967714:tid 967913] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQugV_56DeKknhy7sMeigAAAUQ"] [Sun Jul 12 18:17:06.261958 2026] [security2:error] [pid 967714:tid 967913] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQugV_56DeKknhy7sMeigAAAUQ"] [Sun Jul 12 18:17:06.265367 2026] [security2:error] [pid 960377:tid 960541] [client 65.21.113.206:52066] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9fMzgwNDdfbzlobS85XzM4MDlfaG1x.html"] [unique_id "alQugRMANaV5i2_BLQomYAAAACE"] [Sun Jul 12 18:17:06.267813 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/feature/.env.bak"] [unique_id "alQugl_56DeKknhy7sMelAABMHQ"] [Sun Jul 12 18:17:06.275353 2026] [security2:error] [pid 967714:tid 967902] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufl_56DeKknhy7sMeJwAAATk"] [Sun Jul 12 18:17:06.302964 2026] [security2:error] [pid 979474:tid 979635] [client 103.168.66.51:57662] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/project/.env"] [unique_id "alQugnTrIlbXpLXvkNcRnQAAAJ8"] [Sun Jul 12 18:17:06.317112 2026] [security2:error] [pid 967714:tid 967820] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/feature/xampp/info.php"] [unique_id "alQugl_56DeKknhy7sMelgABD14"] [Sun Jul 12 18:17:06.328332 2026] [security2:error] [pid 979474:tid 979728] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufnTrIlbXpLXvkNcRaQAAAPs"] [Sun Jul 12 18:17:06.345883 2026] [security2:error] [pid 960377:tid 960589] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQufhMANaV5i2_BLQomRgAAAFE"] [Sun Jul 12 18:17:06.450052 2026] [authz_core:error] [pid 967714:tid 967867] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:06.450535 2026] [authz_core:error] [pid 967714:tid 967867] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:06.469017 2026] [security2:error] [pid 967714:tid 967729] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/files/.env"] [unique_id "alQugl_56DeKknhy7sMeoAABLwM"] [Sun Jul 12 18:17:06.472261 2026] [security2:error] [pid 979474:tid 979661] [client 103.168.66.51:53410] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/v3/.env"] [unique_id "alQugnTrIlbXpLXvkNcRoQAAALk"] [Sun Jul 12 18:17:06.523122 2026] [security2:error] [pid 979474:tid 979634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugnTrIlbXpLXvkNcRnwAAAJ4"] [Sun Jul 12 18:17:06.562408 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/finalVersion/lcomernbootcamp/projbackend/.env"] [unique_id "alQugl_56DeKknhy7sMepwABgnw"] [Sun Jul 12 18:17:06.617952 2026] [security2:error] [pid 967714:tid 967965] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugl_56DeKknhy7sMenwAAAXg"] [Sun Jul 12 18:17:06.636768 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/first-network/.env"] [unique_id "alQugl_56DeKknhy7sMerQABERU"] [Sun Jul 12 18:17:06.650378 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/fisdom/fisdom/.env"] [unique_id "alQugl_56DeKknhy7sMergABWCc"] [Sun Jul 12 18:17:06.675155 2026] [security2:error] [pid 967714:tid 967835] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/fixtures/blocks/.env"] [unique_id "alQugl_56DeKknhy7sMerwABhW0"] [Sun Jul 12 18:17:06.691992 2026] [security2:error] [pid 979474:tid 979733] [client 103.168.66.51:57662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/php_info.php"] [unique_id "alQugnTrIlbXpLXvkNcRpAAAAQA"] [Sun Jul 12 18:17:06.842543 2026] [security2:error] [pid 967714:tid 967971] [client 103.168.66.51:54542] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/v1/.env"] [unique_id "alQugl_56DeKknhy7sMetAAAAX4"] [Sun Jul 12 18:17:06.858727 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/fixtures/fiber-debugger/.env"] [unique_id "alQugl_56DeKknhy7sMetQABZjA"] [Sun Jul 12 18:17:06.865405 2026] [security2:error] [pid 960377:tid 960565] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQughMANaV5i2_BLQomZQAAOVM"] [Sun Jul 12 18:17:07.023794 2026] [security2:error] [pid 967714:tid 967818] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/fixtures/kitchensink/.env"] [unique_id "alQug1_56DeKknhy7sMetgABNFw"] [Sun Jul 12 18:17:07.027756 2026] [security2:error] [pid 979474:tid 979648] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugnTrIlbXpLXvkNcRqQAAAKw"] [Sun Jul 12 18:17:07.101437 2026] [security2:error] [pid 979474:tid 979539] [remote 216.73.216.109:49108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQug3TrIlbXpLXvkNcRrQAArzs"] [Sun Jul 12 18:17:07.153229 2026] [security2:error] [pid 979474:tid 979662] [client 57.141.18.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQugnTrIlbXpLXvkNcRqAAAALo"] [Sun Jul 12 18:17:07.154971 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/function/linusadmin-phpinfo.php"] [unique_id "alQug1_56DeKknhy7sMeugABKko"] [Sun Jul 12 18:17:07.219232 2026] [authz_core:error] [pid 979474:tid 979689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:07.219736 2026] [authz_core:error] [pid 979474:tid 979689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:07.241302 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/function/old_phpinfo.php"] [unique_id "alQug1_56DeKknhy7sMevAABKgU"] [Sun Jul 12 18:17:07.260384 2026] [security2:error] [pid 967714:tid 967908] [client 103.168.66.51:53514] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.copy"] [unique_id "alQug1_56DeKknhy7sMevQAAAT8"] [Sun Jul 12 18:17:07.302862 2026] [security2:error] [pid 960377:tid 960535] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQugxMANaV5i2_BLQomcgAAABs"] [Sun Jul 12 18:17:07.356049 2026] [security2:error] [pid 979474:tid 979681] [client 103.168.66.51:57472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/manager/"] [unique_id "alQug3TrIlbXpLXvkNcRswAAAMw"] [Sun Jul 12 18:17:07.403722 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/function/service/info.php"] [unique_id "alQug1_56DeKknhy7sMevwABHg8"] [Sun Jul 12 18:17:07.440222 2026] [security2:error] [pid 960377:tid 960626] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQugxMANaV5i2_BLQomdAAAAHY"] [Sun Jul 12 18:17:07.446513 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/gists/laravel/.env"] [unique_id "alQug1_56DeKknhy7sMewQABK2g"] [Sun Jul 12 18:17:07.541886 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/helper/backend/phpinfo.php"] [unique_id "alQug1_56DeKknhy7sMewgABRQg"] [Sun Jul 12 18:17:07.586156 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/helper/info.php"] [unique_id "alQug1_56DeKknhy7sMewwABSV8"] [Sun Jul 12 18:17:07.619028 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/html/.env"] [unique_id "alQug1_56DeKknhy7sMexwABQjw"] [Sun Jul 12 18:17:07.739193 2026] [security2:error] [pid 960377:tid 960580] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQugxMANaV5i2_BLQombwAASGg"] [Sun Jul 12 18:17:07.777694 2026] [security2:error] [pid 967714:tid 967763] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/html/phpinfo.php"] [unique_id "alQug1_56DeKknhy7sMeyQABhiU"] [Sun Jul 12 18:17:07.833421 2026] [security2:error] [pid 979474:tid 979657] [client 167.88.164.154:43352] ModSecurity: Warning. Matched phrase "Joomla" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "lower-hire.com"] [uri "/index.html"] [unique_id "alQug3TrIlbXpLXvkNcRuwAAALU"] [Sun Jul 12 18:17:07.854822 2026] [security2:error] [pid 967714:tid 967876] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQug1_56DeKknhy7sMeyAAAAR8"] [Sun Jul 12 18:17:07.855856 2026] [security2:error] [pid 967714:tid 967952] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9fMzgwNDdfbzlobS85Xzc4NTJfaG1x.html"] [unique_id "alQug1_56DeKknhy7sMeywAAAWs"] [Sun Jul 12 18:17:07.894749 2026] [security2:error] [pid 967714:tid 967735] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/icons/.env"] [unique_id "alQug1_56DeKknhy7sMezAABHAk"] [Sun Jul 12 18:17:07.943833 2026] [security2:error] [pid 967714:tid 967896] [client 103.168.66.51:54201] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/environments/.env"] [unique_id "alQug1_56DeKknhy7sMezQAAATM"] [Sun Jul 12 18:17:07.975967 2026] [authz_core:error] [pid 979474:tid 979706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:07.976470 2026] [authz_core:error] [pid 979474:tid 979706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:07.976718 2026] [security2:error] [pid 979474:tid 979663] [client 167.88.164.154:43358] ModSecurity: Warning. Matched phrase "Joomla" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "lower-hire.com"] [uri "/index.html"] [unique_id "alQug3TrIlbXpLXvkNcRvQAAALs"] [Sun Jul 12 18:17:08.082834 2026] [proxy:warn] [pid 967714:tid 967964] [client 43.165.125.66:41940] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be cecillinois.org for uri /400.shtml [Sun Jul 12 18:17:08.104928 2026] [security2:error] [pid 960377:tid 960630] [client 43.165.125.66:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "cecillinois.org"] [uri "/cgi-sys/404.html"] [unique_id "alQuhBMANaV5i2_BLQomewAAAHo"] [Sun Jul 12 18:17:08.106252 2026] [security2:error] [pid 967714:tid 967964] [client 43.165.125.66:41940] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "cecillinois.org"] [uri "/400.shtml"] [unique_id "alQuhF_56DeKknhy7sMe0AAAAXc"] [Sun Jul 12 18:17:08.112361 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/ikiwiki/.env"] [unique_id "alQuhF_56DeKknhy7sMe0gABc10"] [Sun Jul 12 18:17:08.144134 2026] [security2:error] [pid 979474:tid 979713] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQugnTrIlbXpLXvkNcRngAAAOw"] [Sun Jul 12 18:17:08.250682 2026] [security2:error] [pid 960377:tid 960515] [client 94.187.171.125:65255] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuhBMANaV5i2_BLQomfgAAAAc"] [Sun Jul 12 18:17:08.250948 2026] [security2:error] [pid 960377:tid 960515] [client 94.187.171.125:65255] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuhBMANaV5i2_BLQomfgAAAAc"] [Sun Jul 12 18:17:08.328704 2026] [security2:error] [pid 979474:tid 979720] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQugnTrIlbXpLXvkNcRoAAAAPM"] [Sun Jul 12 18:17:08.338679 2026] [security2:error] [pid 967714:tid 967943] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhF_56DeKknhy7sMezwAAAWI"] [Sun Jul 12 18:17:08.488983 2026] [security2:error] [pid 967714:tid 967768] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/images/.env"] [unique_id "alQuhF_56DeKknhy7sMe3gABGCo"] [Sun Jul 12 18:17:08.503073 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/info.php/"] [unique_id "alQuhF_56DeKknhy7sMe4AABZEk"] [Sun Jul 12 18:17:08.514033 2026] [security2:error] [pid 967714:tid 967833] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/cf.js.cool/.env"] [unique_id "alQuhF_56DeKknhy7sMe4gABems"] [Sun Jul 12 18:17:08.543065 2026] [security2:error] [pid 960377:tid 960596] [client 103.168.66.51:55037] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/settings.php"] [unique_id "alQuhBMANaV5i2_BLQomgQAAAFg"] [Sun Jul 12 18:17:08.620801 2026] [security2:error] [pid 960377:tid 960591] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQugxMANaV5i2_BLQomeQAAU1E"] [Sun Jul 12 18:17:08.665186 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/info/info.php"] [unique_id "alQuhF_56DeKknhy7sMe5gABgFk"] [Sun Jul 12 18:17:08.720850 2026] [security2:error] [pid 967714:tid 967928] [client 125.167.21.72:61870] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuhF_56DeKknhy7sMe6QAAAVM"] [Sun Jul 12 18:17:08.721087 2026] [security2:error] [pid 967714:tid 967928] [client 125.167.21.72:61870] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuhF_56DeKknhy7sMe6QAAAVM"] [Sun Jul 12 18:17:08.732508 2026] [authz_core:error] [pid 967714:tid 967951] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:08.733020 2026] [authz_core:error] [pid 967714:tid 967951] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:08.873579 2026] [security2:error] [pid 979474:tid 979704] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuhHTrIlbXpLXvkNcRzwAAAOM"] [Sun Jul 12 18:17:08.873649 2026] [security2:error] [pid 979474:tid 979704] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuhHTrIlbXpLXvkNcRzwAAAOM"] [Sun Jul 12 18:17:08.874758 2026] [security2:error] [pid 979474:tid 979641] [client 65.21.113.206:52074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9fMzgwNDdfbzlobS85Xzc4NTJfaG1x.html"] [unique_id "alQuhHTrIlbXpLXvkNcRzAAAAKU"] [Sun Jul 12 18:17:08.875305 2026] [security2:error] [pid 967714:tid 967913] [client 114.119.134.95:56513] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "centerofholistichealthcare.org"] [uri "/"] [unique_id "alQuhF_56DeKknhy7sMe6gAAAUQ"], referer: https://centerofholistichealthcare.org?specialties=our-team [Sun Jul 12 18:17:08.883484 2026] [security2:error] [pid 979474:tid 979619] [client 168.100.149.22:37024] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15535/bargainor/2308_psychoreflex.jsp"] [unique_id "alQuhHTrIlbXpLXvkNcR2gAAAI8"] [Sun Jul 12 18:17:08.892295 2026] [security2:error] [pid 979474:tid 979674] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhHTrIlbXpLXvkNcR2QAAAMY"] [Sun Jul 12 18:17:08.956267 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/infos.php"] [unique_id "alQuhF_56DeKknhy7sMe6wABZ3I"] [Sun Jul 12 18:17:08.958086 2026] [security2:error] [pid 967714:tid 967826] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/js-plugin/.env"] [unique_id "alQuhF_56DeKknhy7sMe7AABZ2Q"] [Sun Jul 12 18:17:09.200008 2026] [security2:error] [pid 979474:tid 979638] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhHTrIlbXpLXvkNcRxwAAAKI"] [Sun Jul 12 18:17:09.307216 2026] [security2:error] [pid 967714:tid 967942] [client 103.168.66.51:58282] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/cgi/env"] [unique_id "alQuhV_56DeKknhy7sMe9QAAAWE"] [Sun Jul 12 18:17:09.332020 2026] [security2:error] [pid 967714:tid 967859] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhV_56DeKknhy7sMe8AAAAQ4"] [Sun Jul 12 18:17:09.387210 2026] [security2:error] [pid 979474:tid 979691] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhHTrIlbXpLXvkNcRzQAAANY"] [Sun Jul 12 18:17:09.496086 2026] [security2:error] [pid 967714:tid 967965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuhV_56DeKknhy7sMe-AAAAXg"] [Sun Jul 12 18:17:09.548808 2026] [security2:error] [pid 960377:tid 960633] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuhBMANaV5i2_BLQomggAAfRo"] [Sun Jul 12 18:17:09.563478 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:09.563720 2026] [security2:error] [pid 967714:tid 967956] [client 103.168.66.51:54201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/database.php"] [unique_id "alQuhV_56DeKknhy7sMfBAAAAW8"] [Sun Jul 12 18:17:09.564003 2026] [authz_core:error] [pid 967714:tid 967862] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:09.598761 2026] [proxy:error] [pid 960377:tid 960620] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:17:09.599021 2026] [proxy_http:error] [pid 960377:tid 960620] [client 17.22.245.33:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:17:09.601407 2026] [proxy:error] [pid 960377:tid 960620] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:17:09.601600 2026] [proxy_http:error] [pid 960377:tid 960620] [client 17.22.245.33:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:17:09.678349 2026] [security2:error] [pid 979474:tid 979731] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuhXTrIlbXpLXvkNcR6AAAAP4"] [Sun Jul 12 18:17:09.723554 2026] [security2:error] [pid 979474:tid 979707] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuhXTrIlbXpLXvkNcR7gAAAOY"] [Sun Jul 12 18:17:09.732412 2026] [security2:error] [pid 979474:tid 979709] [client 103.168.66.51:53410] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.local.bak"] [unique_id "alQuhXTrIlbXpLXvkNcR8QAAAOg"] [Sun Jul 12 18:17:09.781035 2026] [security2:error] [pid 979474:tid 979715] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhXTrIlbXpLXvkNcR7QAAAO4"] [Sun Jul 12 18:17:09.948500 2026] [security2:error] [pid 967714:tid 967963] [client 103.168.66.51:53514] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/api-docs"] [unique_id "alQuhV_56DeKknhy7sMfCgAAAXY"] [Sun Jul 12 18:17:09.989357 2026] [security2:error] [pid 979474:tid 979663] [client 24.203.79.110:65482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuhXTrIlbXpLXvkNcR9QAAALs"] [Sun Jul 12 18:17:09.995562 2026] [security2:error] [pid 979474:tid 979663] [client 24.203.79.110:65482] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuhXTrIlbXpLXvkNcR9QAAALs"] [Sun Jul 12 18:17:10.024341 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/lara/.env"] [unique_id "alQuhl_56DeKknhy7sMfDgABNx0"] [Sun Jul 12 18:17:10.199973 2026] [security2:error] [pid 967714:tid 967877] [client 143.244.57.123:47458] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQuhl_56DeKknhy7sMfEgAAASA"] [Sun Jul 12 18:17:10.228254 2026] [security2:error] [pid 979474:tid 979706] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhXTrIlbXpLXvkNcR8wAAAOU"] [Sun Jul 12 18:17:10.314078 2026] [security2:error] [pid 979474:tid 979624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhXTrIlbXpLXvkNcR3gAAAJQ"] [Sun Jul 12 18:17:10.318452 2026] [security2:error] [pid 967714:tid 967897] [client 57.141.18.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuhV_56DeKknhy7sMfCQAAATQ"] [Sun Jul 12 18:17:10.364535 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/lara/.env.bak"] [unique_id "alQuhl_56DeKknhy7sMfGgABa1c"] [Sun Jul 12 18:17:10.385480 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:10.389900 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:10.408214 2026] [security2:error] [pid 967714:tid 967736] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/payment.php~"] [unique_id "alQuhl_56DeKknhy7sMfGwABQAo"] [Sun Jul 12 18:17:10.447531 2026] [security2:error] [pid 960377:tid 960606] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuhRMANaV5i2_BLQomhwAAYjM"] [Sun Jul 12 18:17:10.578120 2026] [security2:error] [pid 967714:tid 967958] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhV_56DeKknhy7sMe_QAAAXE"] [Sun Jul 12 18:17:10.581397 2026] [security2:error] [pid 967714:tid 967748] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/config/log.bak"] [unique_id "alQuhl_56DeKknhy7sMfHgABThY"] [Sun Jul 12 18:17:10.629746 2026] [security2:error] [pid 979474:tid 979712] [client 103.168.66.51:65070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/mail.php"] [unique_id "alQuhnTrIlbXpLXvkNcSBgAAAOs"] [Sun Jul 12 18:17:10.709966 2026] [security2:error] [pid 967714:tid 967855] [client 103.168.66.51:61684] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.env.cd"] [unique_id "alQuhl_56DeKknhy7sMfIwAAAQo"] [Sun Jul 12 18:17:10.734341 2026] [security2:error] [pid 967714:tid 967962] [client 103.168.66.51:55872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/cgi-bin/.env"] [unique_id "alQuhl_56DeKknhy7sMfJAAAAXU"] [Sun Jul 12 18:17:10.838278 2026] [security2:error] [pid 967714:tid 967758] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/lara/backend/phpinfo.php"] [unique_id "alQuhl_56DeKknhy7sMfKwABIiA"] [Sun Jul 12 18:17:10.866983 2026] [security2:error] [pid 979474:tid 979693] [client 168.100.149.124:46302] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15600/bargainor/2308_mailable.jsp"] [unique_id "alQuhnTrIlbXpLXvkNcSDgAAANg"] [Sun Jul 12 18:17:11.008220 2026] [security2:error] [pid 979474:tid 979710] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuhnTrIlbXpLXvkNcSDQAAAOk"] [Sun Jul 12 18:17:11.026060 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuhl_56DeKknhy7sMfJwAAAQ0"] [Sun Jul 12 18:17:11.078976 2026] [security2:error] [pid 967714:tid 967913] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9oaDg2LTU0MzYvb2gtMzQ0NzMvaGg4Ng=="] [unique_id "alQuh1_56DeKknhy7sMfNQAAAUQ"] [Sun Jul 12 18:17:11.199291 2026] [security2:error] [pid 967714:tid 967737] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/packages/app/.env"] [unique_id "alQuh1_56DeKknhy7sMfOQABXQs"] [Sun Jul 12 18:17:11.228512 2026] [authz_core:error] [pid 967714:tid 967928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:11.229753 2026] [authz_core:error] [pid 967714:tid 967928] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:11.247903 2026] [security2:error] [pid 960377:tid 960603] [client 103.168.66.51:54377] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/demo/.env"] [unique_id "alQuhxMANaV5i2_BLQomnwAAAF8"] [Sun Jul 12 18:17:11.273596 2026] [security2:error] [pid 979474:tid 979671] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuh3TrIlbXpLXvkNcSFAAAAMM"] [Sun Jul 12 18:17:11.316470 2026] [security2:error] [pid 967714:tid 967730] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/lara/current/phpinfo.php"] [unique_id "alQuh1_56DeKknhy7sMfOwABJwQ"] [Sun Jul 12 18:17:11.363747 2026] [security2:error] [pid 979474:tid 979692] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhnTrIlbXpLXvkNcSAQAAANc"] [Sun Jul 12 18:17:11.477594 2026] [security2:error] [pid 960377:tid 960548] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuhhMANaV5i2_BLQommgAAKGw"] [Sun Jul 12 18:17:11.665258 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/laravel/help/phpinfo.php"] [unique_id "alQuh1_56DeKknhy7sMfQgABSk8"] [Sun Jul 12 18:17:11.701788 2026] [security2:error] [pid 979474:tid 979615] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuh3TrIlbXpLXvkNcSGAAAAIs"] [Sun Jul 12 18:17:11.702858 2026] [security2:error] [pid 979474:tid 979635] [client 103.168.66.51:62814] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/storage/framework/cache/.env"] [unique_id "alQuh3TrIlbXpLXvkNcSIwAAAJ8"] [Sun Jul 12 18:17:11.708002 2026] [security2:error] [pid 960377:tid 960589] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuhxMANaV5i2_BLQomowAAAFE"] [Sun Jul 12 18:17:11.759185 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/laravel/info.php"] [unique_id "alQuh1_56DeKknhy7sMfQwABWHo"] [Sun Jul 12 18:17:11.880885 2026] [security2:error] [pid 967714:tid 967812] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/shop-app/api/.env"] [unique_id "alQuh1_56DeKknhy7sMfRQABFVY"] [Sun Jul 12 18:17:11.901953 2026] [security2:error] [pid 967714:tid 967808] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/leafer-app/.env"] [unique_id "alQuh1_56DeKknhy7sMfRgABPVI"] [Sun Jul 12 18:17:12.024348 2026] [authz_core:error] [pid 979474:tid 979648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:12.024998 2026] [authz_core:error] [pid 979474:tid 979648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:12.094805 2026] [security2:error] [pid 979474:tid 979638] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuh3TrIlbXpLXvkNcSHwAAAKI"] [Sun Jul 12 18:17:12.094869 2026] [security2:error] [pid 979474:tid 979638] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuh3TrIlbXpLXvkNcSHwAAAKI"] [Sun Jul 12 18:17:12.096437 2026] [security2:error] [pid 960377:tid 960512] [client 65.21.113.206:52080] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9oaDg2LTU0MzYvb2gtMzQ0NzMvaGg4Ng=="] [unique_id "alQuhxMANaV5i2_BLQompwAAAAQ"] [Sun Jul 12 18:17:12.108200 2026] [security2:error] [pid 979474:tid 979660] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhnTrIlbXpLXvkNcSBAAAALg"] [Sun Jul 12 18:17:12.269463 2026] [security2:error] [pid 960377:tid 960417] [remote 192.250.239.85:41430] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.239.250.192.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/wp-login.php"] [unique_id "alQuiBMANaV5i2_BLQomtAAAeCY"] [Sun Jul 12 18:17:12.276177 2026] [security2:error] [pid 967714:tid 967780] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/ledger_sync/.env"] [unique_id "alQuiF_56DeKknhy7sMfUgABFDY"] [Sun Jul 12 18:17:12.308151 2026] [security2:error] [pid 967714:tid 967882] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuiF_56DeKknhy7sMfTQAAASU"] [Sun Jul 12 18:17:12.395353 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/legacy/tests/9.1.1/.env"] [unique_id "alQuiF_56DeKknhy7sMfUwABdm4"] [Sun Jul 12 18:17:12.430157 2026] [security2:error] [pid 960377:tid 960534] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuhxMANaV5i2_BLQomoQAAABo"] [Sun Jul 12 18:17:12.430157 2026] [security2:error] [pid 960377:tid 960401] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuhxMANaV5i2_BLQomrAAAZBc"] [Sun Jul 12 18:17:12.489259 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/legacy/tests/9.2.0/.env"] [unique_id "alQuiF_56DeKknhy7sMfWgABV28"] [Sun Jul 12 18:17:12.521273 2026] [security2:error] [pid 979474:tid 979715] [client 103.168.66.51:60396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/core/configuration.php"] [unique_id "alQuiHTrIlbXpLXvkNcSMwAAAO4"] [Sun Jul 12 18:17:12.525710 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/legal/.env"] [unique_id "alQuiF_56DeKknhy7sMfWwABRUA"] [Sun Jul 12 18:17:12.529532 2026] [security2:error] [pid 967714:tid 967893] [client 57.141.18.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQuhl_56DeKknhy7sMfMgAAATA"] [Sun Jul 12 18:17:12.588790 2026] [security2:error] [pid 960377:tid 960393] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/InstantCV/server/.env"] [unique_id "alQuiBMANaV5i2_BLQomuwAAdw8"] [Sun Jul 12 18:17:12.749305 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQuiF_56DeKknhy7sMfYgABfT0"] [Sun Jul 12 18:17:12.772776 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuiBMANaV5i2_BLQomugAAADQ"] [Sun Jul 12 18:17:12.776109 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuiF_56DeKknhy7sMfXwAAAUI"] [Sun Jul 12 18:17:12.837329 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:12.837861 2026] [authz_core:error] [pid 967714:tid 967946] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:12.873512 2026] [security2:error] [pid 967714:tid 967968] [client 168.100.149.154:40566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15665/bargainor/2308_epidemiology.jsp"] [unique_id "alQuiF_56DeKknhy7sMfYwAAAXs"] [Sun Jul 12 18:17:12.879110 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/library/.env"] [unique_id "alQuiF_56DeKknhy7sMfZAABQC8"] [Sun Jul 12 18:17:12.907601 2026] [security2:error] [pid 960377:tid 960587] [client 103.168.66.51:54377] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/.env~"] [unique_id "alQuiBMANaV5i2_BLQomwAAAAE8"] [Sun Jul 12 18:17:12.976804 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/live/.env"] [unique_id "alQuiF_56DeKknhy7sMfZwABcWo"] [Sun Jul 12 18:17:13.197689 2026] [security2:error] [pid 979474:tid 979658] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuiHTrIlbXpLXvkNcSQAAAALY"] [Sun Jul 12 18:17:13.241622 2026] [security2:error] [pid 967714:tid 967752] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/backend/phpinfo.php"] [unique_id "alQuiV_56DeKknhy7sMfcAABTho"] [Sun Jul 12 18:17:13.298561 2026] [security2:error] [pid 967714:tid 967940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuiV_56DeKknhy7sMfagAAAV8"] [Sun Jul 12 18:17:13.321965 2026] [security2:error] [pid 979474:tid 979737] [client 103.168.66.51:58101] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/var/cache/prod/.env"] [unique_id "alQuiXTrIlbXpLXvkNcSSAAAAQQ"] [Sun Jul 12 18:17:13.360289 2026] [security2:error] [pid 979474:tid 979727] [client 103.168.66.51:61927] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/environments/production.rb"] [unique_id "alQuiXTrIlbXpLXvkNcSSQAAAPo"] [Sun Jul 12 18:17:13.382360 2026] [security2:error] [pid 967714:tid 967864] [client 103.168.66.51:54853] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/bootstrap-prod.yml"] [unique_id "alQuiV_56DeKknhy7sMfcwAAARM"] [Sun Jul 12 18:17:13.417358 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/info.php"] [unique_id "alQuiV_56DeKknhy7sMfdgABcC0"] [Sun Jul 12 18:17:13.507291 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/infophp.php"] [unique_id "alQuiV_56DeKknhy7sMfegABaAA"] [Sun Jul 12 18:17:13.554233 2026] [security2:error] [pid 967714:tid 967806] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/infos.php"] [unique_id "alQuiV_56DeKknhy7sMfewABIlA"] [Sun Jul 12 18:17:13.583387 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/lara/info.php"] [unique_id "alQuiV_56DeKknhy7sMffAABDRs"] [Sun Jul 12 18:17:13.626193 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:13.626751 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:13.665128 2026] [security2:error] [pid 967714:tid 967843] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/old_phpinfo.php"] [unique_id "alQuiV_56DeKknhy7sMffwABD3U"] [Sun Jul 12 18:17:13.671473 2026] [security2:error] [pid 967714:tid 967945] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuiV_56DeKknhy7sMfdQAAAWQ"] [Sun Jul 12 18:17:13.698033 2026] [security2:error] [pid 960377:tid 960596] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuiBMANaV5i2_BLQomvwAAWFo"] [Sun Jul 12 18:17:13.787017 2026] [security2:error] [pid 979474:tid 979683] [client 143.244.57.123:8990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuiXTrIlbXpLXvkNcSTgAAAM4"] [Sun Jul 12 18:17:13.787227 2026] [security2:error] [pid 979474:tid 979683] [client 143.244.57.123:8990] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuiXTrIlbXpLXvkNcSTgAAAM4"] [Sun Jul 12 18:17:13.907152 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/php.php"] [unique_id "alQuiV_56DeKknhy7sMfiQABXTk"] [Sun Jul 12 18:17:13.933428 2026] [security2:error] [pid 967714:tid 967907] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuiV_56DeKknhy7sMfhAAAAT4"] [Sun Jul 12 18:17:14.042143 2026] [security2:error] [pid 979474:tid 979726] [client 103.168.66.51:50623] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/.env.test"] [unique_id "alQuinTrIlbXpLXvkNcSUgAAAPk"] [Sun Jul 12 18:17:14.116482 2026] [security2:error] [pid 979474:tid 979701] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuiXTrIlbXpLXvkNcSUQAAAOA"] [Sun Jul 12 18:17:14.118620 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/phpinfo.php"] [unique_id "alQuil_56DeKknhy7sMfjQABYEc"] [Sun Jul 12 18:17:14.118994 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuiF_56DeKknhy7sMfUAAAAX4"] [Sun Jul 12 18:17:14.139898 2026] [security2:error] [pid 967714:tid 967981] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuil_56DeKknhy7sMfjAAAAYg"] [Sun Jul 12 18:17:14.236471 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/phpversion.php"] [unique_id "alQuil_56DeKknhy7sMfkAABHXM"] [Sun Jul 12 18:17:14.347598 2026] [security2:error] [pid 967714:tid 967838] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQubF_56DeKknhy7sMfVgABVnA"] [Sun Jul 12 18:17:14.392080 2026] [security2:error] [pid 979474:tid 979671] [client 103.168.66.51:52988] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/env.old"] [unique_id "alQuinTrIlbXpLXvkNcSVgAAAMM"] [Sun Jul 12 18:17:14.395262 2026] [security2:error] [pid 979474:tid 979704] [client 143.244.57.123:42952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuinTrIlbXpLXvkNcSVwAAAOM"] [Sun Jul 12 18:17:14.395544 2026] [security2:error] [pid 979474:tid 979704] [client 143.244.57.123:42952] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQuinTrIlbXpLXvkNcSVwAAAOM"] [Sun Jul 12 18:17:14.418342 2026] [authz_core:error] [pid 979474:tid 979692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:14.418872 2026] [authz_core:error] [pid 979474:tid 979692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:14.457647 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/temp.php"] [unique_id "alQuil_56DeKknhy7sMfkwABhwY"] [Sun Jul 12 18:17:14.546812 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/live/test.php"] [unique_id "alQuil_56DeKknhy7sMflAABbH4"] [Sun Jul 12 18:17:14.575040 2026] [security2:error] [pid 979474:tid 979736] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuinTrIlbXpLXvkNcSVQAAAQM"] [Sun Jul 12 18:17:14.777159 2026] [security2:error] [pid 967714:tid 967932] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db.php.tmp"] [unique_id "alQuil_56DeKknhy7sMfnAAAAVc"] [Sun Jul 12 18:17:14.777831 2026] [security2:error] [pid 967714:tid 967794] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/lms/current/phpinfo.php"] [unique_id "alQuil_56DeKknhy7sMfnQABI0Q"] [Sun Jul 12 18:17:14.783888 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuil_56DeKknhy7sMfmAAAARQ"] [Sun Jul 12 18:17:14.793059 2026] [security2:error] [pid 960377:tid 960579] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuiRMANaV5i2_BLQomyAAAR10"] [Sun Jul 12 18:17:14.814316 2026] [security2:error] [pid 960377:tid 960599] [client 168.100.149.187:54756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15730/bargainor/2308_secque.jsp"] [unique_id "alQuihMANaV5i2_BLQom0wAAAFs"] [Sun Jul 12 18:17:14.876869 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/local/.env"] [unique_id "alQuil_56DeKknhy7sMfnwABIBE"] [Sun Jul 12 18:17:14.997969 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/logging/.env"] [unique_id "alQuil_56DeKknhy7sMfpAABH2E"] [Sun Jul 12 18:17:15.009094 2026] [security2:error] [pid 967714:tid 967898] [client 143.244.57.123:18964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQui1_56DeKknhy7sMfpQAAATU"] [Sun Jul 12 18:17:15.009381 2026] [security2:error] [pid 967714:tid 967898] [client 143.244.57.123:18964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQui1_56DeKknhy7sMfpQAAATU"] [Sun Jul 12 18:17:15.072494 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuiHTrIlbXpLXvkNcSMAAAAJg"] [Sun Jul 12 18:17:15.165082 2026] [security2:error] [pid 979474:tid 979717] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuiHTrIlbXpLXvkNcSMQAAAPA"] [Sun Jul 12 18:17:15.223793 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:15.225164 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:15.234443 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuihMANaV5i2_BLQom1gAAACU"] [Sun Jul 12 18:17:15.311411 2026] [security2:error] [pid 979474:tid 979618] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQuiXTrIlbXpLXvkNcSSgAAjig"], referer: http://www.sammorell.com/wp/ [Sun Jul 12 18:17:15.331121 2026] [cgid:error] [pid 960377:tid 960625] [client 202.46.62.95:35226] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/bike-water-bottle-custom-p-468.html?osCsid=rp2vvv436bg3hlrdmqh390lfb6 [Sun Jul 12 18:17:15.375605 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQui1_56DeKknhy7sMfsgAAAXM"] [Sun Jul 12 18:17:15.399178 2026] [security2:error] [pid 967714:tid 967958] [client 202.46.62.66:4716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQui1_56DeKknhy7sMftQAAAXE"], referer: https://www.stephenspublishing.com/bike-water-bottle-custom-p-468.html?osCsid=rp2vvv436bg3hlrdmqh390lfb6 [Sun Jul 12 18:17:15.450048 2026] [security2:error] [pid 979474:tid 979561] [remote 184.168.124.4:39188] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQui3TrIlbXpLXvkNcSaAAApVE"] [Sun Jul 12 18:17:15.611740 2026] [security2:error] [pid 967714:tid 967949] [client 34.162.161.15:42548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQui1_56DeKknhy7sMfvAABaBg"], referer: https://www.sammorell.com/wp/ [Sun Jul 12 18:17:15.623987 2026] [security2:error] [pid 960377:tid 960592] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuixMANaV5i2_BLQom3wAAAFQ"] [Sun Jul 12 18:17:15.736339 2026] [security2:error] [pid 979474:tid 979660] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQui3TrIlbXpLXvkNcSZgAAALg"] [Sun Jul 12 18:17:15.797382 2026] [security2:error] [pid 979474:tid 979715] [client 103.168.66.51:52988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/config/environments/.env"] [unique_id "alQui3TrIlbXpLXvkNcScgAAAO4"] [Sun Jul 12 18:17:15.822338 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/mail/.env"] [unique_id "alQui1_56DeKknhy7sMfxAABVSc"] [Sun Jul 12 18:17:15.838528 2026] [security2:error] [pid 967714:tid 967979] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9oaDg2LTk2MzAvb2gtMzQ0NzMvaGg4Ng=="] [unique_id "alQui1_56DeKknhy7sMfxQAAAYY"] [Sun Jul 12 18:17:15.920824 2026] [security2:error] [pid 960377:tid 960538] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuihMANaV5i2_BLQom1AAAHng"] [Sun Jul 12 18:17:15.978226 2026] [security2:error] [pid 967714:tid 967774] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mail/current/info.php"] [unique_id "alQui1_56DeKknhy7sMf0QABUzA"] [Sun Jul 12 18:17:16.050816 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:16.051376 2026] [authz_core:error] [pid 967714:tid 967936] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:16.172779 2026] [security2:error] [pid 967714:tid 967971] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQui1_56DeKknhy7sMfzgAAAX4"] [Sun Jul 12 18:17:16.182879 2026] [security2:error] [pid 979474:tid 979669] [client 40.223.219.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQui3TrIlbXpLXvkNcScAAAAME"] [Sun Jul 12 18:17:16.188221 2026] [security2:error] [pid 979474:tid 979725] [client 168.100.149.116:59192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15795/bargainor/2308_dislevelment.jsp"] [unique_id "alQujHTrIlbXpLXvkNcSdwAAAPg"] [Sun Jul 12 18:17:16.240642 2026] [security2:error] [pid 960377:tid 960536] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuixMANaV5i2_BLQom2AAAABw"] [Sun Jul 12 18:17:16.272831 2026] [security2:error] [pid 967714:tid 967839] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mail/infophp.php"] [unique_id "alQujF_56DeKknhy7sMf1QABSXE"] [Sun Jul 12 18:17:16.283730 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQui1_56DeKknhy7sMfsAAAAYQ"] [Sun Jul 12 18:17:16.354099 2026] [security2:error] [pid 979474:tid 979723] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSdgAA9m8"], referer: http://www.sammorell.com/new/ [Sun Jul 12 18:17:16.526357 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mailer/help/phpinfo.php"] [unique_id "alQujF_56DeKknhy7sMf3wABFgg"] [Sun Jul 12 18:17:16.597439 2026] [security2:error] [pid 979474:tid 979716] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcShwAAAO8"] [Sun Jul 12 18:17:16.694526 2026] [security2:error] [pid 979474:tid 979727] [client 74.7.244.40:50338] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "webmail.jointusecalc.com"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "alQujHTrIlbXpLXvkNcSigAAAPo"] [Sun Jul 12 18:17:16.709495 2026] [security2:error] [pid 967714:tid 967863] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujF_56DeKknhy7sMf2wAAARI"] [Sun Jul 12 18:17:16.758798 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mailer/infophp.php"] [unique_id "alQujF_56DeKknhy7sMf5wABOzw"] [Sun Jul 12 18:17:16.825783 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:16.826314 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:16.901207 2026] [security2:error] [pid 979474:tid 979732] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSjAAA_1Q"], referer: http://www.sammorell.com/blog/ [Sun Jul 12 18:17:16.925090 2026] [security2:error] [pid 960377:tid 960609] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQujBMANaV5i2_BLQom6QAAZWE"] [Sun Jul 12 18:17:17.057163 2026] [security2:error] [pid 979474:tid 979662] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcShQAAALo"] [Sun Jul 12 18:17:17.057252 2026] [security2:error] [pid 979474:tid 979662] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcShQAAALo"] [Sun Jul 12 18:17:17.058535 2026] [security2:error] [pid 979474:tid 979706] [client 65.21.113.206:40012] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9oaDg2LTk2MzAvb2gtMzQ0NzMvaGg4Ng=="] [unique_id "alQujHTrIlbXpLXvkNcSgwAAAOU"] [Sun Jul 12 18:17:17.084885 2026] [security2:error] [pid 960377:tid 960504] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/items/.env"] [unique_id "alQujRMANaV5i2_BLQom8wAAS30"] [Sun Jul 12 18:17:17.132754 2026] [security2:error] [pid 967714:tid 967954] [client 34.162.161.15:42548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQujF_56DeKknhy7sMf7AABbSg"], referer: https://www.sammorell.com/blog/ [Sun Jul 12 18:17:17.157893 2026] [security2:error] [pid 979474:tid 979693] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSjwAAANg"] [Sun Jul 12 18:17:17.245307 2026] [security2:error] [pid 960377:tid 960451] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/javascript/.env"] [unique_id "alQujRMANaV5i2_BLQom9gAACUg"] [Sun Jul 12 18:17:17.287443 2026] [security2:error] [pid 979474:tid 979653] [client 84.236.79.79:38639] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQujXTrIlbXpLXvkNcSkwAAsTU"] [Sun Jul 12 18:17:17.290487 2026] [security2:error] [pid 979474:tid 979653] [client 84.236.79.79:38639] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQujXTrIlbXpLXvkNcSkgAAsVU"] [Sun Jul 12 18:17:17.331995 2026] [security2:error] [pid 967714:tid 967817] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/snap/.env"] [unique_id "alQujV_56DeKknhy7sMf8gABVFs"] [Sun Jul 12 18:17:17.360971 2026] [security2:error] [pid 967714:tid 967759] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mailer/server/info.php"] [unique_id "alQujV_56DeKknhy7sMf8wABQSE"] [Sun Jul 12 18:17:17.404453 2026] [security2:error] [pid 979474:tid 979632] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQujXTrIlbXpLXvkNcSmQAAnFg"], referer: http://www.sammorell.com/wordpress/ [Sun Jul 12 18:17:17.412337 2026] [security2:error] [pid 960377:tid 960490] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/jenkins/.env"] [unique_id "alQujRMANaV5i2_BLQom9wAAf28"] [Sun Jul 12 18:17:17.579207 2026] [security2:error] [pid 960377:tid 960580] [client 216.244.66.243:34736] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/downloads/NWUAV_MEMSRelease072109.pdf"] [unique_id "alQujRMANaV5i2_BLQom_gAAAEg"] [Sun Jul 12 18:17:17.579466 2026] [security2:error] [pid 960377:tid 960580] [client 216.244.66.243:34736] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/downloads/NWUAV_MEMSRelease072109.pdf"] [unique_id "alQujRMANaV5i2_BLQom_gAAAEg"] [Sun Jul 12 18:17:17.590378 2026] [security2:error] [pid 967714:tid 967935] [client 34.162.161.15:42548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQujV_56DeKknhy7sMf9wABWkk"], referer: https://www.sammorell.com/wordpress/ [Sun Jul 12 18:17:17.628951 2026] [authz_core:error] [pid 960377:tid 960627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:17.629509 2026] [authz_core:error] [pid 960377:tid 960627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:17.678923 2026] [security2:error] [pid 960377:tid 960587] [client 103.168.66.51:55197] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/queue.php"] [unique_id "alQujRMANaV5i2_BLQom_wAAAE8"] [Sun Jul 12 18:17:17.756574 2026] [security2:error] [pid 979474:tid 979635] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujXTrIlbXpLXvkNcSnwAAAJ8"] [Sun Jul 12 18:17:17.766179 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/mailer/test.php"] [unique_id "alQujV_56DeKknhy7sMf_wABDxk"] [Sun Jul 12 18:17:17.833587 2026] [security2:error] [pid 979474:tid 979655] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQujXTrIlbXpLXvkNcSoAAAszE"], referer: http://www.sammorell.com/backup/ [Sun Jul 12 18:17:17.852337 2026] [security2:error] [pid 979474:tid 979721] [client 103.168.66.51:53694] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/view.php"] [unique_id "alQujXTrIlbXpLXvkNcSpQAAAPQ"] [Sun Jul 12 18:17:18.037613 2026] [security2:error] [pid 967714:tid 967912] [client 34.162.161.15:42548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQujV_56DeKknhy7sMgAQABQ3I"], referer: https://www.sammorell.com/backup/ [Sun Jul 12 18:17:18.194127 2026] [security2:error] [pid 960377:tid 960508] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujRMANaV5i2_BLQonAwAAAAA"] [Sun Jul 12 18:17:18.196698 2026] [security2:error] [pid 960377:tid 960559] [client 168.100.149.211:56734] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15860/bargainor/2308_limnoria.jsp"] [unique_id "alQujhMANaV5i2_BLQonBgAAADM"] [Sun Jul 12 18:17:18.268606 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQujl_56DeKknhy7sMgCwABgiM"] [Sun Jul 12 18:17:18.323483 2026] [security2:error] [pid 979474:tid 979651] [client 34.162.161.15:55588] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.sammorell.com"] [uri "/index.php"] [unique_id "alQujnTrIlbXpLXvkNcSpgAAr1o"], referer: http://www.sammorell.com/old/ [Sun Jul 12 18:17:18.370165 2026] [security2:error] [pid 967714:tid 967738] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/unity/.env"] [unique_id "alQujl_56DeKknhy7sMgEwABNgw"] [Sun Jul 12 18:17:18.402894 2026] [security2:error] [pid 967714:tid 967878] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQujl_56DeKknhy7sMgDwAAASE"] [Sun Jul 12 18:17:18.470584 2026] [authz_core:error] [pid 979474:tid 979731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:18.471126 2026] [authz_core:error] [pid 979474:tid 979731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:18.490637 2026] [security2:error] [pid 960377:tid 960560] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQujRMANaV5i2_BLQom_QAANEE"] [Sun Jul 12 18:17:18.499637 2026] [security2:error] [pid 979474:tid 979659] [client 103.168.66.51:53945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/production.php"] [unique_id "alQujnTrIlbXpLXvkNcSsQAAALc"] [Sun Jul 12 18:17:18.510612 2026] [security2:error] [pid 967714:tid 967881] [client 34.162.161.15:42548] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQujl_56DeKknhy7sMgFAABJAc"], referer: https://www.sammorell.com/old/ [Sun Jul 12 18:17:18.653114 2026] [security2:error] [pid 960377:tid 960438] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/joomla/.env"] [unique_id "alQujhMANaV5i2_BLQonCQAAXjs"] [Sun Jul 12 18:17:18.710095 2026] [security2:error] [pid 960377:tid 960573] [client 99.199.132.240:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQujhMANaV5i2_BLQonBwAAAEE"] [Sun Jul 12 18:17:18.760659 2026] [security2:error] [pid 967714:tid 967927] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujl_56DeKknhy7sMgGgAAAVI"] [Sun Jul 12 18:17:18.788860 2026] [security2:error] [pid 979474:tid 979681] [client 99.199.132.240:50809] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQujnTrIlbXpLXvkNcSqgAAzD4"] [Sun Jul 12 18:17:18.813864 2026] [security2:error] [pid 967714:tid 967755] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/main/.env"] [unique_id "alQujl_56DeKknhy7sMgIgABaR0"] [Sun Jul 12 18:17:18.816273 2026] [security2:error] [pid 960377:tid 960468] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/js-plugin/.env"] [unique_id "alQujhMANaV5i2_BLQonCwAAaVk"] [Sun Jul 12 18:17:18.834323 2026] [security2:error] [pid 979474:tid 979681] [client 99.199.132.240:50809] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQujnTrIlbXpLXvkNcSqQAAzF4"] [Sun Jul 12 18:17:18.879602 2026] [security2:error] [pid 960377:tid 960547] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQujhMANaV5i2_BLQonCgAAACc"] [Sun Jul 12 18:17:18.899079 2026] [security2:error] [pid 967714:tid 967938] [client 94.187.171.125:49364] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQujl_56DeKknhy7sMgIwAAAV0"] [Sun Jul 12 18:17:18.899323 2026] [security2:error] [pid 967714:tid 967938] [client 94.187.171.125:49364] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQujl_56DeKknhy7sMgIwAAAV0"] [Sun Jul 12 18:17:19.090387 2026] [security2:error] [pid 979474:tid 979636] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSgAAAAKA"] [Sun Jul 12 18:17:19.094274 2026] [security2:error] [pid 979474:tid 979633] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSfAAAAJ0"] [Sun Jul 12 18:17:19.168455 2026] [security2:error] [pid 967714:tid 967916] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQujl_56DeKknhy7sMgJgAAAUc"] [Sun Jul 12 18:17:19.191492 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgKwAAAUA"] [Sun Jul 12 18:17:19.201727 2026] [security2:error] [pid 979474:tid 979714] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSgQAAAO0"] [Sun Jul 12 18:17:19.242178 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:19.243509 2026] [authz_core:error] [pid 960377:tid 960558] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:19.247579 2026] [security2:error] [pid 979474:tid 979649] [client 103.168.66.51:54876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/www/.env"] [unique_id "alQuj3TrIlbXpLXvkNcSugAAAK0"] [Sun Jul 12 18:17:19.323568 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQujHTrIlbXpLXvkNcSggAAAJo"] [Sun Jul 12 18:17:19.374552 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/marketing/backend/info.php"] [unique_id "alQuj1_56DeKknhy7sMgOQABbU4"] [Sun Jul 12 18:17:19.443224 2026] [security2:error] [pid 979474:tid 979725] [client 103.168.66.51:54876] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/current/.env"] [unique_id "alQuj3TrIlbXpLXvkNcSvQAAAPg"] [Sun Jul 12 18:17:19.464858 2026] [security2:error] [pid 967714:tid 967956] [client 125.167.21.72:62324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuj1_56DeKknhy7sMgOwAAAW8"] [Sun Jul 12 18:17:19.465092 2026] [security2:error] [pid 967714:tid 967956] [client 125.167.21.72:62324] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuj1_56DeKknhy7sMgOwAAAW8"] [Sun Jul 12 18:17:19.479408 2026] [security2:error] [pid 960377:tid 960622] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQujxMANaV5i2_BLQonEwAAAHI"] [Sun Jul 12 18:17:19.584955 2026] [security2:error] [pid 967714:tid 967929] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgOAAAAVQ"] [Sun Jul 12 18:17:19.591805 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/marketing/infophp.php"] [unique_id "alQuj1_56DeKknhy7sMgPQABgFM"] [Sun Jul 12 18:17:19.747156 2026] [security2:error] [pid 960377:tid 960606] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQujhMANaV5i2_BLQonDQAAYl8"] [Sun Jul 12 18:17:19.748789 2026] [security2:error] [pid 960377:tid 960586] [client 103.168.66.51:56587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/inc/config.php"] [unique_id "alQujxMANaV5i2_BLQonFQAAAE4"] [Sun Jul 12 18:17:19.913776 2026] [security2:error] [pid 967714:tid 967975] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9wa3o4LTk3NTgvb3AtMzUzMTMvcGt6OA=="] [unique_id "alQuj1_56DeKknhy7sMgUwAAAYI"] [Sun Jul 12 18:17:19.987559 2026] [security2:error] [pid 967714:tid 967903] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgTAAAATo"] [Sun Jul 12 18:17:20.021431 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:20.021953 2026] [authz_core:error] [pid 960377:tid 960561] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:20.049366 2026] [security2:error] [pid 967714:tid 967922] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgRgAAAU0"] [Sun Jul 12 18:17:20.205605 2026] [security2:error] [pid 979474:tid 979734] [client 168.100.149.166:27090] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15925/bargainor/2308_milksopism.jsp"] [unique_id "alQukHTrIlbXpLXvkNcSxQAAAQE"] [Sun Jul 12 18:17:20.236612 2026] [security2:error] [pid 967714:tid 967946] [client 31.173.80.48:13921] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQukF_56DeKknhy7sMgVgAAAWU"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:17:20.252616 2026] [security2:error] [pid 967714:tid 967920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgMgAAAUs"] [Sun Jul 12 18:17:20.380131 2026] [security2:error] [pid 967714:tid 967933] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQukF_56DeKknhy7sMgWAAAAVg"] [Sun Jul 12 18:17:20.424933 2026] [security2:error] [pid 967714:tid 967770] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/monerod/.env"] [unique_id "alQukF_56DeKknhy7sMgZAABHSw"] [Sun Jul 12 18:17:20.460834 2026] [security2:error] [pid 967714:tid 967921] [client 203.184.60.129:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgTwAAAUw"] [Sun Jul 12 18:17:20.470434 2026] [security2:error] [pid 967714:tid 967800] [remote 62.171.167.118:58202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQucV_56DeKknhy7sMgNQABVko"] [Sun Jul 12 18:17:20.503368 2026] [security2:error] [pid 967714:tid 967756] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/new/.env"] [unique_id "alQukF_56DeKknhy7sMgZwABJh4"] [Sun Jul 12 18:17:20.521335 2026] [security2:error] [pid 967714:tid 967919] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukF_56DeKknhy7sMgXAAAAUo"] [Sun Jul 12 18:17:20.571937 2026] [security2:error] [pid 960377:tid 960541] [client 103.168.66.51:57031] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/local_settings.py.bak"] [unique_id "alQukBMANaV5i2_BLQonJwAAACE"] [Sun Jul 12 18:17:20.704740 2026] [security2:error] [pid 979474:tid 979732] [client 24.203.79.110:49613] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQukHTrIlbXpLXvkNcSygAAAP8"] [Sun Jul 12 18:17:20.704998 2026] [security2:error] [pid 979474:tid 979732] [client 24.203.79.110:49613] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQukHTrIlbXpLXvkNcSygAAAP8"] [Sun Jul 12 18:17:20.767166 2026] [security2:error] [pid 960377:tid 960595] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQujxMANaV5i2_BLQonGwAAV0Y"] [Sun Jul 12 18:17:20.781250 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/newsite/.env"] [unique_id "alQukF_56DeKknhy7sMgdAABFmw"] [Sun Jul 12 18:17:20.817350 2026] [authz_core:error] [pid 979474:tid 979683] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:20.818132 2026] [authz_core:error] [pid 979474:tid 979683] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:20.883717 2026] [security2:error] [pid 979474:tid 979737] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQukHTrIlbXpLXvkNcSyAAAAQQ"] [Sun Jul 12 18:17:20.884768 2026] [security2:error] [pid 967714:tid 967787] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/node/crm/info.php"] [unique_id "alQukF_56DeKknhy7sMgeAABFj0"] [Sun Jul 12 18:17:20.954482 2026] [security2:error] [pid 967714:tid 967788] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/api/info.php"] [unique_id "alQukF_56DeKknhy7sMgegABQD4"] [Sun Jul 12 18:17:21.004248 2026] [security2:error] [pid 967714:tid 967939] [client 64.227.21.231:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQuj1_56DeKknhy7sMgRwAAAV4"], referer: https://mackinstyle.com/ [Sun Jul 12 18:17:21.049973 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukF_56DeKknhy7sMgcgAAATc"] [Sun Jul 12 18:17:21.170692 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/infophp.php"] [unique_id "alQukV_56DeKknhy7sMgfQABdjQ"] [Sun Jul 12 18:17:21.219755 2026] [security2:error] [pid 967714:tid 967943] [client 102.211.146.125:33452] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQukF_56DeKknhy7sMgeQAAAWI"] [Sun Jul 12 18:17:21.221008 2026] [security2:error] [pid 960377:tid 960633] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQukBMANaV5i2_BLQonJgAAAH0"] [Sun Jul 12 18:17:21.221069 2026] [security2:error] [pid 960377:tid 960633] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQukBMANaV5i2_BLQonJgAAAH0"] [Sun Jul 12 18:17:21.223242 2026] [security2:error] [pid 967714:tid 967866] [client 65.21.113.206:40016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9wa3o4LTk3NTgvb3AtMzUzMTMvcGt6OA=="] [unique_id "alQukF_56DeKknhy7sMgYAAAARU"] [Sun Jul 12 18:17:21.227262 2026] [security2:error] [pid 967714:tid 967773] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/api_keys.sql"] [unique_id "alQukV_56DeKknhy7sMgfgABcy8"] [Sun Jul 12 18:17:21.230988 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/infos.php"] [unique_id "alQukV_56DeKknhy7sMgfwABdWo"] [Sun Jul 12 18:17:21.256098 2026] [security2:error] [pid 979474:tid 979688] [client 167.148.117.106:62148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.117.148.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQukXTrIlbXpLXvkNcS1gAAANM"], referer: https://www.cidclan.net/ [Sun Jul 12 18:17:21.349388 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/laravel/info.php"] [unique_id "alQukV_56DeKknhy7sMggQABInY"] [Sun Jul 12 18:17:21.401607 2026] [security2:error] [pid 967714:tid 967752] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/code/web/.env"] [unique_id "alQukV_56DeKknhy7sMgggABiRo"] [Sun Jul 12 18:17:21.432069 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/phpversion.php"] [unique_id "alQukV_56DeKknhy7sMghAABD1g"] [Sun Jul 12 18:17:21.441045 2026] [security2:error] [pid 960377:tid 960600] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukBMANaV5i2_BLQonIgAAAFw"] [Sun Jul 12 18:17:21.528276 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/pinfo.php"] [unique_id "alQukV_56DeKknhy7sMgjAABggA"] [Sun Jul 12 18:17:21.665386 2026] [security2:error] [pid 967714:tid 967824] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/temp.php"] [unique_id "alQukV_56DeKknhy7sMgkQABIWI"] [Sun Jul 12 18:17:21.710077 2026] [authz_core:error] [pid 967714:tid 967899] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:21.710559 2026] [authz_core:error] [pid 967714:tid 967899] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:21.857342 2026] [security2:error] [pid 967714:tid 967903] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukV_56DeKknhy7sMgjwAAATo"] [Sun Jul 12 18:17:21.881068 2026] [security2:error] [pid 960377:tid 960530] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQukBMANaV5i2_BLQonKgAAFgY"] [Sun Jul 12 18:17:21.937821 2026] [security2:error] [pid 967714:tid 967783] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/nodeapi/time.php"] [unique_id "alQukV_56DeKknhy7sMgnAABWDk"] [Sun Jul 12 18:17:22.035392 2026] [security2:error] [pid 967714:tid 967845] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/cakephp/.env"] [unique_id "alQukl_56DeKknhy7sMgoAABTHc"] [Sun Jul 12 18:17:22.053086 2026] [security2:error] [pid 960377:tid 960608] [client 45.86.185.159:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQukRMANaV5i2_BLQonNAAAAGQ"] [Sun Jul 12 18:17:22.062944 2026] [security2:error] [pid 979474:tid 979733] [client 103.168.66.51:54876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/adminer.php"] [unique_id "alQuknTrIlbXpLXvkNcS4QAAAQA"] [Sun Jul 12 18:17:22.086726 2026] [security2:error] [pid 979474:tid 979722] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukHTrIlbXpLXvkNcSxgAAAPU"] [Sun Jul 12 18:17:22.159318 2026] [security2:error] [pid 967714:tid 967946] [client 31.173.80.48:13921] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQukF_56DeKknhy7sMgVgAAAWU"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:17:22.159458 2026] [security2:error] [pid 967714:tid 967946] [client 31.173.80.48:13921] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQukF_56DeKknhy7sMgVgAAAWU"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:17:22.203730 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQukl_56DeKknhy7sMgoQAAAVI"] [Sun Jul 12 18:17:22.208898 2026] [security2:error] [pid 967714:tid 967760] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/login.php.swp"] [unique_id "alQukl_56DeKknhy7sMgpgABLCI"] [Sun Jul 12 18:17:22.210507 2026] [security2:error] [pid 967714:tid 967744] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/old_phpinfo.php"] [unique_id "alQukl_56DeKknhy7sMgpwABTxI"] [Sun Jul 12 18:17:22.222936 2026] [security2:error] [pid 967714:tid 967893] [client 103.168.66.51:62605] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/dev/.env"] [unique_id "alQukl_56DeKknhy7sMgqQAAATA"] [Sun Jul 12 18:17:22.342846 2026] [security2:error] [pid 967714:tid 967732] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/oldsanta/.env"] [unique_id "alQukl_56DeKknhy7sMgrAABZgY"] [Sun Jul 12 18:17:22.382822 2026] [security2:error] [pid 960377:tid 960510] [client 103.168.66.51:54163] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/backup.sql"] [unique_id "alQukhMANaV5i2_BLQonRQAAAAI"] [Sun Jul 12 18:17:22.470340 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/php_info.php"] [unique_id "alQudF_56DeKknhy7sMgsQABVhQ"] [Sun Jul 12 18:17:22.471850 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/phpinfo.php"] [unique_id "alQudV_56DeKknhy7sMgsgABVhQ"] [Sun Jul 12 18:17:22.473914 2026] [security2:error] [pid 979474:tid 979615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukXTrIlbXpLXvkNcS3AAAAIs"] [Sun Jul 12 18:17:22.519904 2026] [authz_core:error] [pid 979474:tid 979641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:22.520445 2026] [authz_core:error] [pid 979474:tid 979641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:22.604901 2026] [security2:error] [pid 967714:tid 967970] [client 103.168.66.51:62605] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/cache.php"] [unique_id "alQukl_56DeKknhy7sMguQAAAX0"] [Sun Jul 12 18:17:22.612168 2026] [security2:error] [pid 967714:tid 967798] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/packages/app/.env"] [unique_id "alQukl_56DeKknhy7sMgugABbEg"] [Sun Jul 12 18:17:22.619332 2026] [security2:error] [pid 967714:tid 967897] [client 216.244.66.249:57018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.ophtek.com"] [uri "/wp-content/uploads/2015/03/office-2016.jpg"] [unique_id "alQukl_56DeKknhy7sMguwAAATQ"] [Sun Jul 12 18:17:22.619578 2026] [security2:error] [pid 967714:tid 967897] [client 216.244.66.249:57018] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.ophtek.com"] [uri "/wp-content/uploads/2015/03/office-2016.jpg"] [unique_id "alQukl_56DeKknhy7sMguwAAATQ"] [Sun Jul 12 18:17:22.620909 2026] [security2:error] [pid 967714:tid 967939] [client 103.168.66.51:62244] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/db_dump.sql"] [unique_id "alQukl_56DeKknhy7sMgvAAAAV4"] [Sun Jul 12 18:17:22.636318 2026] [security2:error] [pid 960377:tid 960516] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukhMANaV5i2_BLQonRgAAAAg"] [Sun Jul 12 18:17:22.683728 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/packages/plugin-analytics/src/fixtures/analytics-ga-key/.env"] [unique_id "alQukl_56DeKknhy7sMgvgABRhE"] [Sun Jul 12 18:17:22.710045 2026] [security2:error] [pid 967714:tid 967898] [client 114.119.159.148:39721] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sarahrweidman.com"] [uri "/category/travel/"] [unique_id "alQukl_56DeKknhy7sMgvwAAATU"], referer: https://sarahrweidman.com/tag/travel?ak_action=reject_mobile [Sun Jul 12 18:17:22.771094 2026] [security2:error] [pid 960377:tid 960623] [client 103.168.66.51:54163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/i.php"] [unique_id "alQukhMANaV5i2_BLQonTgAAAHM"] [Sun Jul 12 18:17:22.785823 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/packages/web/.env"] [unique_id "alQukl_56DeKknhy7sMgwAABN2E"] [Sun Jul 12 18:17:22.895956 2026] [security2:error] [pid 979474:tid 979690] [client 168.100.149.70:17538] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/15990/bargainor/2308_capnoides.jsp"] [unique_id "alQuknTrIlbXpLXvkNcS8QAAANU"] [Sun Jul 12 18:17:22.905118 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/packed/.env"] [unique_id "alQukl_56DeKknhy7sMgygABUyk"] [Sun Jul 12 18:17:22.954837 2026] [security2:error] [pid 960377:tid 960479] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQukhMANaV5i2_BLQonPgAAK2Q"] [Sun Jul 12 18:17:23.036067 2026] [security2:error] [pid 960377:tid 960573] [client 103.168.66.51:54632] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/env.json"] [unique_id "alQukxMANaV5i2_BLQonUAAAAEE"] [Sun Jul 12 18:17:23.072154 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/patchwork/.env"] [unique_id "alQuk1_56DeKknhy7sMgywABh3Q"] [Sun Jul 12 18:17:23.073487 2026] [security2:error] [pid 967714:tid 967963] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukl_56DeKknhy7sMgxwAAAXY"] [Sun Jul 12 18:17:23.191484 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuknTrIlbXpLXvkNcS4wAAAPQ"] [Sun Jul 12 18:17:23.352010 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:23.352714 2026] [authz_core:error] [pid 967714:tid 967855] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:23.435201 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/pfbe/.env"] [unique_id "alQuk1_56DeKknhy7sMg1AABe3w"] [Sun Jul 12 18:17:23.459585 2026] [security2:error] [pid 979474:tid 979652] [client 103.168.66.51:54366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/autoload.php"] [unique_id "alQuk3TrIlbXpLXvkNcS9QAAALA"] [Sun Jul 12 18:17:23.528846 2026] [security2:error] [pid 967714:tid 967858] [client 65.21.113.206:39398] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YW9yLTIyNDY5LW9yNmZlLTIzNjQtcjZm.cgi"] [unique_id "alQuk1_56DeKknhy7sMg1gAAAQ0"] [Sun Jul 12 18:17:23.587295 2026] [security2:error] [pid 960377:tid 960531] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQukxMANaV5i2_BLQonWAAAABc"] [Sun Jul 12 18:17:23.589321 2026] [security2:error] [pid 960377:tid 960549] [client 103.168.66.51:57031] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/requirements.txt"] [unique_id "alQukxMANaV5i2_BLQonXwAAACk"] [Sun Jul 12 18:17:23.621917 2026] [security2:error] [pid 967714:tid 967892] [client 69.160.96.198:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQuk1_56DeKknhy7sMg0AAAAS8"] [Sun Jul 12 18:17:23.666734 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/php-info/info.php"] [unique_id "alQuk1_56DeKknhy7sMg2AABCxc"] [Sun Jul 12 18:17:23.674249 2026] [security2:error] [pid 979474:tid 979644] [client 113.182.181.178:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuk3TrIlbXpLXvkNcS9AAAAKg"] [Sun Jul 12 18:17:23.765886 2026] [security2:error] [pid 960377:tid 960576] [client 116.179.37.246:64927] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 246.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQukxMANaV5i2_BLQonYgAAAEQ"], referer: https://idreamofjeannemarie.com/tag/ten-ping/page/6/ [Sun Jul 12 18:17:23.804413 2026] [security2:error] [pid 967714:tid 967920] [client 103.168.66.51:54649] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/test/.env"] [unique_id "alQuk1_56DeKknhy7sMg3QAAAUs"] [Sun Jul 12 18:17:23.846431 2026] [security2:error] [pid 979474:tid 979725] [client 103.168.66.51:50100] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/vendor/.env"] [unique_id "alQuk3TrIlbXpLXvkNcTAAAAAPg"] [Sun Jul 12 18:17:23.920403 2026] [security2:error] [pid 979474:tid 979624] [client 103.168.66.51:53618] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php~"] [unique_id "alQuk3TrIlbXpLXvkNcTAgAAAJQ"] [Sun Jul 12 18:17:23.937138 2026] [security2:error] [pid 960377:tid 960593] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQukxMANaV5i2_BLQonUQAAVSs"] [Sun Jul 12 18:17:23.937642 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuk3TrIlbXpLXvkNcS_QAAALw"] [Sun Jul 12 18:17:23.960566 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/php-info/phpinfo.php"] [unique_id "alQuk1_56DeKknhy7sMg4QABXEY"] [Sun Jul 12 18:17:23.991529 2026] [security2:error] [pid 979474:tid 979631] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuk3TrIlbXpLXvkNcS-wAAAJs"] [Sun Jul 12 18:17:24.160273 2026] [authz_core:error] [pid 979474:tid 979732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:24.160968 2026] [authz_core:error] [pid 979474:tid 979732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:24.191026 2026] [security2:error] [pid 960377:tid 960574] [client 103.168.66.51:55804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/common/.env"] [unique_id "alQulBMANaV5i2_BLQonbAAAAEI"] [Sun Jul 12 18:17:24.256077 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/php/phpinfo.php"] [unique_id "alQulF_56DeKknhy7sMg5QABak0"] [Sun Jul 12 18:17:24.318962 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpconf.php"] [unique_id "alQulF_56DeKknhy7sMg5wABDjc"] [Sun Jul 12 18:17:24.453234 2026] [security2:error] [pid 967714:tid 967921] [client 103.168.66.51:54649] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/postgres.sql"] [unique_id "alQulF_56DeKknhy7sMg6wAAAUw"] [Sun Jul 12 18:17:24.462941 2026] [security2:error] [pid 967714:tid 967902] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulF_56DeKknhy7sMg5AAAATk"] [Sun Jul 12 18:17:24.529327 2026] [security2:error] [pid 967714:tid 967829] [remote 216.38.28.47:60216] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 47.28.38.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "michigansparc.info"] [uri "/wp-login.php"] [unique_id "alQulF_56DeKknhy7sMg7AABcGc"] [Sun Jul 12 18:17:24.576687 2026] [security2:error] [pid 960377:tid 960527] [client 155.2.212.3:61801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.212.2.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQulBMANaV5i2_BLQonbwAAABM"] [Sun Jul 12 18:17:24.619098 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpcustom_info/phpinfo.php"] [unique_id "alQulF_56DeKknhy7sMg7QABgwg"] [Sun Jul 12 18:17:24.636553 2026] [security2:error] [pid 967714:tid 967754] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sql/backup.sql"] [unique_id "alQulF_56DeKknhy7sMg7wABJRw"] [Sun Jul 12 18:17:24.673494 2026] [security2:error] [pid 979474:tid 979710] [client 103.168.66.51:50100] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/global.php"] [unique_id "alQulHTrIlbXpLXvkNcTCgAAAOk"] [Sun Jul 12 18:17:24.687463 2026] [security2:error] [pid 967714:tid 967830] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo.php/"] [unique_id "alQulF_56DeKknhy7sMg8wABT2g"] [Sun Jul 12 18:17:24.759090 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQulBMANaV5i2_BLQonZwAAACw"] [Sun Jul 12 18:17:24.759146 2026] [security2:error] [pid 960377:tid 960552] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQulBMANaV5i2_BLQonZwAAACw"] [Sun Jul 12 18:17:24.761085 2026] [security2:error] [pid 979474:tid 979725] [client 65.21.113.206:57232] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YW9yLTIyNDY5LW9yNmZlLTIzNjQtcjZm.cgi"] [unique_id "alQulHTrIlbXpLXvkNcTBQAAAPg"] [Sun Jul 12 18:17:24.778976 2026] [security2:error] [pid 960377:tid 960566] [client 103.168.66.51:55804] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/dump.sql.gz"] [unique_id "alQulBMANaV5i2_BLQoncAAAADo"] [Sun Jul 12 18:17:24.784067 2026] [security2:error] [pid 967714:tid 967786] [remote 103.133.216.219:56112] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.216.133.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thatshowiroll.site"] [uri "/wp-login.php"] [unique_id "alQulF_56DeKknhy7sMg-gABJzw"] [Sun Jul 12 18:17:24.792045 2026] [security2:error] [pid 979474:tid 979619] [client 103.168.66.51:53769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/config/database.php"] [unique_id "alQulHTrIlbXpLXvkNcTDAAAAI8"] [Sun Jul 12 18:17:24.805420 2026] [security2:error] [pid 967714:tid 967735] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/roles/.env"] [unique_id "alQulF_56DeKknhy7sMg_AABeQk"] [Sun Jul 12 18:17:24.809516 2026] [security2:error] [pid 967714:tid 967869] [client 65.21.113.253:45022] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQulF_56DeKknhy7sMg_QAAARg"] [Sun Jul 12 18:17:24.879182 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo.php4"] [unique_id "alQulF_56DeKknhy7sMg_wABbn0"] [Sun Jul 12 18:17:24.910752 2026] [security2:error] [pid 960377:tid 960509] [client 168.100.149.219:39950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16055/bargainor/2308_deft.jsp"] [unique_id "alQulBMANaV5i2_BLQondAAAAAE"] [Sun Jul 12 18:17:24.937441 2026] [authz_core:error] [pid 967714:tid 967863] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:24.937994 2026] [authz_core:error] [pid 967714:tid 967863] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:24.974603 2026] [security2:error] [pid 967714:tid 967766] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/v9/.env"] [unique_id "alQulF_56DeKknhy7sMhAQABRyg"] [Sun Jul 12 18:17:24.995174 2026] [security2:error] [pid 960377:tid 960567] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQulBMANaV5i2_BLQonagAAO2o"] [Sun Jul 12 18:17:25.027845 2026] [security2:error] [pid 967714:tid 967763] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo.php5"] [unique_id "alQulV_56DeKknhy7sMhAgABPCU"] [Sun Jul 12 18:17:25.129231 2026] [security2:error] [pid 967714:tid 967894] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukl_56DeKknhy7sMgtgAAATE"] [Sun Jul 12 18:17:25.234247 2026] [security2:error] [pid 979474:tid 979613] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuknTrIlbXpLXvkNcS8AAAAIk"] [Sun Jul 12 18:17:25.250909 2026] [security2:error] [pid 960377:tid 960594] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukhMANaV5i2_BLQonSgAAAEM"] [Sun Jul 12 18:17:25.328303 2026] [security2:error] [pid 960377:tid 960626] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQulRMANaV5i2_BLQonfQAAAHY"] [Sun Jul 12 18:17:25.333006 2026] [security2:error] [pid 967714:tid 967890] [client 65.21.113.253:49838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQulV_56DeKknhy7sMhCwAAAS0"] [Sun Jul 12 18:17:25.342339 2026] [security2:error] [pid 960377:tid 960619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQukxMANaV5i2_BLQonVAAAAG8"] [Sun Jul 12 18:17:25.427517 2026] [security2:error] [pid 967714:tid 967900] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulV_56DeKknhy7sMhBwAAATc"] [Sun Jul 12 18:17:25.506913 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQulV_56DeKknhy7sMhDgAAAW0"] [Sun Jul 12 18:17:25.524075 2026] [security2:error] [pid 967714:tid 967901] [client 103.168.66.51:54649] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.bkp"] [unique_id "alQulV_56DeKknhy7sMhGwAAATg"] [Sun Jul 12 18:17:25.634614 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo/info.php"] [unique_id "alQulV_56DeKknhy7sMhIAABZCM"] [Sun Jul 12 18:17:25.765620 2026] [authz_core:error] [pid 979474:tid 979654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:25.766305 2026] [authz_core:error] [pid 979474:tid 979654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:25.867262 2026] [security2:error] [pid 979474:tid 979673] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulXTrIlbXpLXvkNcTGwAAAMU"] [Sun Jul 12 18:17:26.019658 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo/phpinfo.php"] [unique_id "alQull_56DeKknhy7sMhJwABSys"] [Sun Jul 12 18:17:26.078433 2026] [security2:error] [pid 960377:tid 960609] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQulRMANaV5i2_BLQoneAAAZT8"] [Sun Jul 12 18:17:26.134414 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfo1.php"] [unique_id "alQull_56DeKknhy7sMhKgABJGA"] [Sun Jul 12 18:17:26.236861 2026] [security2:error] [pid 960377:tid 960466] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/jsrelay/.env"] [unique_id "alQulhMANaV5i2_BLQonhgAAY1c"] [Sun Jul 12 18:17:26.361569 2026] [security2:error] [pid 960377:tid 960587] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulhMANaV5i2_BLQonhAAAAE8"] [Sun Jul 12 18:17:26.391654 2026] [security2:error] [pid 979474:tid 979588] [remote 168.138.197.172:57938] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.197.138.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brycehallock.com"] [uri "/wp-login.php"] [unique_id "alQulnTrIlbXpLXvkNcTKgAAzWw"] [Sun Jul 12 18:17:26.399903 2026] [security2:error] [pid 960377:tid 960491] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/jupyter/.env"] [unique_id "alQulhMANaV5i2_BLQoniQAAAHA"] [Sun Jul 12 18:17:26.444542 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpinfos.php"] [unique_id "alQull_56DeKknhy7sMhLwABPQE"] [Sun Jul 12 18:17:26.558170 2026] [access_compat:error] [pid 967714:tid 967782] [remote 185.177.72.12:57322] AH01797: client denied by server configuration: proxy:https://127.0.0.1:8443/server-status [Sun Jul 12 18:17:26.558939 2026] [security2:error] [pid 960377:tid 960383] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/khanlinks/.env"] [unique_id "alQulhMANaV5i2_BLQoniwAAMwU"] [Sun Jul 12 18:17:26.630450 2026] [authz_core:error] [pid 967714:tid 967921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:26.631141 2026] [authz_core:error] [pid 967714:tid 967921] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:26.716993 2026] [security2:error] [pid 960377:tid 960443] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/kibana/.env"] [unique_id "alQulhMANaV5i2_BLQonjQAADEA"] [Sun Jul 12 18:17:26.721801 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpmyadmin/index.php"] [unique_id "alQull_56DeKknhy7sMhOAABaQU"] [Sun Jul 12 18:17:26.847380 2026] [security2:error] [pid 967714:tid 967964] [client 212.117.141.146:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQulV_56DeKknhy7sMhIgAAAXc"], referer: https://mackinstyle.com/ [Sun Jul 12 18:17:26.879091 2026] [security2:error] [pid 960377:tid 960458] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/kodenames-server/.env"] [unique_id "alQulhMANaV5i2_BLQonjwAAXk8"] [Sun Jul 12 18:17:26.892513 2026] [security2:error] [pid 979474:tid 979623] [client 168.100.149.240:27582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16120/bargainor/2308_did.jsp"] [unique_id "alQulnTrIlbXpLXvkNcTLgAAAJM"] [Sun Jul 12 18:17:27.038055 2026] [security2:error] [pid 960377:tid 960446] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/kolab-syncroton/.env"] [unique_id "alQulxMANaV5i2_BLQonkAAALUM"] [Sun Jul 12 18:17:27.073555 2026] [security2:error] [pid 960377:tid 960551] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulhMANaV5i2_BLQonjgAAACs"] [Sun Jul 12 18:17:27.075965 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQulV_56DeKknhy7sMhFAAAASI"] [Sun Jul 12 18:17:27.116009 2026] [security2:error] [pid 960377:tid 960539] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQulRMANaV5i2_BLQonfAAAAB8"] [Sun Jul 12 18:17:27.197851 2026] [security2:error] [pid 960377:tid 960378] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Kubernetes/.env"] [unique_id "alQulxMANaV5i2_BLQonlwAAZwA"] [Sun Jul 12 18:17:27.210310 2026] [security2:error] [pid 967714:tid 967813] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/phpsysinfo/info.php"] [unique_id "alQul1_56DeKknhy7sMhSwABRlc"] [Sun Jul 12 18:17:27.274734 2026] [security2:error] [pid 960377:tid 960545] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config.php"] [unique_id "alQulxMANaV5i2_BLQonmQAAACU"] [Sun Jul 12 18:17:27.359388 2026] [security2:error] [pid 960377:tid 960494] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/kubernetes/.env"] [unique_id "alQulxMANaV5i2_BLQonnQAASnM"] [Sun Jul 12 18:17:27.471689 2026] [authz_core:error] [pid 979474:tid 979657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:27.472356 2026] [authz_core:error] [pid 979474:tid 979657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:27.676752 2026] [security2:error] [pid 960377:tid 960561] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQulxMANaV5i2_BLQonnwAAADU"] [Sun Jul 12 18:17:27.724589 2026] [security2:error] [pid 967714:tid 967809] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/playground/.env"] [unique_id "alQul1_56DeKknhy7sMhUgABVVM"] [Sun Jul 12 18:17:28.128202 2026] [security2:error] [pid 967714:tid 967895] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQul1_56DeKknhy7sMhXgAAATI"] [Sun Jul 12 18:17:28.203904 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/api/info.php"] [unique_id "alQumF_56DeKknhy7sMhbQABDEs"] [Sun Jul 12 18:17:28.219249 2026] [security2:error] [pid 967714:tid 967920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQul1_56DeKknhy7sMhZAAAAUs"] [Sun Jul 12 18:17:28.237392 2026] [security2:error] [pid 979474:tid 979732] [client 103.168.66.51:54703] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/secure/.env"] [unique_id "alQumHTrIlbXpLXvkNcTQAAAAP8"] [Sun Jul 12 18:17:28.243426 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQul3TrIlbXpLXvkNcTMwAAAKo"] [Sun Jul 12 18:17:28.346511 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:28.347133 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:28.347592 2026] [security2:error] [pid 967714:tid 967865] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQull_56DeKknhy7sMhNQAAARQ"] [Sun Jul 12 18:17:28.382380 2026] [security2:error] [pid 967714:tid 967834] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/develop/phpinfo.php"] [unique_id "alQumF_56DeKknhy7sMhgAABYWw"] [Sun Jul 12 18:17:28.641353 2026] [security2:error] [pid 960377:tid 960576] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQulxMANaV5i2_BLQonoAAARCo"] [Sun Jul 12 18:17:28.648751 2026] [security2:error] [pid 979474:tid 979626] [client 103.168.66.51:56712] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/openapi.json"] [unique_id "alQumHTrIlbXpLXvkNcTRgAAAJY"] [Sun Jul 12 18:17:28.684778 2026] [security2:error] [pid 967714:tid 967966] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQumF_56DeKknhy7sMhfAAAAXk"] [Sun Jul 12 18:17:28.751553 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/php-info.php"] [unique_id "alQumF_56DeKknhy7sMhhwABSG4"] [Sun Jul 12 18:17:28.799989 2026] [security2:error] [pid 960377:tid 960495] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lab/.env"] [unique_id "alQumBMANaV5i2_BLQontAAAfXQ"] [Sun Jul 12 18:17:28.831142 2026] [security2:error] [pid 967714:tid 967889] [client 168.100.149.197:39172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16185/bargainor/2308_delphian.jsp"] [unique_id "alQumF_56DeKknhy7sMhigAAASw"] [Sun Jul 12 18:17:28.959938 2026] [security2:error] [pid 960377:tid 960388] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lambda/.env"] [unique_id "alQumBMANaV5i2_BLQontQAAVgo"] [Sun Jul 12 18:17:29.040719 2026] [security2:error] [pid 960377:tid 960577] [client 65.21.113.206:53194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTE4MjAtdHY5.cgi"] [unique_id "alQumRMANaV5i2_BLQonuQAAAEU"] [Sun Jul 12 18:17:29.131068 2026] [security2:error] [pid 960377:tid 960453] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/latest/.env"] [unique_id "alQumRMANaV5i2_BLQonvgAAdko"] [Sun Jul 12 18:17:29.180287 2026] [security2:error] [pid 979474:tid 979728] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQumHTrIlbXpLXvkNcTSgAAAPs"] [Sun Jul 12 18:17:29.182683 2026] [authz_core:error] [pid 979474:tid 979736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:29.183260 2026] [authz_core:error] [pid 979474:tid 979736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:29.225934 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/temp.php"] [unique_id "alQumV_56DeKknhy7sMhkQABgW8"] [Sun Jul 12 18:17:29.290659 2026] [security2:error] [pid 960377:tid 960408] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/layout/.env"] [unique_id "alQumRMANaV5i2_BLQonwAAAFB4"] [Sun Jul 12 18:17:29.400469 2026] [security2:error] [pid 967714:tid 967844] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/time.php"] [unique_id "alQumV_56DeKknhy7sMhmAABh3Y"] [Sun Jul 12 18:17:29.431560 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQumF_56DeKknhy7sMhcwAAAWU"] [Sun Jul 12 18:17:29.453012 2026] [security2:error] [pid 960377:tid 960500] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lcomernbootcamp/projbackend/.env"] [unique_id "alQumRMANaV5i2_BLQonxQAASHk"] [Sun Jul 12 18:17:29.523768 2026] [security2:error] [pid 979474:tid 979676] [client 94.187.171.125:49862] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQumXTrIlbXpLXvkNcTWgAAAMg"] [Sun Jul 12 18:17:29.524044 2026] [security2:error] [pid 979474:tid 979676] [client 94.187.171.125:49862] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQumXTrIlbXpLXvkNcTWgAAAMg"] [Sun Jul 12 18:17:29.524303 2026] [security2:error] [pid 960377:tid 960515] [client 50.87.253.215:45906] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2023/03/3cd39e52f11191eeb8accb41e9c91a23.png"] [unique_id "alQumRMANaV5i2_BLQonxgAAAAc"] [Sun Jul 12 18:17:29.553825 2026] [security2:error] [pid 967714:tid 967982] [client 103.168.66.51:49719] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/app/client/.env"] [unique_id "alQumV_56DeKknhy7sMhnQAAAYk"] [Sun Jul 12 18:17:29.613143 2026] [security2:error] [pid 960377:tid 960482] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/leafer-app/.env"] [unique_id "alQumRMANaV5i2_BLQonyAAAN2c"] [Sun Jul 12 18:17:29.662879 2026] [security2:error] [pid 960377:tid 960537] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQumRMANaV5i2_BLQonwwAAAB0"] [Sun Jul 12 18:17:29.785747 2026] [security2:error] [pid 960377:tid 960448] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ledger_sync/.env"] [unique_id "alQumRMANaV5i2_BLQonyQAAA0U"] [Sun Jul 12 18:17:29.811847 2026] [security2:error] [pid 967714:tid 967726] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/portal/xampp/phpinfo.php"] [unique_id "alQumV_56DeKknhy7sMhpAABDQA"] [Sun Jul 12 18:17:29.930816 2026] [security2:error] [pid 979474:tid 979648] [client 125.167.21.72:61718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQumXTrIlbXpLXvkNcTcAAAAKw"] [Sun Jul 12 18:17:29.931178 2026] [security2:error] [pid 979474:tid 979648] [client 125.167.21.72:61718] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQumXTrIlbXpLXvkNcTcAAAAKw"] [Sun Jul 12 18:17:29.964806 2026] [security2:error] [pid 967714:tid 967882] [client 103.168.66.51:49719] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/var/.env"] [unique_id "alQumV_56DeKknhy7sMhqwAAASU"] [Sun Jul 12 18:17:29.976429 2026] [security2:error] [pid 979474:tid 979614] [client 103.168.66.51:54703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 51.66.168.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.228.180"] [uri "/storage/configuration.php"] [unique_id "alQumXTrIlbXpLXvkNcTcQAAAIo"] [Sun Jul 12 18:17:30.075704 2026] [authz_core:error] [pid 967714:tid 967935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:30.076188 2026] [authz_core:error] [pid 967714:tid 967935] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:30.132266 2026] [security2:error] [pid 960377:tid 960566] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQumBMANaV5i2_BLQonrAAAADo"] [Sun Jul 12 18:17:30.170068 2026] [security2:error] [pid 967714:tid 967753] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/prod/current/info.php"] [unique_id "alQuml_56DeKknhy7sMhsgABChs"] [Sun Jul 12 18:17:30.213585 2026] [security2:error] [pid 979474:tid 979662] [client 168.100.149.115:44838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16250/bargainor/2308_anisodactyli.jsp"] [unique_id "alQumnTrIlbXpLXvkNcTewAAALo"] [Sun Jul 12 18:17:30.239329 2026] [security2:error] [pid 979474:tid 979656] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQumXTrIlbXpLXvkNcTXAAAALQ"] [Sun Jul 12 18:17:30.239392 2026] [security2:error] [pid 979474:tid 979656] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQumXTrIlbXpLXvkNcTXAAAALQ"] [Sun Jul 12 18:17:30.242111 2026] [security2:error] [pid 979474:tid 979733] [client 65.21.113.206:57246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTE4MjAtdHY5.cgi"] [unique_id "alQumXTrIlbXpLXvkNcTWwAAAQA"] [Sun Jul 12 18:17:30.273900 2026] [security2:error] [pid 960377:tid 960605] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQumRMANaV5i2_BLQonzQAAAGE"] [Sun Jul 12 18:17:30.371353 2026] [security2:error] [pid 960377:tid 960614] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQumhMANaV5i2_BLQon0wAAAGo"] [Sun Jul 12 18:17:30.518602 2026] [security2:error] [pid 967714:tid 967762] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/product/backup/phpinfo.php"] [unique_id "alQuml_56DeKknhy7sMhuQABCiQ"] [Sun Jul 12 18:17:30.579171 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQumnTrIlbXpLXvkNcTfgAAAMc"] [Sun Jul 12 18:17:30.677354 2026] [security2:error] [pid 967714:tid 967797] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/product/info.php"] [unique_id "alQuml_56DeKknhy7sMhvAABP0c"] [Sun Jul 12 18:17:30.715124 2026] [security2:error] [pid 960377:tid 960514] [client 188.213.202.14:25253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "kwemoh.com"] [uri "/wp-login.php"] [unique_id "alQumhMANaV5i2_BLQon2AAAAAY"] [Sun Jul 12 18:17:30.726551 2026] [security2:error] [pid 979474:tid 979704] [client 103.168.66.51:49682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/.env.production.backup"] [unique_id "alQumnTrIlbXpLXvkNcTjAAAAOM"] [Sun Jul 12 18:17:30.729983 2026] [security2:error] [pid 979474:tid 979643] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQumnTrIlbXpLXvkNcTgAAAAKc"] [Sun Jul 12 18:17:30.796233 2026] [core:error] [pid 979474:tid 979582] (13)Permission denied: [remote 43.173.175.93:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/page/4/?eventDate=2024-06-30&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:17:30.838610 2026] [core:error] [pid 979474:tid 979510] (13)Permission denied: [remote 43.173.181.35:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/page/4/?eventDate=2024-06-30&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:17:30.892508 2026] [security2:error] [pid 960377:tid 960627] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQumRMANaV5i2_BLQonzwAAdzE"] [Sun Jul 12 18:17:30.908801 2026] [security2:error] [pid 967714:tid 967732] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend/vendor/.env"] [unique_id "alQuml_56DeKknhy7sMhxgABJwY"] [Sun Jul 12 18:17:30.938443 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:30.939018 2026] [authz_core:error] [pid 967714:tid 967916] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:31.004948 2026] [security2:error] [pid 967714:tid 967841] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/profiler/test.php"] [unique_id "alQum1_56DeKknhy7sMhygABXXM"] [Sun Jul 12 18:17:31.116471 2026] [security2:error] [pid 967714:tid 967863] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuml_56DeKknhy7sMhwgAAARI"] [Sun Jul 12 18:17:31.126258 2026] [security2:error] [pid 967714:tid 967966] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuml_56DeKknhy7sMhxwAAAXk"] [Sun Jul 12 18:17:31.195979 2026] [security2:error] [pid 967714:tid 967779] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/project/.env.bak"] [unique_id "alQum1_56DeKknhy7sMh0AABHjU"] [Sun Jul 12 18:17:31.220525 2026] [security2:error] [pid 967714:tid 967954] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQumV_56DeKknhy7sMhmgAAAW0"] [Sun Jul 12 18:17:31.222464 2026] [security2:error] [pid 967714:tid 967970] [client 103.168.66.51:49719] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "50.87.228.180"] [uri "/config/secrets.yml"] [unique_id "alQum1_56DeKknhy7sMh0gAAAX0"] [Sun Jul 12 18:17:31.261487 2026] [security2:error] [pid 960377:tid 960586] [client 103.168.66.51:56700] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/v2/.env"] [unique_id "alQumxMANaV5i2_BLQon4QAAAE4"] [Sun Jul 12 18:17:31.382297 2026] [security2:error] [pid 960377:tid 960582] [client 24.203.79.110:50131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQumxMANaV5i2_BLQon4wAAAEo"] [Sun Jul 12 18:17:31.382705 2026] [security2:error] [pid 960377:tid 960582] [client 24.203.79.110:50131] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQumxMANaV5i2_BLQon4wAAAEo"] [Sun Jul 12 18:17:31.469196 2026] [security2:error] [pid 979474:tid 979736] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQum3TrIlbXpLXvkNcTkwAAAQM"] [Sun Jul 12 18:17:31.478115 2026] [security2:error] [pid 979474:tid 979664] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQumnTrIlbXpLXvkNcTeQAAALw"] [Sun Jul 12 18:17:31.494566 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/project/development/iinfo.php"] [unique_id "alQum1_56DeKknhy7sMh3QABEyk"] [Sun Jul 12 18:17:31.511245 2026] [security2:error] [pid 967714:tid 967962] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQum1_56DeKknhy7sMh1QAAAXU"] [Sun Jul 12 18:17:31.532081 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/project/infophp.php"] [unique_id "alQum1_56DeKknhy7sMh4AABhXQ"] [Sun Jul 12 18:17:31.594031 2026] [security2:error] [pid 967714:tid 967810] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/project_root/.env"] [unique_id "alQum1_56DeKknhy7sMh4QABU1Q"] [Sun Jul 12 18:17:31.805462 2026] [security2:error] [pid 967714:tid 967850] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/psnlink/.env"] [unique_id "alQum1_56DeKknhy7sMh6gABLnw"] [Sun Jul 12 18:17:31.816986 2026] [authz_core:error] [pid 979474:tid 979723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:31.817736 2026] [authz_core:error] [pid 979474:tid 979723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:31.836727 2026] [security2:error] [pid 979474:tid 979714] [client 103.168.66.51:49682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/laravel/storage/.env"] [unique_id "alQum3TrIlbXpLXvkNcTogAAAO0"] [Sun Jul 12 18:17:31.962585 2026] [security2:error] [pid 967714:tid 967757] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/pub/.env"] [unique_id "alQum1_56DeKknhy7sMh7AABJB8"] [Sun Jul 12 18:17:32.019615 2026] [security2:error] [pid 979474:tid 979719] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQum3TrIlbXpLXvkNcTnwAAAPI"] [Sun Jul 12 18:17:32.021482 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/public/.env"] [unique_id "alQunF_56DeKknhy7sMh7gABMhc"] [Sun Jul 12 18:17:32.092683 2026] [security2:error] [pid 960377:tid 960597] [client 103.168.66.51:56700] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/cpanel"] [unique_id "alQunBMANaV5i2_BLQon7QAAAFk"] [Sun Jul 12 18:17:32.202784 2026] [security2:error] [pid 967714:tid 967765] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/token.backup"] [unique_id "alQunF_56DeKknhy7sMh8QABaCc"] [Sun Jul 12 18:17:32.208264 2026] [security2:error] [pid 960377:tid 960613] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQumxMANaV5i2_BLQon3QAAaUw"] [Sun Jul 12 18:17:32.262503 2026] [security2:error] [pid 979474:tid 979694] [client 191.95.50.224:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQumHTrIlbXpLXvkNcTRwAAANk"] [Sun Jul 12 18:17:32.366593 2026] [security2:error] [pid 960377:tid 960481] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/legal/.env"] [unique_id "alQunBMANaV5i2_BLQon7gAADmY"] [Sun Jul 12 18:17:32.413085 2026] [security2:error] [pid 979474:tid 979644] [client 103.168.66.51:58207] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/portal/.env"] [unique_id "alQunHTrIlbXpLXvkNcTrAAAAKg"] [Sun Jul 12 18:17:32.436268 2026] [security2:error] [pid 979474:tid 979615] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQunHTrIlbXpLXvkNcTqQAAAIs"] [Sun Jul 12 18:17:32.448656 2026] [security2:error] [pid 979474:tid 979697] [client 103.168.66.51:49682] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/frontend/.env"] [unique_id "alQunHTrIlbXpLXvkNcTrgAAANw"] [Sun Jul 12 18:17:32.457808 2026] [security2:error] [pid 967714:tid 967781] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public/backup/info.php"] [unique_id "alQunF_56DeKknhy7sMh9wABNjc"] [Sun Jul 12 18:17:32.460428 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQum1_56DeKknhy7sMh1AAAATw"] [Sun Jul 12 18:17:32.532129 2026] [security2:error] [pid 960377:tid 960415] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lemonldap-ng-doc/.env"] [unique_id "alQunBMANaV5i2_BLQon7wAAJiQ"] [Sun Jul 12 18:17:32.601034 2026] [security2:error] [pid 967714:tid 967735] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public/laravel/info.php"] [unique_id "alQunF_56DeKknhy7sMiBwABOQk"] [Sun Jul 12 18:17:32.676835 2026] [security2:error] [pid 967714:tid 967851] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public/linusadmin-phpinfo.php"] [unique_id "alQunF_56DeKknhy7sMiCAABP30"] [Sun Jul 12 18:17:32.693461 2026] [security2:error] [pid 960377:tid 960493] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lemonldap-ng-fr-doc/.env"] [unique_id "alQunBMANaV5i2_BLQon8gAAa3I"] [Sun Jul 12 18:17:32.697427 2026] [security2:error] [pid 967714:tid 967969] [client 103.168.66.51:63553] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/panel/.env"] [unique_id "alQunF_56DeKknhy7sMiCQAAAXw"] [Sun Jul 12 18:17:32.703362 2026] [security2:error] [pid 979474:tid 979616] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunHTrIlbXpLXvkNcTrQAAAIw"] [Sun Jul 12 18:17:32.726133 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:32.726784 2026] [authz_core:error] [pid 960377:tid 960621] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:32.799904 2026] [security2:error] [pid 979474:tid 979655] [client 103.168.66.51:58207] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/backend/config/.env"] [unique_id "alQunHTrIlbXpLXvkNcTswAAALM"] [Sun Jul 12 18:17:32.849904 2026] [security2:error] [pid 979474:tid 979737] [client 168.100.149.225:52894] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16315/bargainor/2308_birefraction.jsp"] [unique_id "alQunHTrIlbXpLXvkNcTuAAAAQQ"] [Sun Jul 12 18:17:32.859535 2026] [security2:error] [pid 960377:tid 960454] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/letsencrypt/.env"] [unique_id "alQunBMANaV5i2_BLQon9QAAV0s"] [Sun Jul 12 18:17:32.885195 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public/php-info.php"] [unique_id "alQunF_56DeKknhy7sMiEAABLBQ"] [Sun Jul 12 18:17:32.897223 2026] [security2:error] [pid 960377:tid 960577] [client 65.21.113.206:53194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTU1NTktdHY5.cgi"] [unique_id "alQunBMANaV5i2_BLQon9wAAAEU"] [Sun Jul 12 18:17:32.952849 2026] [security2:error] [pid 960377:tid 960570] [client 103.168.66.51:62574] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.228.180"] [uri "/storage/logs/laravel-*.log"] [unique_id "alQunBMANaV5i2_BLQon-AAAAD4"] [Sun Jul 12 18:17:33.010722 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public/services/info.php"] [unique_id "alQunV_56DeKknhy7sMiEwABH1s"] [Sun Jul 12 18:17:33.021176 2026] [security2:error] [pid 960377:tid 960386] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/lib/.env"] [unique_id "alQunRMANaV5i2_BLQon-QAAHAg"] [Sun Jul 12 18:17:33.177416 2026] [security2:error] [pid 979474:tid 979671] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQunHTrIlbXpLXvkNcTvwAAAMM"] [Sun Jul 12 18:17:33.237081 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunHTrIlbXpLXvkNcTuQAAAM4"] [Sun Jul 12 18:17:33.256565 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQum1_56DeKknhy7sMh3wAAAYc"] [Sun Jul 12 18:17:33.315074 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/public_html/current/phpinfo.php"] [unique_id "alQunV_56DeKknhy7sMiGwABH1k"] [Sun Jul 12 18:17:33.430659 2026] [security2:error] [pid 960377:tid 960528] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQunRMANaV5i2_BLQon_wAAABQ"] [Sun Jul 12 18:17:33.463174 2026] [security2:error] [pid 979474:tid 979640] [client 103.168.66.51:59328] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.228.180"] [uri "/wp-config.php.orig"] [unique_id "alQunXTrIlbXpLXvkNcTxQAAAKQ"] [Sun Jul 12 18:17:33.552294 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/qa/.env"] [unique_id "alQunV_56DeKknhy7sMiIQABOyM"] [Sun Jul 12 18:17:33.554619 2026] [authz_core:error] [pid 967714:tid 967907] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:33.555549 2026] [authz_core:error] [pid 967714:tid 967907] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:33.781022 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/qa/backup/info.php"] [unique_id "alQunV_56DeKknhy7sMiJAABOnI"] [Sun Jul 12 18:17:33.790518 2026] [security2:error] [pid 967714:tid 967866] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunV_56DeKknhy7sMiIAAAARU"] [Sun Jul 12 18:17:34.066350 2026] [security2:error] [pid 967714:tid 967922] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQunV_56DeKknhy7sMiHwAAAU0"] [Sun Jul 12 18:17:34.066429 2026] [security2:error] [pid 967714:tid 967922] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQunV_56DeKknhy7sMiHwAAAU0"] [Sun Jul 12 18:17:34.067948 2026] [security2:error] [pid 960377:tid 960534] [client 65.21.113.206:44180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTU1NTktdHY5.cgi"] [unique_id "alQunRMANaV5i2_BLQooDAAAABo"] [Sun Jul 12 18:17:34.147689 2026] [security2:error] [pid 960377:tid 960571] [client 104.156.225.167:56770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "wholesomehals.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQunhMANaV5i2_BLQooEgAAAD8"] [Sun Jul 12 18:17:34.150924 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/qa/crm/info.php"] [unique_id "alQunl_56DeKknhy7sMiKwABXmA"] [Sun Jul 12 18:17:34.192787 2026] [security2:error] [pid 967714:tid 967733] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/qa/php.php"] [unique_id "alQunl_56DeKknhy7sMiLQABcQc"] [Sun Jul 12 18:17:34.244772 2026] [security2:error] [pid 960377:tid 960573] [client 168.100.149.21:34742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16380/bargainor/2308_mediator.jsp"] [unique_id "alQunhMANaV5i2_BLQooEwAAAEE"] [Sun Jul 12 18:17:34.336767 2026] [security2:error] [pid 979474:tid 979628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunXTrIlbXpLXvkNcT0AAAAJg"] [Sun Jul 12 18:17:34.365027 2026] [security2:error] [pid 960377:tid 960575] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQunRMANaV5i2_BLQon_gAAQyg"] [Sun Jul 12 18:17:34.459000 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:34.459498 2026] [authz_core:error] [pid 967714:tid 967882] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:34.526900 2026] [security2:error] [pid 960377:tid 960484] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/libraries/.env"] [unique_id "alQunhMANaV5i2_BLQooFQAAEGk"] [Sun Jul 12 18:17:34.613041 2026] [security2:error] [pid 967714:tid 967782] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/rasax/.env"] [unique_id "alQunl_56DeKknhy7sMiOAABWzg"] [Sun Jul 12 18:17:34.658058 2026] [security2:error] [pid 967714:tid 967731] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/repos/.env"] [unique_id "alQunl_56DeKknhy7sMiOQABHQU"] [Sun Jul 12 18:17:34.696061 2026] [security2:error] [pid 960377:tid 960424] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Library/.env"] [unique_id "alQunhMANaV5i2_BLQooGAAAYi0"] [Sun Jul 12 18:17:34.780849 2026] [security2:error] [pid 967714:tid 967878] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunl_56DeKknhy7sMiNwAAASE"] [Sun Jul 12 18:17:34.855527 2026] [security2:error] [pid 960377:tid 960423] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/libs/.env"] [unique_id "alQunhMANaV5i2_BLQooHQAAJCw"] [Sun Jul 12 18:17:34.871619 2026] [security2:error] [pid 967714:tid 967825] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/resources/docker/.env"] [unique_id "alQunl_56DeKknhy7sMiQQABEWM"] [Sun Jul 12 18:17:35.192895 2026] [security2:error] [pid 967714:tid 967804] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/resources/docker/rediscommander/.env"] [unique_id "alQun1_56DeKknhy7sMiSAABM04"] [Sun Jul 12 18:17:35.252065 2026] [security2:error] [pid 967714:tid 967883] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQunF_56DeKknhy7sMh_wAAASY"] [Sun Jul 12 18:17:35.308351 2026] [security2:error] [pid 967714:tid 967948] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQunl_56DeKknhy7sMiRQAAAWc"] [Sun Jul 12 18:17:35.353976 2026] [security2:error] [pid 967714:tid 967924] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQunF_56DeKknhy7sMiAgAAAVI"] [Sun Jul 12 18:17:35.382199 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:35.382714 2026] [authz_core:error] [pid 967714:tid 967952] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:35.488697 2026] [security2:error] [pid 967714:tid 967791] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend/core/Database/.env"] [unique_id "alQun1_56DeKknhy7sMiUAABgEE"] [Sun Jul 12 18:17:35.549939 2026] [security2:error] [pid 967714:tid 967748] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/robots/.env"] [unique_id "alQun1_56DeKknhy7sMiUQABMBY"] [Sun Jul 12 18:17:35.695056 2026] [security2:error] [pid 967714:tid 967775] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/root/info.php"] [unique_id "alQun1_56DeKknhy7sMiVQABGjE"] [Sun Jul 12 18:17:35.911886 2026] [security2:error] [pid 967714:tid 967805] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/routes/.env"] [unique_id "alQun1_56DeKknhy7sMiWwABhU8"] [Sun Jul 12 18:17:35.972486 2026] [security2:error] [pid 967714:tid 967886] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQun1_56DeKknhy7sMiVAAAASk"] [Sun Jul 12 18:17:36.010782 2026] [security2:error] [pid 979474:tid 979644] [client 103.168.66.51:58207] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.228.180"] [uri "/htdocs/.env"] [unique_id "alQuoHTrIlbXpLXvkNcT5QAAAKg"] [Sun Jul 12 18:17:36.079145 2026] [security2:error] [pid 979474:tid 979656] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQunHTrIlbXpLXvkNcTsQAAALQ"] [Sun Jul 12 18:17:36.168540 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:36.169093 2026] [authz_core:error] [pid 960377:tid 960581] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:36.169090 2026] [security2:error] [pid 960377:tid 960586] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQunxMANaV5i2_BLQooHgAATh0"] [Sun Jul 12 18:17:36.209803 2026] [security2:error] [pid 967714:tid 967895] [client 168.100.149.204:40176] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16445/bargainor/2308_gurian.jsp"] [unique_id "alQuoF_56DeKknhy7sMiYwAAATI"] [Sun Jul 12 18:17:36.361843 2026] [security2:error] [pid 967714:tid 967828] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/saas/.env"] [unique_id "alQuoF_56DeKknhy7sMiZQABDmY"] [Sun Jul 12 18:17:36.400128 2026] [security2:error] [pid 967714:tid 967888] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQunV_56DeKknhy7sMiGAAAASs"] [Sun Jul 12 18:17:36.405151 2026] [security2:error] [pid 967714:tid 967933] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMiYgAAAVg"] [Sun Jul 12 18:17:36.408828 2026] [security2:error] [pid 960377:tid 960617] [client 65.21.113.206:53194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTkwMjQtdHY5.cgi"] [unique_id "alQuoBMANaV5i2_BLQooKQAAAG0"] [Sun Jul 12 18:17:36.621924 2026] [security2:error] [pid 967714:tid 967801] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/samples/docker/deploymentscripts/.env"] [unique_id "alQuoF_56DeKknhy7sMibQABQUs"] [Sun Jul 12 18:17:36.903808 2026] [security2:error] [pid 967714:tid 967923] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMiawAAAU4"] [Sun Jul 12 18:17:37.002011 2026] [authz_core:error] [pid 979474:tid 979627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:37.002618 2026] [authz_core:error] [pid 979474:tid 979627] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:37.057594 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/script/.env"] [unique_id "alQuoV_56DeKknhy7sMiegABNno"] [Sun Jul 12 18:17:37.216804 2026] [security2:error] [pid 967714:tid 967891] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMiXwAAAS4"] [Sun Jul 12 18:17:37.359403 2026] [security2:error] [pid 960377:tid 960535] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuoBMANaV5i2_BLQooJwAAGx8"] [Sun Jul 12 18:17:37.406165 2026] [security2:error] [pid 960377:tid 960525] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuoRMANaV5i2_BLQooMQAAABE"] [Sun Jul 12 18:17:37.520129 2026] [security2:error] [pid 960377:tid 960385] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/linux/.env"] [unique_id "alQuoRMANaV5i2_BLQooNwAAVgc"] [Sun Jul 12 18:17:37.596316 2026] [security2:error] [pid 967714:tid 967870] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMidwAAARk"] [Sun Jul 12 18:17:37.596391 2026] [security2:error] [pid 967714:tid 967870] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMidwAAARk"] [Sun Jul 12 18:17:37.598033 2026] [security2:error] [pid 967714:tid 967892] [client 65.21.113.206:44182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF0LTI4MzIxLWF0djluLTkwMjQtdHY5.cgi"] [unique_id "alQuoF_56DeKknhy7sMidQAAAS8"] [Sun Jul 12 18:17:37.612565 2026] [security2:error] [pid 967714:tid 967790] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/scripts/.env"] [unique_id "alQuoV_56DeKknhy7sMihwABV0A"] [Sun Jul 12 18:17:37.818694 2026] [security2:error] [pid 967714:tid 967917] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuoV_56DeKknhy7sMiiAAAAUg"] [Sun Jul 12 18:17:37.825824 2026] [authz_core:error] [pid 979474:tid 979672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:37.826321 2026] [authz_core:error] [pid 979474:tid 979672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:37.940167 2026] [security2:error] [pid 967714:tid 967898] [client 104.194.8.156:51934] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/cache.php"] [unique_id "alQuoV_56DeKknhy7sMilAAAATU"] [Sun Jul 12 18:17:37.995444 2026] [security2:error] [pid 967714:tid 967837] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/dev/env/admin/master.old"] [unique_id "alQuoV_56DeKknhy7sMimAABdW8"] [Sun Jul 12 18:17:38.058517 2026] [security2:error] [pid 960377:tid 960580] [client 104.194.8.156:63859] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "alQuohMANaV5i2_BLQooPgAAAEg"] [Sun Jul 12 18:17:38.136743 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuoF_56DeKknhy7sMiaQAAAQw"] [Sun Jul 12 18:17:38.158261 2026] [security2:error] [pid 967714:tid 967938] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuoV_56DeKknhy7sMilgAAAV0"] [Sun Jul 12 18:17:38.168143 2026] [security2:error] [pid 960377:tid 960612] [client 104.194.8.156:62958] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "alQuohMANaV5i2_BLQooQQAAAGg"] [Sun Jul 12 18:17:38.230368 2026] [security2:error] [pid 979474:tid 979725] [client 104.194.8.156:61972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "alQuonTrIlbXpLXvkNcT9AAAAPg"] [Sun Jul 12 18:17:38.366497 2026] [security2:error] [pid 967714:tid 967862] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuoV_56DeKknhy7sMifwAAARE"] [Sun Jul 12 18:17:38.367441 2026] [security2:error] [pid 967714:tid 967961] [client 104.194.8.156:51917] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/images/images/images/cache.php"] [unique_id "alQuol_56DeKknhy7sMipQAAAXQ"] [Sun Jul 12 18:17:38.464649 2026] [security2:error] [pid 960377:tid 960571] [client 104.194.8.156:51524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/images/images/cache.php"] [unique_id "alQuohMANaV5i2_BLQooSwAAAD8"] [Sun Jul 12 18:17:38.574838 2026] [security2:error] [pid 979474:tid 979698] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcT8gAAAN0"] [Sun Jul 12 18:17:38.603605 2026] [security2:error] [pid 960377:tid 960614] [client 104.194.8.156:51617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/images/cache.php"] [unique_id "alQuohMANaV5i2_BLQooTQAAAGo"] [Sun Jul 12 18:17:38.650952 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:38.651703 2026] [authz_core:error] [pid 960377:tid 960520] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:38.702551 2026] [security2:error] [pid 979474:tid 979673] [client 104.194.8.156:63810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/images/images/images/cache.php"] [unique_id "alQuonTrIlbXpLXvkNcUAwAAAMU"] [Sun Jul 12 18:17:38.714857 2026] [security2:error] [pid 979474:tid 979632] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcT_AAAAJw"] [Sun Jul 12 18:17:38.809138 2026] [security2:error] [pid 960377:tid 960528] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuoRMANaV5i2_BLQooOwAAFBU"] [Sun Jul 12 18:17:38.826812 2026] [security2:error] [pid 967714:tid 967975] [client 104.194.8.156:64259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/wp-content/plugins/plugins/cache.php"] [unique_id "alQuol_56DeKknhy7sMirgAAAYI"] [Sun Jul 12 18:17:38.849332 2026] [security2:error] [pid 979474:tid 979612] [client 168.100.149.241:60944] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16510/bargainor/2308_monkey.jsp"] [unique_id "alQuonTrIlbXpLXvkNcUBQAAAIg"] [Sun Jul 12 18:17:38.868599 2026] [security2:error] [pid 967714:tid 967855] [client 99.224.70.150:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuol_56DeKknhy7sMinwAAAQo"] [Sun Jul 12 18:17:38.887249 2026] [security2:error] [pid 979474:tid 979682] [client 104.194.8.156:59315] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/assets/images/images/cache.php"] [unique_id "alQuonTrIlbXpLXvkNcUCAAAAM0"] [Sun Jul 12 18:17:38.913693 2026] [security2:error] [pid 979474:tid 979657] [client 172.56.29.252:42005] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcT_QAAtQY"] [Sun Jul 12 18:17:38.947043 2026] [security2:error] [pid 979474:tid 979657] [client 172.56.29.252:42005] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcT_gAAtTw"] [Sun Jul 12 18:17:38.969346 2026] [security2:error] [pid 960377:tid 960418] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/localhost/.env"] [unique_id "alQuohMANaV5i2_BLQooZAAANCc"] [Sun Jul 12 18:17:38.997580 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcUBAAAALs"] [Sun Jul 12 18:17:39.005403 2026] [security2:error] [pid 979474:tid 979676] [client 35.161.55.221:18432] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.253.215"] [uri "/"] [unique_id "alQuo3TrIlbXpLXvkNcUCQAAAMg"] [Sun Jul 12 18:17:39.064750 2026] [security2:error] [pid 967714:tid 967867] [client 104.194.8.156:62891] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/blogs/media/media/cache.php"] [unique_id "alQuo1_56DeKknhy7sMiswAAARY"] [Sun Jul 12 18:17:39.124073 2026] [security2:error] [pid 967714:tid 967903] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuol_56DeKknhy7sMisAAAATo"] [Sun Jul 12 18:17:39.129848 2026] [security2:error] [pid 960377:tid 960462] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/locally/.env"] [unique_id "alQuoxMANaV5i2_BLQooZQAAX1M"] [Sun Jul 12 18:17:39.157966 2026] [security2:error] [pid 967714:tid 967923] [client 35.161.55.221:36345] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.253.215"] [uri "/"] [unique_id "alQuo1_56DeKknhy7sMitAAAAU4"] [Sun Jul 12 18:17:39.161325 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuol_56DeKknhy7sMisgABfn8"] [Sun Jul 12 18:17:39.166433 2026] [security2:error] [pid 967714:tid 967942] [client 104.194.8.156:61753] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.pamelaweaver.com"] [uri "/cache/cache/cache.php"] [unique_id "alQuo1_56DeKknhy7sMitQAAAWE"] [Sun Jul 12 18:17:39.235065 2026] [security2:error] [pid 967714:tid 967814] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/sendgrid_email/.env"] [unique_id "alQuo1_56DeKknhy7sMitwABd1g"] [Sun Jul 12 18:17:39.297243 2026] [security2:error] [pid 967714:tid 967806] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/backend/public/.env"] [unique_id "alQuo1_56DeKknhy7sMiugABLlA"] [Sun Jul 12 18:17:39.471138 2026] [security2:error] [pid 960377:tid 960629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuohMANaV5i2_BLQooQAAAAHk"] [Sun Jul 12 18:17:39.533992 2026] [security2:error] [pid 960377:tid 960627] [client 185.30.32.159:35986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 159.32.30.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bestdestinationweddingphotographers.com"] [uri "/wp-json/yoco/logs"] [unique_id "alQuoxMANaV5i2_BLQooawAAAHc"] [Sun Jul 12 18:17:39.549918 2026] [security2:error] [pid 960377:tid 960623] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuohMANaV5i2_BLQooSQAAAHM"] [Sun Jul 12 18:17:39.567173 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:39.567871 2026] [authz_core:error] [pid 967714:tid 967865] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:39.686981 2026] [security2:error] [pid 979474:tid 979620] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuo3TrIlbXpLXvkNcUDgAAAJA"] [Sun Jul 12 18:17:39.795543 2026] [cgid:error] [pid 979474:tid 979685] [client 202.46.62.42:11419] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/sticker-placement-brochures-stock-p-144.html?osCsid=3v8vbh8o5ndeabsflm2bkbhp92 [Sun Jul 12 18:17:39.833360 2026] [security2:error] [pid 960377:tid 960555] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuoxMANaV5i2_BLQoobAAAAC8"] [Sun Jul 12 18:17:40.094529 2026] [security2:error] [pid 960377:tid 960538] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuoxMANaV5i2_BLQoocgAAAB4"] [Sun Jul 12 18:17:40.177590 2026] [security2:error] [pid 979474:tid 979731] [client 94.187.171.125:50354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQupHTrIlbXpLXvkNcUGQAAAP4"] [Sun Jul 12 18:17:40.178010 2026] [security2:error] [pid 979474:tid 979731] [client 94.187.171.125:50354] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQupHTrIlbXpLXvkNcUGQAAAP4"] [Sun Jul 12 18:17:40.197838 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/server/api/phpinfo.php"] [unique_id "alQupF_56DeKknhy7sMi2QABWUU"] [Sun Jul 12 18:17:40.216129 2026] [security2:error] [pid 979474:tid 979624] [client 168.100.149.8:35186] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16575/bargainor/2308_impeccance.jsp"] [unique_id "alQupHTrIlbXpLXvkNcUHQAAAJQ"] [Sun Jul 12 18:17:40.279061 2026] [security2:error] [pid 979474:tid 979665] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupHTrIlbXpLXvkNcUGAAAAL0"] [Sun Jul 12 18:17:40.317833 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/server/laravel/phpinfo.php"] [unique_id "alQupF_56DeKknhy7sMi2gABZik"] [Sun Jul 12 18:17:40.327920 2026] [security2:error] [pid 979474:tid 979684] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQupHTrIlbXpLXvkNcUFwAAAM8"] [Sun Jul 12 18:17:40.394870 2026] [security2:error] [pid 960377:tid 960413] [remote 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuoxMANaV5i2_BLQooZgAAGCI"] [Sun Jul 12 18:17:40.415342 2026] [authz_core:error] [pid 979474:tid 979705] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:40.416051 2026] [authz_core:error] [pid 979474:tid 979705] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:40.482466 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/server/services/phpinfo.php"] [unique_id "alQupF_56DeKknhy7sMi3AABgRE"] [Sun Jul 12 18:17:40.502605 2026] [security2:error] [pid 967714:tid 967842] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/examples/with-universal-configuration-build-time/.env"] [unique_id "alQupF_56DeKknhy7sMi3QABc3Q"] [Sun Jul 12 18:17:40.510907 2026] [security2:error] [pid 967714:tid 967904] [client 125.167.21.72:62179] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQupF_56DeKknhy7sMi3gAAATs"] [Sun Jul 12 18:17:40.511215 2026] [security2:error] [pid 967714:tid 967904] [client 125.167.21.72:62179] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQupF_56DeKknhy7sMi3gAAATs"] [Sun Jul 12 18:17:40.554106 2026] [security2:error] [pid 960377:tid 960437] [remote 185.177.72.52:52402] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/log/.env"] [unique_id "alQupBMANaV5i2_BLQooegAAJjo"] [Sun Jul 12 18:17:40.675384 2026] [security2:error] [pid 967714:tid 967810] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/azure-credentials~"] [unique_id "alQupF_56DeKknhy7sMi3wABI1Q"] [Sun Jul 12 18:17:40.684345 2026] [security2:error] [pid 967714:tid 967823] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/service/service/info.php"] [unique_id "alQupF_56DeKknhy7sMi4AABZWE"] [Sun Jul 12 18:17:40.846173 2026] [security2:error] [pid 967714:tid 967757] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/mobile-app/frontend/.env"] [unique_id "alQupF_56DeKknhy7sMi4wABDB8"] [Sun Jul 12 18:17:40.887290 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/services/documents/.env"] [unique_id "alQupF_56DeKknhy7sMi5AABGhc"] [Sun Jul 12 18:17:41.068693 2026] [security2:error] [pid 979474:tid 979671] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupHTrIlbXpLXvkNcUKwAAAMM"] [Sun Jul 12 18:17:41.179425 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/services/portainer/.env"] [unique_id "alQupV_56DeKknhy7sMi8AABEWc"] [Sun Jul 12 18:17:41.225033 2026] [security2:error] [pid 960377:tid 960568] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuoxMANaV5i2_BLQooagAAADw"] [Sun Jul 12 18:17:41.258147 2026] [security2:error] [pid 967714:tid 967786] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/settings/.env"] [unique_id "alQupV_56DeKknhy7sMi9gABETw"] [Sun Jul 12 18:17:41.321796 2026] [security2:error] [pid 979474:tid 979734] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUMwAAAQE"] [Sun Jul 12 18:17:41.353471 2026] [authz_core:error] [pid 979474:tid 979646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:41.354480 2026] [authz_core:error] [pid 979474:tid 979646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:41.363183 2026] [security2:error] [pid 979474:tid 979725] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUMgAAAPg"] [Sun Jul 12 18:17:41.363209 2026] [security2:error] [pid 979474:tid 979700] [client 74.7.244.33:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "thepinkbridge.com"] [uri "/index.php"] [unique_id "alQuonTrIlbXpLXvkNcT8AAAAN8"] [Sun Jul 12 18:17:41.366064 2026] [security2:error] [pid 967714:tid 967937] [client 74.7.244.33:57800] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "thepinkbridge.com"] [uri "/robots.txt"] [unique_id "alQuol_56DeKknhy7sMinAABXA0"] [Sun Jul 12 18:17:41.403860 2026] [security2:error] [pid 960377:tid 960586] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuoxMANaV5i2_BLQoobgAAAE4"] [Sun Jul 12 18:17:41.410145 2026] [security2:error] [pid 967714:tid 967967] [client 65.21.113.206:59662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzQ0NzAvYXUvMTIzODUvdQ=="] [unique_id "alQupV_56DeKknhy7sMjAAAAAXo"] [Sun Jul 12 18:17:41.657608 2026] [security2:error] [pid 967714:tid 967858] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupV_56DeKknhy7sMjBQAAAQ0"] [Sun Jul 12 18:17:41.691542 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupV_56DeKknhy7sMjBgABChQ"] [Sun Jul 12 18:17:41.800107 2026] [security2:error] [pid 967714:tid 967941] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQupV_56DeKknhy7sMjDwAAAWA"] [Sun Jul 12 18:17:41.814585 2026] [security2:error] [pid 960377:tid 960615] [client 185.177.72.52:52402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQupBMANaV5i2_BLQooewAAa1w"] [Sun Jul 12 18:17:41.855158 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/shared/.env"] [unique_id "alQupV_56DeKknhy7sMjFgABCg8"] [Sun Jul 12 18:17:41.861154 2026] [security2:error] [pid 967714:tid 967977] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupV_56DeKknhy7sMjEgAAAYQ"] [Sun Jul 12 18:17:41.976259 2026] [security2:error] [pid 967714:tid 967759] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/laravel-app/src/.env"] [unique_id "alQupV_56DeKknhy7sMjGQABGSE"] [Sun Jul 12 18:17:42.016498 2026] [security2:error] [pid 979474:tid 979670] [client 24.203.79.110:50635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQupnTrIlbXpLXvkNcURQAAAMI"] [Sun Jul 12 18:17:42.016760 2026] [security2:error] [pid 979474:tid 979670] [client 24.203.79.110:50635] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQupnTrIlbXpLXvkNcURQAAAMI"] [Sun Jul 12 18:17:42.072283 2026] [security2:error] [pid 967714:tid 967815] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/sites/default/settings.php"] [unique_id "alQupl_56DeKknhy7sMjHAABT1k"] [Sun Jul 12 18:17:42.217364 2026] [authz_core:error] [pid 967714:tid 967914] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:42.217930 2026] [authz_core:error] [pid 967714:tid 967914] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:42.273247 2026] [security2:error] [pid 979474:tid 979503] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/logging/.env"] [unique_id "alQupnTrIlbXpLXvkNcUTgAA5hc"] [Sun Jul 12 18:17:42.494281 2026] [security2:error] [pid 979474:tid 979609] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQupnTrIlbXpLXvkNcUSwAAAIU"] [Sun Jul 12 18:17:42.517269 2026] [security2:error] [pid 979474:tid 979641] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcURAAAAKU"] [Sun Jul 12 18:17:42.517343 2026] [security2:error] [pid 979474:tid 979641] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcURAAAAKU"] [Sun Jul 12 18:17:42.518305 2026] [security2:error] [pid 979474:tid 979651] [client 65.21.113.206:44194] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzQ0NzAvYXUvMTIzODUvdQ=="] [unique_id "alQupXTrIlbXpLXvkNcUQgAAAK8"] [Sun Jul 12 18:17:42.569658 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/spikes/config-material-app/.env"] [unique_id "alQupl_56DeKknhy7sMjJQABHms"] [Sun Jul 12 18:17:42.609109 2026] [security2:error] [pid 979474:tid 979723] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQupnTrIlbXpLXvkNcUUgAAAPY"] [Sun Jul 12 18:17:42.733559 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/src/.env"] [unique_id "alQupl_56DeKknhy7sMjLQABhhk"] [Sun Jul 12 18:17:42.784355 2026] [security2:error] [pid 979474:tid 979717] [client 66.102.9.200:65451] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/index.php"] [unique_id "alQupnTrIlbXpLXvkNcUVwAAAPA"] [Sun Jul 12 18:17:42.867056 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/src/__tests__/__fixtures__/typeScriptIntegrationProject/.env"] [unique_id "alQupl_56DeKknhy7sMjNAABPSs"] [Sun Jul 12 18:17:42.867396 2026] [core:error] [pid 979474:tid 979681] [client 195.93.244.97:46918] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:17:42.876743 2026] [security2:error] [pid 967714:tid 967727] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/src/core/tests/dotenv-files/.env"] [unique_id "alQupl_56DeKknhy7sMjNQABYwE"] [Sun Jul 12 18:17:42.896086 2026] [security2:error] [pid 967714:tid 967879] [client 168.100.149.137:34172] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16640/bargainor/2308_gunz.jsp"] [unique_id "alQupl_56DeKknhy7sMjNgAAASI"] [Sun Jul 12 18:17:42.897474 2026] [security2:error] [pid 967714:tid 967974] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQupl_56DeKknhy7sMjKQAAAYE"] [Sun Jul 12 18:17:43.016603 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:43.017171 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:43.033173 2026] [security2:error] [pid 979474:tid 979658] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQupnTrIlbXpLXvkNcUUQAAtjo"] [Sun Jul 12 18:17:43.045014 2026] [security2:error] [pid 967714:tid 967784] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/src/phpinfo.php"] [unique_id "alQup1_56DeKknhy7sMjOgABNzo"] [Sun Jul 12 18:17:43.108616 2026] [security2:error] [pid 967714:tid 967847] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/stackato-pkg/.env"] [unique_id "alQup1_56DeKknhy7sMjPgABN3k"] [Sun Jul 12 18:17:43.212223 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQup3TrIlbXpLXvkNcUXwAAAQA"] [Sun Jul 12 18:17:43.292725 2026] [security2:error] [pid 979474:tid 979516] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "crackerjackcom.com"] [uri "/wp-login.php"] [unique_id "alQup3TrIlbXpLXvkNcUYwAA0yQ"] [Sun Jul 12 18:17:43.322005 2026] [security2:error] [pid 979474:tid 979635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUNgAAAJ8"] [Sun Jul 12 18:17:43.328836 2026] [security2:error] [pid 967714:tid 967937] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQup1_56DeKknhy7sMjPQAAAVw"] [Sun Jul 12 18:17:43.441350 2026] [security2:error] [pid 979474:tid 979617] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQup3TrIlbXpLXvkNcUZQAAAI0"] [Sun Jul 12 18:17:43.443899 2026] [security2:error] [pid 979474:tid 979488] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/login/.env"] [unique_id "alQup3TrIlbXpLXvkNcUaAAA9wg"] [Sun Jul 12 18:17:43.504203 2026] [security2:error] [pid 967714:tid 967835] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/azure-credentials.swp"] [unique_id "alQup1_56DeKknhy7sMjRgABf20"] [Sun Jul 12 18:17:43.606005 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQup1_56DeKknhy7sMjRQAAAXw"] [Sun Jul 12 18:17:43.630774 2026] [security2:error] [pid 967714:tid 967736] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/stage/crm/phpinfo.php"] [unique_id "alQup1_56DeKknhy7sMjSgABJgo"] [Sun Jul 12 18:17:43.679104 2026] [security2:error] [pid 967714:tid 967942] [client 66.102.9.200:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/index.php"] [unique_id "alQup1_56DeKknhy7sMjTgAAAWE"] [Sun Jul 12 18:17:43.687413 2026] [security2:error] [pid 979474:tid 979706] [client 66.102.9.200:65451] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.bellesprit.com"] [uri "/index.php"] [unique_id "alQup3TrIlbXpLXvkNcUbAAAAOU"] [Sun Jul 12 18:17:43.696791 2026] [security2:error] [pid 967714:tid 967925] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/ext/settings.php"] [unique_id "alQup1_56DeKknhy7sMjUgAAAVA"] [Sun Jul 12 18:17:43.777800 2026] [security2:error] [pid 967714:tid 967827] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/stage/develop/phpinfo.php"] [unique_id "alQup1_56DeKknhy7sMjUwABGWU"] [Sun Jul 12 18:17:43.794381 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:43.794936 2026] [authz_core:error] [pid 967714:tid 967912] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:43.867309 2026] [security2:error] [pid 967714:tid 967813] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env.bak"] [unique_id "alQup1_56DeKknhy7sMjVgABKVc"] [Sun Jul 12 18:17:44.022253 2026] [security2:error] [pid 967714:tid 967758] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/staging/.env.bak"] [unique_id "alQuqF_56DeKknhy7sMjYAABECA"] [Sun Jul 12 18:17:44.061939 2026] [core:error] [pid 979474:tid 979619] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.061979 2026] [core:error] [pid 979474:tid 979619] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.156349 2026] [security2:error] [pid 967714:tid 967849] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/stats/.env"] [unique_id "alQuqF_56DeKknhy7sMjbAABeHs"] [Sun Jul 12 18:17:44.173518 2026] [core:error] [pid 979474:tid 979734] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.173569 2026] [core:error] [pid 979474:tid 979734] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.178911 2026] [core:error] [pid 979474:tid 979686] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.178952 2026] [core:error] [pid 979474:tid 979686] [client 208.84.102.176:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:17:44.232388 2026] [security2:error] [pid 979474:tid 979621] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUOwAAAJE"] [Sun Jul 12 18:17:44.244463 2026] [security2:error] [pid 979474:tid 979612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUPQAAAIg"] [Sun Jul 12 18:17:44.244924 2026] [security2:error] [pid 979474:tid 979704] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQupXTrIlbXpLXvkNcUPAAAAOM"] [Sun Jul 12 18:17:44.253421 2026] [security2:error] [pid 967714:tid 967952] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjZQAAAWs"] [Sun Jul 12 18:17:44.411737 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUeAAAANs"] [Sun Jul 12 18:17:44.416947 2026] [security2:error] [pid 967714:tid 967848] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/storage/.env"] [unique_id "alQuqF_56DeKknhy7sMjgAABY3o"] [Sun Jul 12 18:17:44.483916 2026] [security2:error] [pid 967714:tid 967930] [client 57.141.18.30:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjbQAAAVU"] [Sun Jul 12 18:17:44.520422 2026] [security2:error] [pid 979474:tid 979626] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQup3TrIlbXpLXvkNcUawAAlkQ"] [Sun Jul 12 18:17:44.635519 2026] [authz_core:error] [pid 979474:tid 979663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:44.636057 2026] [authz_core:error] [pid 979474:tid 979663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:44.671549 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjhQAAAXM"] [Sun Jul 12 18:17:44.693791 2026] [security2:error] [pid 979474:tid 979726] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUhQAAAPk"] [Sun Jul 12 18:17:44.729328 2026] [security2:error] [pid 967714:tid 967920] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjiAAAAUs"] [Sun Jul 12 18:17:44.800941 2026] [security2:error] [pid 967714:tid 967967] [client 143.105.247.44:39587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 44.247.105.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "defencefec.com"] [uri "/xmlrpc.php"] [unique_id "alQuqF_56DeKknhy7sMjjAAAAXo"] [Sun Jul 12 18:17:44.801181 2026] [security2:error] [pid 967714:tid 967967] [client 143.105.247.44:39587] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "defencefec.com"] [uri "/xmlrpc.php"] [unique_id "alQuqF_56DeKknhy7sMjjAAAAXo"] [Sun Jul 12 18:17:44.811524 2026] [security2:error] [pid 979474:tid 979490] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/logs/.env"] [unique_id "alQuqHTrIlbXpLXvkNcUiwAA7go"] [Sun Jul 12 18:17:44.873307 2026] [security2:error] [pid 979474:tid 979722] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUigAAAPU"] [Sun Jul 12 18:17:44.910742 2026] [security2:error] [pid 967714:tid 967971] [client 168.100.149.54:17246] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16705/bargainor/2308_monadically.jsp"] [unique_id "alQuqF_56DeKknhy7sMjkQAAAX4"] [Sun Jul 12 18:17:45.020258 2026] [security2:error] [pid 967714:tid 967836] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/system-config/.env"] [unique_id "alQuqV_56DeKknhy7sMjkgABd24"] [Sun Jul 12 18:17:45.178007 2026] [security2:error] [pid 967714:tid 967862] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjkAAAARE"] [Sun Jul 12 18:17:45.279067 2026] [security2:error] [pid 967714:tid 967837] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/template/.env"] [unique_id "alQuqV_56DeKknhy7sMjmQABeW8"] [Sun Jul 12 18:17:45.372284 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:45.372826 2026] [authz_core:error] [pid 967714:tid 967977] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:45.445807 2026] [security2:error] [pid 967714:tid 967773] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/templates/.env"] [unique_id "alQuqV_56DeKknhy7sMjoAABJy8"] [Sun Jul 12 18:17:45.618961 2026] [security2:error] [pid 967714:tid 967950] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqV_56DeKknhy7sMjngAAAWk"] [Sun Jul 12 18:17:45.793477 2026] [security2:error] [pid 967714:tid 967752] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/java-app/frontend/.env"] [unique_id "alQuqV_56DeKknhy7sMjqAABEho"] [Sun Jul 12 18:17:45.794472 2026] [security2:error] [pid 967714:tid 967832] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/test/bdd/fixtures/agent-rest/.env"] [unique_id "alQuqV_56DeKknhy7sMjqQABcGo"] [Sun Jul 12 18:17:45.815576 2026] [security2:error] [pid 979474:tid 979661] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUjgAAuUE"] [Sun Jul 12 18:17:45.879743 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/test/bdd/fixtures/demo/openapi/.env"] [unique_id "alQuqV_56DeKknhy7sMjrQABHww"] [Sun Jul 12 18:17:46.028526 2026] [security2:error] [pid 967714:tid 967924] [client 216.73.216.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.fctakoradi.com"] [uri "/index.php"] [unique_id "alQuqV_56DeKknhy7sMjogAAAU8"] [Sun Jul 12 18:17:46.124907 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:46.125429 2026] [authz_core:error] [pid 979474:tid 979662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:46.223364 2026] [security2:error] [pid 979474:tid 979674] [client 168.100.149.124:37890] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16770/bargainor/2308_enhalo.jsp"] [unique_id "alQuqnTrIlbXpLXvkNcUqgAAAMY"] [Sun Jul 12 18:17:46.252928 2026] [security2:error] [pid 967714:tid 967928] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqV_56DeKknhy7sMjtAAAAVM"] [Sun Jul 12 18:17:46.577645 2026] [security2:error] [pid 967714:tid 967821] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test_info.php"] [unique_id "alQuql_56DeKknhy7sMjvgABVV8"] [Sun Jul 12 18:17:46.680618 2026] [security2:error] [pid 979474:tid 979693] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuqnTrIlbXpLXvkNcUrAAAANg"] [Sun Jul 12 18:17:46.825522 2026] [security2:error] [pid 979474:tid 979501] [remote 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuqXTrIlbXpLXvkNcUnwAAvhU"] [Sun Jul 12 18:17:46.865067 2026] [security2:error] [pid 967714:tid 967762] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test_phpinfo2.php"] [unique_id "alQuql_56DeKknhy7sMjyAABdCQ"] [Sun Jul 12 18:17:46.977181 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:46.977801 2026] [authz_core:error] [pid 967714:tid 967933] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:47.153366 2026] [security2:error] [pid 967714:tid 967866] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjewAAARU"] [Sun Jul 12 18:17:47.154811 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuql_56DeKknhy7sMjywAAAVo"] [Sun Jul 12 18:17:47.154828 2026] [security2:error] [pid 979474:tid 979683] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUfwAAAM4"] [Sun Jul 12 18:17:47.175986 2026] [security2:error] [pid 967714:tid 967793] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/test_phpinfo5.php"] [unique_id "alQuq1_56DeKknhy7sMj0wABJkM"] [Sun Jul 12 18:17:47.182756 2026] [security2:error] [pid 967714:tid 967872] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuqF_56DeKknhy7sMjeQAAARs"] [Sun Jul 12 18:17:47.194282 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuqHTrIlbXpLXvkNcUfgAAAKo"] [Sun Jul 12 18:17:47.282557 2026] [security2:error] [pid 979474:tid 979670] [client 65.21.113.206:42706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzQ1MjEvYXUvMTIzODUvdQ=="] [unique_id "alQuq3TrIlbXpLXvkNcUvgAAAMI"] [Sun Jul 12 18:17:47.438243 2026] [security2:error] [pid 979474:tid 979668] [client 198.235.24.69:59800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.24.235.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "salon-software.com"] [uri "/webshell.php"] [unique_id "alQuq3TrIlbXpLXvkNcUyQAAAMA"] [Sun Jul 12 18:17:47.487127 2026] [security2:error] [pid 967714:tid 967937] [client 57.141.18.59:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQuql_56DeKknhy7sMjzQAAAVw"] [Sun Jul 12 18:17:47.616648 2026] [security2:error] [pid 967714:tid 967852] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/testing/.env"] [unique_id "alQuq1_56DeKknhy7sMj4AABQH4"] [Sun Jul 12 18:17:47.618459 2026] [security2:error] [pid 979474:tid 979663] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcUxQAAALs"] [Sun Jul 12 18:17:47.736987 2026] [security2:error] [pid 967714:tid 967795] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/tests/development/iinfo.php"] [unique_id "alQuq1_56DeKknhy7sMj4wABckU"] [Sun Jul 12 18:17:47.789405 2026] [authz_core:error] [pid 979474:tid 979717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:47.790104 2026] [authz_core:error] [pid 979474:tid 979717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:48.023304 2026] [security2:error] [pid 979474:tid 979659] [client 185.184.192.245:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcUwgAAALc"] [Sun Jul 12 18:17:48.063507 2026] [security2:error] [pid 967714:tid 967884] [client 198.235.24.69:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQuq1_56DeKknhy7sMj2QAAASc"] [Sun Jul 12 18:17:48.081150 2026] [security2:error] [pid 979474:tid 979661] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcU2wAAALk"] [Sun Jul 12 18:17:48.118224 2026] [security2:error] [pid 979474:tid 979725] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuqnTrIlbXpLXvkNcUrwAA-BQ"] [Sun Jul 12 18:17:48.213833 2026] [security2:error] [pid 967714:tid 967979] [client 168.100.149.48:23106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16835/bargainor/2308_metalogical.jsp"] [unique_id "alQurF_56DeKknhy7sMj7gAAAYY"] [Sun Jul 12 18:17:48.214798 2026] [security2:error] [pid 967714:tid 967767] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/tiedostot/.env"] [unique_id "alQurF_56DeKknhy7sMj7QABeCk"] [Sun Jul 12 18:17:48.270562 2026] [security2:error] [pid 979474:tid 979531] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/magento/.env"] [unique_id "alQurHTrIlbXpLXvkNcU5wAApjM"] [Sun Jul 12 18:17:48.364826 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcUuwAAANs"] [Sun Jul 12 18:17:48.383412 2026] [security2:error] [pid 979474:tid 979616] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcU2QAAAIw"] [Sun Jul 12 18:17:48.383481 2026] [security2:error] [pid 979474:tid 979616] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcU2QAAAIw"] [Sun Jul 12 18:17:48.386833 2026] [security2:error] [pid 979474:tid 979702] [client 65.21.113.206:46054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzQ1MjEvYXUvMTIzODUvdQ=="] [unique_id "alQuq3TrIlbXpLXvkNcU1QAAAOE"] [Sun Jul 12 18:17:48.423957 2026] [security2:error] [pid 979474:tid 979557] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mailinabox/.env"] [unique_id "alQurHTrIlbXpLXvkNcU6QAA900"] [Sun Jul 12 18:17:48.457274 2026] [security2:error] [pid 979474:tid 979634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuq3TrIlbXpLXvkNcUvAAAAJ4"] [Sun Jul 12 18:17:48.558759 2026] [security2:error] [pid 967714:tid 967928] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMj9AAAAVM"] [Sun Jul 12 18:17:48.574421 2026] [security2:error] [pid 979474:tid 979523] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mailman/.env"] [unique_id "alQurHTrIlbXpLXvkNcU8QAAxSs"] [Sun Jul 12 18:17:48.575369 2026] [security2:error] [pid 979474:tid 979610] [client 37.100.219.85:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQurHTrIlbXpLXvkNcU5QAAAIY"] [Sun Jul 12 18:17:48.684469 2026] [authz_core:error] [pid 979474:tid 979708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:48.684987 2026] [authz_core:error] [pid 979474:tid 979708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:48.712064 2026] [security2:error] [pid 967714:tid 967960] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMkCAAAAXM"] [Sun Jul 12 18:17:48.719281 2026] [security2:error] [pid 967714:tid 967829] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/tool/view/phpinfo.view.php"] [unique_id "alQurF_56DeKknhy7sMkEQABO2c"] [Sun Jul 12 18:17:48.754258 2026] [security2:error] [pid 979474:tid 979632] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/core/private/config.php"] [unique_id "alQurHTrIlbXpLXvkNcU9AAAAJw"] [Sun Jul 12 18:17:48.817643 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMkDQAAAWg"] [Sun Jul 12 18:17:48.862210 2026] [security2:error] [pid 967714:tid 967747] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/tools/.env"] [unique_id "alQurF_56DeKknhy7sMkFAABdxU"] [Sun Jul 12 18:17:48.948850 2026] [security2:error] [pid 967714:tid 967765] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/tools/phpinfo.php"] [unique_id "alQurF_56DeKknhy7sMkGgABPic"] [Sun Jul 12 18:17:49.025431 2026] [security2:error] [pid 967714:tid 967796] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/uploads/.env"] [unique_id "alQurV_56DeKknhy7sMkGwABYUY"] [Sun Jul 12 18:17:49.137217 2026] [security2:error] [pid 967714:tid 967803] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/users/develop/info.php"] [unique_id "alQurV_56DeKknhy7sMkHQABLk0"] [Sun Jul 12 18:17:49.210537 2026] [security2:error] [pid 967714:tid 967858] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMkGQAAAQ0"] [Sun Jul 12 18:17:49.220777 2026] [security2:error] [pid 967714:tid 967734] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/users/infophp.php"] [unique_id "alQurV_56DeKknhy7sMkHgABbgg"] [Sun Jul 12 18:17:49.335794 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/users/laravel/info.php"] [unique_id "alQurV_56DeKknhy7sMkIgABeyg"] [Sun Jul 12 18:17:49.387010 2026] [security2:error] [pid 967714:tid 967746] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/db_backup.bak"] [unique_id "alQurV_56DeKknhy7sMkJQABQBQ"] [Sun Jul 12 18:17:49.430954 2026] [security2:error] [pid 967714:tid 967763] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/users/linusadmin-phpinfo.php"] [unique_id "alQurV_56DeKknhy7sMkJwABfCU"] [Sun Jul 12 18:17:49.453742 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:49.454236 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:49.495196 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/users/test.php"] [unique_id "alQurV_56DeKknhy7sMkLAABbFs"] [Sun Jul 12 18:17:49.544599 2026] [security2:error] [pid 979474:tid 979640] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQurHTrIlbXpLXvkNcU8gAApDA"] [Sun Jul 12 18:17:49.577764 2026] [security2:error] [pid 967714:tid 967819] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/v1/.env"] [unique_id "alQurV_56DeKknhy7sMkLwABLV0"] [Sun Jul 12 18:17:49.715249 2026] [security2:error] [pid 967714:tid 967785] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/web/.env.bak"] [unique_id "alQurV_56DeKknhy7sMkMwABJzs"] [Sun Jul 12 18:17:49.790769 2026] [security2:error] [pid 967714:tid 967957] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQurV_56DeKknhy7sMkMAAAAXA"] [Sun Jul 12 18:17:49.822193 2026] [security2:error] [pid 967714:tid 967886] [client 216.73.217.123:34828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/index.php/our-team/columnists-contributors/176-angela-kelsheimer-hoo-doo-pharmaceuticals"] [unique_id "alQurV_56DeKknhy7sMkNAAAASk"] [Sun Jul 12 18:17:49.941485 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/web/services/phpinfo.php"] [unique_id "alQurV_56DeKknhy7sMkNwABGRg"] [Sun Jul 12 18:17:49.963818 2026] [security2:error] [pid 967714:tid 967830] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/var/www/html/render/.env"] [unique_id "alQurV_56DeKknhy7sMkOAABHmg"] [Sun Jul 12 18:17:49.964474 2026] [security2:error] [pid 967714:tid 967870] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQurV_56DeKknhy7sMkNQABGSE"] [Sun Jul 12 18:17:49.988018 2026] [security2:error] [pid 979474:tid 979730] [client 164.92.182.81:25053] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "softwaresermon.com"] [uri "/"] [unique_id "alQurXTrIlbXpLXvkNcVBQAAAP0"] [Sun Jul 12 18:17:50.048410 2026] [security2:error] [pid 979474:tid 979595] [remote 185.213.164.145:41814] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 145.164.213.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQurnTrIlbXpLXvkNcVBgAA1nM"] [Sun Jul 12 18:17:50.256565 2026] [authz_core:error] [pid 979474:tid 979697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:50.257349 2026] [authz_core:error] [pid 979474:tid 979697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:50.287084 2026] [security2:error] [pid 979474:tid 979627] [client 164.92.182.81:18315] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "softwaresermon.com"] [uri "/"] [unique_id "alQurnTrIlbXpLXvkNcVEgAAAJc"] [Sun Jul 12 18:17:50.287782 2026] [security2:error] [pid 979474:tid 979656] [client 164.92.182.81:2599] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "69.195.104.114"] [uri "/sdk"] [unique_id "alQurnTrIlbXpLXvkNcVFAAAALQ"] [Sun Jul 12 18:17:50.293533 2026] [security2:error] [pid 967714:tid 967871] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMj-QAAARo"] [Sun Jul 12 18:17:50.324512 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/webdav/phpinfo.php"] [unique_id "alQurl_56DeKknhy7sMkPAABL2s"] [Sun Jul 12 18:17:50.423761 2026] [security2:error] [pid 979474:tid 979630] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQurXTrIlbXpLXvkNcVAgAAmlE"] [Sun Jul 12 18:17:50.429087 2026] [security2:error] [pid 979474:tid 979694] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQurnTrIlbXpLXvkNcVEQAAANk"] [Sun Jul 12 18:17:50.431498 2026] [security2:error] [pid 979474:tid 979684] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQurnTrIlbXpLXvkNcVDwAAAM8"] [Sun Jul 12 18:17:50.501590 2026] [security2:error] [pid 967714:tid 967751] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/webstatic/.env"] [unique_id "alQurl_56DeKknhy7sMkQQABhxk"] [Sun Jul 12 18:17:50.549412 2026] [security2:error] [pid 967714:tid 967769] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/webui/.env"] [unique_id "alQurl_56DeKknhy7sMkQgABUis"] [Sun Jul 12 18:17:50.685391 2026] [security2:error] [pid 967714:tid 967840] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/well-known/.env"] [unique_id "alQurl_56DeKknhy7sMkSgABc3I"] [Sun Jul 12 18:17:50.818644 2026] [security2:error] [pid 967714:tid 967822] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/whturk/.env"] [unique_id "alQurl_56DeKknhy7sMkSwABS2A"] [Sun Jul 12 18:17:50.850028 2026] [security2:error] [pid 979474:tid 979702] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQurnTrIlbXpLXvkNcVHAAAAOE"] [Sun Jul 12 18:17:50.877352 2026] [security2:error] [pid 967714:tid 967934] [client 168.100.149.92:52516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16900/bargainor/2308_psychoreflex.jsp"] [unique_id "alQurl_56DeKknhy7sMkTQAAAVk"] [Sun Jul 12 18:17:50.895385 2026] [security2:error] [pid 967714:tid 967784] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/windows/tests/9.3.x/.env"] [unique_id "alQurl_56DeKknhy7sMkUAABaDo"] [Sun Jul 12 18:17:50.920066 2026] [security2:error] [pid 967714:tid 967904] [client 164.92.182.81:8311] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "softwaresermon.com"] [uri "/"] [unique_id "alQurl_56DeKknhy7sMkUQAAATs"] [Sun Jul 12 18:17:50.922349 2026] [security2:error] [pid 979474:tid 979662] [client 94.187.171.125:50823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQurnTrIlbXpLXvkNcVIAAAALo"] [Sun Jul 12 18:17:50.922528 2026] [security2:error] [pid 979474:tid 979662] [client 94.187.171.125:50823] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQurnTrIlbXpLXvkNcVIAAAALo"] [Sun Jul 12 18:17:50.989013 2026] [security2:error] [pid 979474:tid 979639] [client 65.21.113.206:42706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzkyMDMvYXUvMTIzODUvdQ=="] [unique_id "alQurnTrIlbXpLXvkNcVIgAAAKM"] [Sun Jul 12 18:17:51.019623 2026] [authz_core:error] [pid 979474:tid 979610] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:51.020198 2026] [authz_core:error] [pid 979474:tid 979610] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:51.123860 2026] [security2:error] [pid 967714:tid 967946] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMkBAAAAWU"] [Sun Jul 12 18:17:51.129248 2026] [security2:error] [pid 967714:tid 967860] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQurF_56DeKknhy7sMkAwAAAQ8"] [Sun Jul 12 18:17:51.145332 2026] [security2:error] [pid 967714:tid 967740] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/wp-admin/.env"] [unique_id "alQur1_56DeKknhy7sMkVQABJQ4"] [Sun Jul 12 18:17:51.165078 2026] [security2:error] [pid 979474:tid 979655] [client 125.167.21.72:62632] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQur3TrIlbXpLXvkNcVKAAAALM"] [Sun Jul 12 18:17:51.166808 2026] [security2:error] [pid 979474:tid 979655] [client 125.167.21.72:62632] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQur3TrIlbXpLXvkNcVKAAAALM"] [Sun Jul 12 18:17:51.188594 2026] [security2:error] [pid 979474:tid 979672] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQurHTrIlbXpLXvkNcU6gAAAMQ"] [Sun Jul 12 18:17:51.209223 2026] [security2:error] [pid 979474:tid 979714] [client 164.92.182.81:9111] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "69.195.104.114"] [uri "/"] [unique_id "alQur3TrIlbXpLXvkNcVKwAAAO0"] [Sun Jul 12 18:17:51.258264 2026] [security2:error] [pid 967714:tid 967742] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config-backup.php"] [unique_id "alQur1_56DeKknhy7sMkWQABYRA"] [Sun Jul 12 18:17:51.294088 2026] [security2:error] [pid 979474:tid 979699] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQurnTrIlbXpLXvkNcVGgAA3jU"] [Sun Jul 12 18:17:51.335683 2026] [security2:error] [pid 967714:tid 967964] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQur1_56DeKknhy7sMkUwAAAXc"] [Sun Jul 12 18:17:51.399646 2026] [security2:error] [pid 979474:tid 979703] [client 74.244.23.13:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.23.244.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dawnartist.com"] [uri "/xmlrpc.php"] [unique_id "alQur3TrIlbXpLXvkNcVLQAAAOI"] [Sun Jul 12 18:17:51.399920 2026] [security2:error] [pid 979474:tid 979703] [client 74.244.23.13:61674] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dawnartist.com"] [uri "/xmlrpc.php"] [unique_id "alQur3TrIlbXpLXvkNcVLQAAAOI"] [Sun Jul 12 18:17:51.534817 2026] [security2:error] [pid 967714:tid 967866] [client 155.117.163.217:35650] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur1_56DeKknhy7sMkXwAAARU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.555498 2026] [security2:error] [pid 979474:tid 979711] [client 167.148.117.144:61018] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur3TrIlbXpLXvkNcVMQAAAOo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.594297 2026] [security2:error] [pid 967714:tid 967903] [client 155.117.163.79:36368] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur1_56DeKknhy7sMkYwAAATo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.612484 2026] [security2:error] [pid 979474:tid 979633] [client 155.117.163.79:36358] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur3TrIlbXpLXvkNcVMwAAAJ0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.622390 2026] [security2:error] [pid 979474:tid 979735] [client 167.148.117.86:55094] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur3TrIlbXpLXvkNcVMgAAAQI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.643567 2026] [security2:error] [pid 979474:tid 979695] [client 35.245.146.49:64642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "hqh.cid.mybluehost.me"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQur3TrIlbXpLXvkNcVOQAAANo"] [Sun Jul 12 18:17:51.724798 2026] [security2:error] [pid 967714:tid 967855] [client 155.117.163.99:42196] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQur1_56DeKknhy7sMkbQAAAQo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:51.741648 2026] [security2:error] [pid 967714:tid 967896] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQur1_56DeKknhy7sMkaQAAATM"] [Sun Jul 12 18:17:51.805292 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:51.805870 2026] [authz_core:error] [pid 967714:tid 967925] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:51.834270 2026] [security2:error] [pid 967714:tid 967889] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQur1_56DeKknhy7sMkZwAAASw"] [Sun Jul 12 18:17:51.835077 2026] [security2:error] [pid 979474:tid 979663] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVOgAAALs"] [Sun Jul 12 18:17:52.093402 2026] [security2:error] [pid 979474:tid 979609] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVNwAAAIU"] [Sun Jul 12 18:17:52.093463 2026] [security2:error] [pid 979474:tid 979609] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVNwAAAIU"] [Sun Jul 12 18:17:52.097337 2026] [security2:error] [pid 967714:tid 967916] [client 65.21.113.206:46070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF1b3A4LzkyMDMvYXUvMTIzODUvdQ=="] [unique_id "alQur1_56DeKknhy7sMkYQAAAUc"] [Sun Jul 12 18:17:52.114006 2026] [security2:error] [pid 967714:tid 967875] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQur1_56DeKknhy7sMkeAAAAR4"] [Sun Jul 12 18:17:52.213604 2026] [security2:error] [pid 979474:tid 979641] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVLwAApXc"] [Sun Jul 12 18:17:52.215587 2026] [security2:error] [pid 967714:tid 967976] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusF_56DeKknhy7sMkfAAAAYM"] [Sun Jul 12 18:17:52.228847 2026] [security2:error] [pid 979474:tid 979691] [client 168.100.149.180:55466] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/16965/bargainor/2308_mailable.jsp"] [unique_id "alQusHTrIlbXpLXvkNcVQAAAANY"] [Sun Jul 12 18:17:52.270573 2026] [security2:error] [pid 979474:tid 979708] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVJwAAAOc"] [Sun Jul 12 18:17:52.282469 2026] [security2:error] [pid 979474:tid 979675] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQur3TrIlbXpLXvkNcVLAAAAMc"] [Sun Jul 12 18:17:52.388329 2026] [security2:error] [pid 979474:tid 979692] [client 149.28.47.172:52889] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.47.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "the72hoursolution.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQusHTrIlbXpLXvkNcVTgAAANc"] [Sun Jul 12 18:17:52.445507 2026] [security2:error] [pid 967714:tid 967805] [remote 124.253.251.121:15422] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 121.251.253.124.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "squashclubgroup.com"] [uri "/wp-login.php"] [unique_id "alQusF_56DeKknhy7sMkhQABNk8"] [Sun Jul 12 18:17:52.453262 2026] [security2:error] [pid 967714:tid 967849] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/conn.asp.bak"] [unique_id "alQusF_56DeKknhy7sMkhwABNXs"] [Sun Jul 12 18:17:52.580441 2026] [authz_core:error] [pid 979474:tid 979615] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:52.590109 2026] [authz_core:error] [pid 979474:tid 979615] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:52.652400 2026] [security2:error] [pid 967714:tid 967975] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusF_56DeKknhy7sMkjAAAAYI"] [Sun Jul 12 18:17:52.659737 2026] [security2:error] [pid 967714:tid 967904] [client 24.203.79.110:51149] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQusF_56DeKknhy7sMknAAAATs"] [Sun Jul 12 18:17:52.659973 2026] [security2:error] [pid 967714:tid 967904] [client 24.203.79.110:51149] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQusF_56DeKknhy7sMknAAAATs"] [Sun Jul 12 18:17:52.721163 2026] [security2:error] [pid 979474:tid 979654] [client 123.20.187.15:55553] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQusHTrIlbXpLXvkNcVVwAAALI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:52.825011 2026] [security2:error] [pid 979474:tid 979696] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusHTrIlbXpLXvkNcVWAAAANs"] [Sun Jul 12 18:17:52.890438 2026] [security2:error] [pid 967714:tid 967888] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusF_56DeKknhy7sMkmwAAASs"] [Sun Jul 12 18:17:53.065710 2026] [security2:error] [pid 967714:tid 967809] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/.env.backup.old"] [unique_id "alQusV_56DeKknhy7sMkpgABbFM"] [Sun Jul 12 18:17:53.096441 2026] [security2:error] [pid 967714:tid 967945] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusF_56DeKknhy7sMkpAAAAWQ"] [Sun Jul 12 18:17:53.115386 2026] [security2:error] [pid 979474:tid 979677] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQusHTrIlbXpLXvkNcVTQAAyVo"] [Sun Jul 12 18:17:53.227199 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusV_56DeKknhy7sMkqAAAAUI"] [Sun Jul 12 18:17:53.297009 2026] [security2:error] [pid 967714:tid 967918] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusV_56DeKknhy7sMkqwAAAUk"] [Sun Jul 12 18:17:53.324988 2026] [security2:error] [pid 979474:tid 979688] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusHTrIlbXpLXvkNcVSQAAANM"] [Sun Jul 12 18:17:53.348954 2026] [security2:error] [pid 979474:tid 979635] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusHTrIlbXpLXvkNcVSAAAAJ8"] [Sun Jul 12 18:17:53.389406 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:53.389933 2026] [authz_core:error] [pid 967714:tid 967982] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:53.466550 2026] [security2:error] [pid 979474:tid 979698] [client 35.245.146.49:57839] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.146.245.35.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hqh.cid.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "alQusXTrIlbXpLXvkNcVYgAAAN0"] [Sun Jul 12 18:17:53.466853 2026] [security2:error] [pid 979474:tid 979698] [client 35.245.146.49:57839] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "hqh.cid.mybluehost.me"] [uri "/xmlrpc.php"] [unique_id "alQusXTrIlbXpLXvkNcVYgAAAN0"] [Sun Jul 12 18:17:53.491597 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVXgAAAJg"] [Sun Jul 12 18:17:53.506599 2026] [security2:error] [pid 979474:tid 979610] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVWwAAAIY"] [Sun Jul 12 18:17:53.618032 2026] [security2:error] [pid 979474:tid 979711] [client 65.21.113.206:42706] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWF5NDlrbl80MjkzL2F5LzEzMDY5L3k=.html"] [unique_id "alQusXTrIlbXpLXvkNcVZwAAAOo"] [Sun Jul 12 18:17:53.637076 2026] [security2:error] [pid 967714:tid 967881] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusV_56DeKknhy7sMkvgAAASQ"] [Sun Jul 12 18:17:53.640217 2026] [security2:error] [pid 967714:tid 967967] [client 87.241.159.115:33192] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQusV_56DeKknhy7sMkwQAAAXo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:53.681805 2026] [security2:error] [pid 979474:tid 979657] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVZgAAALU"] [Sun Jul 12 18:17:53.785271 2026] [security2:error] [pid 967714:tid 967778] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.local.php"] [unique_id "alQusV_56DeKknhy7sMkygABfTQ"] [Sun Jul 12 18:17:53.859691 2026] [security2:error] [pid 967714:tid 967855] [client 169.224.105.246:24574] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQusV_56DeKknhy7sMkyQAAAQo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:53.864933 2026] [security2:error] [pid 967714:tid 967844] [remote 43.159.33.6:34730] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.33.159.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQusV_56DeKknhy7sMkxQABcXY"], referer: https://idreamofjeannemarie.com/wp-login.php?redirect_to=https%3A%2F%2Fidreamofjeannemarie.com%2Fmy-4-anniversary-winners-and-a-bit-more%2F [Sun Jul 12 18:17:53.911342 2026] [security2:error] [pid 979474:tid 979731] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVaAAAAP4"] [Sun Jul 12 18:17:53.924969 2026] [security2:error] [pid 979474:tid 979647] [client 74.7.175.156:47150] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mobynuke.net"] [uri "/robots.txt"] [unique_id "alQusXTrIlbXpLXvkNcVcAAAAKs"] [Sun Jul 12 18:17:54.032066 2026] [security2:error] [pid 979474:tid 979670] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVXAAAwmI"] [Sun Jul 12 18:17:54.113924 2026] [security2:error] [pid 967714:tid 967738] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php-backup"] [unique_id "alQusl_56DeKknhy7sMk0QABdQw"] [Sun Jul 12 18:17:54.131606 2026] [security2:error] [pid 979474:tid 979699] [client 181.117.161.182:33134] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQusnTrIlbXpLXvkNcVdQAAAN4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:54.160462 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:54.161009 2026] [authz_core:error] [pid 967714:tid 967857] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:54.351921 2026] [security2:error] [pid 967714:tid 967965] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusV_56DeKknhy7sMkuAAAAXg"] [Sun Jul 12 18:17:54.362402 2026] [security2:error] [pid 967714:tid 967935] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusl_56DeKknhy7sMkzwAAAVo"] [Sun Jul 12 18:17:54.391010 2026] [security2:error] [pid 979474:tid 979678] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusXTrIlbXpLXvkNcVXwAAAMo"] [Sun Jul 12 18:17:54.456858 2026] [security2:error] [pid 967714:tid 967897] [client 154.61.172.70:4636] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQusl_56DeKknhy7sMk2gAAATQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:54.569756 2026] [security2:error] [pid 967714:tid 967728] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.aws"] [unique_id "alQusl_56DeKknhy7sMk4QABRAI"] [Sun Jul 12 18:17:54.732586 2026] [security2:error] [pid 967714:tid 967975] [client 146.174.181.150:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQusl_56DeKknhy7sMk1AAAAYI"] [Sun Jul 12 18:17:54.757864 2026] [security2:error] [pid 967714:tid 967907] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQusl_56DeKknhy7sMk0gAAAT4"] [Sun Jul 12 18:17:54.757919 2026] [security2:error] [pid 967714:tid 967907] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQusl_56DeKknhy7sMk0gAAAT4"] [Sun Jul 12 18:17:54.759016 2026] [security2:error] [pid 979474:tid 979644] [client 65.21.113.206:37824] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWF5NDlrbl80MjkzL2F5LzEzMDY5L3k=.html"] [unique_id "alQusnTrIlbXpLXvkNcVdgAAAKg"] [Sun Jul 12 18:17:54.766069 2026] [security2:error] [pid 979474:tid 979667] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusnTrIlbXpLXvkNcVhgAAAL8"] [Sun Jul 12 18:17:54.867022 2026] [security2:error] [pid 967714:tid 967938] [client 168.100.149.105:43638] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17030/bargainor/2308_epidemiology.jsp"] [unique_id "alQusl_56DeKknhy7sMk4wAAAV0"] [Sun Jul 12 18:17:54.967024 2026] [security2:error] [pid 967714:tid 967772] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.dist"] [unique_id "alQusl_56DeKknhy7sMk6QABDS4"] [Sun Jul 12 18:17:54.981937 2026] [authz_core:error] [pid 979474:tid 979634] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:54.982596 2026] [authz_core:error] [pid 979474:tid 979634] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:55.008793 2026] [security2:error] [pid 979474:tid 979690] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQusnTrIlbXpLXvkNcVeQAA1WU"] [Sun Jul 12 18:17:55.127136 2026] [security2:error] [pid 967714:tid 967771] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.err"] [unique_id "alQus1_56DeKknhy7sMk6gABJy0"] [Sun Jul 12 18:17:55.155578 2026] [security2:error] [pid 979474:tid 979718] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQusnTrIlbXpLXvkNcViwAAAPE"] [Sun Jul 12 18:17:55.202362 2026] [security2:error] [pid 967714:tid 967867] [client 202.79.184.221:5551] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQus1_56DeKknhy7sMk7gAAARY"], referer: https://google.com, https://www.portables-batterie.fr/lenovo-598/Lenovo-ThinkPad-X200s-pc-batterie.htm [Sun Jul 12 18:17:55.334463 2026] [security2:error] [pid 967714:tid 967841] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/keys/gcp_key.pem"] [unique_id "alQus1_56DeKknhy7sMk9AABL3M"] [Sun Jul 12 18:17:55.372954 2026] [security2:error] [pid 967714:tid 967845] [remote 184.168.124.4:53062] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQus1_56DeKknhy7sMk9wABY3c"] [Sun Jul 12 18:17:55.391373 2026] [security2:error] [pid 979474:tid 979692] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusnTrIlbXpLXvkNcVgQAAANc"] [Sun Jul 12 18:17:55.420114 2026] [security2:error] [pid 967714:tid 967940] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQusl_56DeKknhy7sMk3AAAAV8"] [Sun Jul 12 18:17:55.479320 2026] [security2:error] [pid 967714:tid 967838] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "67.222.42.205"] [uri "/wp-config.php.tar"] [unique_id "alQus1_56DeKknhy7sMlAwABJHA"] [Sun Jul 12 18:17:55.509225 2026] [security2:error] [pid 967714:tid 967797] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/fitness-app/src/.env"] [unique_id "alQus1_56DeKknhy7sMlBAABI0c"] [Sun Jul 12 18:17:55.693684 2026] [security2:error] [pid 967714:tid 967743] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php3"] [unique_id "alQus1_56DeKknhy7sMlCAABMBE"] [Sun Jul 12 18:17:55.711785 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:55.712275 2026] [authz_core:error] [pid 967714:tid 967976] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:55.873678 2026] [security2:error] [pid 967714:tid 967871] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQus1_56DeKknhy7sMlCQAAARo"] [Sun Jul 12 18:17:55.879517 2026] [security2:error] [pid 979474:tid 979696] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQus3TrIlbXpLXvkNcVjAAA2z0"] [Sun Jul 12 18:17:55.964043 2026] [security2:error] [pid 967714:tid 967842] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2010"] [unique_id "alQus1_56DeKknhy7sMlEgABdXQ"] [Sun Jul 12 18:17:56.045923 2026] [security2:error] [pid 967714:tid 967829] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/connection.php~"] [unique_id "alQutF_56DeKknhy7sMlFQABE2c"] [Sun Jul 12 18:17:56.217024 2026] [security2:error] [pid 967714:tid 967850] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/tests/default_settings/v9.0/.env"] [unique_id "alQutF_56DeKknhy7sMlFgABW3w"] [Sun Jul 12 18:17:56.359868 2026] [security2:error] [pid 967714:tid 967749] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2014"] [unique_id "alQutF_56DeKknhy7sMlGgABgBc"] [Sun Jul 12 18:17:56.484021 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:56.484507 2026] [authz_core:error] [pid 967714:tid 967897] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:56.646421 2026] [security2:error] [pid 979474:tid 979707] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutHTrIlbXpLXvkNcVogAAAOY"] [Sun Jul 12 18:17:56.796398 2026] [security2:error] [pid 979474:tid 979711] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQutHTrIlbXpLXvkNcVoAAA6mo"] [Sun Jul 12 18:17:56.837520 2026] [security2:error] [pid 967714:tid 967766] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2016"] [unique_id "alQutF_56DeKknhy7sMlLAABZCg"] [Sun Jul 12 18:17:56.857570 2026] [security2:error] [pid 967714:tid 967746] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2017"] [unique_id "alQutF_56DeKknhy7sMlLgABDxQ"] [Sun Jul 12 18:17:56.869689 2026] [security2:error] [pid 979474:tid 979687] [client 168.100.149.127:54390] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17095/bargainor/2308_secque.jsp"] [unique_id "alQutHTrIlbXpLXvkNcVpgAAANI"] [Sun Jul 12 18:17:56.997497 2026] [security2:error] [pid 967714:tid 967754] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2020"] [unique_id "alQutF_56DeKknhy7sMlNwABFhw"] [Sun Jul 12 18:17:57.041816 2026] [security2:error] [pid 967714:tid 967890] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutF_56DeKknhy7sMlKwAAAS0"] [Sun Jul 12 18:17:57.079559 2026] [security2:error] [pid 967714:tid 967817] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2021"] [unique_id "alQutV_56DeKknhy7sMlOQABL1s"] [Sun Jul 12 18:17:57.186445 2026] [security2:error] [pid 979474:tid 979677] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQus3TrIlbXpLXvkNcVlAAAAMk"] [Sun Jul 12 18:17:57.214906 2026] [security2:error] [pid 967714:tid 967819] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/footer.php.old"] [unique_id "alQutV_56DeKknhy7sMlPQABUF0"] [Sun Jul 12 18:17:57.262704 2026] [security2:error] [pid 967714:tid 967980] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQus1_56DeKknhy7sMlAQAAAYc"] [Sun Jul 12 18:17:57.263733 2026] [security2:error] [pid 967714:tid 967741] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2022"] [unique_id "alQutV_56DeKknhy7sMlQAABJA8"] [Sun Jul 12 18:17:57.309099 2026] [authz_core:error] [pid 967714:tid 967861] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:57.309572 2026] [authz_core:error] [pid 967714:tid 967861] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:57.341601 2026] [security2:error] [pid 967714:tid 967750] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2023"] [unique_id "alQutV_56DeKknhy7sMlQQABhRg"] [Sun Jul 12 18:17:57.358026 2026] [security2:error] [pid 979474:tid 979725] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQus3TrIlbXpLXvkNcVmAAAAPg"] [Sun Jul 12 18:17:57.402520 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQus1_56DeKknhy7sMlAgAAAVI"] [Sun Jul 12 18:17:57.457228 2026] [security2:error] [pid 967714:tid 967885] [client 115.74.18.139:41820] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQutV_56DeKknhy7sMlQwAAASg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:17:57.475033 2026] [security2:error] [pid 967714:tid 967833] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2024"] [unique_id "alQutV_56DeKknhy7sMlTgABPGs"] [Sun Jul 12 18:17:57.607257 2026] [security2:error] [pid 967714:tid 967893] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutV_56DeKknhy7sMlSwAAATA"] [Sun Jul 12 18:17:57.679370 2026] [security2:error] [pid 979474:tid 979647] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQutHTrIlbXpLXvkNcVpwAAq3Q"] [Sun Jul 12 18:17:57.730821 2026] [security2:error] [pid 967714:tid 967799] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/wp-config.php_old2025"] [unique_id "alQutV_56DeKknhy7sMlVQABDkk"] [Sun Jul 12 18:17:57.803053 2026] [security2:error] [pid 967714:tid 967933] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/apache/info.php"] [unique_id "alQutV_56DeKknhy7sMlWAAAAVg"] [Sun Jul 12 18:17:57.851273 2026] [security2:error] [pid 967714:tid 967761] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "67.222.42.205"] [uri "/www/.env"] [unique_id "alQutV_56DeKknhy7sMlWgABeCM"] [Sun Jul 12 18:17:57.995513 2026] [security2:error] [pid 967714:tid 967939] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQutV_56DeKknhy7sMlXAAAAV4"] [Sun Jul 12 18:17:58.028541 2026] [security2:error] [pid 967714:tid 967784] [remote 62.171.167.118:52096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.42.205"] [uri "/~cats/php/phpinfo.php"] [unique_id "alQutl_56DeKknhy7sMlagABfzo"] [Sun Jul 12 18:17:58.096418 2026] [authz_core:error] [pid 967714:tid 967934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:58.096927 2026] [authz_core:error] [pid 967714:tid 967934] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:58.249184 2026] [security2:error] [pid 967714:tid 967907] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutV_56DeKknhy7sMlaAAAAT4"] [Sun Jul 12 18:17:58.319361 2026] [security2:error] [pid 967714:tid 967909] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMlcQAAAUA"] [Sun Jul 12 18:17:58.530608 2026] [security2:error] [pid 967714:tid 967876] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQutV_56DeKknhy7sMlRQAAAR8"] [Sun Jul 12 18:17:58.574129 2026] [security2:error] [pid 967714:tid 967879] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMleAABIko"] [Sun Jul 12 18:17:58.646758 2026] [security2:error] [pid 979474:tid 979722] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQutXTrIlbXpLXvkNcVqwAA9WA"] [Sun Jul 12 18:17:58.683229 2026] [security2:error] [pid 979474:tid 979720] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutnTrIlbXpLXvkNcVrwAAAPM"] [Sun Jul 12 18:17:58.860250 2026] [security2:error] [pid 967714:tid 967901] [client 168.100.149.195:45658] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17160/bargainor/2308_dislevelment.jsp"] [unique_id "alQutl_56DeKknhy7sMlhQAAATg"] [Sun Jul 12 18:17:58.905782 2026] [security2:error] [pid 967714:tid 967927] [client 62.171.167.118:52096] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMlggABUkw"] [Sun Jul 12 18:17:58.921217 2026] [authz_core:error] [pid 967714:tid 967978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:58.921840 2026] [authz_core:error] [pid 967714:tid 967978] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:59.029077 2026] [security2:error] [pid 967714:tid 967930] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMljQAAAVU"] [Sun Jul 12 18:17:59.093683 2026] [security2:error] [pid 967714:tid 967855] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQutV_56DeKknhy7sMlTQAAAQo"] [Sun Jul 12 18:17:59.112004 2026] [security2:error] [pid 967714:tid 967970] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMligAAAX0"] [Sun Jul 12 18:17:59.154744 2026] [security2:error] [pid 979474:tid 979684] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVugAAAM8"] [Sun Jul 12 18:17:59.184822 2026] [security2:error] [pid 967714:tid 967899] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMllQAAATY"] [Sun Jul 12 18:17:59.194049 2026] [security2:error] [pid 967714:tid 967902] [client 65.21.113.206:43174] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWFfNjQ1MC9hODQvMTU1NjlfODQ=.htm"] [unique_id "alQut1_56DeKknhy7sMlnAAAATk"] [Sun Jul 12 18:17:59.273543 2026] [security2:error] [pid 967714:tid 967857] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlmwAAAQw"] [Sun Jul 12 18:17:59.286795 2026] [security2:error] [pid 967714:tid 967745] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/forgot.php.old"] [unique_id "alQut1_56DeKknhy7sMlogABKxM"] [Sun Jul 12 18:17:59.374488 2026] [security2:error] [pid 967714:tid 967971] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlnwAAAX4"] [Sun Jul 12 18:17:59.404782 2026] [security2:error] [pid 967714:tid 967949] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlowAAAWg"] [Sun Jul 12 18:17:59.599622 2026] [security2:error] [pid 967714:tid 967979] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQutl_56DeKknhy7sMlfgAAAYY"] [Sun Jul 12 18:17:59.654410 2026] [security2:error] [pid 979474:tid 979617] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQutnTrIlbXpLXvkNcVtAAAjWw"] [Sun Jul 12 18:17:59.656037 2026] [security2:error] [pid 967714:tid 967910] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlrQAAAUE"] [Sun Jul 12 18:17:59.696882 2026] [authz_core:error] [pid 967714:tid 967938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:17:59.697384 2026] [authz_core:error] [pid 967714:tid 967938] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:17:59.699577 2026] [security2:error] [pid 967714:tid 967882] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlsAAAASU"] [Sun Jul 12 18:17:59.756470 2026] [security2:error] [pid 967714:tid 967923] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlqwAAAU4"] [Sun Jul 12 18:17:59.880791 2026] [security2:error] [pid 979474:tid 979689] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVxgAAANQ"] [Sun Jul 12 18:17:59.936928 2026] [security2:error] [pid 967714:tid 967737] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/webpack.config.js.bak"] [unique_id "alQut1_56DeKknhy7sMlxgABIws"] [Sun Jul 12 18:18:00.038795 2026] [security2:error] [pid 967714:tid 967911] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlvwAAAUI"] [Sun Jul 12 18:18:00.100307 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlywAAAXQ"] [Sun Jul 12 18:18:00.160450 2026] [security2:error] [pid 967714:tid 967900] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMlmAAAATc"] [Sun Jul 12 18:18:00.173362 2026] [security2:error] [pid 979474:tid 979734] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVywAAAQE"] [Sun Jul 12 18:18:00.174123 2026] [security2:error] [pid 979474:tid 979727] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVxAAAAPo"] [Sun Jul 12 18:18:00.174180 2026] [security2:error] [pid 979474:tid 979727] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVxAAAAPo"] [Sun Jul 12 18:18:00.182902 2026] [security2:error] [pid 967714:tid 967909] [client 65.21.113.206:37828] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWFfNjQ1MC9hODQvMTU1NjlfODQ=.htm"] [unique_id "alQut1_56DeKknhy7sMltwAAAUA"] [Sun Jul 12 18:18:00.234559 2026] [security2:error] [pid 979474:tid 979612] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcVzAAAAIg"] [Sun Jul 12 18:18:00.367062 2026] [security2:error] [pid 979474:tid 979712] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV1AAAAOs"] [Sun Jul 12 18:18:00.382216 2026] [security2:error] [pid 967714:tid 967868] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuuF_56DeKknhy7sMl0AAAARc"] [Sun Jul 12 18:18:00.513268 2026] [authz_core:error] [pid 979474:tid 979700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:00.513984 2026] [authz_core:error] [pid 979474:tid 979700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:00.587231 2026] [security2:error] [pid 979474:tid 979639] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQut3TrIlbXpLXvkNcVyAAAowE"] [Sun Jul 12 18:18:00.671076 2026] [security2:error] [pid 979474:tid 979665] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV5AAAAL0"] [Sun Jul 12 18:18:00.829000 2026] [security2:error] [pid 979474:tid 979646] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV8QAAAKo"] [Sun Jul 12 18:18:00.829023 2026] [security2:error] [pid 979474:tid 979664] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV5wAAALw"] [Sun Jul 12 18:18:00.911901 2026] [security2:error] [pid 979474:tid 979726] [client 168.100.149.126:15652] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17225/bargainor/2308_limnoria.jsp"] [unique_id "alQuuHTrIlbXpLXvkNcWCAAAAPk"] [Sun Jul 12 18:18:01.052919 2026] [security2:error] [pid 979474:tid 979722] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcWBwAAAPU"] [Sun Jul 12 18:18:01.250967 2026] [security2:error] [pid 967714:tid 967951] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuuV_56DeKknhy7sMl-QAAAWo"] [Sun Jul 12 18:18:01.275017 2026] [authz_core:error] [pid 979474:tid 979678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:01.275517 2026] [authz_core:error] [pid 979474:tid 979678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:01.354001 2026] [security2:error] [pid 979474:tid 979643] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuXTrIlbXpLXvkNcWEwAAAKc"] [Sun Jul 12 18:18:01.425100 2026] [security2:error] [pid 967714:tid 967961] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuV_56DeKknhy7sMl_QAAAXQ"] [Sun Jul 12 18:18:01.427779 2026] [security2:error] [pid 967714:tid 967762] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/backup/default.sql"] [unique_id "alQuuV_56DeKknhy7sMmBQABeSQ"] [Sun Jul 12 18:18:01.477690 2026] [security2:error] [pid 979474:tid 979723] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuXTrIlbXpLXvkNcWFgAAAPY"] [Sun Jul 12 18:18:01.543578 2026] [security2:error] [pid 979474:tid 979691] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV8gAA1gs"] [Sun Jul 12 18:18:01.590035 2026] [security2:error] [pid 967714:tid 967905] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuV_56DeKknhy7sMmCAAAATw"] [Sun Jul 12 18:18:01.592512 2026] [security2:error] [pid 967714:tid 967916] [client 94.187.171.125:51294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuuV_56DeKknhy7sMmDgAAAUc"] [Sun Jul 12 18:18:01.592804 2026] [security2:error] [pid 967714:tid 967916] [client 94.187.171.125:51294] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuuV_56DeKknhy7sMmDgAAAUc"] [Sun Jul 12 18:18:01.597325 2026] [security2:error] [pid 967714:tid 967744] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/spool/.env"] [unique_id "alQuuV_56DeKknhy7sMmDwABFxI"] [Sun Jul 12 18:18:01.650186 2026] [security2:error] [pid 979474:tid 979701] [client 125.167.21.72:63223] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuuXTrIlbXpLXvkNcWHwAAAOA"] [Sun Jul 12 18:18:01.650419 2026] [security2:error] [pid 979474:tid 979701] [client 125.167.21.72:63223] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuuXTrIlbXpLXvkNcWHwAAAOA"] [Sun Jul 12 18:18:01.663439 2026] [security2:error] [pid 979474:tid 979702] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuuXTrIlbXpLXvkNcWHQAAAOE"] [Sun Jul 12 18:18:01.794276 2026] [security2:error] [pid 967714:tid 967936] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/settings/config.php"] [unique_id "alQuuV_56DeKknhy7sMmFwAAAVs"] [Sun Jul 12 18:18:01.965488 2026] [security2:error] [pid 967714:tid 967845] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/config/static/sample.bak"] [unique_id "alQuuV_56DeKknhy7sMmIAABRnc"] [Sun Jul 12 18:18:01.971779 2026] [security2:error] [pid 967714:tid 967874] [client 128.177.144.99:55198] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQuuV_56DeKknhy7sMmCgABHVw"], referer: https://prestone.com.ph/prestone-asian-vehicles-red-coolant/ [Sun Jul 12 18:18:02.045023 2026] [authz_core:error] [pid 967714:tid 967869] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:02.045534 2026] [authz_core:error] [pid 967714:tid 967869] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:02.109392 2026] [security2:error] [pid 967714:tid 967890] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQut1_56DeKknhy7sMltgAAAS0"] [Sun Jul 12 18:18:02.218087 2026] [security2:error] [pid 967714:tid 967974] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuul_56DeKknhy7sMmJgAAAYE"] [Sun Jul 12 18:18:02.220807 2026] [security2:error] [pid 979474:tid 979714] [client 168.100.149.90:59526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17290/bargainor/2308_milksopism.jsp"] [unique_id "alQuunTrIlbXpLXvkNcWKQAAAO0"] [Sun Jul 12 18:18:02.322012 2026] [security2:error] [pid 967714:tid 967923] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuul_56DeKknhy7sMmKwAAAU4"] [Sun Jul 12 18:18:02.335296 2026] [security2:error] [pid 979474:tid 979729] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV0gAAAPw"] [Sun Jul 12 18:18:02.426903 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV0wAAAPQ"] [Sun Jul 12 18:18:02.465067 2026] [security2:error] [pid 979474:tid 979736] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuuHTrIlbXpLXvkNcV1QAAAQM"] [Sun Jul 12 18:18:02.535312 2026] [security2:error] [pid 967714:tid 967964] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuul_56DeKknhy7sMmKgAAAXc"] [Sun Jul 12 18:18:02.614444 2026] [security2:error] [pid 967714:tid 967884] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuul_56DeKknhy7sMmMwAAASc"] [Sun Jul 12 18:18:02.676332 2026] [security2:error] [pid 979474:tid 979662] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuuXTrIlbXpLXvkNcWIQAAuiw"] [Sun Jul 12 18:18:02.713839 2026] [security2:error] [pid 967714:tid 967850] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/config/index.bak"] [unique_id "alQuul_56DeKknhy7sMmOwABS3w"] [Sun Jul 12 18:18:02.829867 2026] [security2:error] [pid 979474:tid 979511] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/main_user/.env"] [unique_id "alQuunTrIlbXpLXvkNcWMQAA5h8"] [Sun Jul 12 18:18:02.831150 2026] [authz_core:error] [pid 967714:tid 967956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:02.831618 2026] [authz_core:error] [pid 967714:tid 967956] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:02.872588 2026] [security2:error] [pid 979474:tid 979695] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuunTrIlbXpLXvkNcWMAAAANo"] [Sun Jul 12 18:18:02.883288 2026] [security2:error] [pid 967714:tid 967747] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/tenant/.env"] [unique_id "alQuul_56DeKknhy7sMmQQABHBU"] [Sun Jul 12 18:18:03.078622 2026] [security2:error] [pid 979474:tid 979687] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuunTrIlbXpLXvkNcWOAAAANI"] [Sun Jul 12 18:18:03.222734 2026] [security2:error] [pid 979474:tid 979665] [client 24.203.79.110:51656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuu3TrIlbXpLXvkNcWQAAAAL0"] [Sun Jul 12 18:18:03.228315 2026] [security2:error] [pid 979474:tid 979665] [client 24.203.79.110:51656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuu3TrIlbXpLXvkNcWQAAAAL0"] [Sun Jul 12 18:18:03.254223 2026] [security2:error] [pid 967714:tid 967976] [client 65.21.113.206:43174] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWFiZHFmLzI0NTgvYWIvMjI4ODUvYg=="] [unique_id "alQuu1_56DeKknhy7sMmUAAAAYM"] [Sun Jul 12 18:18:03.348446 2026] [security2:error] [pid 967714:tid 967921] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmSwAAAUw"] [Sun Jul 12 18:18:03.447919 2026] [security2:error] [pid 967714:tid 967917] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmUwAAAUg"] [Sun Jul 12 18:18:03.541119 2026] [security2:error] [pid 979474:tid 979713] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php.temp"] [unique_id "alQuu3TrIlbXpLXvkNcWRwAAAOw"] [Sun Jul 12 18:18:03.617498 2026] [authz_core:error] [pid 967714:tid 967888] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:03.618027 2026] [authz_core:error] [pid 967714:tid 967888] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:03.640095 2026] [security2:error] [pid 979474:tid 979726] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuu3TrIlbXpLXvkNcWRQAAAPk"] [Sun Jul 12 18:18:03.793375 2026] [security2:error] [pid 979474:tid 979657] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuunTrIlbXpLXvkNcWOQAAtSE"] [Sun Jul 12 18:18:03.846818 2026] [security2:error] [pid 967714:tid 967969] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmYQAAAXw"] [Sun Jul 12 18:18:04.090958 2026] [security2:error] [pid 979474:tid 979693] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuu3TrIlbXpLXvkNcWTwAAANg"] [Sun Jul 12 18:18:04.123613 2026] [security2:error] [pid 979474:tid 979628] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuunTrIlbXpLXvkNcWKwAAAJg"] [Sun Jul 12 18:18:04.150830 2026] [security2:error] [pid 967714:tid 967925] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmcAAAAVA"] [Sun Jul 12 18:18:04.196076 2026] [security2:error] [pid 967714:tid 967908] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuul_56DeKknhy7sMmNwAAAT8"] [Sun Jul 12 18:18:04.271245 2026] [security2:error] [pid 967714:tid 967761] [remote 185.177.72.12:57322] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/reset.php.old"] [unique_id "alQuvF_56DeKknhy7sMmgAABQiM"] [Sun Jul 12 18:18:04.284094 2026] [security2:error] [pid 967714:tid 967959] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmZQAAAXI"] [Sun Jul 12 18:18:04.285870 2026] [security2:error] [pid 979474:tid 979716] [client 65.21.113.206:41808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWFiZHFmLzI0NTgvYWIvMjI4ODUvYg=="] [unique_id "alQuu3TrIlbXpLXvkNcWTQAAAO8"] [Sun Jul 12 18:18:04.288841 2026] [security2:error] [pid 967714:tid 967959] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuu1_56DeKknhy7sMmZQAAAXI"] [Sun Jul 12 18:18:04.384108 2026] [security2:error] [pid 967714:tid 967922] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.42.205"] [uri "/index.php"] [unique_id "alQuvF_56DeKknhy7sMmfwAAAU0"] [Sun Jul 12 18:18:04.452924 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:04.453435 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:04.753039 2026] [security2:error] [pid 979474:tid 979526] [remote 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuu3TrIlbXpLXvkNcWUQAAni4"] [Sun Jul 12 18:18:04.916743 2026] [security2:error] [pid 979474:tid 979647] [client 168.100.149.177:34582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17355/bargainor/2308_capnoides.jsp"] [unique_id "alQuvHTrIlbXpLXvkNcWdwAAAKs"] [Sun Jul 12 18:18:04.917541 2026] [security2:error] [pid 979474:tid 979506] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/manual/.env"] [unique_id "alQuvHTrIlbXpLXvkNcWdQAAsxo"] [Sun Jul 12 18:18:04.942641 2026] [security2:error] [pid 979474:tid 979512] [remote 185.177.72.12:47784] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/sh/.env"] [unique_id "alQuvHTrIlbXpLXvkNcWfAAAuCA"] [Sun Jul 12 18:18:05.074120 2026] [security2:error] [pid 979474:tid 979518] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/master/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWgQAA3iY"] [Sun Jul 12 18:18:05.180853 2026] [security2:error] [pid 967714:tid 967880] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvF_56DeKknhy7sMmeQAAASM"] [Sun Jul 12 18:18:05.217138 2026] [authz_core:error] [pid 979474:tid 979637] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:05.217621 2026] [authz_core:error] [pid 979474:tid 979637] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:05.225246 2026] [security2:error] [pid 979474:tid 979545] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/media/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWjAAAr0E"] [Sun Jul 12 18:18:05.312708 2026] [security2:error] [pid 967714:tid 967957] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvF_56DeKknhy7sMmfgAAAXA"] [Sun Jul 12 18:18:05.330035 2026] [security2:error] [pid 979474:tid 979670] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuvXTrIlbXpLXvkNcWhgAAAMI"] [Sun Jul 12 18:18:05.349992 2026] [security2:error] [pid 979474:tid 979658] [client 86.165.19.85:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuvHTrIlbXpLXvkNcWfQAAALY"] [Sun Jul 12 18:18:05.376969 2026] [security2:error] [pid 979474:tid 979552] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/memcached/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWkAAAqUg"] [Sun Jul 12 18:18:05.529058 2026] [security2:error] [pid 979474:tid 979537] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mentorg-lava-docker/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWlwAAlTk"] [Sun Jul 12 18:18:05.679324 2026] [security2:error] [pid 979474:tid 979563] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/micro-app-react-communication/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWmgAAxlM"] [Sun Jul 12 18:18:05.705571 2026] [core:error] [pid 979474:tid 979692] [client 74.7.241.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:18:05.792039 2026] [core:error] [pid 979474:tid 979692] [client 74.7.241.189:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:18:05.792340 2026] [security2:error] [pid 979474:tid 979692] [client 74.7.241.189:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "lonelytogether.zoeybluesky.com"] [uri "/index.php"] [unique_id "alQuvXTrIlbXpLXvkNcWngAAANc"] [Sun Jul 12 18:18:05.795255 2026] [security2:error] [pid 979474:tid 979690] [client 74.7.241.189:57460] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "lonelytogether.zoeybluesky.com"] [uri "/robots.txt"] [unique_id "alQuvXTrIlbXpLXvkNcWmQAA1So"] [Sun Jul 12 18:18:05.884431 2026] [security2:error] [pid 979474:tid 979669] [client 185.177.72.12:47784] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/options-writing.php"] [unique_id "alQuvXTrIlbXpLXvkNcWmAAAwVI"] [Sun Jul 12 18:18:05.925481 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:05.926214 2026] [authz_core:error] [pid 979474:tid 979617] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:05.942204 2026] [security2:error] [pid 979474:tid 979500] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/micro-app-react/.env"] [unique_id "alQuvXTrIlbXpLXvkNcWqgABAxQ"] [Sun Jul 12 18:18:06.008053 2026] [security2:error] [pid 979474:tid 979650] [client 20.63.87.152:39085] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/.dj/index.php"] [unique_id "alQuvnTrIlbXpLXvkNcWqwAAAK4"] [Sun Jul 12 18:18:06.094777 2026] [security2:error] [pid 979474:tid 979554] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mindsweeper/gui/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWrAAAxUo"] [Sun Jul 12 18:18:06.141789 2026] [security2:error] [pid 979474:tid 979708] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvXTrIlbXpLXvkNcWigAAAOc"] [Sun Jul 12 18:18:06.247275 2026] [security2:error] [pid 979474:tid 979523] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/minified/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWtgAAsys"] [Sun Jul 12 18:18:06.331764 2026] [security2:error] [pid 979474:tid 979661] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvXTrIlbXpLXvkNcWjwAAALk"] [Sun Jul 12 18:18:06.404830 2026] [security2:error] [pid 979474:tid 979587] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/misc/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWvQAAx2s"] [Sun Jul 12 18:18:06.436241 2026] [security2:error] [pid 979474:tid 979521] [remote 185.177.72.12:47794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQuvnTrIlbXpLXvkNcWvAAAySk"] [Sun Jul 12 18:18:06.556406 2026] [security2:error] [pid 979474:tid 979520] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Modix/ClientApp/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWyAAA6Cg"] [Sun Jul 12 18:18:06.696187 2026] [authz_core:error] [pid 979474:tid 979722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:06.696731 2026] [authz_core:error] [pid 979474:tid 979722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:06.711422 2026] [security2:error] [pid 979474:tid 979528] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/monerod/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWzAAAoDA"] [Sun Jul 12 18:18:06.811123 2026] [security2:error] [pid 979474:tid 979649] [client 20.63.87.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/index.php"] [unique_id "alQuvnTrIlbXpLXvkNcWuQAAAK0"] [Sun Jul 12 18:18:06.862337 2026] [security2:error] [pid 979474:tid 979646] [client 168.100.149.121:18510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17420/bargainor/2308_deft.jsp"] [unique_id "alQuvnTrIlbXpLXvkNcWzgAAAKo"] [Sun Jul 12 18:18:06.862531 2026] [security2:error] [pid 979474:tid 979595] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/mongodb/config/dev/.env"] [unique_id "alQuvnTrIlbXpLXvkNcWzQAAxHM"] [Sun Jul 12 18:18:06.886820 2026] [security2:error] [pid 979474:tid 979593] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/credentials.yml~"] [unique_id "alQuvnTrIlbXpLXvkNcW0AAAoXE"] [Sun Jul 12 18:18:06.944245 2026] [security2:error] [pid 979474:tid 979643] [client 20.63.87.152:35401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/.trash7206/index.php"] [unique_id "alQuvnTrIlbXpLXvkNcW1wAAAKc"] [Sun Jul 12 18:18:07.015314 2026] [security2:error] [pid 979474:tid 979564] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/monitoring/compose/.env"] [unique_id "alQuv3TrIlbXpLXvkNcW2AAAz1Q"] [Sun Jul 12 18:18:07.146299 2026] [security2:error] [pid 979474:tid 979711] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvnTrIlbXpLXvkNcWsgAAAOo"] [Sun Jul 12 18:18:07.167734 2026] [security2:error] [pid 979474:tid 979565] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/moodledata/.env"] [unique_id "alQuv3TrIlbXpLXvkNcW3QAA4lU"] [Sun Jul 12 18:18:07.249761 2026] [security2:error] [pid 979474:tid 979688] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcW2wAAANM"] [Sun Jul 12 18:18:07.318561 2026] [security2:error] [pid 979474:tid 979568] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/msks/.env"] [unique_id "alQuv3TrIlbXpLXvkNcW6AAA41g"] [Sun Jul 12 18:18:07.352741 2026] [security2:error] [pid 979474:tid 979640] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuvnTrIlbXpLXvkNcWuwAAAKQ"] [Sun Jul 12 18:18:07.427186 2026] [authz_core:error] [pid 979474:tid 979632] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:07.427762 2026] [authz_core:error] [pid 979474:tid 979632] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:07.468426 2026] [security2:error] [pid 979474:tid 979578] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/munki_repo/.env"] [unique_id "alQuv3TrIlbXpLXvkNcW-wAA2mI"] [Sun Jul 12 18:18:07.530607 2026] [security2:error] [pid 979474:tid 979706] [client 20.63.87.152:33284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQuv3TrIlbXpLXvkNcW_gAAAOU"] [Sun Jul 12 18:18:07.625986 2026] [security2:error] [pid 979474:tid 979574] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/music/.env"] [unique_id "alQuv3TrIlbXpLXvkNcXAgAAj14"] [Sun Jul 12 18:18:07.647061 2026] [security2:error] [pid 979474:tid 979641] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWFiZHFmLzY1MTcvYWIvMjI4ODUvYg=="] [unique_id "alQuv3TrIlbXpLXvkNcXAwAAAKU"] [Sun Jul 12 18:18:07.778100 2026] [security2:error] [pid 979474:tid 979558] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/MyRentals.Web/ClientApp/.env"] [unique_id "alQuv3TrIlbXpLXvkNcXCAAA8k4"] [Sun Jul 12 18:18:07.803701 2026] [security2:error] [pid 979474:tid 979612] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcXAQAAAIg"] [Sun Jul 12 18:18:07.826752 2026] [security2:error] [pid 979474:tid 979579] [remote 184.168.124.4:53946] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQuv3TrIlbXpLXvkNcXCgAAkWM"] [Sun Jul 12 18:18:07.837996 2026] [security2:error] [pid 979474:tid 979663] [client 20.63.87.152:17614] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcXDQAAALs"] [Sun Jul 12 18:18:08.116318 2026] [security2:error] [pid 979474:tid 979667] [client 20.63.87.152:6469] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQuwHTrIlbXpLXvkNcXIgAAAL8"] [Sun Jul 12 18:18:08.161050 2026] [security2:error] [pid 979474:tid 979629] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcW3gAAAJk"] [Sun Jul 12 18:18:08.162456 2026] [security2:error] [pid 967714:tid 967777] [remote 62.171.167.118:58202] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 118.167.171.62.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67.222.38.115"] [uri "/remote.php/dav/"] [unique_id "alQuo1_56DeKknhy7sMmiAABVjM"] [Sun Jul 12 18:18:08.244968 2026] [authz_core:error] [pid 979474:tid 979628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:08.245537 2026] [authz_core:error] [pid 979474:tid 979628] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:08.284734 2026] [security2:error] [pid 979474:tid 979643] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcXGwAAAKc"] [Sun Jul 12 18:18:08.363544 2026] [security2:error] [pid 979474:tid 979618] [client 20.63.87.152:17605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/0.kb-v3.php"] [unique_id "alQuwHTrIlbXpLXvkNcXNwAAAI4"] [Sun Jul 12 18:18:08.590737 2026] [security2:error] [pid 979474:tid 979719] [client 20.63.87.152:8926] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/0.php"] [unique_id "alQuwHTrIlbXpLXvkNcXSgAAAPI"] [Sun Jul 12 18:18:08.641165 2026] [security2:error] [pid 979474:tid 979634] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXJQAAAJ4"] [Sun Jul 12 18:18:08.641244 2026] [security2:error] [pid 979474:tid 979634] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXJQAAAJ4"] [Sun Jul 12 18:18:08.654402 2026] [security2:error] [pid 979474:tid 979646] [client 65.21.113.206:41812] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWFiZHFmLzY1MTcvYWIvMjI4ODUvYg=="] [unique_id "alQuwHTrIlbXpLXvkNcXIwAAAKo"] [Sun Jul 12 18:18:08.714805 2026] [security2:error] [pid 979474:tid 979661] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXRAAAALk"] [Sun Jul 12 18:18:08.762841 2026] [security2:error] [pid 979474:tid 979611] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcXEgAAhz8"] [Sun Jul 12 18:18:08.860449 2026] [security2:error] [pid 979474:tid 979637] [client 168.100.149.118:29948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17485/bargainor/2308_did.jsp"] [unique_id "alQuwHTrIlbXpLXvkNcXUgAAAKE"] [Sun Jul 12 18:18:08.909882 2026] [security2:error] [pid 979474:tid 979659] [client 20.63.87.152:17616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/002.php"] [unique_id "alQuwHTrIlbXpLXvkNcXVgAAALc"] [Sun Jul 12 18:18:08.913291 2026] [security2:error] [pid 979474:tid 979487] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/name/.env"] [unique_id "alQuwHTrIlbXpLXvkNcXVwAAiwc"] [Sun Jul 12 18:18:09.064200 2026] [security2:error] [pid 979474:tid 979600] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/nest/.env"] [unique_id "alQuwXTrIlbXpLXvkNcXYQAAmXg"] [Sun Jul 12 18:18:09.072645 2026] [authz_core:error] [pid 979474:tid 979667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:09.073340 2026] [authz_core:error] [pid 979474:tid 979667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:09.088884 2026] [security2:error] [pid 979474:tid 979685] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuv3TrIlbXpLXvkNcW7AAAANA"] [Sun Jul 12 18:18:09.117283 2026] [security2:error] [pid 979474:tid 979725] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXVQAAAPg"] [Sun Jul 12 18:18:09.189222 2026] [security2:error] [pid 979474:tid 979688] [client 20.63.87.152:5935] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/01.php"] [unique_id "alQuwXTrIlbXpLXvkNcXZQAAANM"] [Sun Jul 12 18:18:09.273588 2026] [security2:error] [pid 979474:tid 979604] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/keys/info.sql"] [unique_id "alQuwXTrIlbXpLXvkNcXagAA_nw"] [Sun Jul 12 18:18:09.462248 2026] [security2:error] [pid 979474:tid 979682] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/tests/aws_credentials.php"] [unique_id "alQuwXTrIlbXpLXvkNcXegAAAM0"] [Sun Jul 12 18:18:09.480890 2026] [security2:error] [pid 979474:tid 979699] [client 20.63.87.152:13198] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/0x.php"] [unique_id "alQuwXTrIlbXpLXvkNcXfwAAAN4"] [Sun Jul 12 18:18:09.855415 2026] [security2:error] [pid 979474:tid 979654] [client 20.63.87.152:5912] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/1.php"] [unique_id "alQuwXTrIlbXpLXvkNcXjAAAALI"] [Sun Jul 12 18:18:09.855768 2026] [security2:error] [pid 979474:tid 979654] [client 20.63.87.152:5912] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/1.php"] [unique_id "alQuwXTrIlbXpLXvkNcXjAAAALI"] [Sun Jul 12 18:18:09.855859 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:09.856392 2026] [authz_core:error] [pid 979474:tid 979737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:09.882256 2026] [security2:error] [pid 979474:tid 979611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuwXTrIlbXpLXvkNcXhQAAAIc"] [Sun Jul 12 18:18:10.087921 2026] [security2:error] [pid 979474:tid 979686] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXKQAAANE"] [Sun Jul 12 18:18:10.138470 2026] [security2:error] [pid 979474:tid 979716] [client 20.63.87.152:22348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/100.php"] [unique_id "alQuwnTrIlbXpLXvkNcXlQAAAO8"] [Sun Jul 12 18:18:10.156429 2026] [security2:error] [pid 979474:tid 979618] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuwXTrIlbXpLXvkNcXaAAAjg4"] [Sun Jul 12 18:18:10.207425 2026] [security2:error] [pid 979474:tid 979729] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXKwAAAPw"] [Sun Jul 12 18:18:10.227845 2026] [security2:error] [pid 979474:tid 979681] [client 216.244.66.226:41938] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/chargeur-asus/PA-1121-28.htm"] [unique_id "alQuwnTrIlbXpLXvkNcXmwAAAMw"] [Sun Jul 12 18:18:10.228070 2026] [security2:error] [pid 979474:tid 979681] [client 216.244.66.226:41938] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.batterie-pc-portables.fr"] [uri "/chargeur-asus/PA-1121-28.htm"] [unique_id "alQuwnTrIlbXpLXvkNcXmwAAAMw"] [Sun Jul 12 18:18:10.293845 2026] [security2:error] [pid 979474:tid 979644] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuwHTrIlbXpLXvkNcXLAAAAKg"] [Sun Jul 12 18:18:10.308548 2026] [security2:error] [pid 979474:tid 979540] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/new-js/.env"] [unique_id "alQuwnTrIlbXpLXvkNcXnwAAujw"] [Sun Jul 12 18:18:10.315826 2026] [security2:error] [pid 979474:tid 979625] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuwnTrIlbXpLXvkNcXkwAAAJU"] [Sun Jul 12 18:18:10.384749 2026] [security2:error] [pid 979474:tid 979724] [client 20.63.87.152:35480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/122.php"] [unique_id "alQuwnTrIlbXpLXvkNcXogAAAPc"] [Sun Jul 12 18:18:10.472685 2026] [security2:error] [pid 979474:tid 979502] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/mailer/.env.bak"] [unique_id "alQuwnTrIlbXpLXvkNcXqAAA7hY"] [Sun Jul 12 18:18:10.533824 2026] [security2:error] [pid 979474:tid 979498] [remote 156.59.198.136:58844] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.seed.ge"] [uri "/article/[%7B%22type%22:%221%22,%22src%22:%22https:/seed.ge/sites/default/files/2018-03/Indigo_728x90px.jpg%22,%22mobile_src%22:%22https:/seed.ge/sites/default/files/2018-03/Indigo_320x50px.jpg%22,%22url%22:%22http:/indigo.com.ge/subscribe%22,%22dimensions%22:%7B%22width%22:%22728%22,%22height%22:%2290%22,%22mobile_width%22:%22320%22,%22mobile_height%22:%2250%22%7D%7D]"] [unique_id "alQuwnTrIlbXpLXvkNcXqwAA0hI"], referer: https://www.seed.ge/article/dakarget-cona-sheinarchunet-kuntebi-varjishi-khandazmulebistvis [Sun Jul 12 18:18:10.638533 2026] [security2:error] [pid 979474:tid 979634] [client 20.63.87.152:33309] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/123.php"] [unique_id "alQuwnTrIlbXpLXvkNcXsgAAAJ4"] [Sun Jul 12 18:18:10.641589 2026] [authz_core:error] [pid 979474:tid 979695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:10.642086 2026] [authz_core:error] [pid 979474:tid 979695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:10.875446 2026] [security2:error] [pid 979474:tid 979683] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuwnTrIlbXpLXvkNcXswAAAM4"] [Sun Jul 12 18:18:10.919170 2026] [security2:error] [pid 979474:tid 979678] [client 168.100.149.60:40534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17550/bargainor/2308_delphian.jsp"] [unique_id "alQuwnTrIlbXpLXvkNcXuQAAAMo"] [Sun Jul 12 18:18:10.941189 2026] [security2:error] [pid 979474:tid 979713] [client 20.63.87.152:37042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/13.php"] [unique_id "alQuwnTrIlbXpLXvkNcXuwAAAOw"] [Sun Jul 12 18:18:10.996410 2026] [security2:error] [pid 979474:tid 979730] [client 198.143.177.117:13997] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQuwnTrIlbXpLXvkNcXvAAAAP0"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-V130-15IGM(81HN00H1GE)-portable-batterie.htm [Sun Jul 12 18:18:11.044392 2026] [security2:error] [pid 979474:tid 979485] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/export/.env"] [unique_id "alQuw3TrIlbXpLXvkNcXvwAAlwU"] [Sun Jul 12 18:18:11.227881 2026] [security2:error] [pid 979474:tid 979694] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/asdf.php"] [unique_id "alQuw3TrIlbXpLXvkNcXxwAAANk"] [Sun Jul 12 18:18:11.263163 2026] [security2:error] [pid 979474:tid 979733] [client 20.63.87.152:34928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/133.php"] [unique_id "alQuw3TrIlbXpLXvkNcXzAAAAQA"] [Sun Jul 12 18:18:11.342551 2026] [security2:error] [pid 979474:tid 979684] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuwnTrIlbXpLXvkNcXpgAAzx8"] [Sun Jul 12 18:18:11.348038 2026] [security2:error] [pid 979474:tid 979668] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuwnTrIlbXpLXvkNcXmgAAAMA"] [Sun Jul 12 18:18:11.376900 2026] [security2:error] [pid 979474:tid 979699] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuwnTrIlbXpLXvkNcXoQAAAN4"] [Sun Jul 12 18:18:11.412911 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:11.413397 2026] [authz_core:error] [pid 979474:tid 979666] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:11.493848 2026] [security2:error] [pid 979474:tid 979667] [client 20.63.87.152:31126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/155.php"] [unique_id "alQuw3TrIlbXpLXvkNcX2wAAAL8"] [Sun Jul 12 18:18:11.494953 2026] [security2:error] [pid 979474:tid 979506] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/news-app/.env"] [unique_id "alQuw3TrIlbXpLXvkNcX3AAA5Ro"] [Sun Jul 12 18:18:11.506779 2026] [security2:error] [pid 979474:tid 979688] [client 110.179.81.17:41010] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mackinstyle.com"] [uri "/"] [unique_id "alQuw3TrIlbXpLXvkNcX3QAAANM"] [Sun Jul 12 18:18:11.637493 2026] [security2:error] [pid 979474:tid 979612] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWFpMmY2Lzg0NS9haS8yMjI2OS9p"] [unique_id "alQuw3TrIlbXpLXvkNcX3gAAAIg"] [Sun Jul 12 18:18:11.645818 2026] [security2:error] [pid 979474:tid 979512] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/next/.env"] [unique_id "alQuw3TrIlbXpLXvkNcX3wAAhiA"] [Sun Jul 12 18:18:11.666387 2026] [security2:error] [pid 979474:tid 979628] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuw3TrIlbXpLXvkNcX1gAAAJg"] [Sun Jul 12 18:18:11.776207 2026] [security2:error] [pid 979474:tid 979628] [client 20.63.87.152:45406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/177.php"] [unique_id "alQuw3TrIlbXpLXvkNcX4QAAAJg"] [Sun Jul 12 18:18:11.796252 2026] [security2:error] [pid 979474:tid 979547] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/nginx-server/.env"] [unique_id "alQuw3TrIlbXpLXvkNcX5AAA5kM"] [Sun Jul 12 18:18:11.952874 2026] [security2:error] [pid 979474:tid 979536] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/niffler-frontend/.env"] [unique_id "alQuw3TrIlbXpLXvkNcX6wAA1jg"] [Sun Jul 12 18:18:12.101307 2026] [security2:error] [pid 979474:tid 979697] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuw3TrIlbXpLXvkNcX6AAAANw"] [Sun Jul 12 18:18:12.106572 2026] [security2:error] [pid 979474:tid 979552] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/node_modules/.env"] [unique_id "alQuxHTrIlbXpLXvkNcX8QAAvUg"] [Sun Jul 12 18:18:12.119192 2026] [security2:error] [pid 979474:tid 979623] [client 20.63.87.152:6520] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/1index.php"] [unique_id "alQuxHTrIlbXpLXvkNcX9AAAAJM"] [Sun Jul 12 18:18:12.199107 2026] [authz_core:error] [pid 979474:tid 979672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:12.199613 2026] [authz_core:error] [pid 979474:tid 979672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:12.207564 2026] [security2:error] [pid 979474:tid 979736] [client 94.187.171.125:51700] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuxHTrIlbXpLXvkNcX9wAAAQM"] [Sun Jul 12 18:18:12.207900 2026] [security2:error] [pid 979474:tid 979736] [client 94.187.171.125:51700] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuxHTrIlbXpLXvkNcX9wAAAQM"] [Sun Jul 12 18:18:12.260745 2026] [security2:error] [pid 979474:tid 979501] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Nodejs-Projects/play-ground/login/.env"] [unique_id "alQuxHTrIlbXpLXvkNcX-AAAshU"] [Sun Jul 12 18:18:12.340897 2026] [security2:error] [pid 979474:tid 979735] [client 125.167.21.72:62846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuxHTrIlbXpLXvkNcX_QAAAQI"] [Sun Jul 12 18:18:12.341155 2026] [security2:error] [pid 979474:tid 979735] [client 125.167.21.72:62846] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuxHTrIlbXpLXvkNcX_QAAAQI"] [Sun Jul 12 18:18:12.378556 2026] [security2:error] [pid 979474:tid 979721] [client 20.63.87.152:22343] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/2.php"] [unique_id "alQuxHTrIlbXpLXvkNcYAAAAAPQ"] [Sun Jul 12 18:18:12.412600 2026] [security2:error] [pid 979474:tid 979535] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Nodejs-Projects/play-ground/ManageUserRoles/.env"] [unique_id "alQuxHTrIlbXpLXvkNcYAgABBDc"] [Sun Jul 12 18:18:12.423270 2026] [security2:error] [pid 979474:tid 979645] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuw3TrIlbXpLXvkNcX0QAAAKk"] [Sun Jul 12 18:18:12.482623 2026] [security2:error] [pid 979474:tid 979700] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuw3TrIlbXpLXvkNcX1wAAAN8"] [Sun Jul 12 18:18:12.565721 2026] [security2:error] [pid 979474:tid 979522] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/noVNC/.env"] [unique_id "alQuxHTrIlbXpLXvkNcYEgAAwSo"] [Sun Jul 12 18:18:12.570012 2026] [security2:error] [pid 979474:tid 979709] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcX-wAAAOg"] [Sun Jul 12 18:18:12.607707 2026] [security2:error] [pid 979474:tid 979713] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcX9gAAAOw"] [Sun Jul 12 18:18:12.607721 2026] [security2:error] [pid 979474:tid 979677] [client 65.21.113.206:41820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWFpMmY2Lzg0NS9haS8yMjI2OS9p"] [unique_id "alQuxHTrIlbXpLXvkNcX8wAAAMk"] [Sun Jul 12 18:18:12.607796 2026] [security2:error] [pid 979474:tid 979713] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcX9gAAAOw"] [Sun Jul 12 18:18:12.625301 2026] [security2:error] [pid 979474:tid 979714] [client 20.63.87.152:22341] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/222.php"] [unique_id "alQuxHTrIlbXpLXvkNcYFAAAAO0"] [Sun Jul 12 18:18:12.725341 2026] [security2:error] [pid 979474:tid 979507] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/resources/views/errors/.env"] [unique_id "alQuxHTrIlbXpLXvkNcYGQAA0Bs"] [Sun Jul 12 18:18:12.851268 2026] [security2:error] [pid 979474:tid 979647] [client 20.63.87.152:31148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/2p.update.php"] [unique_id "alQuxHTrIlbXpLXvkNcYJAAAAKs"] [Sun Jul 12 18:18:12.876900 2026] [security2:error] [pid 979474:tid 979531] [remote 185.177.72.12:47804] ModSecurity: Access denied with code 406 (phase 2). Pattern match "[a-z0-9]~$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1257"] [id "390581"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup file (disable this rule if you require access to files that end with a tilde)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-config.php~"] [unique_id "alQuxHTrIlbXpLXvkNcYJQAA5jM"] [Sun Jul 12 18:18:12.949405 2026] [security2:error] [pid 979474:tid 979624] [client 168.100.149.24:59456] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17615/bargainor/2308_anisodactyli.jsp"] [unique_id "alQuxHTrIlbXpLXvkNcYLQAAAJQ"] [Sun Jul 12 18:18:12.973388 2026] [authz_core:error] [pid 979474:tid 979655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:12.973905 2026] [authz_core:error] [pid 979474:tid 979655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:13.068566 2026] [security2:error] [pid 979474:tid 979643] [client 20.63.87.152:39113] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/3.php"] [unique_id "alQuxXTrIlbXpLXvkNcYMQAAAKc"] [Sun Jul 12 18:18:13.238515 2026] [security2:error] [pid 979474:tid 979680] [client 185.177.72.12:47804] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mail.idreamofjeannemarie.com"] [uri "/wp-admin/admin.php"] [unique_id "alQuxXTrIlbXpLXvkNcYLwAAy00"] [Sun Jul 12 18:18:13.320086 2026] [security2:error] [pid 979474:tid 979646] [client 20.63.87.152:31137] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQuxXTrIlbXpLXvkNcYOQAAAKo"] [Sun Jul 12 18:18:13.453176 2026] [security2:error] [pid 979474:tid 979630] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcYGAAAmhQ"] [Sun Jul 12 18:18:13.604891 2026] [security2:error] [pid 979474:tid 979636] [client 20.63.87.152:39119] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/403.php"] [unique_id "alQuxXTrIlbXpLXvkNcYRgAAAKA"] [Sun Jul 12 18:18:13.605998 2026] [security2:error] [pid 979474:tid 979585] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Nuke.App.Ui/.env"] [unique_id "alQuxXTrIlbXpLXvkNcYRAAAvGk"] [Sun Jul 12 18:18:13.651476 2026] [security2:error] [pid 979474:tid 979620] [client 90.214.100.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuxXTrIlbXpLXvkNcYNQAAAJA"] [Sun Jul 12 18:18:13.689020 2026] [security2:error] [pid 979474:tid 979528] [remote 185.177.72.12:45066] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQuxXTrIlbXpLXvkNcYSQAAwTA"] [Sun Jul 12 18:18:13.744638 2026] [authz_core:error] [pid 979474:tid 979677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:13.745149 2026] [authz_core:error] [pid 979474:tid 979677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:13.756406 2026] [security2:error] [pid 979474:tid 979544] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/nuxt/.env"] [unique_id "alQuxXTrIlbXpLXvkNcYSgAA8UA"] [Sun Jul 12 18:18:13.831742 2026] [security2:error] [pid 979474:tid 979666] [client 20.63.87.152:30617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "67-222-40-58.unifiedlayer.com"] [uri "/404.php"] [unique_id "alQuxXTrIlbXpLXvkNcYTQAAAL4"] [Sun Jul 12 18:18:13.841891 2026] [security2:error] [pid 979474:tid 979625] [client 24.203.79.110:52171] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuxXTrIlbXpLXvkNcYTgAAAJU"] [Sun Jul 12 18:18:13.844882 2026] [security2:error] [pid 979474:tid 979625] [client 24.203.79.110:52171] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQuxXTrIlbXpLXvkNcYTgAAAJU"] [Sun Jul 12 18:18:13.998102 2026] [security2:error] [pid 979474:tid 979647] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWI0LTY2NzctYjQ5eW8tMTAzNi00OXk=.cgi"] [unique_id "alQuxXTrIlbXpLXvkNcYVgAAAKs"] [Sun Jul 12 18:18:14.245795 2026] [security2:error] [pid 979474:tid 979689] [client 168.100.149.197:54024] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17680/bargainor/2308_birefraction.jsp"] [unique_id "alQuxnTrIlbXpLXvkNcYaQAAANQ"] [Sun Jul 12 18:18:14.488032 2026] [security2:error] [pid 979474:tid 979660] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuxnTrIlbXpLXvkNcYZQAAALg"] [Sun Jul 12 18:18:14.512514 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:14.513164 2026] [authz_core:error] [pid 979474:tid 979673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:14.756645 2026] [security2:error] [pid 979474:tid 979706] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuxXTrIlbXpLXvkNcYUQAA5XE"] [Sun Jul 12 18:18:14.891370 2026] [security2:error] [pid 979474:tid 979711] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuxnTrIlbXpLXvkNcYdwAAAOo"] [Sun Jul 12 18:18:14.891467 2026] [security2:error] [pid 979474:tid 979711] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuxnTrIlbXpLXvkNcYdwAAAOo"] [Sun Jul 12 18:18:14.892434 2026] [security2:error] [pid 979474:tid 979642] [client 65.21.113.206:57764] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWI0LTY2NzctYjQ5eW8tMTAzNi00OXk=.cgi"] [unique_id "alQuxnTrIlbXpLXvkNcYdQAAAKY"] [Sun Jul 12 18:18:14.951302 2026] [cgid:error] [pid 979474:tid 979625] [client 202.46.62.33:47199] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/ [Sun Jul 12 18:18:15.040726 2026] [security2:error] [pid 979474:tid 979681] [client 202.46.62.86:41524] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQux3TrIlbXpLXvkNcYkQAAAMw"], referer: https://www.stephenspublishing.com/mood-pencils-custom-p-532.html?osCsid=un3hfpgopu4qn7t03ikomcp3h1 [Sun Jul 12 18:18:15.058492 2026] [security2:error] [pid 979474:tid 979644] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuxnTrIlbXpLXvkNcYiwAAAKg"] [Sun Jul 12 18:18:15.075146 2026] [security2:error] [pid 979474:tid 979698] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcYDwAAAN0"] [Sun Jul 12 18:18:15.091270 2026] [security2:error] [pid 979474:tid 979672] [client 47.128.46.230:37898] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "prestone.com.ph"] [uri "/robots.txt"] [unique_id "alQux3TrIlbXpLXvkNcYkgAAAMQ"] [Sun Jul 12 18:18:15.093266 2026] [security2:error] [pid 979474:tid 979733] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcYCAAAAQA"] [Sun Jul 12 18:18:15.230211 2026] [security2:error] [pid 979474:tid 979659] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcYEAAAALc"] [Sun Jul 12 18:18:15.247386 2026] [security2:error] [pid 979474:tid 979626] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuxHTrIlbXpLXvkNcYEQAAAJY"] [Sun Jul 12 18:18:15.311350 2026] [authz_core:error] [pid 979474:tid 979676] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:15.311912 2026] [authz_core:error] [pid 979474:tid 979676] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:15.513039 2026] [security2:error] [pid 979474:tid 979723] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYpQAAAPY"] [Sun Jul 12 18:18:15.684102 2026] [security2:error] [pid 979474:tid 979596] [remote 185.177.72.12:45068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/react-app/client/.env"] [unique_id "alQux3TrIlbXpLXvkNcYuwAAtnQ"] [Sun Jul 12 18:18:15.744906 2026] [security2:error] [pid 979474:tid 979688] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuxnTrIlbXpLXvkNcYjQAA02I"] [Sun Jul 12 18:18:15.868220 2026] [security2:error] [pid 979474:tid 979727] [client 189.231.179.189:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYqQAAAPo"] [Sun Jul 12 18:18:16.131333 2026] [authz_core:error] [pid 979474:tid 979681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:16.131865 2026] [authz_core:error] [pid 979474:tid 979681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:16.142640 2026] [security2:error] [pid 979474:tid 979675] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYxQAAAMc"] [Sun Jul 12 18:18:16.357477 2026] [security2:error] [pid 979474:tid 979730] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYpAAAAP0"] [Sun Jul 12 18:18:16.399797 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYpwAAAPQ"] [Sun Jul 12 18:18:16.575070 2026] [security2:error] [pid 979474:tid 979617] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuyHTrIlbXpLXvkNcY2QAAAI0"] [Sun Jul 12 18:18:16.799595 2026] [security2:error] [pid 979474:tid 979613] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQux3TrIlbXpLXvkNcYxgAAiWo"] [Sun Jul 12 18:18:16.866067 2026] [security2:error] [pid 979474:tid 979665] [client 168.100.149.209:36552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17745/bargainor/2308_mediator.jsp"] [unique_id "alQuyHTrIlbXpLXvkNcY7wAAAL0"] [Sun Jul 12 18:18:16.949118 2026] [authz_core:error] [pid 979474:tid 979625] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:16.949615 2026] [authz_core:error] [pid 979474:tid 979625] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:17.014812 2026] [security2:error] [pid 979474:tid 979713] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuyHTrIlbXpLXvkNcY5wAAAOw"] [Sun Jul 12 18:18:17.215704 2026] [security2:error] [pid 979474:tid 979681] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/api/private/config.php"] [unique_id "alQuyXTrIlbXpLXvkNcY-wAAAMw"] [Sun Jul 12 18:18:17.421266 2026] [security2:error] [pid 979474:tid 979722] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWI3ZWpmLTI4MDUvYjctMjkxNy83ZWpm"] [unique_id "alQuyXTrIlbXpLXvkNcZCQAAAPU"] [Sun Jul 12 18:18:17.500549 2026] [security2:error] [pid 979474:tid 979634] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuyHTrIlbXpLXvkNcY4AAAAJ4"] [Sun Jul 12 18:18:17.507239 2026] [security2:error] [pid 979474:tid 979630] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuyHTrIlbXpLXvkNcY3AAAAJo"] [Sun Jul 12 18:18:17.696614 2026] [security2:error] [pid 979474:tid 979699] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuyXTrIlbXpLXvkNcZCAAAAN4"] [Sun Jul 12 18:18:17.743821 2026] [authz_core:error] [pid 979474:tid 979616] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:17.744308 2026] [authz_core:error] [pid 979474:tid 979616] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:17.823607 2026] [security2:error] [pid 979474:tid 979481] [remote 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuyHTrIlbXpLXvkNcY9QAAxwE"] [Sun Jul 12 18:18:17.868717 2026] [security2:error] [pid 979474:tid 979489] [remote 185.177.72.12:45068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/src/backup.sql"] [unique_id "alQuyXTrIlbXpLXvkNcZHAAApAk"] [Sun Jul 12 18:18:17.977027 2026] [security2:error] [pid 979474:tid 979583] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/old/.env"] [unique_id "alQuyXTrIlbXpLXvkNcZIAAAiWc"] [Sun Jul 12 18:18:18.301774 2026] [security2:error] [pid 979474:tid 979645] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZIwAAAKk"] [Sun Jul 12 18:18:18.523470 2026] [security2:error] [pid 979474:tid 979653] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuyXTrIlbXpLXvkNcZDAAAALE"] [Sun Jul 12 18:18:18.531141 2026] [security2:error] [pid 979474:tid 979657] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuyXTrIlbXpLXvkNcZHwAAALU"] [Sun Jul 12 18:18:18.531201 2026] [security2:error] [pid 979474:tid 979657] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuyXTrIlbXpLXvkNcZHwAAALU"] [Sun Jul 12 18:18:18.532400 2026] [security2:error] [pid 979474:tid 979663] [client 65.21.113.206:57774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWI3ZWpmLTI4MDUvYjctMjkxNy83ZWpm"] [unique_id "alQuyXTrIlbXpLXvkNcZHQAAALs"] [Sun Jul 12 18:18:18.582017 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuyXTrIlbXpLXvkNcZDQAAAPQ"] [Sun Jul 12 18:18:18.627073 2026] [authz_core:error] [pid 979474:tid 979720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:18.627838 2026] [authz_core:error] [pid 979474:tid 979720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:18.739524 2026] [security2:error] [pid 979474:tid 979696] [client 74.7.228.51:56378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "prestone.com.ph"] [uri "/robots.txt"] [unique_id "alQuynTrIlbXpLXvkNcZRwAA2xA"] [Sun Jul 12 18:18:18.747122 2026] [security2:error] [pid 979474:tid 979614] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZOgAAAIo"] [Sun Jul 12 18:18:18.839851 2026] [cgid:error] [pid 979474:tid 979646] [client 159.69.248.113:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml [Sun Jul 12 18:18:18.961191 2026] [security2:error] [pid 979474:tid 979676] [client 168.100.149.74:48214] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17810/bargainor/2308_gurian.jsp"] [unique_id "alQuynTrIlbXpLXvkNcZegAAAMg"] [Sun Jul 12 18:18:19.007912 2026] [cgid:error] [pid 979474:tid 979618] [client 159.69.248.113:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml [Sun Jul 12 18:18:19.009132 2026] [cgid:error] [pid 979474:tid 979609] [client 159.69.248.113:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml [Sun Jul 12 18:18:19.036070 2026] [security2:error] [pid 979474:tid 979698] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZJgAA3X8"] [Sun Jul 12 18:18:19.205472 2026] [security2:error] [pid 979474:tid 979634] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZdwAAAJ4"] [Sun Jul 12 18:18:19.438247 2026] [security2:error] [pid 979474:tid 979620] [client 57.141.18.31:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQuy3TrIlbXpLXvkNcZhwAAAJA"] [Sun Jul 12 18:18:19.506190 2026] [authz_core:error] [pid 979474:tid 979665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:19.506737 2026] [authz_core:error] [pid 979474:tid 979665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:19.683203 2026] [security2:error] [pid 979474:tid 979732] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuy3TrIlbXpLXvkNcZnAAAAP8"] [Sun Jul 12 18:18:20.099223 2026] [security2:error] [pid 979474:tid 979701] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZPAAAAOA"] [Sun Jul 12 18:18:20.126658 2026] [security2:error] [pid 979474:tid 979655] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuy3TrIlbXpLXvkNcZrQAAALM"] [Sun Jul 12 18:18:20.151745 2026] [security2:error] [pid 979474:tid 979638] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuy3TrIlbXpLXvkNcZjgAAohc"] [Sun Jul 12 18:18:20.178858 2026] [security2:error] [pid 979474:tid 979622] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZQQAAAJI"] [Sun Jul 12 18:18:20.250957 2026] [security2:error] [pid 979474:tid 979642] [client 168.100.149.131:23080] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17875/bargainor/2308_monkey.jsp"] [unique_id "alQuzHTrIlbXpLXvkNcZuQAAAKY"] [Sun Jul 12 18:18:20.283168 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:20.283699 2026] [authz_core:error] [pid 979474:tid 979727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:20.312066 2026] [security2:error] [pid 979474:tid 979536] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/oldsanta/.env"] [unique_id "alQuzHTrIlbXpLXvkNcZvwAA9zg"] [Sun Jul 12 18:18:20.466270 2026] [security2:error] [pid 979474:tid 979553] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/opencart/.env"] [unique_id "alQuzHTrIlbXpLXvkNcZwgAA30k"] [Sun Jul 12 18:18:20.565738 2026] [security2:error] [pid 979474:tid 979611] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuzHTrIlbXpLXvkNcZwAAAAIc"] [Sun Jul 12 18:18:20.623284 2026] [security2:error] [pid 979474:tid 979552] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/ops/vagrant/.env"] [unique_id "alQuzHTrIlbXpLXvkNcZxQAAwUg"] [Sun Jul 12 18:18:20.762560 2026] [security2:error] [pid 979474:tid 979715] [client 74.7.175.171:53370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.wassrealty.sheckman.com"] [uri "/robots.txt"] [unique_id "alQuynTrIlbXpLXvkNcZcQAAAO4"] [Sun Jul 12 18:18:20.762566 2026] [security2:error] [pid 979474:tid 979704] [client 74.7.175.171:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.wassrealty.sheckman.com"] [uri "/index.php"] [unique_id "alQuynTrIlbXpLXvkNcZdQAAAOM"] [Sun Jul 12 18:18:20.774755 2026] [security2:error] [pid 979474:tid 979535] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/option/.env"] [unique_id "alQuzHTrIlbXpLXvkNcZzAAAsTc"] [Sun Jul 12 18:18:20.924979 2026] [security2:error] [pid 979474:tid 979537] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/orientdb-client/.env"] [unique_id "alQuzHTrIlbXpLXvkNcZ1AAAlzk"] [Sun Jul 12 18:18:20.981696 2026] [security2:error] [pid 979474:tid 979681] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuzHTrIlbXpLXvkNcZyQAAAMw"] [Sun Jul 12 18:18:21.005233 2026] [authz_core:error] [pid 979474:tid 979649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:21.005809 2026] [authz_core:error] [pid 979474:tid 979649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:21.047904 2026] [security2:error] [pid 979474:tid 979635] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWIyb3prLTEwMzYvYjItNjUyOS8yb3pr"] [unique_id "alQuzXTrIlbXpLXvkNcZ1gAAAJ8"] [Sun Jul 12 18:18:21.075506 2026] [security2:error] [pid 979474:tid 979563] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/outputs/.env"] [unique_id "alQuzXTrIlbXpLXvkNcZ1wAA01M"] [Sun Jul 12 18:18:21.146753 2026] [security2:error] [pid 979474:tid 979624] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuzHTrIlbXpLXvkNcZtAAAAJQ"] [Sun Jul 12 18:18:21.148767 2026] [security2:error] [pid 979474:tid 979562] [remote 185.177.72.12:45068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/encrypt.php.old"] [unique_id "alQuzXTrIlbXpLXvkNcZ2gAAyFI"] [Sun Jul 12 18:18:21.226390 2026] [security2:error] [pid 979474:tid 979507] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/owncloud/.env"] [unique_id "alQuzXTrIlbXpLXvkNcZ3gABARs"] [Sun Jul 12 18:18:21.238275 2026] [security2:error] [pid 979474:tid 979658] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuzHTrIlbXpLXvkNcZuAAAALY"] [Sun Jul 12 18:18:21.312830 2026] [security2:error] [pid 979474:tid 979531] [remote 185.177.72.12:45068] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.idreamofjeannemarie.com"] [uri "/password.php.bak"] [unique_id "alQuzXTrIlbXpLXvkNcZ5wAAsjM"] [Sun Jul 12 18:18:21.719861 2026] [security2:error] [pid 979474:tid 979639] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ7gAAAKM"] [Sun Jul 12 18:18:21.740324 2026] [authz_core:error] [pid 979474:tid 979656] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:21.740823 2026] [authz_core:error] [pid 979474:tid 979656] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:21.931377 2026] [security2:error] [pid 979474:tid 979677] [client 74.7.230.58:53794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "americadatasystem.com"] [uri "/robots.txt"] [unique_id "alQuzXTrIlbXpLXvkNcaBQAAySg"] [Sun Jul 12 18:18:22.060295 2026] [security2:error] [pid 979474:tid 979642] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ8gAAAKY"] [Sun Jul 12 18:18:22.060350 2026] [security2:error] [pid 979474:tid 979642] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ8gAAAKY"] [Sun Jul 12 18:18:22.061652 2026] [security2:error] [pid 979474:tid 979687] [client 65.21.113.206:57776] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWIyb3prLTEwMzYvYjItNjUyOS8yb3pr"] [unique_id "alQuzXTrIlbXpLXvkNcZ8AAAANI"] [Sun Jul 12 18:18:22.115210 2026] [security2:error] [pid 979474:tid 979585] [remote 185.251.19.87:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 87.19.251.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "campfiresessions.com"] [uri "/wp-login.php"] [unique_id "alQuznTrIlbXpLXvkNcaCgAA_2k"] [Sun Jul 12 18:18:22.124450 2026] [security2:error] [pid 979474:tid 979674] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcaAgAAAMY"] [Sun Jul 12 18:18:22.155557 2026] [security2:error] [pid 979474:tid 979650] [client 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ6QAArlc"] [Sun Jul 12 18:18:22.160636 2026] [security2:error] [pid 979474:tid 979619] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ3QAAAI8"] [Sun Jul 12 18:18:22.252582 2026] [security2:error] [pid 979474:tid 979734] [client 168.100.149.169:22718] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/17940/bargainor/2308_impeccance.jsp"] [unique_id "alQuznTrIlbXpLXvkNcaEgAAAQE"] [Sun Jul 12 18:18:22.282648 2026] [security2:error] [pid 979474:tid 979721] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuzXTrIlbXpLXvkNcZ4gAAAPQ"] [Sun Jul 12 18:18:22.314121 2026] [security2:error] [pid 979474:tid 979555] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/packages/styled-ui-docs/.env"] [unique_id "alQuznTrIlbXpLXvkNcaGgAAsks"] [Sun Jul 12 18:18:22.399682 2026] [security2:error] [pid 979474:tid 979658] [client 95.164.233.160:23660] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "laraza1023.com"] [uri "/wp-login.php"] [unique_id "alQuznTrIlbXpLXvkNcaIQAAALY"] [Sun Jul 12 18:18:22.464454 2026] [security2:error] [pid 979474:tid 979561] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/packages/web/.env"] [unique_id "alQuznTrIlbXpLXvkNcaJQAAvlE"] [Sun Jul 12 18:18:22.479581 2026] [authz_core:error] [pid 979474:tid 979655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:22.480120 2026] [authz_core:error] [pid 979474:tid 979655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:22.576151 2026] [security2:error] [pid 979474:tid 979672] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuznTrIlbXpLXvkNcaHAAAAMQ"] [Sun Jul 12 18:18:22.616880 2026] [security2:error] [pid 979474:tid 979565] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/packed/.env"] [unique_id "alQuznTrIlbXpLXvkNcaLQAA31U"] [Sun Jul 12 18:18:22.747920 2026] [security2:error] [pid 979474:tid 979630] [client 125.167.21.72:63286] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuznTrIlbXpLXvkNcaNQAAAJo"] [Sun Jul 12 18:18:22.748134 2026] [security2:error] [pid 979474:tid 979630] [client 125.167.21.72:63286] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQuznTrIlbXpLXvkNcaNQAAAJo"] [Sun Jul 12 18:18:22.767452 2026] [security2:error] [pid 979474:tid 979532] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/page-editor/.env"] [unique_id "alQuznTrIlbXpLXvkNcaOAAAqzQ"] [Sun Jul 12 18:18:22.868740 2026] [security2:error] [pid 979474:tid 979722] [client 94.187.171.125:51986] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 125.171.187.94.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuznTrIlbXpLXvkNcaPAAAAPU"] [Sun Jul 12 18:18:22.869032 2026] [security2:error] [pid 979474:tid 979722] [client 94.187.171.125:51986] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "3arrowsinc.com"] [uri "/xmlrpc.php"] [unique_id "alQuznTrIlbXpLXvkNcaPAAAAPU"] [Sun Jul 12 18:18:22.918403 2026] [security2:error] [pid 979474:tid 979569] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/panel/.env"] [unique_id "alQuznTrIlbXpLXvkNcaPQAAlVk"] [Sun Jul 12 18:18:22.968604 2026] [security2:error] [pid 979474:tid 979648] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuznTrIlbXpLXvkNcaNwAAAKw"] [Sun Jul 12 18:18:23.068781 2026] [security2:error] [pid 979474:tid 979570] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/parity/.env"] [unique_id "alQuz3TrIlbXpLXvkNcaRQAAqVo"] [Sun Jul 12 18:18:23.160535 2026] [security2:error] [pid 979474:tid 979707] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/lib/info.php"] [unique_id "alQuz3TrIlbXpLXvkNcaTAAAAOY"] [Sun Jul 12 18:18:23.201005 2026] [security2:error] [pid 979474:tid 979726] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuznTrIlbXpLXvkNcaEQAAAPk"] [Sun Jul 12 18:18:23.218810 2026] [authz_core:error] [pid 979474:tid 979716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:23.219278 2026] [authz_core:error] [pid 979474:tid 979716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:23.220921 2026] [security2:error] [pid 979474:tid 979599] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/Passportjs/.env"] [unique_id "alQuz3TrIlbXpLXvkNcaTwAAh3c"] [Sun Jul 12 18:18:23.246457 2026] [security2:error] [pid 979474:tid 979703] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuznTrIlbXpLXvkNcaFwAAAOI"] [Sun Jul 12 18:18:23.380200 2026] [security2:error] [pid 979474:tid 979542] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/patchwork/.env"] [unique_id "alQuz3TrIlbXpLXvkNcaWgAA8T4"] [Sun Jul 12 18:18:23.473622 2026] [security2:error] [pid 979474:tid 979698] [client 95.164.233.160:23660] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "laraza1023.com"] [uri "/wp-login.php"] [unique_id "alQuz3TrIlbXpLXvkNcaWQAAAN0"] [Sun Jul 12 18:18:23.531071 2026] [security2:error] [pid 979474:tid 979541] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/path/.env"] [unique_id "alQuz3TrIlbXpLXvkNcaYQAA4D0"] [Sun Jul 12 18:18:23.533001 2026] [security2:error] [pid 979474:tid 979633] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcaWAAAAJ0"] [Sun Jul 12 18:18:23.673402 2026] [security2:error] [pid 979474:tid 979696] [client 95.164.233.160:64800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "laraza1023.com"] [uri "/wp-login.php"] [unique_id "alQuz3TrIlbXpLXvkNcaZQAAANs"] [Sun Jul 12 18:18:23.681891 2026] [security2:error] [pid 979474:tid 979596] [remote 185.177.72.52:7456] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "crackerjackcom.com"] [uri "/pfbe/.env"] [unique_id "alQuz3TrIlbXpLXvkNcaZgAAs3Q"] [Sun Jul 12 18:18:23.730014 2026] [security2:error] [pid 979474:tid 979638] [client 185.177.72.12:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.72.177.185.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.idreamofjeannemarie.com"] [uri "/admin/secrets/config.php"] [unique_id "alQuz3TrIlbXpLXvkNcabQAAAKI"] [Sun Jul 12 18:18:23.784807 2026] [security2:error] [pid 979474:tid 979590] [remote 57.141.18.86:33778] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/75NwZ-W.lWez"] [unique_id "alQuz3TrIlbXpLXvkNcacAAAu24"] [Sun Jul 12 18:18:23.796736 2026] [security2:error] [pid 979474:tid 979723] [client 65.21.113.206:56200] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWJfMjgyM19iaDE3L2hfMjgwNV8xN2I=.html"] [unique_id "alQuz3TrIlbXpLXvkNcacwAAAPY"] [Sun Jul 12 18:18:23.839105 2026] [authz_core:error] [pid 979474:tid 979577] [remote 185.177.72.52:7456] AH01630: client denied by server configuration: /home4/cracker7/public_html/php.ini [Sun Jul 12 18:18:23.871453 2026] [security2:error] [pid 979474:tid 979694] [client 95.164.233.160:23660] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "laraza1023.com"] [uri "/wp-admin/post-new.php"] [unique_id "alQuz3TrIlbXpLXvkNcafQAAANk"] [Sun Jul 12 18:18:23.907363 2026] [security2:error] [pid 979474:tid 979616] [client 74.220.20.153:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcaYgAAAIw"] [Sun Jul 12 18:18:23.921914 2026] [security2:error] [pid 979474:tid 979592] [remote 45.132.115.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQuz3TrIlbXpLXvkNcafwAA7nA"] [Sun Jul 12 18:18:23.980163 2026] [authz_core:error] [pid 979474:tid 979659] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:23.980838 2026] [authz_core:error] [pid 979474:tid 979659] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:24.072975 2026] [security2:error] [pid 979474:tid 979710] [client 95.164.233.160:64800] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "laraza1023.com"] [uri "/wp-admin/post-new.php"] [unique_id "alQu0HTrIlbXpLXvkNcahQAAAOk"] [Sun Jul 12 18:18:24.123583 2026] [mpm_event:notice] [pid 803757:tid 803757] AH00493: SIGUSR1 received. Doing graceful restart [Sun Jul 12 18:18:24.185865 2026] [security2:error] [pid 979474:tid 979689] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcaUAAAANQ"] [Sun Jul 12 18:18:24.237059 2026] [security2:error] [pid 979474:tid 979706] [client 185.177.72.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcagwAAAOU"] [Sun Jul 12 18:18:24.250718 2026] [security2:error] [pid 979474:tid 979680] [client 62.171.167.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.38.115"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcaUgAAAMs"] [ N 2026-07-12 18:18:24.3273 940721/T8 age/Cor/CoreMain.cpp:671 ]: Signal received. Gracefully shutting down... (send signal 2 more time(s) to force shutdown) [ N 2026-07-12 18:18:24.3274 940721/T1 age/Cor/CoreMain.cpp:1246 ]: Received command to shutdown gracefully. Waiting until all clients have disconnected... [ N 2026-07-12 18:18:24.3275 940721/T8 Ser/Server.h:902 ]: [ServerThr.1] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3275 940721/T8 Ser/Server.h:558 ]: [ServerThr.1] Shutdown finished [ N 2026-07-12 18:18:24.3275 940721/Td Ser/Server.h:902 ]: [ServerThr.3] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3275 940721/Te Ser/Server.h:902 ]: [ServerThr.4] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3276 940721/Ts Ser/Server.h:902 ]: [ServerThr.11] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3276 940721/Tn Ser/Server.h:902 ]: [ServerThr.8] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3276 940721/To Ser/Server.h:902 ]: [ServerThr.9] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3276 940721/Td Ser/Server.h:558 ]: [ServerThr.3] Shutdown finished [ N 2026-07-12 18:18:24.3276 940721/Te Ser/Server.h:558 ]: [ServerThr.4] Shutdown finished [ N 2026-07-12 18:18:24.3276 940721/Ts Ser/Server.h:558 ]: [ServerThr.11] Shutdown finished [ N 2026-07-12 18:18:24.3277 940721/Tn Ser/Server.h:558 ]: [ServerThr.8] Shutdown finished [ N 2026-07-12 18:18:24.3277 940721/To Ser/Server.h:558 ]: [ServerThr.9] Shutdown finished [ N 2026-07-12 18:18:24.3277 940721/T13 Ser/Server.h:902 ]: [ServerThr.16] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3277 940721/Tl Ser/Server.h:902 ]: [ServerThr.7] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3277 940721/Ti Ser/Server.h:902 ]: [ServerThr.6] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3277 940721/Tw Ser/Server.h:902 ]: [ServerThr.13] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3278 940721/T13 Ser/Server.h:558 ]: [ServerThr.16] Shutdown finished [ N 2026-07-12 18:18:24.3278 940721/Tl Ser/Server.h:558 ]: [ServerThr.7] Shutdown finished [ N 2026-07-12 18:18:24.3278 940721/Ti Ser/Server.h:558 ]: [ServerThr.6] Shutdown finished [ N 2026-07-12 18:18:24.3278 940721/Tw Ser/Server.h:558 ]: [ServerThr.13] Shutdown finished [ N 2026-07-12 18:18:24.3278 940721/T16 Ser/Server.h:902 ]: [ServerThr.18] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3278 940721/T16 Ser/Server.h:558 ]: [ServerThr.18] Shutdown finished [ N 2026-07-12 18:18:24.3278 940721/Ty Ser/Server.h:902 ]: [ServerThr.14] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3278 940721/Ty Ser/Server.h:558 ]: [ServerThr.14] Shutdown finished [ N 2026-07-12 18:18:24.3275 940721/Tg Ser/Server.h:902 ]: [ServerThr.5] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3278 940721/Tg Ser/Server.h:558 ]: [ServerThr.5] Shutdown finished [ N 2026-07-12 18:18:24.3279 940721/T1c Ser/Server.h:902 ]: [ApiServer] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3279 940721/T11 Ser/Server.h:902 ]: [ServerThr.15] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3279 940721/T11 Ser/Server.h:558 ]: [ServerThr.15] Shutdown finished [ N 2026-07-12 18:18:24.3279 940721/T1c Ser/Server.h:558 ]: [ApiServer] Shutdown finished [ N 2026-07-12 18:18:24.3285 940721/Ta Ser/Server.h:902 ]: [ServerThr.2] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3285 940721/Ta Ser/Server.h:558 ]: [ServerThr.2] Shutdown finished [ N 2026-07-12 18:18:24.3285 940721/Tq Ser/Server.h:902 ]: [ServerThr.10] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3286 940721/Tq Ser/Server.h:558 ]: [ServerThr.10] Shutdown finished [ N 2026-07-12 18:18:24.3286 940721/Tu Ser/Server.h:902 ]: [ServerThr.12] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3286 940721/Tu Ser/Server.h:558 ]: [ServerThr.12] Shutdown finished [ N 2026-07-12 18:18:24.3287 940721/T14 Ser/Server.h:902 ]: [ServerThr.17] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3287 940721/T14 Ser/Server.h:558 ]: [ServerThr.17] Shutdown finished [ N 2026-07-12 18:18:24.3287 940721/T19 Ser/Server.h:902 ]: [ServerThr.19] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3287 940721/T19 Ser/Server.h:558 ]: [ServerThr.19] Shutdown finished [ N 2026-07-12 18:18:24.3287 940721/T1a Ser/Server.h:902 ]: [ServerThr.20] Freed 0 spare client objects [ N 2026-07-12 18:18:24.3287 940721/T1a Ser/Server.h:558 ]: [ServerThr.20] Shutdown finished [Sun Jul 12 18:18:24.447253 2026] [authz_core:error] [pid 979474:tid 979671] [client 20.210.108.71:55517] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sun Jul 12 18:18:24.674994 2026] [security2:error] [pid 979474:tid 979576] [remote 185.177.72.52:7456] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "crackerjackcom.com"] [uri "/index.php"] [unique_id "alQuz3TrIlbXpLXvkNcahAABBGA"] [ N 2026-07-12 18:18:25.1561 940721/T1 age/Cor/CoreMain.cpp:1325 ]: Passenger core shutdown finished [Sun Jul 12 18:18:25.599163 2026] [:notice] [pid 940444:tid 940444] [host root@box2216.bluehost.com] mod_lsapi: Selfstarter 940444 stopped [Sun Jul 12 18:18:29.764895 2026] [lsapi:notice] [pid 803757:tid 803757] mod_lsapi: version 1.1-92 [Sun Jul 12 18:18:29.774436 2026] [:notice] [pid 992137:tid 992137] [host root@box2216.bluehost.com] mod_lsapi: Selfstarter 992137 started [Sun Jul 12 18:18:29.823463 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: oxycleanfresh.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.826951 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-72b38f27.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.845309 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.869906 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: annamarieakinsphotography.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.883702 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sarahdrakedesign.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.950734 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: donate.cecweb.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.960049 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: turnweb.cecillinois.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.961039 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cecweb-org.cecillinois.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:29.968487 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mail.sumikrishnan.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.028119 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-1774172e.versatileintelligence.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.074054 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gatetechinc.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.084514 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: amplifygov.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.085459 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: playmatchgame.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.086476 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: californiahasfaults.clearchannelca.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.101038 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cloud5.golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.102015 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: learntheconstitution.golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.102957 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: golfcourseartwork.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.112776 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: faberrug.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.117849 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dryougrfx.planopercussion.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.141128 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kitchenfusions.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.164604 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sheehytoyotavolvo.com.automotiveadvertisinggroup.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.194519 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: forum.brisbaneplasticsurgery.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.195488 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: brisbaneplasticsurgery.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.253757 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: redplatefoods.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.277620 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: rmfw-org.bcx.jru.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.279430 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: christmissionacademy-us.christmission.us:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.284385 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: crowderscustomizing.crowdersllc.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.285263 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: timberwolfsports.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.304706 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: iblivrex.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.305646 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cscauto-ca.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.306616 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mmdservices-ca.cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.478544 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: acnear-me.subzero.repair:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.479300 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: subzerorepairhillsborobeach-info.subzero.repair:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.485265 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: machinelat-org.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.487040 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-fb8a969a.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.487978 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-086c8c6a.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.488865 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: insideguille-site.soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.513803 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shadowarchitect-net.shadowarchitects.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.537358 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: turista-ph.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.538296 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fmehrconsulting.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.540213 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-99894f3c.resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.555555 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paulamarcelle.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.556473 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vibraniumacademy.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.557397 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theinterviewbook-website.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.558271 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: exhibit-merrill-pebble-in-the-pond-space.paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.559917 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: faso-la.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.561562 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: martes-am.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.563288 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-e98d59b3.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.564202 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9a62c3b7.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.565181 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-75989e1e.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.566054 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-2f702a47.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.566903 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-25b94e8b.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.567780 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-1cc13384.patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.575758 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: churrup.com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.576785 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-fc8ea813.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.577696 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-ed75465b.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.578565 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-cfb42606.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.579444 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-c6aeb1d1.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.580322 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-b08ddc9f.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.581254 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9b674029.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.583048 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-41ecc610.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.583981 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-0e478e45.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.591840 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: claudinehope-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.592780 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: pleasurerooms-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.594283 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cavernmenswear.co.uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.605359 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: deskinternacional.com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.606347 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: the-hospitality-center.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.607349 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: hangar34liverpool-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.608279 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thenewyorkpizzacompany-co.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.609175 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mossmanconstruction-co-uk.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.610076 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: housingdisrepairadvisors-com.1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.617701 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kwemoh.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.618545 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fatheel-com.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.619436 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-beaf8a14.noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.646446 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: monreagh-net.monreagh-television.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.649163 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: monreaghulsterscotscentre.monreagh-television.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.653529 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: matiasdeangelis.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.654397 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-9fd20ce0.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.655267 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: 98d67e85-9e7c-485a-91da-ea4414ad2769.vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.674609 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gringocanada.lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.675431 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gringorestaurants.lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.676448 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cobcllc.las.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.683110 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katherinejezekdesign.katherinejezek.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.707438 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cuvermagazine.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.708390 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: abigailspenser.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.709314 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-31b38a40.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.710264 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-2c1c19e1.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.711179 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: abigailspenserhu.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.712196 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: themillennialshandbook.hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.734856 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: homeyeats.kristinayazmin.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.738876 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kingsparkplug.guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.739931 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: motorcyclecylinder.guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.791076 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: recoverytoolsrus.firmwaremuseum.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.791871 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: whymicroformats.esl-games.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.816029 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: solvinghealthcare-ca.solvinghealthcare.ca:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.817030 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: resourceoptimizationnetwork.solvinghealthcare.ca:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.819016 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: curtis-company.curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.820113 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: rotarywinefest-org123.curtisandcomarketing.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.842912 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: clarebeloved.biglovesista.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.858843 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: whatliesbeyond-co.dko.sqs.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.861541 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: imexcoindustrial.atlanticpowers.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.892928 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-68a41425.adrastiacoons.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.907456 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: enchanteddreamstx.abacustaxestx.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.914299 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cpsota.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.926874 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vernsteinartandframe.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.932088 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: uk-taxrefund.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.935831 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: tracingtrauma.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.950531 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theaveragetouristtravel.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.955798 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: tecniasteel.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.959231 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: xyb.mhd.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.965236 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: stp.tlv.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.967434 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cruisecurator.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.971363 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: soytucasa.pe:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.977420 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: slgaskins.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.987583 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shadowarchitects.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:30.999138 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: resonateasia.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.004047 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: htl.bzx.mybluehost.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.005073 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: qualtechauto.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.011953 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paulamarcelleist.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.012935 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: patota.cl:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.014741 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: paradynemedical.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.019992 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: 1minute-website.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.024758 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: noyamitechnologies.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.039970 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: vikisanime.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.043024 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mbcwva.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.048091 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: magnoliacreative.me:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.056989 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lasercatsandbbq.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.059086 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lambda.enterprises:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.060035 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kwdesigns.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.065238 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katieostrommd.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.066240 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: katherinejezek.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.067992 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: kaiyadesigns.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.071859 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: hope-usa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.094636 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gulf52.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.095791 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: guangzhou-interpreter.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.100509 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: glamorous-beauty.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.113063 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: foreignfreshfierce.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.116340 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: etteonline.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.119978 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: engleman.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.140198 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: cottageluxe.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.151224 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: casafernandes.com.ar:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.152839 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: carlplaysdrums.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.184916 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: nwuav.nwuav.net:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.236845 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: jaybutler.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.237603 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: divfemleaders.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.238498 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: celestehartwell.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.239358 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: theeaseofbusiness.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.241066 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: divinefeminineleaders.iamjenlee.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.258474 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: falconaviation.org:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.260270 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: j2labs.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.266885 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: fctakoradi.kg-ifa.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.272623 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: mppisec.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.286101 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: grahamconcrete.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.303379 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dvd-copy-all.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.305759 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dorasti.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.306603 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: shop-caviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.307494 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dorasticaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.308376 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thefinestcaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.309257 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: dailycaviarnews.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.310171 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: onlinecaviarshop.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.311063 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: caviarnewsonline.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.311965 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: thecaviarmagazine.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.312865 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: buy-caviar-online.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.313757 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: organicgourmetcaviar.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.314639 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: luxurycaviarcatering.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.315958 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: gourmetcaviarcatering.losangelesfurnituredeals.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.360966 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: lower-hire.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.362335 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: brazentrail.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.363637 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: iotatraining.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.369500 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: website-388a60bf.northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.377999 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: northernmonkeydesignstudio.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.446439 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: sarahjoyyoga.com:443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.456333 2026] [ssl:warn] [pid 803757:tid 803757] AH01909: localhost:8443:0 server certificate does NOT include an ID which matches the server name [Sun Jul 12 18:18:31.483486 2026] [qos:notice] [pid 803757:tid 803757] mod_qos(007): calculated MaxClients/MaxRequestWorkers (max connections): 6144, applied limit: 2048 (QS_MaxClients) [Sun Jul 12 18:18:32.224419 2026] [http2:info] [pid 803757:tid 803757] AH03090: mod_http2 (v2.0.42, feats=CHPRIO+SHA256+INVHD+DWINS, nghttp2 1.69.0), initializing... [ N 2026-07-12 18:18:32.3560 992172/T1 age/Wat/WatchdogMain.cpp:1377 ]: Starting Passenger watchdog... [ N 2026-07-12 18:18:32.3836 992175/T1 age/Cor/CoreMain.cpp:1340 ]: Starting Passenger core... [ N 2026-07-12 18:18:32.3839 992175/T1 age/Cor/CoreMain.cpp:256 ]: Passenger core running in multi-application mode. [ N 2026-07-12 18:18:32.4471 992175/T1 age/Cor/CoreMain.cpp:1015 ]: Passenger core online, PID 992175 [Sun Jul 12 18:18:32.474128 2026] [mpm_event:notice] [pid 803757:tid 803757] AH00489: Apache/2.4.68 (cPanel) OpenSSL/1.1.1w Apache mod_qos/11.76 mod_bwlimited/1.4 mod_fcgid/2.3.9 Phusion_Passenger/6.0.20 mod_rbld2.0 configured -- resuming normal operations [Sun Jul 12 18:18:32.474176 2026] [core:notice] [pid 803757:tid 803757] AH00094: Command line: '/usr/sbin/httpd' [Sun Jul 12 18:18:33.692763 2026] [http2:info] [pid 992244:tid 992244] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:18:33.751735 2026] [security2:error] [pid 992244:tid 992380] [client 168.100.149.101:30002] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18005/bargainor/2308_gunz.jsp"] [unique_id "alQu2WJoJ8euboi5C2kBTwAAAAU"] [Sun Jul 12 18:18:33.778409 2026] [security2:error] [pid 992244:tid 992412] [client 168.100.149.193:50640] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18070/bargainor/2308_monadically.jsp"] [unique_id "alQu2WJoJ8euboi5C2kBVQAAACU"] [Sun Jul 12 18:18:33.794186 2026] [core:error] [pid 992244:tid 992406] [client 199.45.155.71:56700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:18:33.797756 2026] [core:error] [pid 992244:tid 992406] [client 199.45.155.71:56700] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:18:33.798490 2026] [security2:error] [pid 992244:tid 992422] [client 168.100.149.17:45104] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18135/bargainor/2308_enhalo.jsp"] [unique_id "alQu2WJoJ8euboi5C2kBWQAAAC8"] [Sun Jul 12 18:18:33.802571 2026] [security2:error] [pid 992244:tid 992425] [client 168.100.149.104:47680] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18200/bargainor/2308_metalogical.jsp"] [unique_id "alQu2WJoJ8euboi5C2kBWwAAADI"] [Sun Jul 12 18:18:33.806168 2026] [security2:error] [pid 992244:tid 992428] [client 168.100.149.17:41648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18265/bargainor/2308_psychoreflex.jsp"] [unique_id "alQu2WJoJ8euboi5C2kBXQAAADU"] [Sun Jul 12 18:18:33.849101 2026] [log_config:warn] [pid 979474:tid 979610] (32)Broken pipe: [client 64.62.156.30:47017] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:33.849159 2026] [log_config:warn] [pid 979474:tid 979610] (32)Broken pipe: [client 64.62.156.30:47017] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:33.928649 2026] [security2:error] [pid 992244:tid 992484] [client 62.171.167.118:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "67.222.38.115"] [uri "/rest/workflows"] [unique_id "alQu2WJoJ8euboi5C2kBaQAAAG0"] [Sun Jul 12 18:18:33.947523 2026] [security2:error] [pid 992244:tid 992485] [client 62.171.167.118:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "67.222.38.115"] [uri "/rest/variables"] [unique_id "alQu2WJoJ8euboi5C2kBZgAAAG4"] [Sun Jul 12 18:18:33.955348 2026] [log_config:warn] [pid 967714:tid 967755] (32)Broken pipe: [remote 62.171.167.118:58202] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:33.955372 2026] [log_config:warn] [pid 967714:tid 967755] (32)Broken pipe: [remote 62.171.167.118:58202] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:33.959232 2026] [log_config:warn] [pid 967714:tid 967733] (32)Broken pipe: [remote 62.171.167.118:58202] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:33.959263 2026] [log_config:warn] [pid 967714:tid 967733] (32)Broken pipe: [remote 62.171.167.118:58202] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:33.985295 2026] [security2:error] [pid 992244:tid 992452] [client 51.68.111.241:30733] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "hangar34liverpool.co.uk"] [uri "/robots.txt"] [unique_id "alQu2WJoJ8euboi5C2kBfwAAAE0"] [Sun Jul 12 18:18:34.066124 2026] [security2:error] [pid 992244:tid 992452] [client 51.68.111.241:30733] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "hangar34liverpool.co.uk"] [uri "/robots.txt"] [unique_id "alQu2WJoJ8euboi5C2kBfwAAAE0"] [Sun Jul 12 18:18:34.110035 2026] [security2:error] [pid 992244:tid 992457] [client 114.119.156.110:21081] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "brisbooknook.com"] [uri "/tribulation-review-cops-planet-1"] [unique_id "alQu2mJoJ8euboi5C2kBkAAAAFI"], referer: https://brisbooknook.com/ [Sun Jul 12 18:18:34.116837 2026] [log_config:warn] [pid 979474:tid 979648] (32)Broken pipe: [client 45.131.216.126:30136] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:34.116863 2026] [log_config:warn] [pid 979474:tid 979648] (32)Broken pipe: [client 45.131.216.126:30136] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:34.154404 2026] [security2:error] [pid 992244:tid 992438] [client 161.118.238.173:63615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.ywq.fyn.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQu2mJoJ8euboi5C2kBigAAAD8"], referer: https://www.facebook.com/ [Sun Jul 12 18:18:34.286984 2026] [security2:error] [pid 992244:tid 992385] [client 125.167.21.72:61769] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu2mJoJ8euboi5C2kBpAAAAAo"] [Sun Jul 12 18:18:34.362920 2026] [security2:error] [pid 992244:tid 992385] [client 125.167.21.72:61769] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu2mJoJ8euboi5C2kBpAAAAAo"] [Sun Jul 12 18:18:34.433569 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.40:17074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18330/bargainor/2308_mailable.jsp"] [unique_id "alQu2mJoJ8euboi5C2kBrgAAAHE"] [Sun Jul 12 18:18:34.541023 2026] [log_config:warn] [pid 979474:tid 979627] (32)Broken pipe: [client 202.46.62.82:45898] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:34.541065 2026] [log_config:warn] [pid 979474:tid 979627] (32)Broken pipe: [client 202.46.62.82:45898] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:34.551766 2026] [security2:error] [pid 992244:tid 992385] [client 47.82.124.242:41591] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQu2mJoJ8euboi5C2kByAAAAAo"] [Sun Jul 12 18:18:34.681355 2026] [security2:error] [pid 992244:tid 992279] [remote 209.42.18.223:53096] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 223.18.42.209.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "abigailspenser.com"] [uri "/wp-login.php"] [unique_id "alQu2mJoJ8euboi5C2kBxgAAMyE"] [Sun Jul 12 18:18:34.712877 2026] [security2:error] [pid 992244:tid 992412] [client 161.118.238.173:64977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.ywq.fyn.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQu2mJoJ8euboi5C2kB0wAAACU"], referer: https://www.facebook.com/ [Sun Jul 12 18:18:34.751138 2026] [http2:info] [pid 992537:tid 992537] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:18:34.808075 2026] [security2:error] [pid 992244:tid 992248] [remote 45.55.65.84:37084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.65.55.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "themarkberman.com"] [uri "/wp-login.php"] [unique_id "alQu2mJoJ8euboi5C2kB2wAAEQI"] [Sun Jul 12 18:18:35.145843 2026] [security2:error] [pid 992244:tid 992492] [client 74.7.241.170:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "weregonnaneedabiggerbowl.com"] [uri "/robots.txt"] [unique_id "alQu2mJoJ8euboi5C2kBygAAAHU"] [Sun Jul 12 18:18:35.201157 2026] [security2:error] [pid 992244:tid 992488] [client 216.244.66.249:40766] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/event/fourth-saturday-swing/"] [unique_id "alQu22JoJ8euboi5C2kB_gAAAHE"] [Sun Jul 12 18:18:35.201349 2026] [security2:error] [pid 992244:tid 992488] [client 216.244.66.249:40766] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "coloradodancesport.com"] [uri "/event/fourth-saturday-swing/"] [unique_id "alQu22JoJ8euboi5C2kB_gAAAHE"] [Sun Jul 12 18:18:35.251333 2026] [security2:error] [pid 992244:tid 992283] [remote 212.64.199.62:43684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.199.64.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "upperpottsgrovejournal.com"] [uri "/xmlrpc.php"] [unique_id "alQu2mJoJ8euboi5C2kB2AAARCU"] [Sun Jul 12 18:18:35.281656 2026] [security2:error] [pid 992244:tid 992498] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu2WJoJ8euboi5C2kBbgAAAHs"] [Sun Jul 12 18:18:35.281763 2026] [security2:error] [pid 992244:tid 992498] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu2WJoJ8euboi5C2kBbgAAAHs"] [Sun Jul 12 18:18:35.277061 2026] [security2:error] [pid 992244:tid 992454] [client 74.7.241.170:40414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "weregonnaneedabiggerbowl.com"] [uri "/robots.txt"] [unique_id "alQu2WJoJ8euboi5C2kBeAAATws"] [Sun Jul 12 18:18:35.338986 2026] [security2:error] [pid 992244:tid 992399] [client 24.203.79.110:53241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu22JoJ8euboi5C2kB_QAAABg"] [Sun Jul 12 18:18:35.389361 2026] [security2:error] [pid 992244:tid 992443] [client 212.64.199.62:43684] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "upperpottsgrovejournal.com"] [uri "/xmlrpc.php"] [unique_id "alQu2mJoJ8euboi5C2kB2AAARCU"] [Sun Jul 12 18:18:35.418781 2026] [proxy:warn] [pid 992244:tid 992502] [client 45.205.1.223:36790] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:18:35.438742 2026] [security2:error] [pid 979474:tid 979729] [client 65.21.113.206:41940] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWJfMjgyM19iaDE3L2hfMjgwNV8xN2I=.html"] [unique_id "alQu0HTrIlbXpLXvkNcaiQAAAPw"] [Sun Jul 12 18:18:35.438821 2026] [log_config:warn] [pid 979474:tid 979729] (32)Broken pipe: [client 65.21.113.206:41940] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:35.438837 2026] [log_config:warn] [pid 979474:tid 979729] (32)Broken pipe: [client 65.21.113.206:41940] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:35.446146 2026] [security2:error] [pid 992244:tid 992399] [client 24.203.79.110:53241] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu22JoJ8euboi5C2kB_QAAABg"] [Sun Jul 12 18:18:35.502747 2026] [security2:error] [pid 992537:tid 992688] [client 159.223.211.139:58382] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env"] [unique_id "alQu22smDw50MNj9aAKqXQAAAZM"] [Sun Jul 12 18:18:35.528260 2026] [security2:error] [pid 992244:tid 992406] [client 159.223.211.139:58268] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.copy"] [unique_id "alQu2mJoJ8euboi5C2kB4QAAAB8"] [Sun Jul 12 18:18:35.651116 2026] [security2:error] [pid 992244:tid 992495] [client 57.141.18.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQu2WJoJ8euboi5C2kBewAAAHg"] [Sun Jul 12 18:18:35.656034 2026] [security2:error] [pid 992244:tid 992452] [client 159.223.211.139:58242] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.backup"] [unique_id "alQu2mJoJ8euboi5C2kB5AAAAE0"] [Sun Jul 12 18:18:35.723318 2026] [security2:error] [pid 992244:tid 992412] [client 146.174.161.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu2mJoJ8euboi5C2kB3QAAACU"] [Sun Jul 12 18:18:35.752351 2026] [security2:error] [pid 992244:tid 992501] [client 159.223.211.139:58234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.bak"] [unique_id "alQu2mJoJ8euboi5C2kB7AAAAH4"] [Sun Jul 12 18:18:36.105724 2026] [security2:error] [pid 992537:tid 992727] [client 159.223.211.139:58198] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.copy"] [unique_id "alQu3GsmDw50MNj9aAKqagAAAbo"] [Sun Jul 12 18:18:36.111011 2026] [security2:error] [pid 992244:tid 992470] [client 216.244.66.250:50430] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "rapports-minoritaires.net"] [uri "/2013/01/15/prenez-vous-en-a-la-scientologie-mais-seulement-pour-de-bonnes-raisons/"] [unique_id "alQu3GJoJ8euboi5C2kCKQAAAF8"] [Sun Jul 12 18:18:36.142288 2026] [security2:error] [pid 992244:tid 992470] [client 216.244.66.250:50430] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "rapports-minoritaires.net"] [uri "/2013/01/15/prenez-vous-en-a-la-scientologie-mais-seulement-pour-de-bonnes-raisons/"] [unique_id "alQu3GJoJ8euboi5C2kCKQAAAF8"] [Sun Jul 12 18:18:36.285913 2026] [security2:error] [pid 992244:tid 992433] [client 74.7.241.170:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "weregonnaneedabiggerbowl.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "alQu22JoJ8euboi5C2kCGQAAADo"], referer: https://weregonnaneedabiggerbowl.com/robots.txt [Sun Jul 12 18:18:36.295713 2026] [security2:error] [pid 992244:tid 992389] [client 74.7.241.170:40414] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "weregonnaneedabiggerbowl.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "alQu22JoJ8euboi5C2kCCAAADjY"], referer: https://weregonnaneedabiggerbowl.com/robots.txt [Sun Jul 12 18:18:36.500746 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:36.501224 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:36.525204 2026] [security2:error] [pid 992244:tid 992415] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.backup"] [unique_id "alQu3GJoJ8euboi5C2kCNgAAACg"] [Sun Jul 12 18:18:36.952364 2026] [security2:error] [pid 992537:tid 992771] [client 168.100.149.217:23158] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18395/bargainor/2308_epidemiology.jsp"] [unique_id "alQu3GsmDw50MNj9aAKqdgAAAeY"] [Sun Jul 12 18:18:37.278689 2026] [security2:error] [pid 992244:tid 992453] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.bak"] [unique_id "alQu3WJoJ8euboi5C2kCRwAAAE4"] [Sun Jul 12 18:18:37.308995 2026] [authz_core:error] [pid 992537:tid 992783] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:37.309507 2026] [authz_core:error] [pid 992537:tid 992783] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:37.325708 2026] [log_config:warn] [pid 979474:tid 979707] (32)Broken pipe: [client 83.99.206.87:62399] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:18:37.325753 2026] [log_config:warn] [pid 979474:tid 979707] (32)Broken pipe: [client 83.99.206.87:62399] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:18:37.326160 2026] [security2:error] [pid 992244:tid 992491] [client 68.183.138.50:45430] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQu3GJoJ8euboi5C2kCOQAAAHQ"] [Sun Jul 12 18:18:37.487565 2026] [security2:error] [pid 992537:tid 992791] [client 159.223.211.139:58210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env"] [unique_id "alQu3WsmDw50MNj9aAKqhAAAAfo"] [Sun Jul 12 18:18:37.641095 2026] [security2:error] [pid 992537:tid 992793] [client 159.223.211.139:58376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.backup"] [unique_id "alQu3WsmDw50MNj9aAKqhgAAAfw"] [Sun Jul 12 18:18:37.641896 2026] [security2:error] [pid 992244:tid 992499] [client 159.223.211.139:58404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.copy"] [unique_id "alQu3WJoJ8euboi5C2kCTgAAAHw"] [Sun Jul 12 18:18:37.851781 2026] [security2:error] [pid 992244:tid 992464] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.bak"] [unique_id "alQu3WJoJ8euboi5C2kCVwAAAFk"] [Sun Jul 12 18:18:37.959957 2026] [security2:error] [pid 992244:tid 992498] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWJfMzkxNV9iODhoLzhfODY1N184aDg=.html"] [unique_id "alQu3WJoJ8euboi5C2kCXAAAAHs"] [Sun Jul 12 18:18:38.043481 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:38.044041 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:38.086560 2026] [security2:error] [pid 992244:tid 992404] [client 159.223.211.139:58404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.copy"] [unique_id "alQu3mJoJ8euboi5C2kCYAAAAB0"] [Sun Jul 12 18:18:38.185397 2026] [security2:error] [pid 992537:tid 992801] [client 159.223.211.139:58210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env"] [unique_id "alQu3msmDw50MNj9aAKqiwAAAgQ"] [Sun Jul 12 18:18:38.276426 2026] [security2:error] [pid 992537:tid 992810] [client 168.100.149.137:26188] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18460/bargainor/2308_secque.jsp"] [unique_id "alQu3msmDw50MNj9aAKqjAAAAg0"] [Sun Jul 12 18:18:38.426077 2026] [security2:error] [pid 992244:tid 992415] [client 77.83.36.161:58003] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.36.83.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/administrator/index.php"] [unique_id "alQu3mJoJ8euboi5C2kCZQAAACg"] [Sun Jul 12 18:18:38.437432 2026] [security2:error] [pid 992537:tid 992789] [client 9.169.124.16:10368] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQu3WsmDw50MNj9aAKqggAB-AI"] [Sun Jul 12 18:18:38.735961 2026] [security2:error] [pid 992537:tid 992692] [client 159.223.211.139:58376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.backup"] [unique_id "alQu3msmDw50MNj9aAKqnAAAAZc"] [Sun Jul 12 18:18:38.851381 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:38.852008 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:39.018328 2026] [security2:error] [pid 992537:tid 992687] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu3msmDw50MNj9aAKqlAAAAZI"] [Sun Jul 12 18:18:39.018391 2026] [security2:error] [pid 992537:tid 992687] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu3msmDw50MNj9aAKqlAAAAZI"] [Sun Jul 12 18:18:39.025808 2026] [security2:error] [pid 992537:tid 992811] [client 65.21.113.206:55772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWJfMzkxNV9iODhoLzhfODY1N184aDg=.html"] [unique_id "alQu3msmDw50MNj9aAKqkQAAAg4"] [Sun Jul 12 18:18:39.104658 2026] [security2:error] [pid 992537:tid 992710] [client 77.83.36.161:58449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.36.83.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/administrator/index.php"] [unique_id "alQu32smDw50MNj9aAKquQAAAak"] [Sun Jul 12 18:18:39.203751 2026] [security2:error] [pid 992244:tid 992388] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.bak"] [unique_id "alQu32JoJ8euboi5C2kCcAAAAA0"] [Sun Jul 12 18:18:39.262329 2026] [security2:error] [pid 992244:tid 992386] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "altf.com"] [uri "/index.php"] [unique_id "alQu22JoJ8euboi5C2kCKgAAAAs"] [Sun Jul 12 18:18:39.263362 2026] [security2:error] [pid 992244:tid 992502] [client 45.205.1.223:36790] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "altf.com"] [uri "/400.shtml"] [unique_id "alQu22JoJ8euboi5C2kCBwAAAH8"] [Sun Jul 12 18:18:39.772433 2026] [security2:error] [pid 992537:tid 992740] [client 77.83.36.161:58866] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.36.83.77.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/administrator/index.php"] [unique_id "alQu32smDw50MNj9aAKq3QAAAcc"] [Sun Jul 12 18:18:39.819114 2026] [security2:error] [pid 992244:tid 992411] [client 91.92.42.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQu2mJoJ8euboi5C2kB1wAAJCY"], referer: http://hopeaboveall.com/config.js [Sun Jul 12 18:18:39.946320 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:39.946842 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:40.053204 2026] [authz_core:error] [pid 992537:tid 992691] [client 20.210.108.71:53083] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/sitemaps/providers/error_log, referer: binance.com [Sun Jul 12 18:18:40.153207 2026] [security2:error] [pid 992244:tid 992501] [client 159.223.211.139:58404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.copy"] [unique_id "alQu4GJoJ8euboi5C2kCfwAAAH4"] [Sun Jul 12 18:18:40.241643 2026] [security2:error] [pid 992537:tid 992773] [client 159.223.211.139:58210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env"] [unique_id "alQu4GsmDw50MNj9aAKq6gAAAeg"] [Sun Jul 12 18:18:40.558782 2026] [security2:error] [pid 992244:tid 992398] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWJfNjQ1MC9ibWgvMTU3MDlfbWg=.htm"] [unique_id "alQu4GJoJ8euboi5C2kCigAAABc"] [Sun Jul 12 18:18:40.619420 2026] [security2:error] [pid 992244:tid 992406] [client 216.244.66.198:48014] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.cidclan.net"] [uri "/showthread.php"] [unique_id "alQu4GJoJ8euboi5C2kCjgAAAB8"] [Sun Jul 12 18:18:40.619776 2026] [security2:error] [pid 992244:tid 992406] [client 216.244.66.198:48014] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.cidclan.net"] [uri "/showthread.php"] [unique_id "alQu4GJoJ8euboi5C2kCjgAAAB8"] [Sun Jul 12 18:18:40.632792 2026] [security2:error] [pid 992537:tid 992786] [client 159.223.211.139:58376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.backup"] [unique_id "alQu4GsmDw50MNj9aAKq8gAAAfU"] [Sun Jul 12 18:18:40.699495 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:40.699997 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:40.895535 2026] [security2:error] [pid 992244:tid 992422] [client 168.100.149.130:36058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18525/bargainor/2308_dislevelment.jsp"] [unique_id "alQu4GJoJ8euboi5C2kCkwAAAC8"] [Sun Jul 12 18:18:40.980377 2026] [security2:error] [pid 992244:tid 992492] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/.env.bak"] [unique_id "alQu4GJoJ8euboi5C2kClQAAAHU"] [Sun Jul 12 18:18:41.482952 2026] [security2:error] [pid 992244:tid 992473] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu4WJoJ8euboi5C2kClwAAAGI"] [Sun Jul 12 18:18:41.483003 2026] [security2:error] [pid 992244:tid 992473] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu4WJoJ8euboi5C2kClwAAAGI"] [Sun Jul 12 18:18:41.484239 2026] [security2:error] [pid 992244:tid 992479] [client 65.21.113.206:55782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWJfNjQ1MC9ibWgvMTU3MDlfbWg=.htm"] [unique_id "alQu4WJoJ8euboi5C2kClgAAAGg"] [Sun Jul 12 18:18:41.502935 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:41.503443 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:41.667804 2026] [security2:error] [pid 992244:tid 992415] [client 77.40.43.136:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu4WJoJ8euboi5C2kCmgAAACg"] [Sun Jul 12 18:18:42.240065 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:42.240559 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:42.574162 2026] [security2:error] [pid 992244:tid 992483] [client 159.223.211.139:58404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/%2eenv%2ecopy"] [unique_id "alQu4mJoJ8euboi5C2kCuQAAAGw"] [Sun Jul 12 18:18:42.588572 2026] [security2:error] [pid 992537:tid 992718] [client 159.223.211.139:58210] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/%2eenv"] [unique_id "alQu4msmDw50MNj9aAKrDQAAAbE"] [Sun Jul 12 18:18:42.779843 2026] [security2:error] [pid 992244:tid 992494] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWJyOWdpLzQyOTMvYnIvMTMxNDEvcg=="] [unique_id "alQu4mJoJ8euboi5C2kCwgAAAHc"] [Sun Jul 12 18:18:42.809896 2026] [security2:error] [pid 992537:tid 992721] [client 159.223.211.139:58376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/%2eenv%2ebak"] [unique_id "alQu4msmDw50MNj9aAKrDwAAAbQ"] [Sun Jul 12 18:18:42.950484 2026] [security2:error] [pid 992537:tid 992709] [client 168.100.149.163:49304] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18590/bargainor/2308_limnoria.jsp"] [unique_id "alQu4msmDw50MNj9aAKrEQAAAag"] [Sun Jul 12 18:18:43.001783 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:43.002960 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:43.018190 2026] [security2:error] [pid 992244:tid 992388] [client 159.223.211.139:58344] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.jobs.j2labs.com"] [uri "/%2eenv%2ebackup"] [unique_id "alQu42JoJ8euboi5C2kCxwAAAA0"] [Sun Jul 12 18:18:43.612285 2026] [security2:error] [pid 992244:tid 992488] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu42JoJ8euboi5C2kC0QAAAHE"] [Sun Jul 12 18:18:43.612343 2026] [security2:error] [pid 992244:tid 992488] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu42JoJ8euboi5C2kC0QAAAHE"] [Sun Jul 12 18:18:43.613404 2026] [security2:error] [pid 992244:tid 992421] [client 65.21.113.206:60526] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWJyOWdpLzQyOTMvYnIvMTMxNDEvcg=="] [unique_id "alQu42JoJ8euboi5C2kCzgAAAC4"] [Sun Jul 12 18:18:43.792397 2026] [authz_core:error] [pid 992537:tid 992745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:43.792918 2026] [authz_core:error] [pid 992537:tid 992745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:44.266290 2026] [security2:error] [pid 992244:tid 992482] [client 168.100.149.47:39646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18655/bargainor/2308_milksopism.jsp"] [unique_id "alQu5GJoJ8euboi5C2kC6gAAAGs"] [Sun Jul 12 18:18:44.335972 2026] [security2:error] [pid 992537:tid 992639] [remote 156.59.198.135:31976] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "machinelat.org"] [uri "/wp-content/uploads/2025/09/hans-laser-image-480x241.png"] [unique_id "alQu5GsmDw50MNj9aAKrJwAB7FQ"], referer: https://machinelat.org/blog/corte-laser-velocidad-precision-estructuras-metalicas-peru/ [Sun Jul 12 18:18:44.584882 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:44.585362 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:44.641230 2026] [security2:error] [pid 992537:tid 992641] [remote 98.70.32.248:54500] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQu5GsmDw50MNj9aAKrMAAB-VY"] [Sun Jul 12 18:18:44.752069 2026] [security2:error] [pid 992244:tid 992417] [client 125.167.21.72:62225] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu5GJoJ8euboi5C2kC-QAAACo"] [Sun Jul 12 18:18:44.752264 2026] [security2:error] [pid 992244:tid 992417] [client 125.167.21.72:62225] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu5GJoJ8euboi5C2kC-QAAACo"] [Sun Jul 12 18:18:44.903109 2026] [security2:error] [pid 992244:tid 992451] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWMtMzUyOC9jNWYvMTUzMDUtNWZyMw=="] [unique_id "alQu5GJoJ8euboi5C2kC_AAAAEw"] [Sun Jul 12 18:18:45.361848 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:45.362518 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:45.602879 2026] [proxy:warn] [pid 992244:tid 992491] [client 45.205.1.223:38308] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be altf.com for uri /400.shtml [Sun Jul 12 18:18:45.746005 2026] [security2:error] [pid 992244:tid 992428] [client 24.203.79.110:53741] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu5WJoJ8euboi5C2kDGAAAADU"] [Sun Jul 12 18:18:45.746311 2026] [security2:error] [pid 992244:tid 992428] [client 24.203.79.110:53741] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu5WJoJ8euboi5C2kDGAAAADU"] [Sun Jul 12 18:18:45.789312 2026] [security2:error] [pid 992244:tid 992449] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu5WJoJ8euboi5C2kDCQAAAEo"] [Sun Jul 12 18:18:45.789401 2026] [security2:error] [pid 992244:tid 992449] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu5WJoJ8euboi5C2kDCQAAAEo"] [Sun Jul 12 18:18:45.790441 2026] [security2:error] [pid 992244:tid 992415] [client 65.21.113.206:60528] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWMtMzUyOC9jNWYvMTUzMDUtNWZyMw=="] [unique_id "alQu5WJoJ8euboi5C2kDBwAAACg"] [Sun Jul 12 18:18:45.838206 2026] [security2:error] [pid 992244:tid 992435] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "altf.com"] [uri "/index.php"] [unique_id "alQu5WJoJ8euboi5C2kDFgAAADw"] [Sun Jul 12 18:18:45.839233 2026] [security2:error] [pid 992244:tid 992491] [client 45.205.1.223:38308] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "500"] [hostname "altf.com"] [uri "/400.shtml"] [unique_id "alQu5WJoJ8euboi5C2kDEwAAAHQ"] [Sun Jul 12 18:18:46.117930 2026] [authz_core:error] [pid 992244:tid 992448] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:46.118423 2026] [authz_core:error] [pid 992244:tid 992448] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:46.263412 2026] [security2:error] [pid 992537:tid 992711] [client 168.100.149.44:17592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18720/bargainor/2308_capnoides.jsp"] [unique_id "alQu5msmDw50MNj9aAKrOQAAAao"] [Sun Jul 12 18:18:46.804002 2026] [security2:error] [pid 992244:tid 992473] [client 59.178.8.107:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQu5mJoJ8euboi5C2kDKwAAAGI"] [Sun Jul 12 18:18:46.900845 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:46.901345 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:47.067060 2026] [security2:error] [pid 992244:tid 992492] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWMtNjk3L2M1Zi8xNTMwNS01ZnIz"] [unique_id "alQu52JoJ8euboi5C2kDOAAAAHU"] [Sun Jul 12 18:18:47.692531 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:47.693059 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:47.959014 2026] [security2:error] [pid 992537:tid 992724] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu52smDw50MNj9aAKrSQAAAbc"] [Sun Jul 12 18:18:47.959071 2026] [security2:error] [pid 992537:tid 992724] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu52smDw50MNj9aAKrSQAAAbc"] [Sun Jul 12 18:18:47.960107 2026] [security2:error] [pid 992244:tid 992489] [client 65.21.113.206:60542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWMtNjk3L2M1Zi8xNTMwNS01ZnIz"] [unique_id "alQu52JoJ8euboi5C2kDPQAAAHI"] [Sun Jul 12 18:18:48.167232 2026] [security2:error] [pid 992244:tid 992411] [client 170.187.145.253:47954] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQu52JoJ8euboi5C2kDRgAAACQ"] [Sun Jul 12 18:18:48.277805 2026] [security2:error] [pid 992244:tid 992482] [client 168.100.149.32:39366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18785/bargainor/2308_deft.jsp"] [unique_id "alQu6GJoJ8euboi5C2kDTQAAAGs"] [Sun Jul 12 18:18:48.446801 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:48.447269 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:49.149489 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:49.149999 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:49.589589 2026] [security2:error] [pid 992537:tid 992759] [client 38.51.207.59:51584] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQu6WsmDw50MNj9aAKrXgAAAdo"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-V330-15ISK-portable-batterie.htm [Sun Jul 12 18:18:49.864960 2026] [security2:error] [pid 992537:tid 992656] [remote 98.70.32.248:54506] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQu6WsmDw50MNj9aAKrZAAB8GU"] [Sun Jul 12 18:18:49.900953 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:49.901441 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:50.269482 2026] [security2:error] [pid 992537:tid 992803] [client 168.100.149.171:29848] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18850/bargainor/2308_did.jsp"] [unique_id "alQu6msmDw50MNj9aAKraQAAAgY"] [Sun Jul 12 18:18:50.395817 2026] [security2:error] [pid 992244:tid 992382] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWMtODI0MS9jNWYvMTUzMDUtNWZyMw=="] [unique_id "alQu6mJoJ8euboi5C2kDbQAAAAc"] [Sun Jul 12 18:18:50.620804 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:50.621330 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:50.942810 2026] [security2:error] [pid 992537:tid 992701] [client 144.31.35.61:25406] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu6msmDw50MNj9aAKrbwAAAaA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.066448 2026] [security2:error] [pid 992244:tid 992480] [client 216.75.132.55:43890] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu6mJoJ8euboi5C2kDfwAAAGk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.071686 2026] [security2:error] [pid 992244:tid 992465] [client 216.75.132.55:43888] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu6mJoJ8euboi5C2kDgAAAAFo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.104794 2026] [security2:error] [pid 992244:tid 992380] [client 207.180.11.61:15798] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu6mJoJ8euboi5C2kDgQAAAAU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.251051 2026] [security2:error] [pid 992244:tid 992398] [client 143.20.253.242:37006] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu62JoJ8euboi5C2kDiAAAABc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.307725 2026] [security2:error] [pid 992537:tid 992692] [client 144.31.35.126:51338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu62smDw50MNj9aAKrcgAAAZc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.312561 2026] [security2:error] [pid 992244:tid 992438] [client 207.180.11.61:15808] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu62JoJ8euboi5C2kDiwAAAD8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:51.389276 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:51.389862 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:51.428198 2026] [security2:error] [pid 992537:tid 992698] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu6msmDw50MNj9aAKrcAAAAZ0"] [Sun Jul 12 18:18:51.428251 2026] [security2:error] [pid 992537:tid 992698] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu6msmDw50MNj9aAKrcAAAAZ0"] [Sun Jul 12 18:18:51.430541 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.206:60552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWMtODI0MS9jNWYvMTUzMDUtNWZyMw=="] [unique_id "alQu6mJoJ8euboi5C2kDfQAAAFM"] [Sun Jul 12 18:18:52.159758 2026] [authz_core:error] [pid 992244:tid 992390] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:52.194693 2026] [authz_core:error] [pid 992244:tid 992390] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:52.280902 2026] [security2:error] [pid 992244:tid 992385] [client 168.100.149.78:21444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18915/bargainor/2308_delphian.jsp"] [unique_id "alQu7GJoJ8euboi5C2kDogAAAAo"] [Sun Jul 12 18:18:52.306830 2026] [security2:error] [pid 992244:tid 992413] [client 113.188.56.34:36710] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu7GJoJ8euboi5C2kDoAAAACY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:52.309107 2026] [security2:error] [pid 992244:tid 992489] [client 156.247.213.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "cloud2e.com"] [uri "/index.php"] [unique_id "alQu6mJoJ8euboi5C2kDdgAAAHI"] [Sun Jul 12 18:18:52.690853 2026] [security2:error] [pid 992537:tid 992690] [client 57.141.18.71:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQu7GsmDw50MNj9aAKrdwAAAZU"] [Sun Jul 12 18:18:52.951277 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:52.952019 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:52.977019 2026] [security2:error] [pid 992244:tid 992403] [client 92.52.225.93:38362] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu7GJoJ8euboi5C2kDqwAAABw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:53.011296 2026] [security2:error] [pid 992244:tid 992411] [client 216.244.66.249:33352] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.ophtek.com"] [uri "/iot-reaper-botnet-predicts-grim-future/"] [unique_id "alQu7WJoJ8euboi5C2kDrQAAACQ"] [Sun Jul 12 18:18:53.011540 2026] [security2:error] [pid 992244:tid 992411] [client 216.244.66.249:33352] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.ophtek.com"] [uri "/iot-reaper-botnet-predicts-grim-future/"] [unique_id "alQu7WJoJ8euboi5C2kDrQAAACQ"] [Sun Jul 12 18:18:53.046570 2026] [authz_core:error] [pid 992244:tid 992449] [client 20.210.108.71:56604] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/widgets/error_log, referer: binance.com [Sun Jul 12 18:18:53.126434 2026] [security2:error] [pid 992537:tid 992743] [client 65.21.113.206:33316] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQu7WsmDw50MNj9aAKrgwAAAco"] [Sun Jul 12 18:18:53.360157 2026] [security2:error] [pid 992537:tid 992761] [client 160.20.204.224:8062] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu7WsmDw50MNj9aAKrhwAAAdw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:53.623963 2026] [security2:error] [pid 992244:tid 992480] [client 65.21.113.206:60206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQu7WJoJ8euboi5C2kDsgAAAGk"] [Sun Jul 12 18:18:53.655554 2026] [security2:error] [pid 992537:tid 992760] [client 181.140.82.159:47472] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu7WsmDw50MNj9aAKrjQAAAds"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:53.705212 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:53.705726 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:53.730172 2026] [security2:error] [pid 992537:tid 992702] [client 179.6.15.6:5941] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu7WsmDw50MNj9aAKrkAAAAaE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:53.785591 2026] [security2:error] [pid 992244:tid 992466] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWN1aXRlLzgyMzcvY3UvMTM5ODEvdQ=="] [unique_id "alQu7WJoJ8euboi5C2kDtwAAAFs"] [Sun Jul 12 18:18:53.961854 2026] [security2:error] [pid 992244:tid 992398] [client 65.21.113.206:60206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQu7WJoJ8euboi5C2kDuAAAABc"] [Sun Jul 12 18:18:54.494045 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:54.494546 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:54.534704 2026] [security2:error] [pid 992537:tid 992766] [client 125.167.21.72:62677] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu7msmDw50MNj9aAKrmgAAAeE"] [Sun Jul 12 18:18:54.535721 2026] [security2:error] [pid 992537:tid 992766] [client 125.167.21.72:62677] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu7msmDw50MNj9aAKrmgAAAeE"] [Sun Jul 12 18:18:54.848449 2026] [security2:error] [pid 992244:tid 992436] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu7mJoJ8euboi5C2kDyAAAAD0"] [Sun Jul 12 18:18:54.848509 2026] [security2:error] [pid 992244:tid 992436] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu7mJoJ8euboi5C2kDyAAAAD0"] [Sun Jul 12 18:18:54.849469 2026] [security2:error] [pid 992537:tid 992786] [client 65.21.113.206:60208] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWN1aXRlLzgyMzcvY3UvMTM5ODEvdQ=="] [unique_id "alQu7msmDw50MNj9aAKrmAAAAfU"] [Sun Jul 12 18:18:54.964647 2026] [security2:error] [pid 992244:tid 992426] [client 168.100.149.229:51082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/18980/bargainor/2308_anisodactyli.jsp"] [unique_id "alQu7mJoJ8euboi5C2kDzwAAADM"] [Sun Jul 12 18:18:55.267818 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:55.268300 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:55.762886 2026] [security2:error] [pid 992537:tid 992801] [client 65.21.113.253:35018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/robots.txt"] [unique_id "alQu72smDw50MNj9aAKrqwAAAgQ"] [Sun Jul 12 18:18:55.892437 2026] [security2:error] [pid 992537:tid 992755] [client 172.226.3.48:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "stage1music.com"] [uri "/index.php"] [unique_id "alQu7WsmDw50MNj9aAKrkwAAAdY"] [Sun Jul 12 18:18:56.010816 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:56.011302 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:56.315439 2026] [security2:error] [pid 992537:tid 992712] [client 187.232.247.205:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu72smDw50MNj9aAKrsAAAAas"] [Sun Jul 12 18:18:56.381573 2026] [security2:error] [pid 992244:tid 992428] [client 24.203.79.110:54249] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu8GJoJ8euboi5C2kD4gAAADU"] [Sun Jul 12 18:18:56.381814 2026] [security2:error] [pid 992244:tid 992428] [client 24.203.79.110:54249] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu8GJoJ8euboi5C2kD4gAAADU"] [Sun Jul 12 18:18:56.395129 2026] [security2:error] [pid 992244:tid 992403] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWN6Y3JzOF83OTQwL2N6LzExNzUzL3o=.html"] [unique_id "alQu8GJoJ8euboi5C2kD4wAAABw"] [Sun Jul 12 18:18:56.439765 2026] [security2:error] [pid 992244:tid 992450] [client 179.96.163.19:47004] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu8GJoJ8euboi5C2kD4QAAAEs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:56.767355 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:56.767984 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:56.917142 2026] [security2:error] [pid 992244:tid 992414] [client 168.100.149.107:27676] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19045/bargainor/2308_birefraction.jsp"] [unique_id "alQu8GJoJ8euboi5C2kD8wAAACc"] [Sun Jul 12 18:18:56.976201 2026] [security2:error] [pid 992244:tid 992398] [client 216.73.217.123:18483] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.217.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/index.php/our-team/columnists-contributors/176-angela-kelsheimer-hoo-doo-pharmaceuticals/645-hoo-doo-pharmaceuticals-the-beginning"] [unique_id "alQu8GJoJ8euboi5C2kD9wAAABc"] [Sun Jul 12 18:18:57.050439 2026] [security2:error] [pid 992244:tid 992458] [client 173.199.122.135:59351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 135.122.199.173.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "myonlinesupport.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQu8WJoJ8euboi5C2kD-AAAAFM"] [Sun Jul 12 18:18:57.291916 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu8GJoJ8euboi5C2kD8gAAAE0"] [Sun Jul 12 18:18:57.291967 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu8GJoJ8euboi5C2kD8gAAAE0"] [Sun Jul 12 18:18:57.293172 2026] [security2:error] [pid 992244:tid 992435] [client 65.21.113.206:60222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWN6Y3JzOF83OTQwL2N6LzExNzUzL3o=.html"] [unique_id "alQu8GJoJ8euboi5C2kD7gAAADw"] [Sun Jul 12 18:18:57.405690 2026] [security2:error] [pid 992244:tid 992372] [remote 98.70.32.248:37924] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQu8WJoJ8euboi5C2kD_QAAZn4"] [Sun Jul 12 18:18:57.526185 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:57.526712 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:57.809111 2026] [security2:error] [pid 992244:tid 992402] [client 74.7.241.166:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "stage1music.com"] [uri "/index.php"] [unique_id "alQu8GJoJ8euboi5C2kD8QAAABs"] [Sun Jul 12 18:18:57.810323 2026] [security2:error] [pid 992244:tid 992441] [client 74.7.241.166:56436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "stage1music.com"] [uri "/robots.txt"] [unique_id "alQu8GJoJ8euboi5C2kD7QAAQgk"] [Sun Jul 12 18:18:58.019909 2026] [security2:error] [pid 992244:tid 992456] [client 176.65.148.38:55232] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "50.87.225.71"] [uri "/"] [unique_id "alQu8WJoJ8euboi5C2kECgAAAFE"] [Sun Jul 12 18:18:58.146792 2026] [security2:error] [pid 992537:tid 992709] [client 105.72.20.51:33422] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQu8msmDw50MNj9aAKrvgAAAag"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:18:58.299255 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:58.299778 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:58.952841 2026] [security2:error] [pid 992537:tid 992750] [client 168.100.149.85:62984] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19110/bargainor/2308_mediator.jsp"] [unique_id "alQu8msmDw50MNj9aAKrwwAAAdE"] [Sun Jul 12 18:18:59.046204 2026] [authz_core:error] [pid 992537:tid 992739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:59.046744 2026] [authz_core:error] [pid 992537:tid 992739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:59.518904 2026] [security2:error] [pid 992244:tid 992469] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNfMzA3OS9jbHQvMjExNjlfbHQ=.htm"] [unique_id "alQu82JoJ8euboi5C2kEKwAAAF4"] [Sun Jul 12 18:18:59.616048 2026] [security2:error] [pid 992244:tid 992398] [client 50.87.253.215:50976] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/wp-content/uploads/2020/05/TSS-logo.png"] [unique_id "alQu82JoJ8euboi5C2kELAAAABc"] [Sun Jul 12 18:18:59.804351 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:18:59.804875 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:18:59.838554 2026] [security2:error] [pid 992244:tid 992432] [client 156.59.198.135:40158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "americanconco.com"] [uri "/wp-content/uploads/2016/09/Employment_Application.pdf"] [unique_id "alQu82JoJ8euboi5C2kEOgAAADk"] [Sun Jul 12 18:19:00.495950 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu9GJoJ8euboi5C2kEQAAAAA0"] [Sun Jul 12 18:19:00.496002 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu9GJoJ8euboi5C2kEQAAAAA0"] [Sun Jul 12 18:19:00.497001 2026] [security2:error] [pid 992244:tid 992475] [client 65.21.113.206:60228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNfMzA3OS9jbHQvMjExNjlfbHQ=.htm"] [unique_id "alQu82JoJ8euboi5C2kEPQAAAGQ"] [Sun Jul 12 18:19:00.605955 2026] [authz_core:error] [pid 992244:tid 992417] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:00.606704 2026] [authz_core:error] [pid 992244:tid 992417] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:00.994794 2026] [security2:error] [pid 992244:tid 992408] [client 168.100.149.104:27146] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19175/bargainor/2308_gurian.jsp"] [unique_id "alQu9GJoJ8euboi5C2kETAAAACE"] [Sun Jul 12 18:19:01.183492 2026] [security2:error] [pid 992537:tid 992796] [client 84.37.155.95:65070] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQu9WsmDw50MNj9aAKr6wAB_wc"], referer: https://www.portables-batterie.fr/hp-batterie-sitemap.htm [Sun Jul 12 18:19:01.338967 2026] [rewrite:error] [pid 992244:tid 992290] [remote 151.247.71.190:37517] AH10411: Rewritten query string contains control characters or spaces [Sun Jul 12 18:19:01.472794 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:01.473543 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:02.203440 2026] [security2:error] [pid 992244:tid 992404] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNfNTYzMy9jb2kvMzAwMTdfb2k=.htm"] [unique_id "alQu9mJoJ8euboi5C2kEcwAAAB0"] [Sun Jul 12 18:19:02.302617 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:02.303174 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:02.709895 2026] [proxy:warn] [pid 992244:tid 992476] [client 151.243.11.245:33564] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be colonialcollisionofacton.automotiveadvertisinggroup.com for uri /400.shtml [Sun Jul 12 18:19:02.900558 2026] [security2:error] [pid 992537:tid 992736] [client 168.100.149.187:19058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19240/bargainor/2308_monkey.jsp"] [unique_id "alQu9msmDw50MNj9aAKsBQAAAcM"] [Sun Jul 12 18:19:03.043450 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:03.044031 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:03.285964 2026] [security2:error] [pid 992244:tid 992454] [client 151.243.11.245:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQu9mJoJ8euboi5C2kEhwAAAE8"] [Sun Jul 12 18:19:03.286046 2026] [security2:error] [pid 992244:tid 992454] [client 151.243.11.245:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQu9mJoJ8euboi5C2kEhwAAAE8"] [Sun Jul 12 18:19:03.286705 2026] [security2:error] [pid 992244:tid 992476] [client 151.243.11.245:33564] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/400.shtml"] [unique_id "alQu9mJoJ8euboi5C2kEhAAAAGU"] [Sun Jul 12 18:19:03.316330 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu9mJoJ8euboi5C2kEhQAAAHg"] [Sun Jul 12 18:19:03.316381 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu9mJoJ8euboi5C2kEhQAAAHg"] [Sun Jul 12 18:19:03.318332 2026] [security2:error] [pid 992537:tid 992685] [client 65.21.113.206:49234] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNfNTYzMy9jb2kvMzAwMTdfb2k=.htm"] [unique_id "alQu9msmDw50MNj9aAKsAAAAAZA"] [Sun Jul 12 18:19:03.657093 2026] [security2:error] [pid 992244:tid 992397] [client 50.87.253.215:60348] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "undameta.com"] [uri "/wp-cron.php"] [unique_id "alQu92JoJ8euboi5C2kEkgAAABY"] [Sun Jul 12 18:19:03.786603 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:03.787122 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:04.513801 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:04.514295 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:04.567921 2026] [security2:error] [pid 992244:tid 992429] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNfNTg1My9jZ2EvMjQ4MzdfZ2E=.htm"] [unique_id "alQu-GJoJ8euboi5C2kEnQAAADY"] [Sun Jul 12 18:19:04.660724 2026] [authz_core:error] [pid 992244:tid 992480] [client 20.210.108.71:53974] AH01630: client denied by server configuration: /home2/johndmur/public_html/wp-includes/widgets/error_log, referer: binance.com [Sun Jul 12 18:19:04.995710 2026] [security2:error] [pid 992537:tid 992751] [client 50.87.253.215:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/index.php"] [unique_id "alQu82smDw50MNj9aAKrygAAAdI"] [Sun Jul 12 18:19:04.996874 2026] [security2:error] [pid 992537:tid 992752] [client 50.87.253.215:50974] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahrweidman.com"] [uri "/"] [unique_id "alQu82smDw50MNj9aAKryQAAAdM"] [Sun Jul 12 18:19:05.240110 2026] [security2:error] [pid 992244:tid 992487] [client 125.167.21.72:63121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu-WJoJ8euboi5C2kEpwAAAHA"] [Sun Jul 12 18:19:05.241355 2026] [security2:error] [pid 992244:tid 992487] [client 125.167.21.72:63121] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQu-WJoJ8euboi5C2kEpwAAAHA"] [Sun Jul 12 18:19:05.286112 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:05.286611 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:05.565041 2026] [security2:error] [pid 992244:tid 992384] [client 103.173.162.243:34474] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQu-WJoJ8euboi5C2kErAAAAAk"] [Sun Jul 12 18:19:05.678800 2026] [security2:error] [pid 992537:tid 992717] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu-WsmDw50MNj9aAKsIgAAAbA"] [Sun Jul 12 18:19:05.678868 2026] [security2:error] [pid 992537:tid 992717] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu-WsmDw50MNj9aAKsIgAAAbA"] [Sun Jul 12 18:19:05.680795 2026] [security2:error] [pid 992537:tid 992716] [client 65.21.113.206:49238] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNfNTg1My9jZ2EvMjQ4MzdfZ2E=.htm"] [unique_id "alQu-WsmDw50MNj9aAKsIAAAAa8"] [Sun Jul 12 18:19:06.055243 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:06.055810 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:06.177530 2026] [proxy:warn] [pid 992537:tid 992687] [client 151.243.11.245:33576] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be colonialcollisionofacton.automotiveadvertisinggroup.com for uri /400.shtml [Sun Jul 12 18:19:06.369322 2026] [security2:error] [pid 992244:tid 992384] [client 103.173.162.243:34474] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQu-WJoJ8euboi5C2kErAAAAAk"] [Sun Jul 12 18:19:06.454382 2026] [security2:error] [pid 992537:tid 992693] [client 74.7.241.189:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "machinelat.org"] [uri "/index.php"] [unique_id "alQu9msmDw50MNj9aAKr-wAAAZg"] [Sun Jul 12 18:19:06.456286 2026] [security2:error] [pid 992244:tid 992431] [client 74.7.241.189:52512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "machinelat.org"] [uri "/robots.txt"] [unique_id "alQu9mJoJ8euboi5C2kEdQAAODM"] [Sun Jul 12 18:19:06.806312 2026] [security2:error] [pid 992537:tid 992710] [client 151.243.11.245:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQu-msmDw50MNj9aAKsNAAAAak"] [Sun Jul 12 18:19:06.806385 2026] [security2:error] [pid 992537:tid 992710] [client 151.243.11.245:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQu-msmDw50MNj9aAKsNAAAAak"] [Sun Jul 12 18:19:06.808807 2026] [security2:error] [pid 992537:tid 992687] [client 151.243.11.245:33576] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/400.shtml"] [unique_id "alQu-msmDw50MNj9aAKsMwAAAZI"] [Sun Jul 12 18:19:06.847383 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:06.848009 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:06.961821 2026] [security2:error] [pid 992244:tid 992450] [client 168.100.149.98:63180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19370/bargainor/2308_gunz.jsp"] [unique_id "alQu-mJoJ8euboi5C2kE0wAAAEs"] [Sun Jul 12 18:19:07.004347 2026] [security2:error] [pid 992537:tid 992736] [client 24.203.79.110:54750] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu-msmDw50MNj9aAKsQQAAAcM"] [Sun Jul 12 18:19:07.004654 2026] [security2:error] [pid 992537:tid 992736] [client 24.203.79.110:54750] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQu-msmDw50MNj9aAKsQQAAAcM"] [Sun Jul 12 18:19:07.352152 2026] [security2:error] [pid 992537:tid 992743] [client 57.141.18.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQu-msmDw50MNj9aAKsQAAAAco"] [Sun Jul 12 18:19:07.540111 2026] [security2:error] [pid 992537:tid 992691] [client 103.173.162.243:34516] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQu-2smDw50MNj9aAKsSAAAAZY"] [Sun Jul 12 18:19:07.683964 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:07.684682 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:07.881494 2026] [security2:error] [pid 992537:tid 992611] [remote 168.138.197.172:58880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.197.138.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gnsai.com"] [uri "/xmlrpc.php"] [unique_id "alQu-2smDw50MNj9aAKsTQAB1Dg"], referer: https://trysuperuseofai.com/ [Sun Jul 12 18:19:07.921237 2026] [security2:error] [pid 992244:tid 992455] [client 64.62.156.108:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.40.58"] [uri "/index.php"] [unique_id "alQu-2JoJ8euboi5C2kE2AAAAFA"] [Sun Jul 12 18:19:08.264474 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.78:17840] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19305/bargainor/2308_impeccance.jsp"] [unique_id "alQu_GJoJ8euboi5C2kE5QAAAHE"] [Sun Jul 12 18:19:08.277973 2026] [security2:error] [pid 992244:tid 992407] [client 168.100.149.13:26478] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19435/bargainor/2308_monadically.jsp"] [unique_id "alQu_GJoJ8euboi5C2kE5gAAACA"] [Sun Jul 12 18:19:08.312272 2026] [security2:error] [pid 992537:tid 992691] [client 103.173.162.243:34516] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQu-2smDw50MNj9aAKsSAAAAZY"] [Sun Jul 12 18:19:08.449618 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:08.450148 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:08.637257 2026] [security2:error] [pid 992244:tid 992476] [client 176.18.112.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu_GJoJ8euboi5C2kE4QAAAGU"] [Sun Jul 12 18:19:08.824206 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzE2MC9jZi8xNjgzNy9m"] [unique_id "alQu_GJoJ8euboi5C2kE8AAAADg"] [Sun Jul 12 18:19:08.881358 2026] [security2:error] [pid 992244:tid 992424] [client 216.244.66.226:57290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/clevo-batterie/w540bat-6.htm"] [unique_id "alQu_GJoJ8euboi5C2kE9AAAADE"] [Sun Jul 12 18:19:08.881639 2026] [security2:error] [pid 992244:tid 992424] [client 216.244.66.226:57290] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.batterie-pc-portables.fr"] [uri "/clevo-batterie/w540bat-6.htm"] [unique_id "alQu_GJoJ8euboi5C2kE9AAAADE"] [Sun Jul 12 18:19:09.274604 2026] [authz_core:error] [pid 992244:tid 992444] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:09.275273 2026] [authz_core:error] [pid 992244:tid 992444] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:09.628016 2026] [security2:error] [pid 992244:tid 992427] [client 74.7.230.43:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "jamaawealthfinancial.com"] [uri "/index.php"] [unique_id "alQu9WJoJ8euboi5C2kEWgAAADQ"] [Sun Jul 12 18:19:09.629411 2026] [security2:error] [pid 992244:tid 992492] [client 74.7.230.43:49566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "jamaawealthfinancial.com"] [uri "/robots.txt"] [unique_id "alQu9WJoJ8euboi5C2kEVAAAdTA"] [Sun Jul 12 18:19:09.689980 2026] [security2:error] [pid 992244:tid 992432] [client 198.235.24.85:62686] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 85.24.235.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "turnweb.org"] [uri "/webshell.php"] [unique_id "alQu_WJoJ8euboi5C2kFAQAAADk"] [Sun Jul 12 18:19:09.848404 2026] [security2:error] [pid 992244:tid 992438] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu_WJoJ8euboi5C2kE-gAAAD8"] [Sun Jul 12 18:19:09.848457 2026] [security2:error] [pid 992244:tid 992438] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu_WJoJ8euboi5C2kE-gAAAD8"] [Sun Jul 12 18:19:09.851342 2026] [security2:error] [pid 992244:tid 992498] [client 65.21.113.206:49244] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzE2MC9jZi8xNjgzNy9m"] [unique_id "alQu_WJoJ8euboi5C2kE-QAAAHs"] [Sun Jul 12 18:19:10.090864 2026] [authz_core:error] [pid 992244:tid 992477] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:10.091348 2026] [authz_core:error] [pid 992244:tid 992477] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:10.847782 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:10.848276 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:10.964622 2026] [security2:error] [pid 992244:tid 992475] [client 168.100.149.148:62162] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19500/bargainor/2308_enhalo.jsp"] [unique_id "alQu_mJoJ8euboi5C2kFEQAAAGQ"] [Sun Jul 12 18:19:11.129567 2026] [security2:error] [pid 992537:tid 992744] [client 74.7.175.138:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "eieda.com"] [uri "/index.php"] [unique_id "alQu-GsmDw50MNj9aAKsGwAAAcs"] [Sun Jul 12 18:19:11.129815 2026] [security2:error] [pid 992244:tid 992465] [client 74.7.175.138:34140] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "eieda.com"] [uri "/robots.txt"] [unique_id "alQu-GJoJ8euboi5C2kEoQAAWkA"] [Sun Jul 12 18:19:11.157220 2026] [security2:error] [pid 992244:tid 992447] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzE2NTQvY2YvMTY4MzcvZg=="] [unique_id "alQu_2JoJ8euboi5C2kFFQAAAEg"] [Sun Jul 12 18:19:11.258594 2026] [security2:error] [pid 992244:tid 992422] [client 12.148.221.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQu5GJoJ8euboi5C2kC7gAAAC8"] [Sun Jul 12 18:19:11.624435 2026] [authz_core:error] [pid 992537:tid 992730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:11.624968 2026] [authz_core:error] [pid 992537:tid 992730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:12.004466 2026] [security2:error] [pid 992537:tid 992737] [client 103.149.37.110:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQu-2smDw50MNj9aAKsSwAAAcQ"] [Sun Jul 12 18:19:12.181850 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu_2JoJ8euboi5C2kFHwAAADg"] [Sun Jul 12 18:19:12.181925 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQu_2JoJ8euboi5C2kFHwAAADg"] [Sun Jul 12 18:19:12.186358 2026] [security2:error] [pid 992244:tid 992400] [client 65.21.113.206:49260] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzE2NTQvY2YvMTY4MzcvZg=="] [unique_id "alQu_2JoJ8euboi5C2kFHQAAABk"] [Sun Jul 12 18:19:12.303153 2026] [security2:error] [pid 992244:tid 992393] [client 12.148.221.72:56338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQu5GJoJ8euboi5C2kC6AAAElQ"] [Sun Jul 12 18:19:12.329828 2026] [security2:error] [pid 992244:tid 992393] [client 12.148.221.72:56338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQu5GJoJ8euboi5C2kC5gAAElY"] [Sun Jul 12 18:19:12.421995 2026] [authz_core:error] [pid 992537:tid 992788] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:12.422518 2026] [authz_core:error] [pid 992537:tid 992788] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:12.530211 2026] [security2:error] [pid 992244:tid 992438] [client 216.244.66.226:57294] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.batterie-pc-portables.fr"] [uri "/panasonic-batterie/fz-vzsu74u.htm"] [unique_id "alQvAGJoJ8euboi5C2kFMQAAAD8"] [Sun Jul 12 18:19:12.530441 2026] [security2:error] [pid 992244:tid 992438] [client 216.244.66.226:57294] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.batterie-pc-portables.fr"] [uri "/panasonic-batterie/fz-vzsu74u.htm"] [unique_id "alQvAGJoJ8euboi5C2kFMQAAAD8"] [Sun Jul 12 18:19:12.962743 2026] [security2:error] [pid 992244:tid 992386] [client 168.100.149.11:50368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19565/bargainor/2308_metalogical.jsp"] [unique_id "alQvAGJoJ8euboi5C2kFQwAAAAs"] [Sun Jul 12 18:19:13.200195 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:13.200944 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:13.467325 2026] [security2:error] [pid 992244:tid 992502] [client 47.128.116.179:23564] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/robots.txt"] [unique_id "alQvAWJoJ8euboi5C2kFTAAAAH8"] [Sun Jul 12 18:19:13.999976 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:14.000722 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:14.060363 2026] [security2:error] [pid 992537:tid 992756] [client 74.7.228.9:33424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.maggioelectric.com"] [uri "/robots.txt"] [unique_id "alQvAmsmDw50MNj9aAKszwAAAdc"] [Sun Jul 12 18:19:14.170838 2026] [security2:error] [pid 992244:tid 992379] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzQ2NTkvY2YvMTY4MzcvZg=="] [unique_id "alQvAmJoJ8euboi5C2kFXQAAAAQ"] [Sun Jul 12 18:19:14.286651 2026] [security2:error] [pid 992244:tid 992402] [client 168.100.149.7:43544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19630/bargainor/2308_psychoreflex.jsp"] [unique_id "alQvAmJoJ8euboi5C2kFXwAAABs"] [Sun Jul 12 18:19:14.412401 2026] [security2:error] [pid 992244:tid 992390] [client 74.7.244.63:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "sheehybuyscars.com"] [uri "/cgi-sys/404.html"] [unique_id "alQvAmJoJ8euboi5C2kFZwAAAA8"] [Sun Jul 12 18:19:14.433773 2026] [security2:error] [pid 992244:tid 992494] [client 74.7.244.63:50274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "sheehybuyscars.com"] [uri "/robots.txt"] [unique_id "alQvAmJoJ8euboi5C2kFZAAAd2s"] [Sun Jul 12 18:19:14.832843 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:14.835599 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:14.925076 2026] [security2:error] [pid 992244:tid 992433] [client 172.184.167.96:48366] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "iaq-sentinel.com"] [uri "/"] [unique_id "alQvAmJoJ8euboi5C2kFgQAAADo"] [Sun Jul 12 18:19:15.231731 2026] [lsapi:warn] [pid 992244:tid 992467] [client 192.0.102.146:36462] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:19:15.265509 2026] [security2:error] [pid 992244:tid 992381] [client 172.184.167.96:45012] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "iaq-sentinel.com"] [uri "/index.php"] [unique_id "alQvA2JoJ8euboi5C2kFhAAAAAY"] [Sun Jul 12 18:19:15.282271 2026] [security2:error] [pid 992244:tid 992440] [client 74.7.228.9:51550] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.maggioelectric.com"] [uri "/robots.txt"] [unique_id "alQvA2JoJ8euboi5C2kFhgAAQXc"], referer: http://mail.maggioelectric.com/robots.txt [Sun Jul 12 18:19:15.415992 2026] [security2:error] [pid 992244:tid 992449] [client 91.92.42.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQvAmJoJ8euboi5C2kFagAASnI"], referer: http://hopeaboveall.com/.env.js [Sun Jul 12 18:19:15.451190 2026] [security2:error] [pid 992244:tid 992449] [client 91.92.42.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "hopeaboveall.com"] [uri "/index.php"] [unique_id "alQvAmJoJ8euboi5C2kFaQAASnA"], referer: http://hopeaboveall.com/.env-config.js [Sun Jul 12 18:19:15.520819 2026] [security2:error] [pid 992244:tid 992491] [client 172.184.167.96:45018] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/index-login.php"] [unique_id "alQvA2JoJ8euboi5C2kFiAAAAHQ"] [Sun Jul 12 18:19:15.558516 2026] [security2:error] [pid 992244:tid 992446] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvAmJoJ8euboi5C2kFdwAAAEc"] [Sun Jul 12 18:19:15.558578 2026] [security2:error] [pid 992244:tid 992446] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvAmJoJ8euboi5C2kFdwAAAEc"] [Sun Jul 12 18:19:15.560186 2026] [security2:error] [pid 992244:tid 992459] [client 65.21.113.206:56184] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNmMDFlLzQ2NTkvY2YvMTY4MzcvZg=="] [unique_id "alQvAmJoJ8euboi5C2kFcwAAAFQ"] [Sun Jul 12 18:19:15.573687 2026] [security2:error] [pid 992244:tid 992452] [client 172.184.167.96:45006] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "iaq-sentinel.com"] [uri "/index.php"] [unique_id "alQvAmJoJ8euboi5C2kFgwAAAE0"] [Sun Jul 12 18:19:15.656220 2026] [security2:error] [pid 992244:tid 992387] [client 172.184.167.96:45018] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/index-login.php"] [unique_id "alQvA2JoJ8euboi5C2kFjgAAAAw"] [Sun Jul 12 18:19:15.658144 2026] [cgid:error] [pid 992244:tid 992394] [client 172.184.167.96:45030] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/iaqsentinel/404.shtml [Sun Jul 12 18:19:15.658446 2026] [security2:error] [pid 992244:tid 992394] [client 172.184.167.96:45030] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.iaq-sentinel.com"] [uri "/404.shtml"] [unique_id "alQvA2JoJ8euboi5C2kFjwAAABM"] [Sun Jul 12 18:19:15.728493 2026] [authz_core:error] [pid 992244:tid 992437] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:15.729027 2026] [authz_core:error] [pid 992244:tid 992437] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:15.786722 2026] [security2:error] [pid 992244:tid 992481] [client 34.48.79.237:60343] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQvA2JoJ8euboi5C2kFlgAAAGo"] [Sun Jul 12 18:19:15.823598 2026] [security2:error] [pid 992244:tid 992462] [client 172.184.167.96:45030] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/util_changepassword.php"] [unique_id "alQvA2JoJ8euboi5C2kFlAAAAFc"] [Sun Jul 12 18:19:15.895124 2026] [security2:error] [pid 992244:tid 992430] [client 125.167.21.72:61593] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvA2JoJ8euboi5C2kFmwAAADc"] [Sun Jul 12 18:19:15.895402 2026] [security2:error] [pid 992244:tid 992430] [client 125.167.21.72:61593] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvA2JoJ8euboi5C2kFmwAAADc"] [Sun Jul 12 18:19:15.900497 2026] [security2:error] [pid 992244:tid 992380] [client 172.184.167.96:45030] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/js/jsalerts/jquery.js"] [unique_id "alQvA2JoJ8euboi5C2kFmgAAAAU"] [Sun Jul 12 18:19:15.931707 2026] [security2:error] [pid 992537:tid 992708] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvA2smDw50MNj9aAKs7QAAAac"] [Sun Jul 12 18:19:15.958618 2026] [security2:error] [pid 992244:tid 992377] [client 172.184.167.96:45044] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/js/jsalerts/jquery.ui.draggable.js"] [unique_id "alQvA2JoJ8euboi5C2kFngAAAAI"] [Sun Jul 12 18:19:15.958929 2026] [security2:error] [pid 992244:tid 992435] [client 172.184.167.96:45048] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/js/jsalerts/jquery.alerts.js"] [unique_id "alQvA2JoJ8euboi5C2kFnQAAADw"] [Sun Jul 12 18:19:15.967409 2026] [security2:error] [pid 992244:tid 992499] [client 172.184.167.96:45068] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/js/formvalidate/jquery.validate.min.js"] [unique_id "alQvA2JoJ8euboi5C2kFnwAAAHw"] [Sun Jul 12 18:19:15.972186 2026] [security2:error] [pid 992244:tid 992378] [client 172.184.167.96:45060] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.iaq-sentinel.com"] [uri "/js/jquery-1.11.0.min.js"] [unique_id "alQvA2JoJ8euboi5C2kFoAAAAAM"] [Sun Jul 12 18:19:15.991258 2026] [security2:error] [pid 992244:tid 992444] [client 172.184.167.96:45076] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.iaq-sentinel.com"] [uri "/aboutiaq.php"] [unique_id "alQvA2JoJ8euboi5C2kFnAAAAEU"] [Sun Jul 12 18:19:16.000316 2026] [cgid:error] [pid 992244:tid 992454] [client 172.184.167.96:45048] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/iaqsentinel/404.shtml [Sun Jul 12 18:19:16.000621 2026] [security2:error] [pid 992244:tid 992454] [client 172.184.167.96:45048] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.iaq-sentinel.com"] [uri "/404.shtml"] [unique_id "alQvA2JoJ8euboi5C2kFowAAAE8"] [Sun Jul 12 18:19:16.008968 2026] [security2:error] [pid 992244:tid 992404] [client 172.184.167.96:45030] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.iaq-sentinel.com"] [uri "/aboutiaq.php"] [unique_id "alQvA2JoJ8euboi5C2kFogAAAB0"] [Sun Jul 12 18:19:16.184567 2026] [cgid:error] [pid 992537:tid 992704] [client 172.184.167.96:45086] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/iaqsentinel/404.shtml [Sun Jul 12 18:19:16.184913 2026] [security2:error] [pid 992537:tid 992704] [client 172.184.167.96:45086] ModSecurity: Warning. Matched phrase "BuiltWith" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "iaq-sentinel.com"] [uri "/404.shtml"] [unique_id "alQvBGsmDw50MNj9aAKs-gAAAaM"] [Sun Jul 12 18:19:16.254444 2026] [security2:error] [pid 992244:tid 992422] [client 83.49.167.200:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvA2JoJ8euboi5C2kFjQAAAC8"] [Sun Jul 12 18:19:16.597888 2026] [authz_core:error] [pid 992244:tid 992491] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:16.598452 2026] [authz_core:error] [pid 992244:tid 992491] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:16.767998 2026] [security2:error] [pid 992244:tid 992427] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvBGJoJ8euboi5C2kFuAAAADQ"] [Sun Jul 12 18:19:16.965617 2026] [security2:error] [pid 992244:tid 992490] [client 168.100.149.18:16038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19695/bargainor/2308_mailable.jsp"] [unique_id "alQvBGJoJ8euboi5C2kFzAAAAHM"] [Sun Jul 12 18:19:17.059450 2026] [security2:error] [pid 992244:tid 992384] [client 65.21.113.206:33028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNtMm16OV8yMjA5L2NtLzMyNzgxL20=.html"] [unique_id "alQvBWJoJ8euboi5C2kF0wAAAAk"] [Sun Jul 12 18:19:17.079950 2026] [security2:error] [pid 992244:tid 992418] [client 173.252.70.18:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.upperpottsgrovejournal.com"] [uri "/index.php"] [unique_id "alQvBGJoJ8euboi5C2kFxAAAACs"] [Sun Jul 12 18:19:17.504374 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:17.505061 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:17.631132 2026] [security2:error] [pid 992244:tid 992500] [client 24.203.79.110:55263] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvBWJoJ8euboi5C2kF6AAAAH0"] [Sun Jul 12 18:19:17.631425 2026] [security2:error] [pid 992244:tid 992500] [client 24.203.79.110:55263] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvBWJoJ8euboi5C2kF6AAAAH0"] [Sun Jul 12 18:19:17.712862 2026] [security2:error] [pid 992537:tid 992759] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvBWsmDw50MNj9aAKtCwAAAdo"] [Sun Jul 12 18:19:18.214172 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvBWJoJ8euboi5C2kF5AAAAGE"] [Sun Jul 12 18:19:18.214246 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvBWJoJ8euboi5C2kF5AAAAGE"] [Sun Jul 12 18:19:18.216450 2026] [security2:error] [pid 992537:tid 992705] [client 65.21.113.206:56192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNtMm16OV8yMjA5L2NtLzMyNzgxL20=.html"] [unique_id "alQvBWsmDw50MNj9aAKtEwAAAaQ"] [Sun Jul 12 18:19:18.280456 2026] [security2:error] [pid 992244:tid 992413] [client 74.7.244.18:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQvBmJoJ8euboi5C2kF-QAAACY"] [Sun Jul 12 18:19:18.281303 2026] [security2:error] [pid 992537:tid 992710] [client 74.7.244.18:60058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQvBmsmDw50MNj9aAKtLAAAAak"] [Sun Jul 12 18:19:18.428328 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:18.428955 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:18.602479 2026] [security2:error] [pid 992244:tid 992376] [client 74.7.244.18:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "themillennialshandbook.com"] [uri "/index.php"] [unique_id "alQvBmJoJ8euboi5C2kGBgAAAAE"], referer: http://themillennialshandbook.com/robots.txt [Sun Jul 12 18:19:18.603783 2026] [security2:error] [pid 992244:tid 992437] [client 74.7.244.18:38662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "themillennialshandbook.com"] [uri "/robots.txt"] [unique_id "alQvBmJoJ8euboi5C2kGAgAAPgw"], referer: http://themillennialshandbook.com/robots.txt [Sun Jul 12 18:19:18.639525 2026] [security2:error] [pid 992537:tid 992701] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvBmsmDw50MNj9aAKtKQAAAaA"] [Sun Jul 12 18:19:18.977328 2026] [security2:error] [pid 992537:tid 992738] [client 168.100.149.65:15046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19760/bargainor/2308_epidemiology.jsp"] [unique_id "alQvBmsmDw50MNj9aAKtRAAAAcU"] [Sun Jul 12 18:19:19.013861 2026] [security2:error] [pid 992537:tid 992751] [client 34.48.79.237:61428] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.79.48.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvBmsmDw50MNj9aAKtRQAAAdI"] [Sun Jul 12 18:19:19.014188 2026] [security2:error] [pid 992537:tid 992751] [client 34.48.79.237:61428] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvBmsmDw50MNj9aAKtRQAAAdI"] [Sun Jul 12 18:19:19.251659 2026] [security2:error] [pid 992244:tid 992403] [client 34.48.79.237:60933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.79.48.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvB2JoJ8euboi5C2kGFQAAABw"] [Sun Jul 12 18:19:19.251946 2026] [security2:error] [pid 992244:tid 992403] [client 34.48.79.237:60933] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvB2JoJ8euboi5C2kGFQAAABw"] [Sun Jul 12 18:19:19.270684 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:19.271263 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:19.445613 2026] [security2:error] [pid 992244:tid 992486] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvB2JoJ8euboi5C2kGDwAAAG8"] [Sun Jul 12 18:19:19.460089 2026] [security2:error] [pid 992537:tid 992699] [client 34.48.79.237:61878] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 237.79.48.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvB2smDw50MNj9aAKtVgAAAZ4"] [Sun Jul 12 18:19:19.460401 2026] [security2:error] [pid 992537:tid 992699] [client 34.48.79.237:61878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQvB2smDw50MNj9aAKtVgAAAZ4"] [Sun Jul 12 18:19:19.464174 2026] [security2:error] [pid 992244:tid 992461] [client 103.173.162.243:34782] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvB2JoJ8euboi5C2kGFwAAAFY"] [Sun Jul 12 18:19:20.132621 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:20.133195 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:20.280639 2026] [security2:error] [pid 992244:tid 992441] [client 139.162.195.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQvB2JoJ8euboi5C2kGIAAAAEI"] [Sun Jul 12 18:19:20.283981 2026] [security2:error] [pid 992537:tid 992704] [client 168.100.149.219:43590] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19825/bargainor/2308_secque.jsp"] [unique_id "alQvCGsmDw50MNj9aAKtXQAAAaM"] [Sun Jul 12 18:19:20.338653 2026] [security2:error] [pid 992244:tid 992461] [client 103.173.162.243:34782] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvB2JoJ8euboi5C2kGFwAAAFY"] [Sun Jul 12 18:19:20.382974 2026] [security2:error] [pid 992244:tid 992266] [remote 216.73.216.109:49157] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQvCGJoJ8euboi5C2kGKAAABRQ"] [Sun Jul 12 18:19:20.952305 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:20.952833 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:21.196925 2026] [security2:error] [pid 992244:tid 992426] [client 57.141.18.28:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "brujobites.com"] [uri "/index.php"] [unique_id "alQvAGJoJ8euboi5C2kFOQAAADM"] [Sun Jul 12 18:19:21.252036 2026] [security2:error] [pid 992244:tid 992377] [client 20.210.108.71:57360] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/widgets/class-wp-widget-block.php"] [unique_id "alQvCWJoJ8euboi5C2kGPAAAAAI"], referer: binance.com [Sun Jul 12 18:19:21.467717 2026] [security2:error] [pid 992244:tid 992402] [client 103.173.162.243:34832] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvCWJoJ8euboi5C2kGRQAAABs"] [Sun Jul 12 18:19:21.786488 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:21.787031 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:21.868868 2026] [security2:error] [pid 992537:tid 992760] [client 167.148.117.43:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvCGsmDw50MNj9aAKtYAAAAds"], referer: https://mackinstyle.com/ [Sun Jul 12 18:19:22.291336 2026] [security2:error] [pid 992244:tid 992402] [client 103.173.162.243:34832] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvCWJoJ8euboi5C2kGRQAAABs"] [Sun Jul 12 18:19:22.377288 2026] [cgid:error] [pid 992537:tid 992698] [client 202.46.62.18:57146] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/reflective-backpacks-custom-p-584.html?osCsid=oeeig9303osg0bad3r5uupfcs5 [Sun Jul 12 18:19:22.473692 2026] [security2:error] [pid 992244:tid 992411] [client 202.46.62.117:14684] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQvCmJoJ8euboi5C2kGagAAACQ"], referer: https://www.stephenspublishing.com/reflective-backpacks-custom-p-584.html?osCsid=oeeig9303osg0bad3r5uupfcs5 [Sun Jul 12 18:19:22.552869 2026] [security2:error] [pid 992244:tid 992384] [client 202.46.62.9:49849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQvCmJoJ8euboi5C2kGcQAAAAk"], referer: https://www.stephenspublishing.com/shopping-tote-bags-custom-p-908.html?osCsid=tdtr2afm43ol01t753d0utnpf3 [Sun Jul 12 18:19:22.609617 2026] [authz_core:error] [pid 992244:tid 992419] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:22.610339 2026] [authz_core:error] [pid 992244:tid 992419] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:22.978711 2026] [security2:error] [pid 992537:tid 992789] [client 168.100.149.218:19798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19890/bargainor/2308_dislevelment.jsp"] [unique_id "alQvCmsmDw50MNj9aAKtiwAAAfg"] [Sun Jul 12 18:19:23.175261 2026] [security2:error] [pid 992537:tid 992740] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWNzLTMwNjE3LWNzeGdmLTI4OTgtc3hn.cgi"] [unique_id "alQvC2smDw50MNj9aAKtjQAAAcc"] [Sun Jul 12 18:19:23.424856 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:23.425642 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:23.476591 2026] [security2:error] [pid 992244:tid 992397] [client 103.173.162.243:34878] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvC2JoJ8euboi5C2kGjAAAABY"] [Sun Jul 12 18:19:23.789383 2026] [security2:error] [pid 992244:tid 992478] [client 3.225.200.77:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "kristinayazmin.com"] [uri "/index.php"] [unique_id "alQvC2JoJ8euboi5C2kGgwAAZzg"] [Sun Jul 12 18:19:23.824048 2026] [security2:error] [pid 992537:tid 992733] [client 64.62.156.108:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.89.23.116"] [uri "/index.php"] [unique_id "alQvBmsmDw50MNj9aAKtLgAAAcA"] [Sun Jul 12 18:19:24.108719 2026] [security2:error] [pid 992244:tid 992434] [client 104.156.225.167:64487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "weshouldbesleeping.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQvDGJoJ8euboi5C2kGpQAAADs"] [Sun Jul 12 18:19:24.312607 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:24.313191 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:24.419037 2026] [security2:error] [pid 992537:tid 992795] [client 191.54.5.99:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvC2smDw50MNj9aAKtmgAAAf4"] [Sun Jul 12 18:19:24.451639 2026] [security2:error] [pid 992244:tid 992397] [client 103.173.162.243:34878] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvC2JoJ8euboi5C2kGjAAAABY"] [Sun Jul 12 18:19:24.671022 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvC2JoJ8euboi5C2kGkwAAAFg"] [Sun Jul 12 18:19:24.671097 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvC2JoJ8euboi5C2kGkwAAAFg"] [Sun Jul 12 18:19:24.673065 2026] [security2:error] [pid 992244:tid 992493] [client 65.21.113.206:54502] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWNzLTMwNjE3LWNzeGdmLTI4OTgtc3hn.cgi"] [unique_id "alQvC2JoJ8euboi5C2kGkgAAAHY"] [Sun Jul 12 18:19:24.940237 2026] [security2:error] [pid 992537:tid 992699] [client 168.100.149.229:47904] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/19955/bargainor/2308_limnoria.jsp"] [unique_id "alQvDGsmDw50MNj9aAKttAAAAZ4"] [Sun Jul 12 18:19:25.158010 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:25.158500 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:25.603966 2026] [security2:error] [pid 992244:tid 992485] [client 103.173.162.243:34930] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvDWJoJ8euboi5C2kGtwAAAG4"] [Sun Jul 12 18:19:25.972485 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:25.973109 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:25.983269 2026] [security2:error] [pid 992244:tid 992406] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvCmJoJ8euboi5C2kGVAAAHzY"], referer: http://www.tgoffineart.com/wp/ [Sun Jul 12 18:19:26.331511 2026] [security2:error] [pid 992537:tid 992805] [client 125.167.21.72:62039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvDmsmDw50MNj9aAKtygAAAgg"] [Sun Jul 12 18:19:26.337078 2026] [security2:error] [pid 992537:tid 992805] [client 125.167.21.72:62039] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvDmsmDw50MNj9aAKtygAAAgg"] [Sun Jul 12 18:19:26.488213 2026] [security2:error] [pid 992537:tid 992809] [client 57.141.18.17:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hangar34liverpool.co.uk"] [uri "/index.php"] [unique_id "alQvCmsmDw50MNj9aAKtfQAAAgw"] [Sun Jul 12 18:19:26.552365 2026] [security2:error] [pid 992244:tid 992485] [client 103.173.162.243:34930] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvDWJoJ8euboi5C2kGtwAAAG4"] [Sun Jul 12 18:19:26.619089 2026] [security2:error] [pid 992244:tid 992472] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvDmJoJ8euboi5C2kGxwAAYVA"], referer: https://www.tgoffineart.com/wp/ [Sun Jul 12 18:19:26.679987 2026] [security2:error] [pid 992537:tid 992791] [client 5.154.91.147:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvDWsmDw50MNj9aAKtwwAAAfo"] [Sun Jul 12 18:19:26.693862 2026] [core:error] [pid 992537:tid 992758] [client 193.148.56.79:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:19:26.693912 2026] [core:error] [pid 992537:tid 992758] [client 193.148.56.79:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:19:26.843262 2026] [security2:error] [pid 992537:tid 992693] [client 57.141.18.123:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvDmsmDw50MNj9aAKtzgAAAZg"] [Sun Jul 12 18:19:26.869242 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:26.869753 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:27.009582 2026] [security2:error] [pid 992537:tid 992795] [client 168.100.149.152:36326] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20020/bargainor/2308_milksopism.jsp"] [unique_id "alQvD2smDw50MNj9aAKt5gAAAf4"] [Sun Jul 12 18:19:27.124646 2026] [security2:error] [pid 992244:tid 992384] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvDmJoJ8euboi5C2kG1QAACSg"], referer: http://www.tgoffineart.com/new/ [Sun Jul 12 18:19:27.203456 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWQtODY1Ny9kYXYvMzc2OS1hdnZi"] [unique_id "alQvD2smDw50MNj9aAKuBAAAAaA"] [Sun Jul 12 18:19:27.251431 2026] [security2:error] [pid 992244:tid 992451] [client 102.0.15.234:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvDmJoJ8euboi5C2kGxAAAAEw"], referer: https://mackinstyle.com/ [Sun Jul 12 18:19:27.557447 2026] [security2:error] [pid 992244:tid 992470] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvD2JoJ8euboi5C2kG4QAAX1I"], referer: https://www.tgoffineart.com/new/ [Sun Jul 12 18:19:27.714289 2026] [authz_core:error] [pid 992244:tid 992428] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:27.714823 2026] [authz_core:error] [pid 992244:tid 992428] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:27.753564 2026] [security2:error] [pid 992244:tid 992389] [client 103.173.162.243:34984] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvD2JoJ8euboi5C2kG9AAAAA4"] [Sun Jul 12 18:19:27.897355 2026] [security2:error] [pid 992244:tid 992446] [client 65.21.113.253:33498] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQvD2JoJ8euboi5C2kG9wAAAEc"] [Sun Jul 12 18:19:28.124972 2026] [security2:error] [pid 992244:tid 992398] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvD2JoJ8euboi5C2kG7wAAF2A"], referer: http://www.tgoffineart.com/wordpress/ [Sun Jul 12 18:19:28.255735 2026] [fcgid:warn] [pid 992244:tid 992412] (70014)End of file found: [client 199.45.155.84:55182] mod_fcgid: can't get data from http client [Sun Jul 12 18:19:28.271366 2026] [security2:error] [pid 992244:tid 992427] [client 24.203.79.110:55767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvEGJoJ8euboi5C2kHAQAAADQ"] [Sun Jul 12 18:19:28.271724 2026] [security2:error] [pid 992244:tid 992427] [client 24.203.79.110:55767] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvEGJoJ8euboi5C2kHAQAAADQ"] [Sun Jul 12 18:19:28.285190 2026] [security2:error] [pid 992244:tid 992437] [client 168.100.149.96:45756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20085/bargainor/2308_capnoides.jsp"] [unique_id "alQvEGJoJ8euboi5C2kHAgAAAD4"] [Sun Jul 12 18:19:28.343445 2026] [security2:error] [pid 992244:tid 992375] [client 193.148.56.79:59044] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "sisters-in-sync.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQvEGJoJ8euboi5C2kHAwAAAAA"] [Sun Jul 12 18:19:28.439593 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQvEGJoJ8euboi5C2kHCQAAAHg"] [Sun Jul 12 18:19:28.441283 2026] [security2:error] [pid 992244:tid 992379] [client 65.21.113.253:49822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQvEGJoJ8euboi5C2kHBAAAAAQ"] [Sun Jul 12 18:19:28.468510 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvD2JoJ8euboi5C2kG8gAAAA0"] [Sun Jul 12 18:19:28.468654 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvD2JoJ8euboi5C2kG8gAAAA0"] [Sun Jul 12 18:19:28.470192 2026] [security2:error] [pid 992537:tid 992745] [client 65.21.113.206:54508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWQtODY1Ny9kYXYvMzc2OS1hdnZi"] [unique_id "alQvD2smDw50MNj9aAKuFgAAAcw"] [Sun Jul 12 18:19:28.628941 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:28.629750 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:28.651483 2026] [security2:error] [pid 992244:tid 992482] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvEGJoJ8euboi5C2kG_wAAa1g"], referer: https://www.tgoffineart.com/wordpress/ [Sun Jul 12 18:19:28.682652 2026] [security2:error] [pid 992244:tid 992389] [client 103.173.162.243:34984] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvD2JoJ8euboi5C2kG9AAAAA4"] [Sun Jul 12 18:19:28.743472 2026] [proxy:warn] [pid 992244:tid 992391] [client 45.205.1.223:56144] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be kurtismyson.com for uri /400.shtml [Sun Jul 12 18:19:28.766205 2026] [security2:error] [pid 992244:tid 992391] [client 45.205.1.223:56144] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/400.shtml"] [unique_id "alQvEGJoJ8euboi5C2kHFAAAABA"] [Sun Jul 12 18:19:29.087809 2026] [security2:error] [pid 992244:tid 992410] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvEGJoJ8euboi5C2kHFQAAI1o"], referer: http://www.tgoffineart.com/old/ [Sun Jul 12 18:19:29.458948 2026] [authz_core:error] [pid 992537:tid 992809] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:29.460398 2026] [authz_core:error] [pid 992537:tid 992809] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:29.544529 2026] [security2:error] [pid 992244:tid 992454] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvEWJoJ8euboi5C2kHHAAAT14"], referer: https://www.tgoffineart.com/old/ [Sun Jul 12 18:19:29.741177 2026] [security2:error] [pid 992244:tid 992381] [client 47.82.124.102:56924] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQvEWJoJ8euboi5C2kHIwAAAAY"] [Sun Jul 12 18:19:29.893879 2026] [security2:error] [pid 992244:tid 992487] [client 103.173.162.243:35034] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvEWJoJ8euboi5C2kHJQAAAHA"] [Sun Jul 12 18:19:29.932589 2026] [security2:error] [pid 992537:tid 992771] [client 65.49.1.94:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.107.93"] [uri "/index.php"] [unique_id "alQvDWsmDw50MNj9aAKtvAAAAeY"] [Sun Jul 12 18:19:29.990701 2026] [security2:error] [pid 992537:tid 992704] [client 86.108.23.176:3458] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "sammorell.com"] [uri "/index.php"] [unique_id "alQvD2smDw50MNj9aAKuCQAAAaM"] [Sun Jul 12 18:19:30.278772 2026] [security2:error] [pid 992537:tid 992630] [remote 98.70.32.248:45990] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQvEmsmDw50MNj9aAKuNgAB1Us"] [Sun Jul 12 18:19:30.293403 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:30.294072 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:30.298554 2026] [security2:error] [pid 992537:tid 992730] [client 168.100.149.137:27286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20150/bargainor/2308_deft.jsp"] [unique_id "alQvEmsmDw50MNj9aAKuNwAAAb0"] [Sun Jul 12 18:19:30.337614 2026] [security2:error] [pid 992244:tid 992404] [client 193.148.56.79:58553] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "sisters-in-sync.com"] [uri "/wp-content/plugins/wp_kssajak/wp_kssajak.php"] [unique_id "alQvEmJoJ8euboi5C2kHNAAAAB0"] [Sun Jul 12 18:19:30.472483 2026] [security2:error] [pid 992537:tid 992744] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWQzcmgzLzM1MjgvZDMvMTUxMjkvMw=="] [unique_id "alQvEmsmDw50MNj9aAKuPQAAAcs"] [Sun Jul 12 18:19:30.680578 2026] [security2:error] [pid 992244:tid 992487] [client 103.173.162.243:35034] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "403"] [hostname "undameta.com"] [uri "/wp-comments-post.php"] [unique_id "alQvEWJoJ8euboi5C2kHJQAAAHA"] [Sun Jul 12 18:19:31.085341 2026] [security2:error] [pid 992244:tid 992440] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvEmJoJ8euboi5C2kHPQAAQXE"], referer: http://www.tgoffineart.com/blog/ [Sun Jul 12 18:19:31.193167 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:31.193694 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:31.296380 2026] [security2:error] [pid 992537:tid 992783] [client 193.148.56.79:56024] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "sisters-in-sync.com"] [uri "/wp-content/plugins/wp_kssajak/wp_kssajak.php"] [unique_id "alQvE2smDw50MNj9aAKuSAAAAfI"] [Sun Jul 12 18:19:31.553182 2026] [security2:error] [pid 992244:tid 992389] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvE2JoJ8euboi5C2kHSwAADnA"], referer: https://www.tgoffineart.com/blog/ [Sun Jul 12 18:19:31.655118 2026] [security2:error] [pid 992244:tid 992488] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvEmJoJ8euboi5C2kHRwAAAHE"] [Sun Jul 12 18:19:31.655177 2026] [security2:error] [pid 992244:tid 992488] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvEmJoJ8euboi5C2kHRwAAAHE"] [Sun Jul 12 18:19:31.656618 2026] [security2:error] [pid 992244:tid 992457] [client 65.21.113.206:54512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWQzcmgzLzM1MjgvZDMvMTUxMjkvMw=="] [unique_id "alQvEmJoJ8euboi5C2kHQwAAAFI"] [Sun Jul 12 18:19:31.976540 2026] [security2:error] [pid 992244:tid 992431] [client 34.162.188.36:34664] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQvE2JoJ8euboi5C2kHUAAAOHo"], referer: http://www.tgoffineart.com/backup/ [Sun Jul 12 18:19:32.029520 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:32.030167 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:32.223192 2026] [security2:error] [pid 992244:tid 992435] [client 193.148.56.79:55252] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "sisters-in-sync.com"] [uri "/wp-content/plugins/wp_kssajak/wp_kssajak.php"] [unique_id "alQvFGJoJ8euboi5C2kHWgAAADw"] [Sun Jul 12 18:19:32.371133 2026] [security2:error] [pid 992244:tid 992481] [client 34.162.188.36:46338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "tgoffineart.com"] [uri "/index.php"] [unique_id "alQvFGJoJ8euboi5C2kHVwAAan8"], referer: https://www.tgoffineart.com/backup/ [Sun Jul 12 18:19:32.821314 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:32.821910 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:32.938943 2026] [security2:error] [pid 992537:tid 992786] [client 168.100.149.142:64428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20215/bargainor/2308_did.jsp"] [unique_id "alQvFGsmDw50MNj9aAKubQAAAfU"] [Sun Jul 12 18:19:33.154132 2026] [security2:error] [pid 992244:tid 992403] [client 193.148.56.79:50459] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "sisters-in-sync.com"] [uri "/wp-content/plugins/wp_kssajak/wp_kssajak.php"] [unique_id "alQvFWJoJ8euboi5C2kHcgAAABw"] [Sun Jul 12 18:19:33.576151 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:33.576643 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:34.248489 2026] [security2:error] [pid 992244:tid 992480] [client 127.0.0.1:36604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQvFWJoJ8euboi5C2kHfwAAAGk"] [Sun Jul 12 18:19:34.251021 2026] [security2:error] [pid 992244:tid 992456] [client 74.7.230.53:48558] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.skylarkdesignandconstruction.com"] [uri "/robots.txt"] [unique_id "alQvFWJoJ8euboi5C2kHfgAAAFE"] [Sun Jul 12 18:19:34.362422 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:34.362970 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:34.518595 2026] [security2:error] [pid 992244:tid 992447] [client 127.0.0.1:36620] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQvFmJoJ8euboi5C2kHmAAAAEg"], referer: http://autodiscover.skylarkdesignandconstruction.com/robots.txt [Sun Jul 12 18:19:34.518845 2026] [security2:error] [pid 992244:tid 992448] [client 74.7.230.53:51082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.skylarkdesignandconstruction.com"] [uri "/autodiscover/autodiscover.xml"] [unique_id "alQvFmJoJ8euboi5C2kHlwAASRs"], referer: http://autodiscover.skylarkdesignandconstruction.com/robots.txt [Sun Jul 12 18:19:35.003879 2026] [security2:error] [pid 992537:tid 992717] [client 168.100.149.98:63302] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20280/bargainor/2308_delphian.jsp"] [unique_id "alQvF2smDw50MNj9aAKuegAAAbA"] [Sun Jul 12 18:19:35.136309 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:35.136845 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:35.159943 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRfMTY4Mi9kY3IvMTE2NzdfY3I=.htm"] [unique_id "alQvF2smDw50MNj9aAKugQAAAdM"] [Sun Jul 12 18:19:35.826880 2026] [proxy:warn] [pid 992244:tid 992402] [client 45.205.1.223:56160] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be kurtismyson.com for uri /400.shtml [Sun Jul 12 18:19:35.849871 2026] [security2:error] [pid 992244:tid 992402] [client 45.205.1.223:56160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/400.shtml"] [unique_id "alQvF2JoJ8euboi5C2kHswAAABs"] [Sun Jul 12 18:19:35.921829 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:35.922548 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:36.289752 2026] [security2:error] [pid 992537:tid 992806] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvF2smDw50MNj9aAKujAAAAgk"] [Sun Jul 12 18:19:36.289819 2026] [security2:error] [pid 992537:tid 992806] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvF2smDw50MNj9aAKujAAAAgk"] [Sun Jul 12 18:19:36.298238 2026] [security2:error] [pid 992244:tid 992408] [client 65.21.113.206:38380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRfMTY4Mi9kY3IvMTE2NzdfY3I=.htm"] [unique_id "alQvF2JoJ8euboi5C2kHqQAAACE"] [Sun Jul 12 18:19:36.310951 2026] [security2:error] [pid 992537:tid 992695] [client 168.100.149.133:62924] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20345/bargainor/2308_anisodactyli.jsp"] [unique_id "alQvGGsmDw50MNj9aAKumgAAAZo"] [Sun Jul 12 18:19:36.706480 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:36.707009 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:36.907973 2026] [security2:error] [pid 992537:tid 992713] [client 125.167.21.72:62495] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvGGsmDw50MNj9aAKu0AAAAaw"] [Sun Jul 12 18:19:36.908305 2026] [security2:error] [pid 992537:tid 992713] [client 125.167.21.72:62495] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvGGsmDw50MNj9aAKu0AAAAaw"] [Sun Jul 12 18:19:37.500232 2026] [authz_core:error] [pid 992537:tid 992787] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:37.500802 2026] [authz_core:error] [pid 992537:tid 992787] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:38.312546 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:38.313209 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:38.315844 2026] [security2:error] [pid 992244:tid 992469] [client 168.100.149.9:60202] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20410/bargainor/2308_birefraction.jsp"] [unique_id "alQvGmJoJ8euboi5C2kH7AAAAF4"] [Sun Jul 12 18:19:38.981619 2026] [security2:error] [pid 992537:tid 992773] [client 24.203.79.110:56273] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvGmsmDw50MNj9aAKu-gAAAeg"] [Sun Jul 12 18:19:38.981920 2026] [security2:error] [pid 992537:tid 992773] [client 24.203.79.110:56273] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvGmsmDw50MNj9aAKu-gAAAeg"] [Sun Jul 12 18:19:38.984935 2026] [security2:error] [pid 992537:tid 992699] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRfNzk0MC9kY3IvMTE2NzdfY3I=.htm"] [unique_id "alQvGmsmDw50MNj9aAKu-wAAAZ4"] [Sun Jul 12 18:19:39.075246 2026] [authz_core:error] [pid 992244:tid 992473] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:39.075776 2026] [authz_core:error] [pid 992244:tid 992473] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:39.531739 2026] [lsapi:error] [pid 992537:tid 992691] [client 207.46.13.92:0] [host ttbpopup.com] Backend fatal error: PHP Fatal error: Uncaught Exception: Comet Cache: failed to write cache file for: `/shop/accessories/clothing-accessories/handmade-porcelain-earrings-13/`; possible permissions issue (or race condition), please check your cache directory: `/home3/saltwau2/public_html/ttbpopup/wp-content/cache/comet-cache/cache`. in /home3/saltwau2/public_html/ttbpopup/wp-content/plugins/comet-cache-pro/src/includes/traits/Ac/ObUtils.php:457\nStack trace:\n#0 [internal function]: WebSharks\\CometCache\\Pro\\Classes\\AdvancedCache->outputBufferCallbackHandler('<!DOCTYPE html>...', 9)\n#1 /home3/saltwau2/public_html/ttbpopup/wp-includes/functions.php(5481): ob_end_flush()\n#2 /home3/saltwau2/public_html/ttbpopup/wp-includes/class-wp-hook.php(341): wp_ob_end_flush_all('')\n#3 /home3/saltwau2/public_html/ttbpopup/wp-includes/class-wp-hook.php(365): WP_Hook->apply_filters(NULL, Array)\n#4 /home3/saltwau2/public_html/ttbpopup/wp-includes/plugin.php(522): WP_Hook->do_action(Array)\n#5 /home3/saltwau2/public_html/ttbpopup/wp-includes/load.php(1308): do_action('shutdown')\n#6 [internal function]: shutdown_action_hook()\n#7 {main}\n thrown in /home3/saltwau2/public_html/ttbpopup/wp-content/plugins/comet-cache-pro/src/includes/traits/Ac/ObUtils.php on line 457\n [Sun Jul 12 18:19:39.830282 2026] [authz_core:error] [pid 992244:tid 992494] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:39.830792 2026] [authz_core:error] [pid 992244:tid 992494] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:40.041098 2026] [security2:error] [pid 992244:tid 992462] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvG2JoJ8euboi5C2kIAQAAAFc"] [Sun Jul 12 18:19:40.041152 2026] [security2:error] [pid 992244:tid 992462] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvG2JoJ8euboi5C2kIAQAAAFc"] [Sun Jul 12 18:19:40.048981 2026] [security2:error] [pid 992537:tid 992761] [client 65.21.113.206:38404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRfNzk0MC9kY3IvMTE2NzdfY3I=.htm"] [unique_id "alQvG2smDw50MNj9aAKu_wAAAdw"] [Sun Jul 12 18:19:40.595760 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:40.596429 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:41.013031 2026] [security2:error] [pid 992244:tid 992417] [client 168.100.149.232:26918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20475/bargainor/2308_mediator.jsp"] [unique_id "alQvHWJoJ8euboi5C2kILQAAACo"] [Sun Jul 12 18:19:41.380527 2026] [authz_core:error] [pid 992244:tid 992440] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:41.381038 2026] [authz_core:error] [pid 992244:tid 992440] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:42.160658 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:42.161188 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:42.249086 2026] [security2:error] [pid 992537:tid 992697] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF80NTY4L2RsLzg1MDUvbA==.html"] [unique_id "alQvHmsmDw50MNj9aAKvJQAAAZw"] [Sun Jul 12 18:19:42.603165 2026] [security2:error] [pid 992244:tid 992419] [client 199.45.154.143:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "soultechartcollective.org"] [uri "/index.php"] [unique_id "alQvHWJoJ8euboi5C2kISgAAACw"] [Sun Jul 12 18:19:42.951943 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:42.952431 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:42.997540 2026] [security2:error] [pid 992537:tid 992727] [client 168.100.149.115:34358] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20540/bargainor/2308_gurian.jsp"] [unique_id "alQvHmsmDw50MNj9aAKvNQAAAbo"] [Sun Jul 12 18:19:43.070286 2026] [security2:error] [pid 992244:tid 992482] [client 179.60.52.178:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQvHWJoJ8euboi5C2kIPgAAAGs"] [Sun Jul 12 18:19:43.428470 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvHmsmDw50MNj9aAKvLwAAAdM"] [Sun Jul 12 18:19:43.428525 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvHmsmDw50MNj9aAKvLwAAAdM"] [Sun Jul 12 18:19:43.429542 2026] [security2:error] [pid 992244:tid 992462] [client 65.21.113.206:40520] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF80NTY4L2RsLzg1MDUvbA==.html"] [unique_id "alQvHmJoJ8euboi5C2kIUQAAAFc"] [Sun Jul 12 18:19:43.565815 2026] [security2:error] [pid 992244:tid 992383] [client 190.32.231.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvHmJoJ8euboi5C2kIXAAAAAg"] [Sun Jul 12 18:19:43.684762 2026] [security2:error] [pid 992537:tid 992757] [client 5.134.35.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvH2smDw50MNj9aAKvOAAAAdg"] [Sun Jul 12 18:19:43.731377 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:43.731901 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:44.481064 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:44.481578 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:45.014296 2026] [security2:error] [pid 992244:tid 992477] [client 168.100.149.142:15972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20605/bargainor/2308_monkey.jsp"] [unique_id "alQvIWJoJ8euboi5C2kIiQAAAGY"] [Sun Jul 12 18:19:45.262783 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:45.263266 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:45.469680 2026] [cgid:error] [pid 992537:tid 992689] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/wp/ [Sun Jul 12 18:19:45.615197 2026] [cgid:error] [pid 992244:tid 992500] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/new/ [Sun Jul 12 18:19:45.753693 2026] [cgid:error] [pid 992244:tid 992424] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/wordpress/ [Sun Jul 12 18:19:45.886408 2026] [cgid:error] [pid 992537:tid 992790] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/old/ [Sun Jul 12 18:19:46.051919 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:46.052616 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:46.127397 2026] [cgid:error] [pid 992537:tid 992759] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/blog/ [Sun Jul 12 18:19:46.271244 2026] [cgid:error] [pid 992244:tid 992434] [client 34.162.188.36:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml, referer: http://www.thisistopsecret.com/backup/ [Sun Jul 12 18:19:46.749285 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:52060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF83NzUyL2RsLzg1MDUvbA==.html"] [unique_id "alQvImsmDw50MNj9aAKvhgAAAbY"] [Sun Jul 12 18:19:46.875864 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:46.876354 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:46.901566 2026] [security2:error] [pid 992244:tid 992452] [client 57.141.18.95:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvImJoJ8euboi5C2kItwAAAE0"] [Sun Jul 12 18:19:46.947512 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.139:36508] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20670/bargainor/2308_impeccance.jsp"] [unique_id "alQvImJoJ8euboi5C2kIwQAAAHE"] [Sun Jul 12 18:19:47.312552 2026] [autoindex:error] [pid 992244:tid 992347] [remote 43.130.174.37:0] AH01276: Cannot serve directory /home1/iamjenle/public_html/divfemleaders/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.divfemleaders.com [Sun Jul 12 18:19:47.387156 2026] [security2:error] [pid 992244:tid 992427] [client 74.7.241.146:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sheldoncrop.net"] [uri "/index.php"] [unique_id "alQvHWJoJ8euboi5C2kIQQAAADQ"] [Sun Jul 12 18:19:47.388924 2026] [security2:error] [pid 992244:tid 992441] [client 74.7.241.146:32870] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "sheldoncrop.net"] [uri "/robots.txt"] [unique_id "alQvHWJoJ8euboi5C2kIPwAAQkk"] [Sun Jul 12 18:19:47.531621 2026] [security2:error] [pid 992537:tid 992763] [client 125.167.21.72:62942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvI2smDw50MNj9aAKvjAAAAd4"] [Sun Jul 12 18:19:47.532473 2026] [security2:error] [pid 992537:tid 992763] [client 125.167.21.72:62942] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvI2smDw50MNj9aAKvjAAAAd4"] [Sun Jul 12 18:19:47.676002 2026] [authz_core:error] [pid 992244:tid 992402] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:47.676687 2026] [authz_core:error] [pid 992244:tid 992402] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:47.842196 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvI2JoJ8euboi5C2kIzwAAAFg"] [Sun Jul 12 18:19:47.842281 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvI2JoJ8euboi5C2kIzwAAAFg"] [Sun Jul 12 18:19:47.843412 2026] [security2:error] [pid 992537:tid 992780] [client 65.21.113.206:40536] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF83NzUyL2RsLzg1MDUvbA==.html"] [unique_id "alQvI2smDw50MNj9aAKviAAAAe8"] [Sun Jul 12 18:19:48.422995 2026] [security2:error] [pid 992244:tid 992411] [client 91.92.42.80:55066] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "grpls.com"] [uri "/400.shtml"] [unique_id "alQvJGJoJ8euboi5C2kI6QAAACQ"] [Sun Jul 12 18:19:48.455891 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:48.456372 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:48.998359 2026] [security2:error] [pid 992537:tid 992788] [client 168.100.149.175:56064] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20735/bargainor/2308_gunz.jsp"] [unique_id "alQvJGsmDw50MNj9aAKvmQAAAfc"] [Sun Jul 12 18:19:49.267688 2026] [authz_core:error] [pid 992244:tid 992433] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:49.268288 2026] [authz_core:error] [pid 992244:tid 992433] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:49.714911 2026] [security2:error] [pid 992537:tid 992771] [client 24.203.79.110:56780] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvJWsmDw50MNj9aAKvqwAAAeY"] [Sun Jul 12 18:19:49.715179 2026] [security2:error] [pid 992537:tid 992771] [client 24.203.79.110:56780] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvJWsmDw50MNj9aAKvqwAAAeY"] [Sun Jul 12 18:19:50.053842 2026] [security2:error] [pid 992537:tid 992751] [client 172.252.149.35:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvJWsmDw50MNj9aAKvqgAAAdI"] [Sun Jul 12 18:19:50.092568 2026] [authz_core:error] [pid 992537:tid 992746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:50.138280 2026] [authz_core:error] [pid 992537:tid 992746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:50.967204 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:50.967812 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:51.005367 2026] [security2:error] [pid 992244:tid 992402] [client 168.100.149.25:23078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20800/bargainor/2308_monadically.jsp"] [unique_id "alQvJ2JoJ8euboi5C2kJDQAAABs"] [Sun Jul 12 18:19:51.371105 2026] [security2:error] [pid 992244:tid 992388] [client 43.153.36.110:51050] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "mail.birdgenoscape.org"] [uri "/400.shtml"] [unique_id "alQvJ2JoJ8euboi5C2kJFQAAAA0"] [Sun Jul 12 18:19:51.791549 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:51.792074 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:52.515275 2026] [security2:error] [pid 992537:tid 992769] [client 65.21.113.206:46806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF8zMTkyL2RsLzg1MDUvbA==.html"] [unique_id "alQvKGsmDw50MNj9aAKv0gAAAeQ"] [Sun Jul 12 18:19:52.541655 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:52.542157 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:52.955961 2026] [security2:error] [pid 992537:tid 992797] [client 168.100.149.91:41982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20865/bargainor/2308_enhalo.jsp"] [unique_id "alQvKGsmDw50MNj9aAKv3QAAAgA"] [Sun Jul 12 18:19:53.291275 2026] [authz_core:error] [pid 992244:tid 992445] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:53.291805 2026] [authz_core:error] [pid 992244:tid 992445] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:53.584851 2026] [security2:error] [pid 992244:tid 992490] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvKWJoJ8euboi5C2kJKQAAAHM"] [Sun Jul 12 18:19:53.584950 2026] [security2:error] [pid 992244:tid 992490] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvKWJoJ8euboi5C2kJKQAAAHM"] [Sun Jul 12 18:19:53.585920 2026] [security2:error] [pid 992244:tid 992465] [client 65.21.113.206:50306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF8zMTkyL2RsLzg1MDUvbA==.html"] [unique_id "alQvKGJoJ8euboi5C2kJJwAAAFo"] [Sun Jul 12 18:19:53.623909 2026] [security2:error] [pid 992244:tid 992478] [client 212.237.121.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvKWJoJ8euboi5C2kJLgAAAGc"] [Sun Jul 12 18:19:53.786496 2026] [security2:error] [pid 992244:tid 992435] [client 157.230.182.204:47746] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvKWJoJ8euboi5C2kJPAAAADw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:19:54.010197 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:54.010831 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:54.756639 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:54.757364 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:54.939370 2026] [security2:error] [pid 992244:tid 992453] [client 168.100.149.151:33956] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20930/bargainor/2308_metalogical.jsp"] [unique_id "alQvKmJoJ8euboi5C2kJYQAAAE4"] [Sun Jul 12 18:19:55.526854 2026] [log_config:warn] [pid 979474:tid 979621] (32)Broken pipe: [client 184.168.124.4:53946] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --suffix=-bytes_log [Sun Jul 12 18:19:55.526897 2026] [log_config:warn] [pid 979474:tid 979621] (32)Broken pipe: [client 184.168.124.4:53946] AH00646: Error writing to |/usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box2216.bluehost.com --mainout=/etc/apache2/logs/access_log [Sun Jul 12 18:19:55.540981 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:55.541476 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:55.822603 2026] [security2:error] [pid 992537:tid 992554] [remote 47.128.57.209:37456] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.shiromi.com"] [uri "/origami/gallery/Misc/Roosterss"] [unique_id "alQvK2smDw50MNj9aAKv_gABrgI"] [Sun Jul 12 18:19:56.323330 2026] [authz_core:error] [pid 992244:tid 992484] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:56.323913 2026] [authz_core:error] [pid 992244:tid 992484] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:56.851458 2026] [lsapi:warn] [pid 992244:tid 992485] [client 14.178.184.33:58241] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:19:56.855425 2026] [security2:error] [pid 992244:tid 992485] [client 14.178.184.33:58241] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "rapports-minoritaires.net"] [uri "/index.php"] [unique_id "alQvLGJoJ8euboi5C2kJeAAAAG4"] [Sun Jul 12 18:19:56.989790 2026] [security2:error] [pid 992244:tid 992390] [client 168.100.149.54:41614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/20995/bargainor/2308_psychoreflex.jsp"] [unique_id "alQvLGJoJ8euboi5C2kJgQAAAA8"] [Sun Jul 12 18:19:57.075242 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:57.075816 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:57.248876 2026] [security2:error] [pid 992537:tid 992709] [client 65.21.113.206:46806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF8zNDE4L2RsLzg1MDUvbA==.html"] [unique_id "alQvLWsmDw50MNj9aAKwFwAAAag"] [Sun Jul 12 18:19:57.860267 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:57.860779 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:58.138131 2026] [security2:error] [pid 992244:tid 992410] [client 125.167.21.72:61420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvLmJoJ8euboi5C2kJpAAAACM"] [Sun Jul 12 18:19:58.138636 2026] [security2:error] [pid 992244:tid 992410] [client 125.167.21.72:61420] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvLmJoJ8euboi5C2kJpAAAACM"] [Sun Jul 12 18:19:58.288121 2026] [security2:error] [pid 992244:tid 992424] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvLWJoJ8euboi5C2kJmQAAADE"] [Sun Jul 12 18:19:58.288219 2026] [security2:error] [pid 992244:tid 992424] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvLWJoJ8euboi5C2kJmQAAADE"] [Sun Jul 12 18:19:58.289374 2026] [security2:error] [pid 992244:tid 992399] [client 65.21.113.206:50312] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWRsMnFpcF8zNDE4L2RsLzg1MDUvbA==.html"] [unique_id "alQvLWJoJ8euboi5C2kJmAAAABg"] [Sun Jul 12 18:19:58.312498 2026] [security2:error] [pid 992244:tid 992420] [client 172.121.89.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvLWJoJ8euboi5C2kJnwAAAC0"] [Sun Jul 12 18:19:58.615115 2026] [authz_core:error] [pid 992244:tid 992404] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:58.615680 2026] [authz_core:error] [pid 992244:tid 992404] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:58.963270 2026] [security2:error] [pid 992244:tid 992485] [client 168.100.149.94:50120] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21060/bargainor/2308_mailable.jsp"] [unique_id "alQvLmJoJ8euboi5C2kJtwAAAG4"] [Sun Jul 12 18:19:59.015413 2026] [security2:error] [pid 992537:tid 992732] [client 20.63.87.152:37656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/.dj/index.php"] [unique_id "alQvL2smDw50MNj9aAKwJgAAAb8"] [Sun Jul 12 18:19:59.257269 2026] [core:error] [pid 992244:tid 992433] [client 20.63.87.152:27623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:19:59.257320 2026] [core:error] [pid 992244:tid 992433] [client 20.63.87.152:27623] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:19:59.301991 2026] [security2:error] [pid 992244:tid 992285] [remote 184.168.124.4:43852] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQvL2JoJ8euboi5C2kJvwAACCc"] [Sun Jul 12 18:19:59.464064 2026] [authz_core:error] [pid 992537:tid 992790] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:19:59.464656 2026] [authz_core:error] [pid 992537:tid 992790] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:19:59.484358 2026] [security2:error] [pid 992537:tid 992698] [client 20.63.87.152:15044] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/.trash7206/index.php"] [unique_id "alQvL2smDw50MNj9aAKwMAAAAZ0"] [Sun Jul 12 18:19:59.826450 2026] [security2:error] [pid 992244:tid 992385] [client 34.11.8.3:52093] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQvL2JoJ8euboi5C2kJywAAAAo"] [Sun Jul 12 18:19:59.978167 2026] [security2:error] [pid 992244:tid 992445] [client 20.63.87.152:33997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQvL2JoJ8euboi5C2kJzQAAAEY"] [Sun Jul 12 18:20:00.156337 2026] [security2:error] [pid 992537:tid 992757] [client 34.11.8.3:52094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 3.8.11.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "carolinasdepressionclinic.org"] [uri "/xmlrpc.php"] [unique_id "alQvMGsmDw50MNj9aAKwYAAAAdg"] [Sun Jul 12 18:20:00.256940 2026] [security2:error] [pid 992244:tid 992502] [client 9.169.124.16:29603] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQvLmJoJ8euboi5C2kJsgAAfwE"], referer: https://mackinstyle.com/wp-login.php [Sun Jul 12 18:20:00.263367 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:00.263910 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:00.295409 2026] [security2:error] [pid 992537:tid 992802] [client 20.63.87.152:5768] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQvMGsmDw50MNj9aAKwYQAAAgU"] [Sun Jul 12 18:20:00.375971 2026] [security2:error] [pid 992244:tid 992449] [client 24.203.79.110:57335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvMGJoJ8euboi5C2kJ1QAAAEo"] [Sun Jul 12 18:20:00.380563 2026] [security2:error] [pid 992244:tid 992449] [client 24.203.79.110:57335] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvMGJoJ8euboi5C2kJ1QAAAEo"] [Sun Jul 12 18:20:00.406339 2026] [security2:error] [pid 992244:tid 992459] [client 34.11.8.3:55092] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQvMGJoJ8euboi5C2kJ1wAAAFQ"] [Sun Jul 12 18:20:00.588916 2026] [security2:error] [pid 992244:tid 992402] [client 20.63.87.152:15074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQvMGJoJ8euboi5C2kJ6QAAABs"] [Sun Jul 12 18:20:00.638561 2026] [security2:error] [pid 992537:tid 992745] [client 34.11.8.3:64485] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQvMGsmDw50MNj9aAKwaQAAAcw"] [Sun Jul 12 18:20:00.667493 2026] [security2:error] [pid 992537:tid 992725] [client 47.128.23.188:21900] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.pdlconline.org"] [uri "/robots.txt"] [unique_id "alQvMGsmDw50MNj9aAKwagAAAbg"] [Sun Jul 12 18:20:00.764837 2026] [security2:error] [pid 992537:tid 992737] [client 20.63.87.152:27603] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/0.kb-v3.php"] [unique_id "alQvMGsmDw50MNj9aAKwawAAAcQ"] [Sun Jul 12 18:20:00.873769 2026] [security2:error] [pid 992537:tid 992805] [client 34.11.8.3:57761] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQvMGsmDw50MNj9aAKwbQAAAgg"] [Sun Jul 12 18:20:00.924494 2026] [security2:error] [pid 992537:tid 992707] [client 20.63.87.152:21765] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/.dj/index.php"] [unique_id "alQvMGsmDw50MNj9aAKwcgAAAaY"] [Sun Jul 12 18:20:00.970273 2026] [security2:error] [pid 992244:tid 992408] [client 168.100.149.119:30324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21125/bargainor/2308_epidemiology.jsp"] [unique_id "alQvMGJoJ8euboi5C2kJ8AAAACE"] [Sun Jul 12 18:20:00.973088 2026] [security2:error] [pid 992244:tid 992478] [client 20.63.87.152:34039] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/0.php"] [unique_id "alQvMGJoJ8euboi5C2kJ8QAAAGc"] [Sun Jul 12 18:20:01.012317 2026] [authz_core:error] [pid 992537:tid 992766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:01.012869 2026] [authz_core:error] [pid 992537:tid 992766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:01.175932 2026] [security2:error] [pid 992537:tid 992722] [client 34.11.8.3:58594] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQvMWsmDw50MNj9aAKwegAAAbU"] [Sun Jul 12 18:20:01.210261 2026] [security2:error] [pid 992537:tid 992688] [client 20.63.87.152:29139] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/002.php"] [unique_id "alQvMWsmDw50MNj9aAKwewAAAZM"] [Sun Jul 12 18:20:01.217743 2026] [security2:error] [pid 992537:tid 992713] [client 57.141.18.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvMGsmDw50MNj9aAKwcQAAAaw"] [Sun Jul 12 18:20:01.401053 2026] [security2:error] [pid 992244:tid 992440] [client 20.63.87.152:2247] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/01.php"] [unique_id "alQvMWJoJ8euboi5C2kJ8wAAAEE"] [Sun Jul 12 18:20:01.518557 2026] [security2:error] [pid 992244:tid 992458] [client 20.63.87.152:15976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/.trash7206/index.php"] [unique_id "alQvMWJoJ8euboi5C2kJ9QAAAFM"] [Sun Jul 12 18:20:01.534102 2026] [security2:error] [pid 992244:tid 992380] [client 34.11.8.3:52807] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQvMWJoJ8euboi5C2kJ9wAAAAU"] [Sun Jul 12 18:20:01.600594 2026] [security2:error] [pid 992244:tid 992480] [client 20.63.87.152:37662] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/0x.php"] [unique_id "alQvMWJoJ8euboi5C2kJ-QAAAGk"] [Sun Jul 12 18:20:01.631344 2026] [security2:error] [pid 992244:tid 992438] [client 202.46.62.86:39886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 86.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQvMWJoJ8euboi5C2kJ-gAAAD8"], referer: https://www.stephenspublishing.com/shopping-tote-bags-custom-p-908.html?osCsid=2a6ng2mm4dh1o5kohugcouv8r4 [Sun Jul 12 18:20:01.783155 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:01.783692 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:01.796897 2026] [security2:error] [pid 992537:tid 992759] [client 65.21.113.206:46806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTE4MDItNnIy.cgi"] [unique_id "alQvMWsmDw50MNj9aAKwhwAAAdo"] [Sun Jul 12 18:20:01.812541 2026] [security2:error] [pid 992244:tid 992460] [client 34.11.8.3:52052] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "alQvMWJoJ8euboi5C2kKDgAAAFU"] [Sun Jul 12 18:20:01.816365 2026] [security2:error] [pid 992537:tid 992792] [client 20.63.87.152:12883] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.peterbold.newjetnet.com"] [uri "/1.php"] [unique_id "alQvMWsmDw50MNj9aAKwiAAAAfs"] [Sun Jul 12 18:20:01.816651 2026] [security2:error] [pid 992537:tid 992792] [client 20.63.87.152:12883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/1.php"] [unique_id "alQvMWsmDw50MNj9aAKwiAAAAfs"] [Sun Jul 12 18:20:02.030100 2026] [security2:error] [pid 992537:tid 992705] [client 20.63.87.152:37672] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/100.php"] [unique_id "alQvMmsmDw50MNj9aAKwjgAAAaQ"] [Sun Jul 12 18:20:02.058384 2026] [security2:error] [pid 992244:tid 992481] [client 34.11.8.3:56673] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQvMmJoJ8euboi5C2kKEQAAAGo"] [Sun Jul 12 18:20:02.221818 2026] [security2:error] [pid 992537:tid 992696] [client 20.63.87.152:35086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/122.php"] [unique_id "alQvMmsmDw50MNj9aAKwnQAAAZs"] [Sun Jul 12 18:20:02.340359 2026] [security2:error] [pid 992244:tid 992398] [client 168.100.149.133:44304] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21190/bargainor/2308_secque.jsp"] [unique_id "alQvMmJoJ8euboi5C2kKFAAAABc"] [Sun Jul 12 18:20:02.346567 2026] [security2:error] [pid 992244:tid 992381] [client 34.11.8.3:65065] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQvMmJoJ8euboi5C2kKFQAAAAY"] [Sun Jul 12 18:20:02.459754 2026] [security2:error] [pid 992244:tid 992441] [client 20.63.87.152:12894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/123.php"] [unique_id "alQvMmJoJ8euboi5C2kKHAAAAEI"] [Sun Jul 12 18:20:02.619745 2026] [security2:error] [pid 992244:tid 992430] [client 34.11.8.3:56966] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "alQvMmJoJ8euboi5C2kKJwAAADc"] [Sun Jul 12 18:20:02.660521 2026] [security2:error] [pid 992244:tid 992452] [client 20.63.87.152:4336] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/13.php"] [unique_id "alQvMmJoJ8euboi5C2kKKQAAAE0"] [Sun Jul 12 18:20:02.674388 2026] [authz_core:error] [pid 992244:tid 992394] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:02.674923 2026] [authz_core:error] [pid 992244:tid 992394] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:02.844424 2026] [security2:error] [pid 992537:tid 992736] [client 20.63.87.152:29148] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/133.php"] [unique_id "alQvMmsmDw50MNj9aAKwqAAAAcM"] [Sun Jul 12 18:20:02.852437 2026] [security2:error] [pid 992537:tid 992685] [client 20.63.87.152:24401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQvMmsmDw50MNj9aAKwqQAAAZA"] [Sun Jul 12 18:20:02.858550 2026] [security2:error] [pid 992244:tid 992500] [client 34.11.8.3:57141] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQvMmJoJ8euboi5C2kKLAAAAH0"] [Sun Jul 12 18:20:03.040721 2026] [security2:error] [pid 992244:tid 992474] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvMmJoJ8euboi5C2kKGAAAAGM"] [Sun Jul 12 18:20:03.040793 2026] [security2:error] [pid 992244:tid 992474] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvMmJoJ8euboi5C2kKGAAAAGM"] [Sun Jul 12 18:20:03.043585 2026] [security2:error] [pid 992537:tid 992775] [client 65.21.113.206:50326] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTE4MDItNnIy.cgi"] [unique_id "alQvMmsmDw50MNj9aAKwngAAAeo"] [Sun Jul 12 18:20:03.049525 2026] [security2:error] [pid 992244:tid 992393] [client 99.231.174.126:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvMmJoJ8euboi5C2kKFwAAABI"] [Sun Jul 12 18:20:03.051305 2026] [security2:error] [pid 992537:tid 992762] [client 20.63.87.152:2298] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/155.php"] [unique_id "alQvM2smDw50MNj9aAKwrQAAAd0"] [Sun Jul 12 18:20:03.087291 2026] [security2:error] [pid 992244:tid 992502] [client 34.11.8.3:53402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQvM2JoJ8euboi5C2kKQwAAAH8"] [Sun Jul 12 18:20:03.112033 2026] [security2:error] [pid 992244:tid 992422] [client 20.63.87.152:40539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/.well-known/logs233/index.php"] [unique_id "alQvM2JoJ8euboi5C2kKRAAAAC8"] [Sun Jul 12 18:20:03.306490 2026] [security2:error] [pid 992537:tid 992728] [client 34.11.8.3:54445] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQvM2smDw50MNj9aAKwsQAAAbs"] [Sun Jul 12 18:20:03.319527 2026] [security2:error] [pid 992244:tid 992455] [client 20.63.87.152:24289] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/177.php"] [unique_id "alQvM2JoJ8euboi5C2kKRwAAAFA"] [Sun Jul 12 18:20:03.339484 2026] [security2:error] [pid 992244:tid 992473] [client 20.63.87.152:19825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/.well-known/wp-cron.php"] [unique_id "alQvM2JoJ8euboi5C2kKSAAAAGI"] [Sun Jul 12 18:20:03.459720 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:03.460266 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:03.522976 2026] [security2:error] [pid 992537:tid 992722] [client 34.11.8.3:62105] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "carolinasdepressionclinic.org"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQvM2smDw50MNj9aAKwtgAAAbU"] [Sun Jul 12 18:20:03.527727 2026] [security2:error] [pid 992244:tid 992498] [client 43.135.182.95:54022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.182.135.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "putterman.net"] [uri "/wordpress/index.php"] [unique_id "alQvM2JoJ8euboi5C2kKTAAAAHs"] [Sun Jul 12 18:20:03.546698 2026] [security2:error] [pid 992537:tid 992801] [client 20.63.87.152:27629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/1index.php"] [unique_id "alQvM2smDw50MNj9aAKwuAAAAgQ"] [Sun Jul 12 18:20:03.734425 2026] [security2:error] [pid 992537:tid 992765] [client 20.63.87.152:29476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/0.kb-v3.php"] [unique_id "alQvM2smDw50MNj9aAKwugAAAeA"] [Sun Jul 12 18:20:03.782735 2026] [security2:error] [pid 992537:tid 992701] [client 20.63.87.152:24274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/2.php"] [unique_id "alQvM2smDw50MNj9aAKwvQAAAaA"] [Sun Jul 12 18:20:03.970788 2026] [security2:error] [pid 992537:tid 992741] [client 20.63.87.152:13794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/0.php"] [unique_id "alQvM2smDw50MNj9aAKwxAAAAcg"] [Sun Jul 12 18:20:03.989687 2026] [security2:error] [pid 992537:tid 992758] [client 20.63.87.152:23141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/222.php"] [unique_id "alQvM2smDw50MNj9aAKwxQAAAdk"] [Sun Jul 12 18:20:04.209891 2026] [security2:error] [pid 992537:tid 992793] [client 20.63.87.152:35111] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/2p.update.php"] [unique_id "alQvNGsmDw50MNj9aAKwzgAAAfw"] [Sun Jul 12 18:20:04.261215 2026] [security2:error] [pid 992244:tid 992464] [client 20.63.87.152:36252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/002.php"] [unique_id "alQvNGJoJ8euboi5C2kKTgAAAFk"] [Sun Jul 12 18:20:04.267207 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:04.267754 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:04.427907 2026] [security2:error] [pid 992244:tid 992391] [client 20.63.87.152:23166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/3.php"] [unique_id "alQvNGJoJ8euboi5C2kKUgAAABA"] [Sun Jul 12 18:20:04.538381 2026] [security2:error] [pid 992244:tid 992448] [client 20.63.87.152:15974] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/01.php"] [unique_id "alQvNGJoJ8euboi5C2kKVwAAAEk"] [Sun Jul 12 18:20:04.652487 2026] [security2:error] [pid 992244:tid 992443] [client 20.63.87.152:17252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQvNGJoJ8euboi5C2kKWAAAAEQ"] [Sun Jul 12 18:20:04.822989 2026] [security2:error] [pid 992244:tid 992431] [client 105.71.5.217:43802] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvNGJoJ8euboi5C2kKWQAAADg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:04.917391 2026] [security2:error] [pid 992244:tid 992467] [client 20.63.87.152:12864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/403.php"] [unique_id "alQvNGJoJ8euboi5C2kKZwAAAFw"] [Sun Jul 12 18:20:04.980611 2026] [security2:error] [pid 992244:tid 992481] [client 20.63.87.152:40514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/0x.php"] [unique_id "alQvNGJoJ8euboi5C2kKaQAAAGo"] [Sun Jul 12 18:20:05.000482 2026] [security2:error] [pid 992537:tid 992778] [client 168.100.149.2:18164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21255/bargainor/2308_dislevelment.jsp"] [unique_id "alQvNGsmDw50MNj9aAKw0gAAAe0"] [Sun Jul 12 18:20:05.039963 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:05.040459 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:05.143569 2026] [security2:error] [pid 992537:tid 992806] [client 20.63.87.152:2261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.peterbold.newjetnet.com"] [uri "/404.php"] [unique_id "alQvNWsmDw50MNj9aAKw1gAAAgk"] [Sun Jul 12 18:20:05.331853 2026] [security2:error] [pid 992244:tid 992477] [client 20.63.87.152:13795] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/1.php"] [unique_id "alQvNWJoJ8euboi5C2kKcgAAAGY"] [Sun Jul 12 18:20:05.332267 2026] [security2:error] [pid 992244:tid 992477] [client 20.63.87.152:13795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/1.php"] [unique_id "alQvNWJoJ8euboi5C2kKcgAAAGY"] [Sun Jul 12 18:20:05.568856 2026] [security2:error] [pid 992537:tid 992761] [client 20.63.87.152:39528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/100.php"] [unique_id "alQvNWsmDw50MNj9aAKw4wAAAdw"] [Sun Jul 12 18:20:05.805571 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:05.806104 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:05.923547 2026] [security2:error] [pid 992244:tid 992375] [client 20.63.87.152:40532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/122.php"] [unique_id "alQvNWJoJ8euboi5C2kKfAAAAAA"] [Sun Jul 12 18:20:06.168315 2026] [security2:error] [pid 992537:tid 992801] [client 20.63.87.152:4481] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/123.php"] [unique_id "alQvNmsmDw50MNj9aAKw7QAAAgQ"] [Sun Jul 12 18:20:06.341569 2026] [security2:error] [pid 992244:tid 992501] [client 168.100.149.243:47218] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21320/bargainor/2308_limnoria.jsp"] [unique_id "alQvNmJoJ8euboi5C2kKgwAAAH4"] [Sun Jul 12 18:20:06.406277 2026] [security2:error] [pid 992537:tid 992768] [client 20.63.87.152:15505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/13.php"] [unique_id "alQvNmsmDw50MNj9aAKw8AAAAeM"] [Sun Jul 12 18:20:06.624159 2026] [security2:error] [pid 992244:tid 992463] [client 20.63.87.152:3476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/133.php"] [unique_id "alQvNmJoJ8euboi5C2kKiwAAAFg"] [Sun Jul 12 18:20:06.649319 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:06.650177 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:06.827834 2026] [security2:error] [pid 992537:tid 992794] [client 79.177.151.200:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQvNGsmDw50MNj9aAKwxwAAAf0"] [Sun Jul 12 18:20:06.877055 2026] [security2:error] [pid 992537:tid 992746] [client 20.63.87.152:39497] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/155.php"] [unique_id "alQvNmsmDw50MNj9aAKw_QAAAc0"] [Sun Jul 12 18:20:06.918254 2026] [security2:error] [pid 992244:tid 992287] [remote 57.141.18.34:33604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 34.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/O8P0TJgI4QQbKqAyu8qbpAiIaqkHt.lWez"] [unique_id "alQvNmJoJ8euboi5C2kKkAAAHSk"] [Sun Jul 12 18:20:07.089262 2026] [security2:error] [pid 992244:tid 992414] [client 20.63.87.152:3997] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/177.php"] [unique_id "alQvN2JoJ8euboi5C2kKlgAAACc"] [Sun Jul 12 18:20:07.386394 2026] [security2:error] [pid 992244:tid 992496] [client 20.63.87.152:13820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/1index.php"] [unique_id "alQvN2JoJ8euboi5C2kKpgAAAHk"] [Sun Jul 12 18:20:07.482505 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:07.483070 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:07.756334 2026] [security2:error] [pid 992244:tid 992385] [client 20.63.87.152:19792] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/2.php"] [unique_id "alQvN2JoJ8euboi5C2kKrgAAAAo"] [Sun Jul 12 18:20:08.032576 2026] [security2:error] [pid 992244:tid 992375] [client 20.63.87.152:34639] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/222.php"] [unique_id "alQvOGJoJ8euboi5C2kKrwAAAAA"] [Sun Jul 12 18:20:08.274370 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:08.274894 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:08.279162 2026] [security2:error] [pid 992537:tid 992762] [client 20.63.87.152:39491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/2p.update.php"] [unique_id "alQvOGsmDw50MNj9aAKxGwAAAd0"] [Sun Jul 12 18:20:08.370338 2026] [security2:error] [pid 992537:tid 992719] [client 52.167.144.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.squashclubgroup.com"] [uri "/index.php"] [unique_id "alQvN2smDw50MNj9aAKxEAAAAbI"] [Sun Jul 12 18:20:08.703155 2026] [security2:error] [pid 992537:tid 992753] [client 20.63.87.152:15972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/3.php"] [unique_id "alQvOGsmDw50MNj9aAKxJQAAAdQ"] [Sun Jul 12 18:20:08.746187 2026] [security2:error] [pid 992244:tid 992256] [remote 216.73.216.109:10400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQvOGJoJ8euboi5C2kKvwAAQQo"] [Sun Jul 12 18:20:08.753126 2026] [security2:error] [pid 992244:tid 992470] [client 125.167.21.72:61894] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvOGJoJ8euboi5C2kKwAAAAF8"] [Sun Jul 12 18:20:08.753373 2026] [security2:error] [pid 992244:tid 992470] [client 125.167.21.72:61894] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvOGJoJ8euboi5C2kKwAAAAF8"] [Sun Jul 12 18:20:08.835006 2026] [security2:error] [pid 992244:tid 992439] [client 177.140.12.149:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvOGJoJ8euboi5C2kKtAAAAEA"] [Sun Jul 12 18:20:08.946620 2026] [security2:error] [pid 992244:tid 992437] [client 20.63.87.152:19835] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQvOGJoJ8euboi5C2kKwgAAAD4"] [Sun Jul 12 18:20:08.948936 2026] [security2:error] [pid 992244:tid 992502] [client 168.100.149.7:61346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21385/bargainor/2308_milksopism.jsp"] [unique_id "alQvOGJoJ8euboi5C2kKwwAAAH8"] [Sun Jul 12 18:20:08.980550 2026] [core:error] [pid 992244:tid 992421] [client 193.176.31.156:1738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:08.980593 2026] [core:error] [pid 992244:tid 992421] [client 193.176.31.156:1738] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:09.071513 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:09.072169 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:09.093655 2026] [security2:error] [pid 992244:tid 992485] [client 74.7.175.163:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yesbossclothing.com"] [uri "/robots.txt"] [unique_id "alQvOWJoJ8euboi5C2kKyQAAAG4"] [Sun Jul 12 18:20:09.094837 2026] [security2:error] [pid 992244:tid 992480] [client 74.7.175.163:34822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yesbossclothing.com"] [uri "/robots.txt"] [unique_id "alQvOWJoJ8euboi5C2kKxgAAaXw"] [Sun Jul 12 18:20:09.205576 2026] [security2:error] [pid 992244:tid 992482] [client 20.63.87.152:31406] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/403.php"] [unique_id "alQvOWJoJ8euboi5C2kKywAAAGs"] [Sun Jul 12 18:20:09.404245 2026] [core:error] [pid 992244:tid 992448] [client 81.19.216.109:8648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:09.404290 2026] [core:error] [pid 992244:tid 992448] [client 81.19.216.109:8648] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:09.467459 2026] [security2:error] [pid 992244:tid 992418] [client 20.63.87.152:19802] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.stp.tlv.mybluehost.me"] [uri "/404.php"] [unique_id "alQvOWJoJ8euboi5C2kK0wAAACs"] [Sun Jul 12 18:20:09.865474 2026] [authz_core:error] [pid 992244:tid 992459] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:09.866035 2026] [authz_core:error] [pid 992244:tid 992459] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:10.018731 2026] [security2:error] [pid 992244:tid 992394] [client 65.21.113.206:35296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTY5Ny02cjI=.cgi"] [unique_id "alQvOmJoJ8euboi5C2kK4gAAABM"] [Sun Jul 12 18:20:10.639410 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:10.639931 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:10.966204 2026] [security2:error] [pid 992537:tid 992699] [client 24.203.79.110:58033] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvOmsmDw50MNj9aAKxOwAAAZ4"] [Sun Jul 12 18:20:10.966480 2026] [security2:error] [pid 992537:tid 992699] [client 24.203.79.110:58033] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvOmsmDw50MNj9aAKxOwAAAZ4"] [Sun Jul 12 18:20:11.010805 2026] [security2:error] [pid 992244:tid 992469] [client 168.100.149.55:43530] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21450/bargainor/2308_capnoides.jsp"] [unique_id "alQvO2JoJ8euboi5C2kK8wAAAF4"] [Sun Jul 12 18:20:11.048563 2026] [security2:error] [pid 992244:tid 992420] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvOmJoJ8euboi5C2kK7gAAAC0"] [Sun Jul 12 18:20:11.048613 2026] [security2:error] [pid 992244:tid 992420] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvOmJoJ8euboi5C2kK7gAAAC0"] [Sun Jul 12 18:20:11.049651 2026] [security2:error] [pid 992244:tid 992406] [client 65.21.113.206:54758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTY5Ny02cjI=.cgi"] [unique_id "alQvOmJoJ8euboi5C2kK7AAAAB8"] [Sun Jul 12 18:20:11.422348 2026] [authz_core:error] [pid 992244:tid 992421] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:11.422866 2026] [authz_core:error] [pid 992244:tid 992421] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:11.524230 2026] [security2:error] [pid 992537:tid 992744] [client 216.24.212.228:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "abacustaxestx.com"] [uri "/index.php"] [unique_id "alQvNmsmDw50MNj9aAKw7gAAAcs"] [Sun Jul 12 18:20:11.630903 2026] [security2:error] [pid 992244:tid 992470] [client 37.152.156.155:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvO2JoJ8euboi5C2kK9gAAAF8"] [Sun Jul 12 18:20:11.949036 2026] [security2:error] [pid 992244:tid 992490] [client 1.92.215.222:53766] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.cidclan.acedev.net"] [uri "/forumdisplay.php"] [unique_id "alQvO2JoJ8euboi5C2kLEwAAczc"] [Sun Jul 12 18:20:12.164291 2026] [access_compat:error] [pid 992537:tid 992560] [remote 3.129.187.38:53316] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php, referer: http://50.87.169.225/ [Sun Jul 12 18:20:12.166036 2026] [access_compat:error] [pid 992537:tid 992560] [remote 3.129.187.38:53316] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.phtml, referer: http://50.87.169.225/ [Sun Jul 12 18:20:12.201353 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:12.201909 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:12.314189 2026] [security2:error] [pid 992537:tid 992740] [client 146.174.180.239:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvO2smDw50MNj9aAKxPgAAAcc"] [Sun Jul 12 18:20:12.331078 2026] [security2:error] [pid 992244:tid 992448] [client 159.223.211.139:50240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.copy"] [unique_id "alQvPGJoJ8euboi5C2kLHQAAAEk"] [Sun Jul 12 18:20:12.360208 2026] [core:error] [pid 992537:tid 992745] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.360257 2026] [core:error] [pid 992537:tid 992745] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.365300 2026] [security2:error] [pid 992244:tid 992398] [client 159.223.211.139:50224] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.bak"] [unique_id "alQvPGJoJ8euboi5C2kLIwAAABc"] [Sun Jul 12 18:20:12.373696 2026] [security2:error] [pid 992244:tid 992395] [client 159.223.211.139:50200] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env"] [unique_id "alQvPGJoJ8euboi5C2kLJgAAABQ"] [Sun Jul 12 18:20:12.390898 2026] [security2:error] [pid 992244:tid 992417] [client 159.223.211.139:50300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.yesbossclothing.com"] [uri "/.env"] [unique_id "alQvPGJoJ8euboi5C2kLLgAAACo"] [Sun Jul 12 18:20:12.397464 2026] [core:error] [pid 992537:tid 992714] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.397508 2026] [core:error] [pid 992537:tid 992714] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.401510 2026] [core:error] [pid 992244:tid 992475] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.401555 2026] [core:error] [pid 992244:tid 992475] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.403887 2026] [core:error] [pid 992244:tid 992501] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.403925 2026] [core:error] [pid 992244:tid 992501] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.411513 2026] [core:error] [pid 992244:tid 992434] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.411562 2026] [core:error] [pid 992244:tid 992434] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.412341 2026] [core:error] [pid 992537:tid 992709] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.412378 2026] [core:error] [pid 992537:tid 992709] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.425182 2026] [core:error] [pid 992537:tid 992686] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.425236 2026] [core:error] [pid 992537:tid 992686] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.430778 2026] [core:error] [pid 992244:tid 992442] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.430811 2026] [core:error] [pid 992244:tid 992442] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.442574 2026] [core:error] [pid 992537:tid 992708] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.442611 2026] [core:error] [pid 992537:tid 992708] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.457276 2026] [core:error] [pid 992537:tid 992735] [client 159.223.211.139:50246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.457317 2026] [core:error] [pid 992537:tid 992735] [client 159.223.211.139:50246] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.470991 2026] [security2:error] [pid 992537:tid 992716] [client 159.223.211.139:50228] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.backup"] [unique_id "alQvPGsmDw50MNj9aAKxUgAAAa8"] [Sun Jul 12 18:20:12.475612 2026] [core:error] [pid 992537:tid 992721] [client 159.223.211.139:50202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.475686 2026] [core:error] [pid 992537:tid 992721] [client 159.223.211.139:50202] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.486164 2026] [core:error] [pid 992244:tid 992460] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.486202 2026] [core:error] [pid 992244:tid 992460] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.508097 2026] [core:error] [pid 992537:tid 992780] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.508140 2026] [core:error] [pid 992537:tid 992780] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.817032 2026] [core:error] [pid 992244:tid 992433] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.817068 2026] [core:error] [pid 992244:tid 992433] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.818322 2026] [core:error] [pid 992244:tid 992481] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.818362 2026] [core:error] [pid 992244:tid 992481] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.934828 2026] [security2:error] [pid 992537:tid 992743] [client 110.249.202.27:36622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "salon-software.com"] [uri "/robots.txt"] [unique_id "alQvPGsmDw50MNj9aAKxWgAAAco"] [Sun Jul 12 18:20:12.946121 2026] [security2:error] [pid 992244:tid 992471] [client 159.223.211.139:50240] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env"] [unique_id "alQvPGJoJ8euboi5C2kLUQAAAGA"] [Sun Jul 12 18:20:12.972820 2026] [core:error] [pid 992244:tid 992467] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.972859 2026] [core:error] [pid 992244:tid 992467] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:12.990254 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:12.990785 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:13.007964 2026] [security2:error] [pid 992537:tid 992785] [client 168.100.149.4:40750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21515/bargainor/2308_deft.jsp"] [unique_id "alQvPWsmDw50MNj9aAKxWwAAAfQ"] [Sun Jul 12 18:20:13.008883 2026] [security2:error] [pid 992244:tid 992490] [client 159.223.211.139:50300] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.yesbossclothing.com"] [uri "/.env"] [unique_id "alQvPWJoJ8euboi5C2kLVQAAAHM"] [Sun Jul 12 18:20:13.041136 2026] [core:error] [pid 992537:tid 992775] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:13.041176 2026] [core:error] [pid 992537:tid 992775] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:13.518177 2026] [core:error] [pid 992244:tid 992387] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:13.518226 2026] [core:error] [pid 992244:tid 992387] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:13.746703 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:13.747257 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:13.905881 2026] [security2:error] [pid 992537:tid 992765] [client 20.210.108.71:55548] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts/class-wp-font-collection.php"] [unique_id "alQvPWsmDw50MNj9aAKxawAAAeA"], referer: binance.com [Sun Jul 12 18:20:13.956899 2026] [security2:error] [pid 992537:tid 992801] [client 177.245.231.39:16120] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvPWsmDw50MNj9aAKxZQAAAgQ"], referer: https://purplefalo.weebly.com/blog/archives/11-2023/2 [Sun Jul 12 18:20:14.065682 2026] [core:error] [pid 992244:tid 992392] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:14.065722 2026] [core:error] [pid 992244:tid 992392] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:14.084906 2026] [core:error] [pid 992244:tid 992447] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:14.084940 2026] [core:error] [pid 992244:tid 992447] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:14.479063 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:14.479544 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:14.505945 2026] [security2:error] [pid 992244:tid 992430] [client 65.21.113.206:35296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTgyNDEtNnIy.cgi"] [unique_id "alQvPmJoJ8euboi5C2kLgAAAADc"] [Sun Jul 12 18:20:15.008326 2026] [security2:error] [pid 992244:tid 992444] [client 168.100.149.189:26716] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21580/bargainor/2308_did.jsp"] [unique_id "alQvP2JoJ8euboi5C2kLjAAAAEU"] [Sun Jul 12 18:20:15.237979 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:15.238472 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:15.333195 2026] [security2:error] [pid 992244:tid 992494] [client 2a03:2880:f800:39:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQvP2JoJ8euboi5C2kLkAAAdzM"] [Sun Jul 12 18:20:15.641983 2026] [security2:error] [pid 992537:tid 992762] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvP2smDw50MNj9aAKxfAAAAd0"] [Sun Jul 12 18:20:15.642046 2026] [security2:error] [pid 992537:tid 992762] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvP2smDw50MNj9aAKxfAAAAd0"] [Sun Jul 12 18:20:15.643184 2026] [security2:error] [pid 992244:tid 992459] [client 65.21.113.206:41366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWU2LTE1Mzg1LWU2cjJyLTgyNDEtNnIy.cgi"] [unique_id "alQvPmJoJ8euboi5C2kLigAAAFQ"] [Sun Jul 12 18:20:15.705649 2026] [core:error] [pid 992244:tid 992393] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:15.705746 2026] [core:error] [pid 992244:tid 992393] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:15.789193 2026] [security2:error] [pid 992537:tid 992769] [client 159.223.211.139:50494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env"] [unique_id "alQvP2smDw50MNj9aAKxgwAAAeQ"] [Sun Jul 12 18:20:16.005592 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:16.006102 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:16.322575 2026] [core:error] [pid 992244:tid 992384] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.322642 2026] [core:error] [pid 992244:tid 992384] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.323923 2026] [security2:error] [pid 992244:tid 992484] [client 159.223.211.139:50342] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.backup"] [unique_id "alQvQGJoJ8euboi5C2kLuAAAAG0"] [Sun Jul 12 18:20:16.325155 2026] [security2:error] [pid 992537:tid 992722] [client 168.100.149.174:64698] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21645/bargainor/2308_delphian.jsp"] [unique_id "alQvQGsmDw50MNj9aAKxhwAAAbU"] [Sun Jul 12 18:20:16.329154 2026] [core:error] [pid 992244:tid 992407] [client 159.223.211.139:50402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.329208 2026] [core:error] [pid 992244:tid 992407] [client 159.223.211.139:50402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.347218 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.347271 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.350068 2026] [core:error] [pid 992244:tid 992493] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.350107 2026] [core:error] [pid 992244:tid 992493] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.351250 2026] [core:error] [pid 992244:tid 992463] [client 159.223.211.139:50362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.351283 2026] [core:error] [pid 992244:tid 992463] [client 159.223.211.139:50362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.371823 2026] [core:error] [pid 992244:tid 992499] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.371857 2026] [core:error] [pid 992244:tid 992499] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.384081 2026] [core:error] [pid 992244:tid 992376] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.384114 2026] [core:error] [pid 992244:tid 992376] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.394580 2026] [core:error] [pid 992244:tid 992408] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.394615 2026] [core:error] [pid 992244:tid 992408] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:16.408508 2026] [security2:error] [pid 992537:tid 992745] [client 159.223.211.139:50404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.backup"] [unique_id "alQvQGsmDw50MNj9aAKxigAAAcw"] [Sun Jul 12 18:20:16.613879 2026] [security2:error] [pid 992537:tid 992691] [client 159.223.211.139:50508] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.yesbossclothing.com"] [uri "/.env"] [unique_id "alQvQGsmDw50MNj9aAKxiwAAAZY"] [Sun Jul 12 18:20:16.772422 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:16.772913 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:17.472592 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:17.473101 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:17.641562 2026] [security2:error] [pid 992244:tid 992484] [client 20.210.108.71:60459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts/class-wp-font-face-resolver.php"] [unique_id "alQvQWJoJ8euboi5C2kL6wAAAG0"], referer: binance.com [Sun Jul 12 18:20:17.912642 2026] [core:error] [pid 992244:tid 992424] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:17.912704 2026] [core:error] [pid 992244:tid 992424] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.063763 2026] [core:error] [pid 992244:tid 992410] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.063807 2026] [core:error] [pid 992244:tid 992410] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.215354 2026] [authz_core:error] [pid 992244:tid 992501] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:18.215875 2026] [authz_core:error] [pid 992244:tid 992501] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:18.364982 2026] [security2:error] [pid 992244:tid 992442] [client 65.21.113.206:35296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWUtMzA3OS9lYTMvMjEwMTctYTN4cw=="] [unique_id "alQvQmJoJ8euboi5C2kMAgAAAEM"] [Sun Jul 12 18:20:18.741716 2026] [security2:error] [pid 992244:tid 992475] [client 159.223.211.139:50376] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.copy"] [unique_id "alQvQmJoJ8euboi5C2kMDwAAAGQ"] [Sun Jul 12 18:20:18.774686 2026] [security2:error] [pid 992537:tid 992790] [client 159.223.211.139:50494] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.bak"] [unique_id "alQvQmsmDw50MNj9aAKxpgAAAfk"] [Sun Jul 12 18:20:18.775310 2026] [core:error] [pid 992537:tid 992774] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.775344 2026] [core:error] [pid 992537:tid 992774] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.782971 2026] [core:error] [pid 992537:tid 992765] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.783011 2026] [core:error] [pid 992537:tid 992765] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.793436 2026] [core:error] [pid 992537:tid 992711] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.793472 2026] [core:error] [pid 992537:tid 992711] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.800347 2026] [security2:error] [pid 992537:tid 992705] [client 159.223.211.139:50404] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.backup"] [unique_id "alQvQmsmDw50MNj9aAKxqQAAAaQ"] [Sun Jul 12 18:20:18.807897 2026] [security2:error] [pid 992244:tid 992443] [client 159.223.211.139:50478] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env"] [unique_id "alQvQmJoJ8euboi5C2kMEgAAAEQ"] [Sun Jul 12 18:20:18.832360 2026] [core:error] [pid 992537:tid 992757] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.832415 2026] [core:error] [pid 992537:tid 992757] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:18.969365 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:18.969880 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:19.029202 2026] [security2:error] [pid 992244:tid 992396] [client 168.100.149.124:17368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21710/bargainor/2308_anisodactyli.jsp"] [unique_id "alQvQ2JoJ8euboi5C2kMGAAAABU"] [Sun Jul 12 18:20:19.280533 2026] [proxy:error] [pid 992244:tid 992468] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:19.280711 2026] [proxy_http:error] [pid 992244:tid 992468] [client 142.248.80.131:44642] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:19.282738 2026] [proxy:error] [pid 992244:tid 992468] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:19.282912 2026] [proxy_http:error] [pid 992244:tid 992468] [client 142.248.80.131:44642] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:19.303812 2026] [security2:error] [pid 992537:tid 992699] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvQmsmDw50MNj9aAKxrwAAAZ4"] [Sun Jul 12 18:20:19.303867 2026] [security2:error] [pid 992537:tid 992699] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvQmsmDw50MNj9aAKxrwAAAZ4"] [Sun Jul 12 18:20:19.305021 2026] [security2:error] [pid 992244:tid 992382] [client 65.21.113.206:41380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWUtMzA3OS9lYTMvMjEwMTctYTN4cw=="] [unique_id "alQvQmJoJ8euboi5C2kMFAAAAAc"] [Sun Jul 12 18:20:19.365982 2026] [core:error] [pid 992537:tid 992787] [client 159.223.211.139:50598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.366028 2026] [core:error] [pid 992537:tid 992787] [client 159.223.211.139:50598] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.371234 2026] [security2:error] [pid 992537:tid 992794] [client 159.223.211.139:50586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.yesbossclothing.com"] [uri "/.env"] [unique_id "alQvQ2smDw50MNj9aAKxuQAAAf0"] [Sun Jul 12 18:20:19.375586 2026] [security2:error] [pid 992244:tid 992440] [client 125.167.21.72:62346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvQ2JoJ8euboi5C2kMIQAAAEE"] [Sun Jul 12 18:20:19.376099 2026] [security2:error] [pid 992244:tid 992440] [client 125.167.21.72:62346] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvQ2JoJ8euboi5C2kMIQAAAEE"] [Sun Jul 12 18:20:19.380696 2026] [core:error] [pid 992537:tid 992733] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.380740 2026] [core:error] [pid 992537:tid 992733] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.383315 2026] [core:error] [pid 992537:tid 992794] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.383348 2026] [core:error] [pid 992537:tid 992794] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.385888 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.385927 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.388895 2026] [core:error] [pid 992537:tid 992750] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.388923 2026] [core:error] [pid 992537:tid 992750] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.480715 2026] [core:error] [pid 992537:tid 992808] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.480757 2026] [core:error] [pid 992537:tid 992808] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.496512 2026] [core:error] [pid 992244:tid 992430] [client 159.223.211.139:50626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.496558 2026] [core:error] [pid 992244:tid 992430] [client 159.223.211.139:50626] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:19.752557 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:19.753109 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:19.874766 2026] [proxy:error] [pid 992537:tid 992763] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:19.875093 2026] [proxy_http:error] [pid 992537:tid 992763] [client 142.248.80.131:32724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:19.878113 2026] [proxy:error] [pid 992537:tid 992763] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:19.878452 2026] [proxy_http:error] [pid 992537:tid 992763] [client 142.248.80.131:32724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:20.251243 2026] [security2:error] [pid 992244:tid 992377] [client 159.223.211.139:50618] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.copy"] [unique_id "alQvRGJoJ8euboi5C2kMNgAAAAI"] [Sun Jul 12 18:20:20.328993 2026] [security2:error] [pid 992244:tid 992433] [client 168.100.149.105:21890] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21775/bargainor/2308_birefraction.jsp"] [unique_id "alQvRGJoJ8euboi5C2kMNwAAADo"] [Sun Jul 12 18:20:20.412418 2026] [core:error] [pid 992537:tid 992776] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.412463 2026] [core:error] [pid 992537:tid 992776] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.495095 2026] [security2:error] [pid 992537:tid 992753] [client 159.223.211.139:50710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.bak"] [unique_id "alQvRGsmDw50MNj9aAKx0QAAAdQ"] [Sun Jul 12 18:20:20.520693 2026] [authz_core:error] [pid 992537:tid 992732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:20.521368 2026] [authz_core:error] [pid 992537:tid 992732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:20.521953 2026] [security2:error] [pid 992537:tid 992790] [client 159.223.211.139:50586] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.yesbossclothing.com"] [uri "/%2eenv"] [unique_id "alQvRGsmDw50MNj9aAKx2QAAAfk"] [Sun Jul 12 18:20:20.544064 2026] [core:error] [pid 992244:tid 992387] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.544104 2026] [core:error] [pid 992244:tid 992387] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.549425 2026] [security2:error] [pid 992537:tid 992691] [client 159.223.211.139:50730] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.backup"] [unique_id "alQvRGsmDw50MNj9aAKx3gAAAZY"] [Sun Jul 12 18:20:20.555412 2026] [security2:error] [pid 992244:tid 992489] [client 82.20.4.213:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvRGJoJ8euboi5C2kMNQAAAHI"] [Sun Jul 12 18:20:20.561435 2026] [core:error] [pid 992244:tid 992419] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.561471 2026] [core:error] [pid 992244:tid 992419] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.565009 2026] [core:error] [pid 992537:tid 992801] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.565041 2026] [core:error] [pid 992537:tid 992801] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.572638 2026] [core:error] [pid 992537:tid 992764] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.572687 2026] [core:error] [pid 992537:tid 992764] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.588539 2026] [core:error] [pid 992537:tid 992748] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.588578 2026] [core:error] [pid 992537:tid 992748] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.592835 2026] [core:error] [pid 992537:tid 992738] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.592875 2026] [core:error] [pid 992537:tid 992738] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.597202 2026] [core:error] [pid 992537:tid 992807] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.597238 2026] [core:error] [pid 992537:tid 992807] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.613260 2026] [core:error] [pid 992244:tid 992441] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.613302 2026] [core:error] [pid 992244:tid 992441] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.617535 2026] [core:error] [pid 992537:tid 992795] [client 159.223.211.139:50650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.617573 2026] [core:error] [pid 992537:tid 992795] [client 159.223.211.139:50650] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:20.724510 2026] [security2:error] [pid 992537:tid 992758] [client 31.173.85.227:15498] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.85.173.31.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "singularstudiosnj.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQvRGsmDw50MNj9aAKx6AAAAdk"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:20:20.837421 2026] [security2:error] [pid 992244:tid 992435] [client 159.223.211.139:50618] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.copy"] [unique_id "alQvRGJoJ8euboi5C2kMUAAAADw"] [Sun Jul 12 18:20:21.015098 2026] [security2:error] [pid 992537:tid 992752] [client 159.223.211.139:50696] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/%2eenv"] [unique_id "alQvRWsmDw50MNj9aAKx7gAAAdM"] [Sun Jul 12 18:20:21.017123 2026] [security2:error] [pid 992537:tid 992791] [client 159.223.211.139:50710] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/.env.bak"] [unique_id "alQvRWsmDw50MNj9aAKx7wAAAfo"] [Sun Jul 12 18:20:21.045265 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.045306 2026] [core:error] [pid 992244:tid 992490] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.062645 2026] [core:error] [pid 992244:tid 992484] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.062710 2026] [core:error] [pid 992244:tid 992484] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.094495 2026] [core:error] [pid 992244:tid 992453] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.094537 2026] [core:error] [pid 992244:tid 992453] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.326443 2026] [authz_core:error] [pid 992244:tid 992500] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:21.326964 2026] [authz_core:error] [pid 992244:tid 992500] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:21.490887 2026] [proxy:error] [pid 992244:tid 992409] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:21.491124 2026] [proxy_http:error] [pid 992244:tid 992409] [client 142.248.80.131:44650] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:21.494024 2026] [proxy:error] [pid 992244:tid 992409] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:21.494230 2026] [proxy_http:error] [pid 992244:tid 992409] [client 142.248.80.131:44650] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:21.506391 2026] [security2:error] [pid 992244:tid 992463] [client 24.203.79.110:58644] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvRWJoJ8euboi5C2kMbAAAAFg"] [Sun Jul 12 18:20:21.511837 2026] [security2:error] [pid 992244:tid 992463] [client 24.203.79.110:58644] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvRWJoJ8euboi5C2kMbAAAAFg"] [Sun Jul 12 18:20:21.924378 2026] [core:error] [pid 992244:tid 992392] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:21.924423 2026] [core:error] [pid 992244:tid 992392] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.004478 2026] [proxy:error] [pid 992244:tid 992388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.004683 2026] [proxy_http:error] [pid 992244:tid 992388] [client 104.28.219.190:55549] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.006778 2026] [proxy:error] [pid 992244:tid 992388] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.006940 2026] [proxy_http:error] [pid 992244:tid 992388] [client 104.28.219.190:55549] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.125594 2026] [core:error] [pid 992537:tid 992684] [client 159.223.211.139:50696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.125679 2026] [core:error] [pid 992537:tid 992684] [client 159.223.211.139:50696] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.163337 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:22.163877 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:22.245939 2026] [core:error] [pid 992537:tid 992716] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.245979 2026] [core:error] [pid 992537:tid 992716] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.257570 2026] [core:error] [pid 992537:tid 992806] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.257620 2026] [core:error] [pid 992537:tid 992806] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.280918 2026] [core:error] [pid 992537:tid 992783] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.280970 2026] [core:error] [pid 992537:tid 992783] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.325382 2026] [core:error] [pid 992537:tid 992722] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.325418 2026] [core:error] [pid 992537:tid 992722] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.333335 2026] [security2:error] [pid 992537:tid 992702] [client 159.223.211.139:50802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/%2eenv%2ebackup"] [unique_id "alQvRmsmDw50MNj9aAKyCQAAAaE"] [Sun Jul 12 18:20:22.336419 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.92:58364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21840/bargainor/2308_mediator.jsp"] [unique_id "alQvRmJoJ8euboi5C2kMhQAAAHE"] [Sun Jul 12 18:20:22.377912 2026] [core:error] [pid 992244:tid 992386] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.406525 2026] [core:error] [pid 992244:tid 992386] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.384357 2026] [core:error] [pid 992244:tid 992466] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.406774 2026] [core:error] [pid 992244:tid 992466] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.386491 2026] [proxy:error] [pid 992244:tid 992379] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.392053 2026] [security2:error] [pid 992244:tid 992491] [client 104.28.219.190:55558] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.gmchcfamilylife.org"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "alQvRmJoJ8euboi5C2kMiwAAAHQ"] [Sun Jul 12 18:20:22.407073 2026] [proxy_http:error] [pid 992244:tid 992379] [client 104.28.219.190:55557] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.409686 2026] [proxy:error] [pid 992244:tid 992379] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.409863 2026] [proxy_http:error] [pid 992244:tid 992379] [client 104.28.219.190:55557] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.411120 2026] [proxy:error] [pid 992244:tid 992441] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.411275 2026] [proxy_http:error] [pid 992244:tid 992441] [client 104.28.219.190:55559] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.413573 2026] [proxy:error] [pid 992244:tid 992441] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:22.413774 2026] [proxy_http:error] [pid 992244:tid 992441] [client 104.28.219.190:55559] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:22.481441 2026] [core:error] [pid 992244:tid 992460] [client 159.223.211.139:50792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.481478 2026] [core:error] [pid 992244:tid 992460] [client 159.223.211.139:50792] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.600529 2026] [core:error] [pid 992244:tid 992452] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.600561 2026] [core:error] [pid 992244:tid 992452] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.629461 2026] [security2:error] [pid 992537:tid 992784] [client 57.141.18.39:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQvRWsmDw50MNj9aAKx9wAAAfM"] [Sun Jul 12 18:20:22.729701 2026] [core:error] [pid 992244:tid 992429] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.729741 2026] [core:error] [pid 992244:tid 992429] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.933947 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:22.934496 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:22.951659 2026] [core:error] [pid 992244:tid 992463] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.951734 2026] [core:error] [pid 992244:tid 992463] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.962543 2026] [security2:error] [pid 992244:tid 992417] [client 20.210.108.71:53241] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts/class-wp-font-face.php"] [unique_id "alQvRmJoJ8euboi5C2kMsQAAACo"], referer: binance.com [Sun Jul 12 18:20:22.972649 2026] [core:error] [pid 992244:tid 992401] [client 159.223.211.139:50812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.972700 2026] [core:error] [pid 992244:tid 992401] [client 159.223.211.139:50812] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:22.997449 2026] [security2:error] [pid 992244:tid 992426] [client 199.203.206.94:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "ophtek.com"] [uri "/index.php"] [unique_id "alQvRmJoJ8euboi5C2kMnQAAADM"] [Sun Jul 12 18:20:23.002070 2026] [security2:error] [pid 992244:tid 992447] [client 159.223.211.139:50844] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/%2eenv%2ebak"] [unique_id "alQvRmJoJ8euboi5C2kMtQAAAEg"] [Sun Jul 12 18:20:23.003311 2026] [proxy:error] [pid 992244:tid 992427] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:23.003509 2026] [proxy_http:error] [pid 992244:tid 992427] [client 104.28.219.190:55558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:23.012619 2026] [security2:error] [pid 992244:tid 992377] [client 159.223.211.139:50860] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.copy$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1269"] [id "390586"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .copy)"] [severity "CRITICAL"] [hostname "www.medicafricaonline.com"] [uri "/%2eenv%2ecopy"] [unique_id "alQvR2JoJ8euboi5C2kMtwAAAAI"] [Sun Jul 12 18:20:23.014114 2026] [proxy:error] [pid 992244:tid 992427] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:23.014615 2026] [proxy_http:error] [pid 992244:tid 992427] [client 104.28.219.190:55558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:23.055420 2026] [core:error] [pid 992244:tid 992465] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.055465 2026] [core:error] [pid 992244:tid 992465] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.079621 2026] [core:error] [pid 992537:tid 992692] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.079688 2026] [core:error] [pid 992537:tid 992692] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.500965 2026] [proxy:error] [pid 992537:tid 992772] (70014)End of file found: [client 139.162.88.198:48610] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 139.162.88.198 () [Sun Jul 12 18:20:23.665613 2026] [core:error] [pid 992244:tid 992491] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.666389 2026] [core:error] [pid 992244:tid 992491] [client 159.223.211.139:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.684359 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:23.685005 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:23.732368 2026] [core:error] [pid 992244:tid 992403] [client 159.223.211.139:50888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:23.732403 2026] [core:error] [pid 992244:tid 992403] [client 159.223.211.139:50888] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:24.171991 2026] [proxy:error] [pid 992244:tid 992425] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:24.172248 2026] [proxy_http:error] [pid 992244:tid 992425] [client 142.248.80.131:44666] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:24.174304 2026] [proxy:error] [pid 992244:tid 992425] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:24.174516 2026] [proxy_http:error] [pid 992244:tid 992425] [client 142.248.80.131:44666] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:24.296995 2026] [core:error] [pid 992244:tid 992468] [client 159.223.211.139:50844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:24.297060 2026] [core:error] [pid 992244:tid 992468] [client 159.223.211.139:50844] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:24.339558 2026] [security2:error] [pid 992537:tid 992611] [remote 57.141.18.70:33350] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/0Hr6NbZYVPEQCXSm.lWez"] [unique_id "alQvSGsmDw50MNj9aAKyTQABzTg"] [Sun Jul 12 18:20:24.476250 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:24.479365 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:24.953997 2026] [security2:error] [pid 992244:tid 992257] [remote 47.128.19.98:33790] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fatir.tj"] [uri "/recipes/"] [unique_id "alQvSGJoJ8euboi5C2kM-AAAJws"] [Sun Jul 12 18:20:25.025653 2026] [security2:error] [pid 992537:tid 992789] [client 168.100.149.126:29816] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21905/bargainor/2308_gurian.jsp"] [unique_id "alQvSWsmDw50MNj9aAKyVQAAAfg"] [Sun Jul 12 18:20:25.230241 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:25.230746 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:25.260806 2026] [core:error] [pid 992244:tid 992489] [client 159.223.211.139:50860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:25.260858 2026] [core:error] [pid 992244:tid 992489] [client 159.223.211.139:50860] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:25.616178 2026] [security2:error] [pid 992244:tid 992446] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzE2OTMvZTEvMjc0MjEvMQ=="] [unique_id "alQvSWJoJ8euboi5C2kNBgAAAEc"] [Sun Jul 12 18:20:25.993532 2026] [authz_core:error] [pid 992244:tid 992458] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:25.994059 2026] [authz_core:error] [pid 992244:tid 992458] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:26.353372 2026] [security2:error] [pid 992537:tid 992783] [client 168.100.149.115:20058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/21970/bargainor/2308_monkey.jsp"] [unique_id "alQvSmsmDw50MNj9aAKydAAAAfI"] [Sun Jul 12 18:20:26.627277 2026] [security2:error] [pid 992537:tid 992788] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvSmsmDw50MNj9aAKybwAAAfc"] [Sun Jul 12 18:20:26.627340 2026] [security2:error] [pid 992537:tid 992788] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvSmsmDw50MNj9aAKybwAAAfc"] [Sun Jul 12 18:20:26.631407 2026] [security2:error] [pid 992244:tid 992407] [client 65.21.113.206:36098] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzE2OTMvZTEvMjc0MjEvMQ=="] [unique_id "alQvSmJoJ8euboi5C2kNFgAAACA"] [Sun Jul 12 18:20:26.764372 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:26.764909 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:27.192490 2026] [security2:error] [pid 992244:tid 992466] [client 57.141.18.120:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvSmJoJ8euboi5C2kNIAAAAFs"] [Sun Jul 12 18:20:27.219722 2026] [security2:error] [pid 992537:tid 992804] [client 93.152.221.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/index.php"] [unique_id "alQvSWsmDw50MNj9aAKyZgAAAgc"] [Sun Jul 12 18:20:27.484957 2026] [security2:error] [pid 992537:tid 992700] [client 93.152.221.13:53646] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/phpinfo.php"] [unique_id "alQvS2smDw50MNj9aAKylgAAAZ8"] [Sun Jul 12 18:20:27.522391 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:27.522952 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:27.630086 2026] [security2:error] [pid 992244:tid 992414] [client 74.7.230.45:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "whise-armenia.versatileintelligence.com"] [uri "/404.shtml"] [unique_id "alQvS2JoJ8euboi5C2kNLwAAACc"] [Sun Jul 12 18:20:27.633892 2026] [security2:error] [pid 992537:tid 992801] [client 74.7.230.45:50022] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "whise-armenia.versatileintelligence.com"] [uri "/robots.txt"] [unique_id "alQvS2smDw50MNj9aAKymgAAAgQ"] [Sun Jul 12 18:20:27.648749 2026] [core:error] [pid 992537:tid 992805] [client 159.223.211.139:50890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:27.648784 2026] [core:error] [pid 992537:tid 992805] [client 159.223.211.139:50890] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:27.791849 2026] [security2:error] [pid 992244:tid 992438] [client 93.152.221.13:60825] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/test.php"] [unique_id "alQvS2JoJ8euboi5C2kNMQAAAD8"] [Sun Jul 12 18:20:28.255736 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:28.256258 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:28.921745 2026] [security2:error] [pid 992537:tid 992733] [client 2.137.168.200:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvTGsmDw50MNj9aAKypwAAAcA"] [Sun Jul 12 18:20:28.971226 2026] [security2:error] [pid 992537:tid 992795] [client 168.100.149.78:26630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22035/bargainor/2308_impeccance.jsp"] [unique_id "alQvTGsmDw50MNj9aAKyqQAAAf4"] [Sun Jul 12 18:20:29.032872 2026] [authz_core:error] [pid 992244:tid 992497] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:29.033713 2026] [authz_core:error] [pid 992244:tid 992497] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:29.055906 2026] [security2:error] [pid 992537:tid 992806] [client 20.210.108.71:64280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts/class-wp-font-library.php"] [unique_id "alQvTWsmDw50MNj9aAKyqwAAAgk"], referer: binance.com [Sun Jul 12 18:20:29.569102 2026] [security2:error] [pid 992244:tid 992403] [client 93.152.221.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/index.php"] [unique_id "alQvTGJoJ8euboi5C2kNOQAAABw"] [Sun Jul 12 18:20:29.782061 2026] [security2:error] [pid 992244:tid 992419] [client 93.152.221.13:59584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/info.php"] [unique_id "alQvTWJoJ8euboi5C2kNYgAAACw"] [Sun Jul 12 18:20:29.817442 2026] [authz_core:error] [pid 992244:tid 992465] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:29.817996 2026] [authz_core:error] [pid 992244:tid 992465] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:29.865950 2026] [security2:error] [pid 992244:tid 992443] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzU0ODcvZTEvMjc0MjEvMQ=="] [unique_id "alQvTWJoJ8euboi5C2kNZAAAAEQ"] [Sun Jul 12 18:20:29.996314 2026] [security2:error] [pid 992537:tid 992721] [client 125.167.21.72:62796] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvTWsmDw50MNj9aAKyugAAAbQ"] [Sun Jul 12 18:20:29.996555 2026] [security2:error] [pid 992537:tid 992721] [client 125.167.21.72:62796] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvTWsmDw50MNj9aAKyugAAAbQ"] [Sun Jul 12 18:20:30.048294 2026] [security2:error] [pid 992537:tid 992803] [client 92.115.52.49:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.ophtek.com"] [uri "/index.php"] [unique_id "alQvTWsmDw50MNj9aAKytwAAAgY"] [Sun Jul 12 18:20:30.092759 2026] [security2:error] [pid 992244:tid 992399] [client 93.152.221.13:51551] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/php.php"] [unique_id "alQvTmJoJ8euboi5C2kNaAAAABg"] [Sun Jul 12 18:20:30.344788 2026] [security2:error] [pid 992537:tid 992704] [client 168.100.149.65:52702] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22100/bargainor/2308_gunz.jsp"] [unique_id "alQvTmsmDw50MNj9aAKyvwAAAaM"] [Sun Jul 12 18:20:30.402709 2026] [security2:error] [pid 992244:tid 992493] [client 93.152.221.13:60699] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/php_info.php"] [unique_id "alQvTmJoJ8euboi5C2kNbAAAAHY"] [Sun Jul 12 18:20:30.601825 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:30.602320 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:30.717455 2026] [security2:error] [pid 992244:tid 992405] [client 93.152.221.13:64354] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/i.php"] [unique_id "alQvTmJoJ8euboi5C2kNcgAAAB4"] [Sun Jul 12 18:20:31.028400 2026] [security2:error] [pid 992537:tid 992700] [client 93.152.221.13:61727] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/pi.php"] [unique_id "alQvT2smDw50MNj9aAKyygAAAZ8"] [Sun Jul 12 18:20:31.031361 2026] [security2:error] [pid 992537:tid 992771] [client 31.25.11.143:46158] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "machinelat.org"] [uri "/wp-content/plugins/complianz-gdpr/readme.txt"] [unique_id "alQvT2smDw50MNj9aAKyywAAAeY"] [Sun Jul 12 18:20:31.075376 2026] [security2:error] [pid 992537:tid 992746] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvTmsmDw50MNj9aAKywwAAAc0"] [Sun Jul 12 18:20:31.075431 2026] [security2:error] [pid 992537:tid 992746] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvTmsmDw50MNj9aAKywwAAAc0"] [Sun Jul 12 18:20:31.076396 2026] [security2:error] [pid 992244:tid 992491] [client 65.21.113.206:36102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzU0ODcvZTEvMjc0MjEvMQ=="] [unique_id "alQvTmJoJ8euboi5C2kNbQAAAHQ"] [Sun Jul 12 18:20:31.146352 2026] [proxy:error] [pid 992537:tid 992777] (70014)End of file found: [client 139.162.88.198:60730] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 139.162.88.198 () [Sun Jul 12 18:20:31.392740 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:31.393222 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:31.446386 2026] [security2:error] [pid 992244:tid 992502] [client 143.20.253.92:16932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.253.20.143.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQvT2JoJ8euboi5C2kNhAAAAH8"], referer: https://www.cidclan.net/ [Sun Jul 12 18:20:31.484155 2026] [security2:error] [pid 992244:tid 992431] [client 216.75.132.170:18920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.132.75.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQvT2JoJ8euboi5C2kNhQAAADg"], referer: https://www.cidclan.net/ [Sun Jul 12 18:20:31.515598 2026] [security2:error] [pid 992537:tid 992725] [client 216.75.132.108:64118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.132.75.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQvT2smDw50MNj9aAKy1wAAAbg"], referer: https://www.cidclan.net/ [Sun Jul 12 18:20:31.573657 2026] [security2:error] [pid 992537:tid 992769] [client 216.75.132.108:64108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.132.75.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/cron.php"] [unique_id "alQvT2smDw50MNj9aAKy2QAAAeQ"], referer: https://www.cidclan.net/ [Sun Jul 12 18:20:31.897445 2026] [security2:error] [pid 992244:tid 992402] [client 31.25.11.143:49348] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "machinelat.org"] [uri "/wp-content/plugins/google-site-kit/readme.txt"] [unique_id "alQvT2JoJ8euboi5C2kNjgAAABs"] [Sun Jul 12 18:20:32.180985 2026] [authz_core:error] [pid 992537:tid 992688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:32.181498 2026] [authz_core:error] [pid 992537:tid 992688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:32.222596 2026] [security2:error] [pid 992244:tid 992432] [client 24.203.79.110:59155] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvUGJoJ8euboi5C2kNlQAAADk"] [Sun Jul 12 18:20:32.229957 2026] [security2:error] [pid 992244:tid 992432] [client 24.203.79.110:59155] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvUGJoJ8euboi5C2kNlQAAADk"] [Sun Jul 12 18:20:32.278076 2026] [security2:error] [pid 992537:tid 992797] [client 93.152.221.13:49183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/admin/phpinfo.php"] [unique_id "alQvUGsmDw50MNj9aAKy5AAAAgA"] [Sun Jul 12 18:20:32.335334 2026] [security2:error] [pid 992537:tid 992787] [client 168.100.149.189:24122] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22165/bargainor/2308_monadically.jsp"] [unique_id "alQvUGsmDw50MNj9aAKy5QAAAfY"] [Sun Jul 12 18:20:32.348377 2026] [security2:error] [pid 992537:tid 992780] [client 57.141.18.70:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQvT2smDw50MNj9aAKyyQAAAe8"] [Sun Jul 12 18:20:32.587281 2026] [security2:error] [pid 992244:tid 992438] [client 93.152.221.13:51972] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/pinfo.php"] [unique_id "alQvUGJoJ8euboi5C2kNnAAAAD8"] [Sun Jul 12 18:20:32.821059 2026] [security2:error] [pid 992244:tid 992445] [client 31.173.85.227:20186] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQvUGJoJ8euboi5C2kNpAAAAEY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:20:32.834360 2026] [core:error] [pid 992244:tid 992411] [client 159.223.211.139:56370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:32.834399 2026] [core:error] [pid 992244:tid 992411] [client 159.223.211.139:56370] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:32.899367 2026] [security2:error] [pid 992244:tid 992393] [client 93.152.221.13:64718] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/php_version.php"] [unique_id "alQvUGJoJ8euboi5C2kNrgAAABI"] [Sun Jul 12 18:20:32.964502 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:32.965197 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:33.761081 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:33.761585 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:33.939407 2026] [security2:error] [pid 992244:tid 992473] [client 74.125.215.224:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQvUGJoJ8euboi5C2kNowAAAGI"] [Sun Jul 12 18:20:34.078345 2026] [security2:error] [pid 992244:tid 992427] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzUyNzUvZTEvMjc0MjEvMQ=="] [unique_id "alQvUmJoJ8euboi5C2kNygAAADQ"] [Sun Jul 12 18:20:34.359284 2026] [security2:error] [pid 992244:tid 992445] [client 31.173.85.227:20186] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQvUGJoJ8euboi5C2kNpAAAAEY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:20:34.359430 2026] [security2:error] [pid 992244:tid 992445] [client 31.173.85.227:20186] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQvUGJoJ8euboi5C2kNpAAAAEY"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:20:34.520409 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:34.520937 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:34.630185 2026] [security2:error] [pid 992537:tid 992720] [client 93.152.221.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/index.php"] [unique_id "alQvUWsmDw50MNj9aAKy8AAAAbM"] [Sun Jul 12 18:20:34.841375 2026] [security2:error] [pid 992244:tid 992474] [client 93.152.221.13:54651] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/.env"] [unique_id "alQvUmJoJ8euboi5C2kNzAAAAGM"] [Sun Jul 12 18:20:34.943263 2026] [core:error] [pid 992537:tid 992727] [client 159.223.211.139:56380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:34.943306 2026] [core:error] [pid 992537:tid 992727] [client 159.223.211.139:56380] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:35.022996 2026] [security2:error] [pid 992537:tid 992733] [client 168.100.149.207:41046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22230/bargainor/2308_enhalo.jsp"] [unique_id "alQvU2smDw50MNj9aAKzGgAAAcA"] [Sun Jul 12 18:20:35.229011 2026] [security2:error] [pid 992537:tid 992691] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvUmsmDw50MNj9aAKzBgAAAZY"] [Sun Jul 12 18:20:35.229081 2026] [security2:error] [pid 992537:tid 992691] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvUmsmDw50MNj9aAKzBgAAAZY"] [Sun Jul 12 18:20:35.230527 2026] [security2:error] [pid 992537:tid 992689] [client 65.21.113.206:47746] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWUxeHhkLzUyNzUvZTEvMjc0MjEvMQ=="] [unique_id "alQvUmsmDw50MNj9aAKzAgAAAZQ"] [Sun Jul 12 18:20:35.334308 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:35.334832 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:35.502154 2026] [security2:error] [pid 992244:tid 992396] [client 57.141.18.70:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvU2JoJ8euboi5C2kN0wAAABU"] [Sun Jul 12 18:20:36.137564 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:36.138089 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:36.307260 2026] [security2:error] [pid 992537:tid 992686] [client 93.152.221.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/index.php"] [unique_id "alQvU2smDw50MNj9aAKzGQAAAZE"] [Sun Jul 12 18:20:36.950996 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:36.951499 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:37.025708 2026] [security2:error] [pid 992537:tid 992807] [client 168.100.149.201:56606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22295/bargainor/2308_metalogical.jsp"] [unique_id "alQvVWsmDw50MNj9aAKzNgAAAgo"] [Sun Jul 12 18:20:37.148281 2026] [security2:error] [pid 992537:tid 992759] [client 20.210.108.71:63737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 71.108.210.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "johndmurray.org"] [uri "/wp-includes/fonts/class-wp-font-utils.php"] [unique_id "alQvVWsmDw50MNj9aAKzOQAAAdo"], referer: binance.com [Sun Jul 12 18:20:37.703121 2026] [security2:error] [pid 992537:tid 992767] [client 93.152.221.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/index.php"] [unique_id "alQvVGsmDw50MNj9aAKzMgAAAeI"] [Sun Jul 12 18:20:37.742684 2026] [authz_core:error] [pid 992537:tid 992707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:37.792986 2026] [authz_core:error] [pid 992537:tid 992707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:37.861464 2026] [security2:error] [pid 992244:tid 992444] [client 93.152.221.13:54651] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/.env.backup"] [unique_id "alQvVWJoJ8euboi5C2kOBAAAAEU"] [Sun Jul 12 18:20:38.024744 2026] [security2:error] [pid 992244:tid 992468] [client 93.152.221.13:54651] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "spooniepreneur-net.wnicoleneer.com"] [uri "/config/.env"] [unique_id "alQvVmJoJ8euboi5C2kOCAAAAF0"] [Sun Jul 12 18:20:38.110726 2026] [security2:error] [pid 992244:tid 992454] [client 57.141.18.45:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQvVGJoJ8euboi5C2kN8wAAAE8"] [Sun Jul 12 18:20:38.629875 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:38.630367 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:38.738426 2026] [security2:error] [pid 992244:tid 992470] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWVfMzc1NC9lcnMvMzU4OTdfcnM=.htm"] [unique_id "alQvVmJoJ8euboi5C2kOHgAAAF8"] [Sun Jul 12 18:20:38.883977 2026] [fcgid:warn] [pid 992244:tid 992464] (70014)End of file found: [client 167.94.146.57:60288] mod_fcgid: can't get data from http client [Sun Jul 12 18:20:39.005561 2026] [security2:error] [pid 992537:tid 992713] [client 168.100.149.237:37286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22360/bargainor/2308_psychoreflex.jsp"] [unique_id "alQvV2smDw50MNj9aAKzUQAAAaw"] [Sun Jul 12 18:20:39.124083 2026] [security2:error] [pid 992537:tid 992805] [client 190.81.111.195:45546] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "charlenevivienne.com"] [uri "/cgi-sys/404.html"] [unique_id "alQvV2smDw50MNj9aAKzUwAAAgg"] [Sun Jul 12 18:20:39.212438 2026] [security2:error] [pid 992244:tid 992381] [client 79.117.197.204:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvVmJoJ8euboi5C2kOHQAAAAY"] [Sun Jul 12 18:20:39.440832 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:39.441615 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:39.676986 2026] [security2:error] [pid 992537:tid 992786] [client 65.21.113.206:47758] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWVfMzc1NC9lcnMvMzU4OTdfcnM=.htm"] [unique_id "alQvV2smDw50MNj9aAKzVQAAAfU"] [Sun Jul 12 18:20:39.677303 2026] [security2:error] [pid 992244:tid 992478] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvV2JoJ8euboi5C2kOLAAAAGc"] [Sun Jul 12 18:20:39.677396 2026] [security2:error] [pid 992244:tid 992478] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvV2JoJ8euboi5C2kOLAAAAGc"] [Sun Jul 12 18:20:40.314424 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:40.315109 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:40.364386 2026] [security2:error] [pid 992537:tid 992704] [client 168.100.149.231:61584] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22425/bargainor/2308_mailable.jsp"] [unique_id "alQvWGsmDw50MNj9aAKzagAAAaM"] [Sun Jul 12 18:20:40.517191 2026] [security2:error] [pid 992537:tid 992685] [client 125.167.21.72:63259] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvWGsmDw50MNj9aAKzbgAAAZA"] [Sun Jul 12 18:20:40.517466 2026] [security2:error] [pid 992537:tid 992685] [client 125.167.21.72:63259] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvWGsmDw50MNj9aAKzbgAAAZA"] [Sun Jul 12 18:20:40.530413 2026] [security2:error] [pid 992537:tid 992697] [client 74.7.228.11:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "cloud5accounting.com"] [uri "/index.php"] [unique_id "alQvU2smDw50MNj9aAKzKAABnFU"] [Sun Jul 12 18:20:41.177911 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:41.178397 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:41.878582 2026] [security2:error] [pid 992244:tid 992456] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWVfNjgyMy9lcnMvMzU4OTdfcnM=.htm"] [unique_id "alQvWWJoJ8euboi5C2kOXAAAAFE"] [Sun Jul 12 18:20:41.951499 2026] [authz_core:error] [pid 992244:tid 992406] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:41.952009 2026] [authz_core:error] [pid 992244:tid 992406] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:42.703418 2026] [authz_core:error] [pid 992537:tid 992761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:42.703924 2026] [authz_core:error] [pid 992537:tid 992761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:42.869216 2026] [security2:error] [pid 992244:tid 992480] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvWmJoJ8euboi5C2kOZgAAAGk"] [Sun Jul 12 18:20:42.869282 2026] [security2:error] [pid 992244:tid 992480] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvWmJoJ8euboi5C2kOZgAAAGk"] [Sun Jul 12 18:20:42.870811 2026] [security2:error] [pid 992244:tid 992500] [client 65.21.113.206:47760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWVfNjgyMy9lcnMvMzU4OTdfcnM=.htm"] [unique_id "alQvWmJoJ8euboi5C2kOZAAAAH0"] [Sun Jul 12 18:20:42.880343 2026] [security2:error] [pid 992537:tid 992715] [client 24.203.79.110:59664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvWmsmDw50MNj9aAKzmgAAAa4"] [Sun Jul 12 18:20:42.880616 2026] [security2:error] [pid 992537:tid 992715] [client 24.203.79.110:59664] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvWmsmDw50MNj9aAKzmgAAAa4"] [Sun Jul 12 18:20:42.981820 2026] [security2:error] [pid 992244:tid 992382] [client 168.100.149.237:58068] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22490/bargainor/2308_epidemiology.jsp"] [unique_id "alQvWmJoJ8euboi5C2kObAAAAAc"] [Sun Jul 12 18:20:43.436412 2026] [authz_core:error] [pid 992537:tid 992708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:43.436914 2026] [authz_core:error] [pid 992537:tid 992708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:44.111016 2026] [security2:error] [pid 992244:tid 992477] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWVhLTI4Nzk3LWVhYWVyLTY2MTUtYWFl.cgi"] [unique_id "alQvXGJoJ8euboi5C2kOhAAAAGY"] [Sun Jul 12 18:20:44.193375 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:44.193900 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:44.328269 2026] [proxy:error] [pid 992244:tid 992384] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:44.328462 2026] [proxy_http:error] [pid 992244:tid 992384] [client 142.248.80.200:46206] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:44.330828 2026] [proxy:error] [pid 992244:tid 992384] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:44.331218 2026] [proxy_http:error] [pid 992244:tid 992384] [client 142.248.80.200:46206] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:44.382465 2026] [core:error] [pid 992244:tid 992407] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.382511 2026] [core:error] [pid 992244:tid 992407] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.399765 2026] [security2:error] [pid 992537:tid 992808] [client 193.36.224.203:28911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 203.224.36.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQvXGsmDw50MNj9aAKzsAAAAgs"] [Sun Jul 12 18:20:44.512285 2026] [core:error] [pid 992244:tid 992381] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.512326 2026] [core:error] [pid 992244:tid 992381] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.512925 2026] [core:error] [pid 992244:tid 992430] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.512958 2026] [core:error] [pid 992244:tid 992430] [client 142.248.80.200:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:20:44.835212 2026] [security2:error] [pid 992244:tid 992417] [client 90.125.142.29:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvXGJoJ8euboi5C2kOjwAAACo"] [Sun Jul 12 18:20:44.986684 2026] [authz_core:error] [pid 992244:tid 992485] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:44.987182 2026] [authz_core:error] [pid 992244:tid 992485] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:44.992292 2026] [security2:error] [pid 992244:tid 992401] [client 168.100.149.57:41780] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22555/bargainor/2308_secque.jsp"] [unique_id "alQvXGJoJ8euboi5C2kOsgAAABo"] [Sun Jul 12 18:20:45.110246 2026] [security2:error] [pid 992244:tid 992423] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvXGJoJ8euboi5C2kOnAAAADA"] [Sun Jul 12 18:20:45.110547 2026] [security2:error] [pid 992244:tid 992423] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvXGJoJ8euboi5C2kOnAAAADA"] [Sun Jul 12 18:20:45.111102 2026] [security2:error] [pid 992244:tid 992482] [client 65.21.113.206:60098] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWVhLTI4Nzk3LWVhYWVyLTY2MTUtYWFl.cgi"] [unique_id "alQvXGJoJ8euboi5C2kOmAAAAGs"] [Sun Jul 12 18:20:45.738691 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:45.739204 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:46.111853 2026] [security2:error] [pid 992537:tid 992800] [client 74.7.175.148:60446] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yev.yhy.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQvXmsmDw50MNj9aAKzuQAAAgM"] [Sun Jul 12 18:20:46.397456 2026] [security2:error] [pid 992244:tid 992389] [client 65.21.113.206:51582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWVoa25nLzQ0MjcvZWgvNzYyNS9o"] [unique_id "alQvXmJoJ8euboi5C2kOzAAAAA4"] [Sun Jul 12 18:20:46.504094 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:46.504593 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:46.756393 2026] [security2:error] [pid 992244:tid 992437] [client 145.239.10.137:34781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jimmybuy.co.uk"] [uri "/sm.php"] [unique_id "alQvXmJoJ8euboi5C2kO1gAAAD4"], referer: http://jimmybuy.co.uk/sm.php [Sun Jul 12 18:20:47.081520 2026] [security2:error] [pid 992244:tid 992378] [client 168.100.149.23:22396] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22620/bargainor/2308_dislevelment.jsp"] [unique_id "alQvX2JoJ8euboi5C2kO4QAAAAM"] [Sun Jul 12 18:20:47.273524 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:47.274033 2026] [authz_core:error] [pid 992244:tid 992416] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:47.357888 2026] [security2:error] [pid 992244:tid 992403] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvXmJoJ8euboi5C2kO3gAAABw"] [Sun Jul 12 18:20:47.357968 2026] [security2:error] [pid 992244:tid 992403] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvXmJoJ8euboi5C2kO3gAAABw"] [Sun Jul 12 18:20:47.359161 2026] [security2:error] [pid 992244:tid 992500] [client 65.21.113.206:60100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWVoa25nLzQ0MjcvZWgvNzYyNS9o"] [unique_id "alQvXmJoJ8euboi5C2kO2gAAAH0"] [Sun Jul 12 18:20:48.023719 2026] [authz_core:error] [pid 992244:tid 992459] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:48.024225 2026] [authz_core:error] [pid 992244:tid 992459] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:48.451035 2026] [security2:error] [pid 992537:tid 992719] [client 172.252.42.181:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvYGsmDw50MNj9aAKzzgAAAbI"] [Sun Jul 12 18:20:48.805538 2026] [authz_core:error] [pid 992244:tid 992454] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:48.806069 2026] [authz_core:error] [pid 992244:tid 992454] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:49.010109 2026] [security2:error] [pid 992537:tid 992685] [client 168.100.149.96:53678] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22685/bargainor/2308_limnoria.jsp"] [unique_id "alQvYWsmDw50MNj9aAKz3AAAAZA"] [Sun Jul 12 18:20:49.131265 2026] [proxy:error] [pid 992537:tid 992759] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:49.131513 2026] [proxy_http:error] [pid 992537:tid 992759] [client 193.32.162.60:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:49.134613 2026] [proxy:error] [pid 992537:tid 992759] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:20:49.134901 2026] [proxy_http:error] [pid 992537:tid 992759] [client 193.32.162.60:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:20:49.466132 2026] [security2:error] [pid 992537:tid 992724] [client 57.141.18.72:35202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQvYWsmDw50MNj9aAKz4gABtw0"] [Sun Jul 12 18:20:49.540423 2026] [authz_core:error] [pid 992537:tid 992746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:49.540936 2026] [authz_core:error] [pid 992537:tid 992746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:50.315516 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:50.316027 2026] [authz_core:error] [pid 992244:tid 992401] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:50.985350 2026] [security2:error] [pid 992244:tid 992403] [client 168.100.149.244:38744] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22750/bargainor/2308_milksopism.jsp"] [unique_id "alQvYmJoJ8euboi5C2kPFwAAABw"] [Sun Jul 12 18:20:51.061968 2026] [security2:error] [pid 992244:tid 992387] [client 125.167.21.72:61735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvY2JoJ8euboi5C2kPHQAAAAw"] [Sun Jul 12 18:20:51.062273 2026] [security2:error] [pid 992244:tid 992387] [client 125.167.21.72:61735] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvY2JoJ8euboi5C2kPHQAAAAw"] [Sun Jul 12 18:20:51.079011 2026] [authz_core:error] [pid 992244:tid 992434] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:51.079474 2026] [authz_core:error] [pid 992244:tid 992434] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:51.866842 2026] [authz_core:error] [pid 992244:tid 992404] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:51.867356 2026] [authz_core:error] [pid 992244:tid 992404] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:52.199815 2026] [security2:error] [pid 992537:tid 992738] [client 152.42.206.212:35000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGsmDw50MNj9aAKz9gAAAcU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.258367 2026] [security2:error] [pid 992244:tid 992410] [client 188.166.227.154:41908] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPPAAAACM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.258374 2026] [security2:error] [pid 992244:tid 992451] [client 128.199.223.180:60686] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPOgAAAEw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.266113 2026] [security2:error] [pid 992244:tid 992441] [client 128.199.223.180:60688] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPOwAAAEI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.269993 2026] [security2:error] [pid 992244:tid 992399] [client 128.199.108.160:51384] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPPQAAABg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.392741 2026] [security2:error] [pid 992244:tid 992439] [client 167.172.74.15:57170] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPPwAAAEA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.648856 2026] [authz_core:error] [pid 992244:tid 992437] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:52.649353 2026] [authz_core:error] [pid 992244:tid 992437] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:52.708035 2026] [security2:error] [pid 992537:tid 992722] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWVxLTEzOTU3LWVxanQxLTgyMzctcWp0.cgi"] [unique_id "alQvZGsmDw50MNj9aAKz-AAAAbU"] [Sun Jul 12 18:20:52.718916 2026] [security2:error] [pid 992244:tid 992383] [client 157.245.241.0:42162] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPSwAAAAg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.736761 2026] [security2:error] [pid 992244:tid 992427] [client 146.190.66.25:51410] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPTAAAADQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.741611 2026] [security2:error] [pid 992244:tid 992393] [client 159.223.179.133:46494] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPTQAAABI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.762769 2026] [security2:error] [pid 992244:tid 992402] [client 165.227.202.85:59772] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPTgAAABs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.834402 2026] [security2:error] [pid 992244:tid 992392] [client 165.227.202.85:59758] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGJoJ8euboi5C2kPTwAAABE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.850736 2026] [security2:error] [pid 992537:tid 992690] [client 159.223.143.46:36610] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZGsmDw50MNj9aAKz_AAAAZU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:52.980873 2026] [security2:error] [pid 992244:tid 992387] [client 168.100.149.182:38262] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22815/bargainor/2308_capnoides.jsp"] [unique_id "alQvZGJoJ8euboi5C2kPUgAAAAw"] [Sun Jul 12 18:20:53.378796 2026] [security2:error] [pid 992537:tid 992778] [client 178.156.181.172:59032] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQvZWsmDw50MNj9aAK0BgAAAe0"], referer: https://nwuav.com [Sun Jul 12 18:20:53.383348 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:53.383857 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:53.501741 2026] [security2:error] [pid 992537:tid 992684] [client 24.203.79.110:60164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvZWsmDw50MNj9aAK0CQAAAY8"] [Sun Jul 12 18:20:53.508197 2026] [security2:error] [pid 992537:tid 992684] [client 24.203.79.110:60164] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvZWsmDw50MNj9aAK0CQAAAY8"] [Sun Jul 12 18:20:53.759311 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvZWJoJ8euboi5C2kPVwAAAGE"] [Sun Jul 12 18:20:53.759366 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvZWJoJ8euboi5C2kPVwAAAGE"] [Sun Jul 12 18:20:53.761459 2026] [security2:error] [pid 992537:tid 992702] [client 65.21.113.206:33288] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWVxLTEzOTU3LWVxanQxLTgyMzctcWp0.cgi"] [unique_id "alQvZWsmDw50MNj9aAK0AgAAAaE"] [Sun Jul 12 18:20:54.108659 2026] [authz_core:error] [pid 992537:tid 992747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:54.109183 2026] [authz_core:error] [pid 992537:tid 992747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:54.253705 2026] [lsapi:warn] [pid 992244:tid 992373] [remote 74.7.230.60:34562] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:20:54.259423 2026] [security2:error] [pid 992244:tid 992379] [client 74.7.230.60:34562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "rapports-minoritaires.net"] [uri "/index.php"] [unique_id "alQvZmJoJ8euboi5C2kPYQAABH8"] [Sun Jul 12 18:20:54.875823 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:54.876313 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:54.932650 2026] [security2:error] [pid 992244:tid 992407] [client 179.57.43.170:50544] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZmJoJ8euboi5C2kPdgAAACA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.006309 2026] [security2:error] [pid 992244:tid 992452] [client 168.100.149.169:56038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22880/bargainor/2308_deft.jsp"] [unique_id "alQvZ2JoJ8euboi5C2kPfAAAAE0"] [Sun Jul 12 18:20:55.082936 2026] [security2:error] [pid 992244:tid 992467] [client 92.96.74.233:46158] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPfQAAAFw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.136830 2026] [security2:error] [pid 992244:tid 992464] [client 45.165.90.112:20540] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPgAAAAFk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.158444 2026] [security2:error] [pid 992244:tid 992490] [client 190.134.226.130:37996] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPgQAAAHM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.228581 2026] [security2:error] [pid 992244:tid 992487] [client 186.13.209.122:61765] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPggAAAHA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.281723 2026] [security2:error] [pid 992537:tid 992696] [client 196.207.218.28:28015] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2smDw50MNj9aAK0GQAAAZs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.286761 2026] [security2:error] [pid 992244:tid 992481] [client 105.12.1.242:10000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPgwAAAGo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.447205 2026] [security2:error] [pid 992244:tid 992406] [client 181.45.24.13:40583] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvZ2JoJ8euboi5C2kPhwAAAB8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:55.463444 2026] [security2:error] [pid 992537:tid 992746] [client 65.21.113.206:49368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQvZ2smDw50MNj9aAK0GgAAAc0"] [Sun Jul 12 18:20:55.594304 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:55.594811 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:55.957547 2026] [security2:error] [pid 992244:tid 992493] [client 65.21.113.206:33296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQvZ2JoJ8euboi5C2kPlQAAAHY"] [Sun Jul 12 18:20:56.122904 2026] [security2:error] [pid 992537:tid 992736] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWY5LTI2NjEzLWY5ZTM1LTMxMi05ZTM=.cgi"] [unique_id "alQvaGsmDw50MNj9aAK0HAAAAcM"] [Sun Jul 12 18:20:56.298243 2026] [security2:error] [pid 992244:tid 992408] [client 65.21.113.206:33296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQvaGJoJ8euboi5C2kPoAAAACE"] [Sun Jul 12 18:20:56.379207 2026] [authz_core:error] [pid 992244:tid 992470] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:56.379816 2026] [authz_core:error] [pid 992244:tid 992470] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:56.405559 2026] [security2:error] [pid 992244:tid 992395] [client 105.116.11.157:22339] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvaGJoJ8euboi5C2kPowAAABQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:56.572408 2026] [security2:error] [pid 992537:tid 992707] [client 47.82.124.212:52804] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQvaGsmDw50MNj9aAK0IgAAAaY"] [Sun Jul 12 18:20:57.007232 2026] [security2:error] [pid 992537:tid 992705] [client 2.50.71.142:49168] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvaGsmDw50MNj9aAK0JwAAAaQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:20:57.060595 2026] [security2:error] [pid 992537:tid 992698] [client 51.39.129.65:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvaGsmDw50MNj9aAK0IQAAAZ0"] [Sun Jul 12 18:20:57.084483 2026] [security2:error] [pid 992537:tid 992733] [client 168.100.149.57:64920] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/22945/bargainor/2308_did.jsp"] [unique_id "alQvaWsmDw50MNj9aAK0KAAAAcA"] [Sun Jul 12 18:20:57.126813 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:57.127309 2026] [authz_core:error] [pid 992244:tid 992410] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:57.305879 2026] [security2:error] [pid 992537:tid 992777] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvaGsmDw50MNj9aAK0JAAAAew"] [Sun Jul 12 18:20:57.305930 2026] [security2:error] [pid 992537:tid 992777] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvaGsmDw50MNj9aAK0JAAAAew"] [Sun Jul 12 18:20:57.307386 2026] [security2:error] [pid 992244:tid 992478] [client 65.21.113.206:33306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWY5LTI2NjEzLWY5ZTM1LTMxMi05ZTM=.cgi"] [unique_id "alQvaGJoJ8euboi5C2kPrQAAAGc"] [Sun Jul 12 18:20:57.331287 2026] [security2:error] [pid 992244:tid 992501] [client 18.204.194.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "airqsd.com"] [uri "/index.php"] [unique_id "alQvZmJoJ8euboi5C2kPcAAAAH4"] [Sun Jul 12 18:20:57.881615 2026] [security2:error] [pid 992537:tid 992691] [client 65.21.113.253:41832] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/robots.txt"] [unique_id "alQvaWsmDw50MNj9aAK0OgAAAZY"] [Sun Jul 12 18:20:57.891497 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:57.892044 2026] [authz_core:error] [pid 992537:tid 992765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:58.665185 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:58.665691 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:58.994019 2026] [security2:error] [pid 992244:tid 992486] [client 168.100.149.159:43842] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23010/bargainor/2308_delphian.jsp"] [unique_id "alQvamJoJ8euboi5C2kP0QAAAG8"] [Sun Jul 12 18:20:59.419804 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:20:59.420281 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:20:59.450921 2026] [security2:error] [pid 992537:tid 992803] [client 216.244.66.229:48928] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.stephenspublishing.com"] [uri "/heimlich-pocket-guide-p-444.html"] [unique_id "alQva2smDw50MNj9aAK0TAAAAgY"] [Sun Jul 12 18:20:59.451155 2026] [security2:error] [pid 992537:tid 992803] [client 216.244.66.229:48928] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.stephenspublishing.com"] [uri "/heimlich-pocket-guide-p-444.html"] [unique_id "alQva2smDw50MNj9aAK0TAAAAgY"] [Sun Jul 12 18:21:00.155633 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:00.156181 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:00.338510 2026] [security2:error] [pid 992244:tid 992408] [client 12.148.221.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQva2JoJ8euboi5C2kP1wAAACE"] [Sun Jul 12 18:21:00.672974 2026] [security2:error] [pid 992537:tid 992808] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWZkLzIyMjM1L2ZkLzg0NS9kMGQ=.asp"] [unique_id "alQvbGsmDw50MNj9aAK0XQAAAgs"] [Sun Jul 12 18:21:00.906695 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:00.907186 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:01.012603 2026] [security2:error] [pid 992244:tid 992474] [client 18.204.194.36:46556] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.airqsd.com"] [uri "/index.php"] [unique_id "alQvbGJoJ8euboi5C2kP9AAAYzg"], referer: https://www.airqsd.com/ [Sun Jul 12 18:21:01.051450 2026] [security2:error] [pid 992537:tid 992793] [client 168.100.149.205:18342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23075/bargainor/2308_anisodactyli.jsp"] [unique_id "alQvbWsmDw50MNj9aAK0YwAAAfw"] [Sun Jul 12 18:21:01.211468 2026] [security2:error] [pid 992537:tid 992604] [remote 12.148.221.72:56428] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQva2smDw50MNj9aAK0SQAB9jE"] [Sun Jul 12 18:21:01.213829 2026] [security2:error] [pid 992537:tid 992579] [remote 12.148.221.72:56428] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "pug-love-crochet.com"] [uri "/index.php"] [unique_id "alQva2smDw50MNj9aAK0SAAB9hs"] [Sun Jul 12 18:21:01.655794 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:01.656274 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:01.675105 2026] [security2:error] [pid 992537:tid 992749] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvbWsmDw50MNj9aAK0ZQAAAdA"] [Sun Jul 12 18:21:01.675156 2026] [security2:error] [pid 992537:tid 992749] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvbWsmDw50MNj9aAK0ZQAAAdA"] [Sun Jul 12 18:21:01.676138 2026] [security2:error] [pid 992537:tid 992706] [client 65.21.113.206:33320] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWZkLzIyMjM1L2ZkLzg0NS9kMGQ=.asp"] [unique_id "alQvbWsmDw50MNj9aAK0ZAAAAaU"] [Sun Jul 12 18:21:01.702295 2026] [security2:error] [pid 992537:tid 992777] [client 125.167.21.72:62190] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvbWsmDw50MNj9aAK0bwAAAew"] [Sun Jul 12 18:21:01.702508 2026] [security2:error] [pid 992537:tid 992777] [client 125.167.21.72:62190] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvbWsmDw50MNj9aAK0bwAAAew"] [Sun Jul 12 18:21:01.884071 2026] [security2:error] [pid 992537:tid 992615] [remote 68.183.22.192:35258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.22.183.68.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "lizatterbury.com"] [uri "/wp-login.php"] [unique_id "alQvbWsmDw50MNj9aAK0cwABrDw"] [Sun Jul 12 18:21:01.891869 2026] [security2:error] [pid 992244:tid 992428] [client 169.224.32.157:23700] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvbWJoJ8euboi5C2kQBAAAADU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:02.275014 2026] [security2:error] [pid 992244:tid 992401] [client 69.89.28.191:31460] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQvbmJoJ8euboi5C2kQDgAAABo"] [Sun Jul 12 18:21:02.432440 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:02.432963 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:03.015830 2026] [security2:error] [pid 992244:tid 992411] [client 168.100.149.90:16100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23140/bargainor/2308_birefraction.jsp"] [unique_id "alQvb2JoJ8euboi5C2kQIwAAACQ"] [Sun Jul 12 18:21:03.212873 2026] [authz_core:error] [pid 992537:tid 992735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:03.213356 2026] [authz_core:error] [pid 992537:tid 992735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:03.952808 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:03.953297 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:04.058437 2026] [security2:error] [pid 992244:tid 992286] [remote 57.141.18.69:42067] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/5k1"] [unique_id "alQvcGJoJ8euboi5C2kQPgAAfig"] [Sun Jul 12 18:21:04.192861 2026] [security2:error] [pid 992244:tid 992389] [client 24.203.79.110:60671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvcGJoJ8euboi5C2kQQgAAAA4"] [Sun Jul 12 18:21:04.200296 2026] [security2:error] [pid 992244:tid 992389] [client 24.203.79.110:60671] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvcGJoJ8euboi5C2kQQgAAAA4"] [Sun Jul 12 18:21:04.366418 2026] [security2:error] [pid 992244:tid 992383] [client 168.100.149.236:52468] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23205/bargainor/2308_mediator.jsp"] [unique_id "alQvcGJoJ8euboi5C2kQRwAAAAg"] [Sun Jul 12 18:21:04.708342 2026] [authz_core:error] [pid 992537:tid 992718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:04.708863 2026] [authz_core:error] [pid 992537:tid 992718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:05.003203 2026] [security2:error] [pid 992537:tid 992697] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWZkMHh5bV80MTcvZmQvMzExMDEvZA==.html"] [unique_id "alQvcWsmDw50MNj9aAK0hwAAAZw"] [Sun Jul 12 18:21:05.227603 2026] [security2:error] [pid 992244:tid 992375] [client 86.158.56.180:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvcGJoJ8euboi5C2kQTwAAAAA"] [Sun Jul 12 18:21:05.442194 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:05.442760 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:05.927513 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvcWJoJ8euboi5C2kQZAAAAGE"] [Sun Jul 12 18:21:05.927566 2026] [security2:error] [pid 992244:tid 992472] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvcWJoJ8euboi5C2kQZAAAAGE"] [Sun Jul 12 18:21:05.931100 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:43216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWZkMHh5bV80MTcvZmQvMzExMDEvZA==.html"] [unique_id "alQvcWsmDw50MNj9aAK0iAAAAaA"] [Sun Jul 12 18:21:06.231147 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:06.231698 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:06.445282 2026] [authz_core:error] [pid 992537:tid 992753] [client 66.132.195.42:42242] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:21:06.951994 2026] [security2:error] [pid 992537:tid 992619] [remote 57.141.18.119:56942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 119.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/JIl517RWZ6WhIz"] [unique_id "alQvcmsmDw50MNj9aAK0oAABmkA"] [Sun Jul 12 18:21:07.010582 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:07.011163 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:07.026149 2026] [security2:error] [pid 992537:tid 992794] [client 168.100.149.78:45548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23270/bargainor/2308_gurian.jsp"] [unique_id "alQvc2smDw50MNj9aAK0oQAAAf0"] [Sun Jul 12 18:21:07.239247 2026] [security2:error] [pid 992244:tid 992402] [client 31.173.85.212:4615] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "160"] [id "900408"] [msg "register POST logging"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQvcWJoJ8euboi5C2kQWAAAABs"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:21:07.239362 2026] [security2:error] [pid 992244:tid 992402] [client 31.173.85.212:4615] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-login.php"] [unique_id "alQvcWJoJ8euboi5C2kQWAAAABs"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:21:07.295559 2026] [security2:error] [pid 992537:tid 992767] [client 57.141.18.119:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvcmsmDw50MNj9aAK0mAAAAeI"] [Sun Jul 12 18:21:07.753533 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:07.754038 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:08.532935 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:08.533432 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:08.635344 2026] [security2:error] [pid 992244:tid 992475] [client 31.173.85.212:26436] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "mackinstyle.com"] [uri "/wp-admin/admin.php"] [unique_id "alQvdGJoJ8euboi5C2kQkwAAAGQ"], referer: https://mackinstyle.com/wp-login.php?action=register [Sun Jul 12 18:21:08.792310 2026] [security2:error] [pid 992244:tid 992433] [client 57.141.18.119:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvdGJoJ8euboi5C2kQmQAAADo"] [Sun Jul 12 18:21:09.003527 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.229:49180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23335/bargainor/2308_monkey.jsp"] [unique_id "alQvdGJoJ8euboi5C2kQoQAAAHE"] [Sun Jul 12 18:21:09.267586 2026] [authz_core:error] [pid 992537:tid 992800] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:09.268093 2026] [authz_core:error] [pid 992537:tid 992800] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:09.735080 2026] [security2:error] [pid 992537:tid 992718] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWZuaTVoNV8xNTg3L2ZuLzI5MDAxL24=.html"] [unique_id "alQvdWsmDw50MNj9aAK0vAAAAbE"] [Sun Jul 12 18:21:10.002560 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:10.003082 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:10.130838 2026] [security2:error] [pid 992244:tid 992357] [remote 57.141.18.9:47454] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 9.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/YS68sN4eWIHOWUfRU2ACmFsD1l8"] [unique_id "alQvdmJoJ8euboi5C2kQuAAAN28"] [Sun Jul 12 18:21:10.141910 2026] [security2:error] [pid 992244:tid 992477] [client 202.76.143.62:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvdWJoJ8euboi5C2kQqgAAAGY"] [Sun Jul 12 18:21:10.319802 2026] [security2:error] [pid 992244:tid 992462] [client 18.204.194.36:38738] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.airqsd.com"] [uri "/index.php"] [unique_id "alQvdmJoJ8euboi5C2kQvQAAAFc"] [Sun Jul 12 18:21:10.711565 2026] [security2:error] [pid 992244:tid 992434] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvdmJoJ8euboi5C2kQxQAAADs"] [Sun Jul 12 18:21:10.711615 2026] [security2:error] [pid 992244:tid 992434] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvdmJoJ8euboi5C2kQxQAAADs"] [Sun Jul 12 18:21:10.712838 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:43226] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWZuaTVoNV8xNTg3L2ZuLzI5MDAxL24=.html"] [unique_id "alQvdmJoJ8euboi5C2kQxAAAAE0"] [Sun Jul 12 18:21:10.752513 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:10.753034 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:11.052061 2026] [security2:error] [pid 992244:tid 992469] [client 168.100.149.73:28562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23400/bargainor/2308_impeccance.jsp"] [unique_id "alQvd2JoJ8euboi5C2kQ2gAAAF4"] [Sun Jul 12 18:21:11.537053 2026] [authz_core:error] [pid 992537:tid 992753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:11.570006 2026] [authz_core:error] [pid 992537:tid 992753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:11.599130 2026] [proxy:error] [pid 992244:tid 992497] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:11.599425 2026] [proxy_http:error] [pid 992244:tid 992497] [client 74.7.244.38:47038] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:11.603984 2026] [proxy:error] [pid 992244:tid 992497] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:11.604266 2026] [proxy_http:error] [pid 992244:tid 992497] [client 74.7.244.38:47038] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:11.604593 2026] [security2:error] [pid 992244:tid 992497] [client 74.7.244.38:47038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.goodlawapp.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQvd2JoJ8euboi5C2kQ9AAAAHo"] [Sun Jul 12 18:21:11.642197 2026] [security2:error] [pid 992537:tid 992709] [client 185.100.87.136:47384] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQvd2smDw50MNj9aAK02AAAAag"] [Sun Jul 12 18:21:11.793735 2026] [proxy:error] [pid 992244:tid 992279] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:11.793884 2026] [proxy_http:error] [pid 992244:tid 992279] [remote 74.7.244.38:37370] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:11.795901 2026] [proxy:error] [pid 992244:tid 992279] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:11.796082 2026] [proxy_http:error] [pid 992244:tid 992279] [remote 74.7.244.38:37370] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:12.244785 2026] [security2:error] [pid 992537:tid 992727] [client 125.167.21.72:62640] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQveGsmDw50MNj9aAK04QAAAbo"] [Sun Jul 12 18:21:12.245057 2026] [security2:error] [pid 992537:tid 992727] [client 125.167.21.72:62640] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQveGsmDw50MNj9aAK04QAAAbo"] [Sun Jul 12 18:21:12.369683 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:12.370172 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:12.875689 2026] [security2:error] [pid 992537:tid 992721] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWc3LTE3NTY5LWc3emJqLTM0ODAtN3pi.cgi"] [unique_id "alQveGsmDw50MNj9aAK07QAAAbQ"] [Sun Jul 12 18:21:12.903241 2026] [security2:error] [pid 992244:tid 992256] [remote 57.141.18.24:29176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 24.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/eyUtrIoQUpfmeF"] [unique_id "alQveGJoJ8euboi5C2kREAAAdwo"] [Sun Jul 12 18:21:13.058085 2026] [security2:error] [pid 992244:tid 992433] [client 168.100.149.142:22564] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23465/bargainor/2308_gunz.jsp"] [unique_id "alQveWJoJ8euboi5C2kRHwAAADo"] [Sun Jul 12 18:21:13.143724 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:13.144204 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:13.789477 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQveWJoJ8euboi5C2kRJwAAADg"] [Sun Jul 12 18:21:13.789543 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQveWJoJ8euboi5C2kRJwAAADg"] [Sun Jul 12 18:21:13.792509 2026] [security2:error] [pid 992244:tid 992411] [client 65.21.113.206:56116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWc3LTE3NTY5LWc3emJqLTM0ODAtN3pi.cgi"] [unique_id "alQveWJoJ8euboi5C2kRJQAAACQ"] [Sun Jul 12 18:21:13.799208 2026] [security2:error] [pid 992244:tid 992498] [client 72.78.54.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQveGJoJ8euboi5C2kRBAAAAHs"], referer: https://extonregionchamber.com/ [Sun Jul 12 18:21:13.913077 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:13.913605 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:14.669168 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:14.669682 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:14.777033 2026] [security2:error] [pid 992537:tid 992697] [client 24.203.79.110:61189] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvemsmDw50MNj9aAK1AAAAAZw"] [Sun Jul 12 18:21:14.777259 2026] [security2:error] [pid 992537:tid 992697] [client 24.203.79.110:61189] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvemsmDw50MNj9aAK1AAAAAZw"] [Sun Jul 12 18:21:14.900690 2026] [security2:error] [pid 992537:tid 992759] [client 184.154.76.56:50996] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQvemsmDw50MNj9aAK0_gAAAdo"] [Sun Jul 12 18:21:14.900766 2026] [security2:error] [pid 992537:tid 992759] [client 184.154.76.56:50996] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQvemsmDw50MNj9aAK0_gAAAdo"] [Sun Jul 12 18:21:15.054441 2026] [security2:error] [pid 992244:tid 992390] [client 168.100.149.44:56954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23530/bargainor/2308_monadically.jsp"] [unique_id "alQve2JoJ8euboi5C2kReQAAAA8"] [Sun Jul 12 18:21:15.418943 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:15.419445 2026] [authz_core:error] [pid 992244:tid 992375] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:15.972519 2026] [security2:error] [pid 992244:tid 992329] [remote 47.86.33.52:58770] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.33.86.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thepinkbridge.com"] [uri "/wp-login.php"] [unique_id "alQve2JoJ8euboi5C2kRkgAAQFM"] [Sun Jul 12 18:21:16.180215 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:16.180747 2026] [authz_core:error] [pid 992244:tid 992429] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:16.836573 2026] [security2:error] [pid 992537:tid 992726] [client 184.154.76.56:51002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.154.184.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/wp-comments-post.php"] [unique_id "alQvfGsmDw50MNj9aAK1BAAAAbk"] [Sun Jul 12 18:21:16.836890 2026] [security2:error] [pid 992537:tid 992726] [client 184.154.76.56:51002] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "newjetnet.com"] [uri "/wp-comments-post.php"] [unique_id "alQvfGsmDw50MNj9aAK1BAAAAbk"] [Sun Jul 12 18:21:16.951604 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:16.952168 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:17.055302 2026] [security2:error] [pid 992537:tid 992705] [client 168.100.149.1:15086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23595/bargainor/2308_enhalo.jsp"] [unique_id "alQvfWsmDw50MNj9aAK1CAAAAaQ"] [Sun Jul 12 18:21:17.098031 2026] [security2:error] [pid 992537:tid 992736] [client 65.21.113.206:49356] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWctNDMwMy9nbXgvMTg2MDktbXhmcA=="] [unique_id "alQvfWsmDw50MNj9aAK1CQAAAcM"] [Sun Jul 12 18:21:17.768270 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:17.769528 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:17.875237 2026] [core:error] [pid 992244:tid 992324] [remote 134.209.209.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:17.875295 2026] [core:error] [pid 992244:tid 992324] [remote 134.209.209.138:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:18.025753 2026] [security2:error] [pid 992244:tid 992432] [client 65.21.113.206:56126] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWctNDMwMy9nbXgvMTg2MDktbXhmcA=="] [unique_id "alQvfWJoJ8euboi5C2kRrAAAADk"] [Sun Jul 12 18:21:18.025935 2026] [security2:error] [pid 992244:tid 992437] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvfWJoJ8euboi5C2kRrgAAAD4"] [Sun Jul 12 18:21:18.025971 2026] [security2:error] [pid 992244:tid 992437] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvfWJoJ8euboi5C2kRrgAAAD4"] [Sun Jul 12 18:21:18.377323 2026] [security2:error] [pid 992244:tid 992412] [client 168.100.149.187:40440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23660/bargainor/2308_metalogical.jsp"] [unique_id "alQvfmJoJ8euboi5C2kRwgAAACU"] [Sun Jul 12 18:21:18.498546 2026] [core:error] [pid 992537:tid 992714] [client 195.96.139.161:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:18.498584 2026] [core:error] [pid 992537:tid 992714] [client 195.96.139.161:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:18.554328 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:18.554831 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:19.326752 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:19.327278 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:19.388048 2026] [security2:error] [pid 992537:tid 992771] [client 40.223.169.178:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvf2smDw50MNj9aAK1HgAAAeY"] [Sun Jul 12 18:21:19.971527 2026] [security2:error] [pid 992244:tid 992498] [client 184.154.76.56:51016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.154.184.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvf2JoJ8euboi5C2kR_gAAAHs"] [Sun Jul 12 18:21:19.971795 2026] [security2:error] [pid 992244:tid 992498] [client 184.154.76.56:51016] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvf2JoJ8euboi5C2kR_gAAAHs"] [Sun Jul 12 18:21:20.106894 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:20.107372 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:20.544139 2026] [core:error] [pid 992244:tid 992416] [client 65.49.1.83:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:20.544177 2026] [core:error] [pid 992244:tid 992416] [client 65.49.1.83:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:20.850382 2026] [authz_core:error] [pid 992244:tid 992449] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:20.850889 2026] [authz_core:error] [pid 992244:tid 992449] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:21.066040 2026] [security2:error] [pid 992537:tid 992719] [client 168.100.149.7:37472] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23725/bargainor/2308_psychoreflex.jsp"] [unique_id "alQvgWsmDw50MNj9aAK1LwAAAbI"] [Sun Jul 12 18:21:21.636592 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:21.637126 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:22.418658 2026] [authz_core:error] [pid 992244:tid 992455] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:22.419213 2026] [authz_core:error] [pid 992244:tid 992455] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:22.742730 2026] [security2:error] [pid 992244:tid 992395] [client 125.167.21.72:63105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvgmJoJ8euboi5C2kSUAAAABQ"] [Sun Jul 12 18:21:22.743008 2026] [security2:error] [pid 992244:tid 992395] [client 125.167.21.72:63105] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvgmJoJ8euboi5C2kSUAAAABQ"] [Sun Jul 12 18:21:23.003975 2026] [security2:error] [pid 992244:tid 992469] [client 168.100.149.215:34100] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23790/bargainor/2308_mailable.jsp"] [unique_id "alQvg2JoJ8euboi5C2kSWQAAAF4"] [Sun Jul 12 18:21:23.245135 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:23.245685 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:23.407641 2026] [security2:error] [pid 992537:tid 992742] [client 181.67.205.89:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvgmsmDw50MNj9aAK1RAAAAck"] [Sun Jul 12 18:21:23.431193 2026] [security2:error] [pid 992537:tid 992698] [client 65.21.113.206:39686] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWctNTg1My9ncmovMjQ5MDktcmp3eg=="] [unique_id "alQvg2smDw50MNj9aAK1TQAAAZ0"] [Sun Jul 12 18:21:24.053044 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:24.053589 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:24.127441 2026] [security2:error] [pid 992244:tid 992387] [client 72.78.54.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.pacareerlinkchesco.org"] [uri "/index.php"] [unique_id "alQvg2JoJ8euboi5C2kSewAAAAw"], referer: https://extonregionchamber.com/ [Sun Jul 12 18:21:24.562682 2026] [security2:error] [pid 992244:tid 992415] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvg2JoJ8euboi5C2kSdgAAACg"] [Sun Jul 12 18:21:24.562743 2026] [security2:error] [pid 992244:tid 992415] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvg2JoJ8euboi5C2kSdgAAACg"] [Sun Jul 12 18:21:24.563817 2026] [security2:error] [pid 992244:tid 992478] [client 65.21.113.206:51364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWctNTg1My9ncmovMjQ5MDktcmp3eg=="] [unique_id "alQvg2JoJ8euboi5C2kScgAAAGc"] [Sun Jul 12 18:21:24.895946 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:24.896545 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:25.008715 2026] [security2:error] [pid 992244:tid 992418] [client 168.100.149.40:25212] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23855/bargainor/2308_epidemiology.jsp"] [unique_id "alQvhWJoJ8euboi5C2kSrAAAACs"] [Sun Jul 12 18:21:25.153946 2026] [security2:error] [pid 992244:tid 992345] [remote 98.70.32.248:38662] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQvhWJoJ8euboi5C2kSrQAAaGM"] [Sun Jul 12 18:21:25.426988 2026] [security2:error] [pid 992244:tid 992487] [client 24.203.79.110:61703] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvhWJoJ8euboi5C2kSrwAAAHA"] [Sun Jul 12 18:21:25.427213 2026] [security2:error] [pid 992244:tid 992487] [client 24.203.79.110:61703] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvhWJoJ8euboi5C2kSrwAAAHA"] [Sun Jul 12 18:21:25.709810 2026] [authz_core:error] [pid 992244:tid 992486] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:25.710327 2026] [authz_core:error] [pid 992244:tid 992486] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:26.231353 2026] [security2:error] [pid 992537:tid 992786] [client 184.154.76.56:51728] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "newjetnet.com"] [uri "/wp-content/themes/accent/js/navigation.js"] [unique_id "alQvhmsmDw50MNj9aAK1ZAAAAfU"] [Sun Jul 12 18:21:26.511864 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:26.512355 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:27.091684 2026] [security2:error] [pid 992244:tid 992451] [client 168.100.149.209:19684] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23920/bargainor/2308_secque.jsp"] [unique_id "alQvh2JoJ8euboi5C2kS3QAAAEw"] [Sun Jul 12 18:21:27.331816 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:27.332501 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:27.991512 2026] [security2:error] [pid 992244:tid 992311] [remote 140.206.235.59:45222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.235.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.acedev.net"] [uri "/forumdisplay.php"] [unique_id "alQvh2JoJ8euboi5C2kS5wAANUE"] [Sun Jul 12 18:21:28.133108 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:28.133608 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:28.393506 2026] [security2:error] [pid 992537:tid 992789] [client 65.21.113.206:39686] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWctODk5L2dyai8yNDkwOS1yand6"] [unique_id "alQviGsmDw50MNj9aAK1ggAAAfg"] [Sun Jul 12 18:21:28.937687 2026] [authz_core:error] [pid 992537:tid 992759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:28.938278 2026] [authz_core:error] [pid 992537:tid 992759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:29.067637 2026] [security2:error] [pid 992244:tid 992474] [client 168.100.149.10:35718] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/23985/bargainor/2308_dislevelment.jsp"] [unique_id "alQviWJoJ8euboi5C2kS_QAAAGM"] [Sun Jul 12 18:21:29.071684 2026] [cgid:error] [pid 992244:tid 992407] [client 184.105.247.194:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/seantari/public_html/404.shtml [Sun Jul 12 18:21:29.352535 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQviGJoJ8euboi5C2kS-QAAAE0"] [Sun Jul 12 18:21:29.352586 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQviGJoJ8euboi5C2kS-QAAAE0"] [Sun Jul 12 18:21:29.359082 2026] [security2:error] [pid 992244:tid 992378] [client 65.21.113.206:51380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWctODk5L2dyai8yNDkwOS1yand6"] [unique_id "alQviGJoJ8euboi5C2kS9wAAAAM"] [Sun Jul 12 18:21:29.443275 2026] [security2:error] [pid 992244:tid 992437] [client 121.229.156.29:42860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/job-openings/index.html"] [unique_id "alQviWJoJ8euboi5C2kTDAAAAD4"] [Sun Jul 12 18:21:29.443469 2026] [security2:error] [pid 992244:tid 992437] [client 121.229.156.29:42860] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/job-openings/index.html"] [unique_id "alQviWJoJ8euboi5C2kTDAAAAD4"] [Sun Jul 12 18:21:29.647410 2026] [security2:error] [pid 992244:tid 992312] [remote 140.206.235.59:45228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.235.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQviWJoJ8euboi5C2kTFQAAT0I"], referer: https://www.cidclan.acedev.net/ [Sun Jul 12 18:21:29.677746 2026] [authz_core:error] [pid 992244:tid 992456] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:29.678365 2026] [authz_core:error] [pid 992244:tid 992456] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:29.858687 2026] [security2:error] [pid 992244:tid 992432] [client 184.154.76.56:51758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 56.76.154.184.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/wp-login.php"] [unique_id "alQviWJoJ8euboi5C2kTGAAAADk"] [Sun Jul 12 18:21:29.858933 2026] [security2:error] [pid 992244:tid 992432] [client 184.154.76.56:51758] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "newjetnet.com"] [uri "/wp-login.php"] [unique_id "alQviWJoJ8euboi5C2kTGAAAADk"] [Sun Jul 12 18:21:29.918640 2026] [security2:error] [pid 992244:tid 992269] [remote 140.206.235.59:45228] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 59.235.206.140.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQviWJoJ8euboi5C2kTGgAAUxc"], referer: https://www.cidclan.net/discord/gamer/gamer.php [Sun Jul 12 18:21:30.520173 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:30.520735 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:30.584144 2026] [core:error] [pid 992244:tid 992465] [client 13.140.136.17:55080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:30.584218 2026] [core:error] [pid 992244:tid 992465] [client 13.140.136.17:55080] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:30.666615 2026] [security2:error] [pid 992244:tid 992482] [client 184.154.76.56:43816] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatchFromFile sitelock.txt" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "398"] [id "900247"] [msg "Wordpress Plugin README.txt file access attempt"] [hostname "newjetnet.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/readme.txt"] [unique_id "alQvimJoJ8euboi5C2kTMAAAAGs"] [Sun Jul 12 18:21:30.666920 2026] [security2:error] [pid 992244:tid 992482] [client 184.154.76.56:43816] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "newjetnet.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/readme.txt"] [unique_id "alQvimJoJ8euboi5C2kTMAAAAGs"] [Sun Jul 12 18:21:31.091614 2026] [security2:error] [pid 992537:tid 992711] [client 168.100.149.197:22050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24050/bargainor/2308_limnoria.jsp"] [unique_id "alQvi2smDw50MNj9aAK1oAAAAao"] [Sun Jul 12 18:21:31.301842 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:31.302337 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:31.314560 2026] [security2:error] [pid 992244:tid 992381] [client 112.86.225.184:44684] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/contact-us-nwuav.html"] [unique_id "alQvi2JoJ8euboi5C2kTRQAAAAY"] [Sun Jul 12 18:21:31.314918 2026] [security2:error] [pid 992244:tid 992381] [client 112.86.225.184:44684] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/contact-us-nwuav.html"] [unique_id "alQvi2JoJ8euboi5C2kTRQAAAAY"] [Sun Jul 12 18:21:31.449133 2026] [security2:error] [pid 992244:tid 992478] [client 38.66.206.14:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvimJoJ8euboi5C2kTQAAAAGc"] [Sun Jul 12 18:21:31.958190 2026] [security2:error] [pid 992244:tid 992329] [remote 45.55.65.84:46570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 84.65.55.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQvi2JoJ8euboi5C2kTVgAAVlM"] [Sun Jul 12 18:21:32.089793 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:32.090310 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:32.433056 2026] [security2:error] [pid 992244:tid 992456] [client 216.73.160.182:62965] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 182.160.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQvjGJoJ8euboi5C2kTYAAAAFE"] [Sun Jul 12 18:21:32.438045 2026] [security2:error] [pid 992244:tid 992433] [client 20.210.108.71:50307] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQvjGJoJ8euboi5C2kTXgAAADo"], referer: binance.com [Sun Jul 12 18:21:32.866145 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:32.866776 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:32.951507 2026] [security2:error] [pid 992244:tid 992449] [client 216.73.160.25:38949] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.160.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQvjGJoJ8euboi5C2kTaQAAAEo"], referer: https://t.co/ [Sun Jul 12 18:21:33.038063 2026] [security2:error] [pid 992537:tid 992720] [client 168.100.149.238:35016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24115/bargainor/2308_milksopism.jsp"] [unique_id "alQvjWsmDw50MNj9aAK1sgAAAbM"] [Sun Jul 12 18:21:33.240808 2026] [core:error] [pid 992244:tid 992496] [client 83.97.78.224:54294] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:21:33.268409 2026] [security2:error] [pid 992537:tid 992758] [client 125.167.21.72:61591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvjWsmDw50MNj9aAK1swAAAdk"] [Sun Jul 12 18:21:33.268697 2026] [security2:error] [pid 992537:tid 992758] [client 125.167.21.72:61591] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvjWsmDw50MNj9aAK1swAAAdk"] [Sun Jul 12 18:21:33.351115 2026] [authz_core:error] [pid 992244:tid 992486] [client 66.132.195.42:54876] AH01630: client denied by server configuration: /home1/geekidea/public_html/error_log [Sun Jul 12 18:21:33.393407 2026] [security2:error] [pid 992244:tid 992445] [client 35.245.146.49:51448] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "learningindia.in"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQvjWJoJ8euboi5C2kThQAAAEY"] [Sun Jul 12 18:21:33.503387 2026] [security2:error] [pid 992537:tid 992707] [client 18.204.194.36:39216] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.airqsd.com"] [uri "/index.php"] [unique_id "alQvjWsmDw50MNj9aAK1tQAAAaY"] [Sun Jul 12 18:21:33.654147 2026] [security2:error] [pid 992537:tid 992736] [client 35.245.146.49:62500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.146.245.35.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/xmlrpc.php"] [unique_id "alQvjWsmDw50MNj9aAK1vwAAAcM"] [Sun Jul 12 18:21:33.654590 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:33.700965 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:34.018205 2026] [cgid:error] [pid 992537:tid 992789] [client 202.46.62.77:59397] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/emergency-phone-labels-stock-p-688.html?osCsid=tk3jb76l3pofsaajd41dd1kev5 [Sun Jul 12 18:21:34.455493 2026] [authz_core:error] [pid 992244:tid 992394] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:34.456024 2026] [authz_core:error] [pid 992244:tid 992394] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:35.070056 2026] [security2:error] [pid 992537:tid 992688] [client 168.100.149.111:34370] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24180/bargainor/2308_capnoides.jsp"] [unique_id "alQvj2smDw50MNj9aAK1ywAAAZM"] [Sun Jul 12 18:21:35.200484 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:35.201006 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:35.969458 2026] [authz_core:error] [pid 992244:tid 992448] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:35.969975 2026] [authz_core:error] [pid 992244:tid 992448] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:36.059926 2026] [security2:error] [pid 992244:tid 992493] [client 24.203.79.110:62219] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvkGJoJ8euboi5C2kTzQAAAHY"] [Sun Jul 12 18:21:36.066392 2026] [security2:error] [pid 992244:tid 992493] [client 24.203.79.110:62219] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvkGJoJ8euboi5C2kTzQAAAHY"] [Sun Jul 12 18:21:36.391452 2026] [security2:error] [pid 992244:tid 992425] [client 168.100.149.123:48038] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24245/bargainor/2308_deft.jsp"] [unique_id "alQvkGJoJ8euboi5C2kTzwAAADI"] [Sun Jul 12 18:21:36.744779 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:36.745257 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:36.875715 2026] [security2:error] [pid 992244:tid 992393] [client 35.245.146.49:57701] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQvkGJoJ8euboi5C2kT0wAAABI"] [Sun Jul 12 18:21:36.929486 2026] [security2:error] [pid 992244:tid 992453] [client 35.245.146.49:57701] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.146.245.35.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/xmlrpc.php"] [unique_id "alQvkGJoJ8euboi5C2kT2AAAAE4"] [Sun Jul 12 18:21:36.929765 2026] [security2:error] [pid 992244:tid 992453] [client 35.245.146.49:57701] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "learningindia.in"] [uri "/xmlrpc.php"] [unique_id "alQvkGJoJ8euboi5C2kT2AAAAE4"] [Sun Jul 12 18:21:37.185734 2026] [security2:error] [pid 992244:tid 992428] [client 35.245.146.49:55183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 49.146.245.35.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/xmlrpc.php"] [unique_id "alQvkWJoJ8euboi5C2kT4AAAADU"] [Sun Jul 12 18:21:37.185959 2026] [security2:error] [pid 992244:tid 992428] [client 35.245.146.49:55183] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "learningindia.in"] [uri "/xmlrpc.php"] [unique_id "alQvkWJoJ8euboi5C2kT4AAAADU"] [Sun Jul 12 18:21:37.246199 2026] [security2:error] [pid 992244:tid 992410] [client 65.21.113.253:36182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQvkWJoJ8euboi5C2kT4QAAACM"] [Sun Jul 12 18:21:37.554631 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:37.555215 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:37.751007 2026] [security2:error] [pid 992244:tid 992434] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQvkWJoJ8euboi5C2kT6wAAADs"] [Sun Jul 12 18:21:37.751891 2026] [security2:error] [pid 992244:tid 992437] [client 65.21.113.253:57450] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQvkWJoJ8euboi5C2kT6AAAAD4"] [Sun Jul 12 18:21:37.827285 2026] [security2:error] [pid 992244:tid 992478] [client 74.7.175.130:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.ygo-online-cards.de"] [uri "/robots.txt"] [unique_id "alQvkWJoJ8euboi5C2kT7wAAAGc"] [Sun Jul 12 18:21:37.828516 2026] [security2:error] [pid 992244:tid 992406] [client 74.7.175.130:51444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.ygo-online-cards.de"] [uri "/robots.txt"] [unique_id "alQvkWJoJ8euboi5C2kT7QAAH14"] [Sun Jul 12 18:21:38.074294 2026] [core:alert] [pid 992244:tid 992398] [client 185.247.137.191:48057] /home1/seedge/public_html/website_b46f6661/.htaccess: </IfModule> without matching <IfModule> section [Sun Jul 12 18:21:38.253235 2026] [security2:error] [pid 992537:tid 992770] [client 216.73.160.29:28621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 29.160.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQvkmsmDw50MNj9aAK18wAAAeU"], referer: https://duckduckgo.com/ [Sun Jul 12 18:21:38.318384 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:38.319016 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:38.428190 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.206:45154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdfMjIwOS9nY24vMzI4NzNfY24=.htm"] [unique_id "alQvkmJoJ8euboi5C2kT-wAAAFM"] [Sun Jul 12 18:21:39.035116 2026] [security2:error] [pid 992537:tid 992793] [client 168.100.149.59:52652] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24310/bargainor/2308_did.jsp"] [unique_id "alQvk2smDw50MNj9aAK2DwAAAfw"] [Sun Jul 12 18:21:39.092941 2026] [authz_core:error] [pid 992537:tid 992749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:39.093441 2026] [authz_core:error] [pid 992537:tid 992749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:39.481297 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvkmsmDw50MNj9aAK2CgAAAbY"] [Sun Jul 12 18:21:39.481380 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvkmsmDw50MNj9aAK2CgAAAbY"] [Sun Jul 12 18:21:39.482481 2026] [security2:error] [pid 992537:tid 992799] [client 65.21.113.206:52454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdfMjIwOS9nY24vMzI4NzNfY24=.htm"] [unique_id "alQvkmsmDw50MNj9aAK2BgAAAgI"] [Sun Jul 12 18:21:39.889023 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:39.889710 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:40.643251 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:40.643887 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:40.670517 2026] [security2:error] [pid 992244:tid 992449] [client 84.233.195.150:65360] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlGJoJ8euboi5C2kUKwAAAEo"] [Sun Jul 12 18:21:40.745314 2026] [security2:error] [pid 992244:tid 992496] [client 185.238.231.195:40747] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 195.231.238.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQvlGJoJ8euboi5C2kULwAAAHk"] [Sun Jul 12 18:21:40.781174 2026] [security2:error] [pid 992244:tid 992347] [remote 103.90.234.13:59108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.234.90.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "manitheuncanny.com"] [uri "/wp-login.php"] [unique_id "alQvlGJoJ8euboi5C2kUMAAATWU"] [Sun Jul 12 18:21:41.078272 2026] [security2:error] [pid 992537:tid 992685] [client 168.100.149.11:45422] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24375/bargainor/2308_delphian.jsp"] [unique_id "alQvlWsmDw50MNj9aAK2LQAAAZA"] [Sun Jul 12 18:21:41.108641 2026] [security2:error] [pid 992537:tid 992719] [client 84.233.195.157:55628] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlWsmDw50MNj9aAK2LgAAAbI"] [Sun Jul 12 18:21:41.295034 2026] [security2:error] [pid 992244:tid 992471] [client 190.200.11.201:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvlGJoJ8euboi5C2kULgAAAGA"] [Sun Jul 12 18:21:41.476301 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:41.476831 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:41.546847 2026] [security2:error] [pid 992244:tid 992459] [client 84.233.195.153:53944] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlWJoJ8euboi5C2kUPwAAAFQ"] [Sun Jul 12 18:21:41.740769 2026] [security2:error] [pid 992244:tid 992460] [client 69.171.249.6:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQvlGJoJ8euboi5C2kUNQAAAFU"] [Sun Jul 12 18:21:41.973714 2026] [security2:error] [pid 992537:tid 992753] [client 84.233.195.152:51930] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlWsmDw50MNj9aAK2PgAAAdQ"] [Sun Jul 12 18:21:42.269742 2026] [security2:error] [pid 992244:tid 992357] [remote 74.7.227.188:36070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQvlmJoJ8euboi5C2kUVQAAM28"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-fire-chief-patriotic-stock-p-1061.html?osCsid=kvi1d1au8n4giv56knm6n42f12 [Sun Jul 12 18:21:42.274839 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:42.275353 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:42.404364 2026] [security2:error] [pid 992244:tid 992444] [client 84.233.195.155:61298] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlmJoJ8euboi5C2kUWgAAAEU"] [Sun Jul 12 18:21:42.461356 2026] [security2:error] [pid 992244:tid 992464] [client 151.244.155.34:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvlWJoJ8euboi5C2kUSwAAAFk"] [Sun Jul 12 18:21:42.677729 2026] [security2:error] [pid 992537:tid 992805] [client 20.63.87.152:19065] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/.dj/index.php"] [unique_id "alQvlmsmDw50MNj9aAK2SAAAAgg"] [Sun Jul 12 18:21:42.737869 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:45154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdfNzQ4My9nNGMvMjQxNjVfNGM=.htm"] [unique_id "alQvlmJoJ8euboi5C2kUYAAAAA0"] [Sun Jul 12 18:21:42.760600 2026] [security2:error] [pid 992537:tid 992732] [client 65.49.1.108:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.195.79.79"] [uri "/index.php"] [unique_id "alQvkmsmDw50MNj9aAK2BAAAAb8"] [Sun Jul 12 18:21:42.814197 2026] [autoindex:error] [pid 992537:tid 992765] [client 66.132.224.84:0] AH01276: Cannot serve directory /home2/cecillin/public_html/api/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:21:42.840743 2026] [security2:error] [pid 992244:tid 992470] [client 84.233.195.160:60240] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "dawnpedersen.com"] [uri "/"] [unique_id "alQvlmJoJ8euboi5C2kUYwAAAF8"] [Sun Jul 12 18:21:43.105939 2026] [security2:error] [pid 992244:tid 992461] [client 168.100.149.160:23028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24440/bargainor/2308_anisodactyli.jsp"] [unique_id "alQvl2JoJ8euboi5C2kUaAAAAFY"] [Sun Jul 12 18:21:43.136650 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:43.137363 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:43.221159 2026] [security2:error] [pid 992244:tid 992458] [client 20.63.87.152:14871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/.trash7206/index.php"] [unique_id "alQvl2JoJ8euboi5C2kUagAAAFM"] [Sun Jul 12 18:21:43.666203 2026] [security2:error] [pid 992244:tid 992385] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvl2JoJ8euboi5C2kUbAAAAAo"] [Sun Jul 12 18:21:43.666260 2026] [security2:error] [pid 992244:tid 992385] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvl2JoJ8euboi5C2kUbAAAAAo"] [Sun Jul 12 18:21:43.667390 2026] [security2:error] [pid 992537:tid 992700] [client 65.21.113.206:37578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdfNzQ4My9nNGMvMjQxNjVfNGM=.htm"] [unique_id "alQvl2smDw50MNj9aAK2UgAAAZ8"] [Sun Jul 12 18:21:43.705076 2026] [security2:error] [pid 992537:tid 992802] [client 51.68.111.214:31475] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "undameta.com"] [uri "/robots.txt"] [unique_id "alQvl2smDw50MNj9aAK2VgAAAgU"] [Sun Jul 12 18:21:43.705397 2026] [security2:error] [pid 992537:tid 992802] [client 51.68.111.214:31475] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "undameta.com"] [uri "/robots.txt"] [unique_id "alQvl2smDw50MNj9aAK2VgAAAgU"] [Sun Jul 12 18:21:43.818493 2026] [security2:error] [pid 992244:tid 992499] [client 57.141.18.100:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvl2JoJ8euboi5C2kUdAAAAHw"] [Sun Jul 12 18:21:43.836836 2026] [security2:error] [pid 992244:tid 992486] [client 125.167.21.72:62057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvl2JoJ8euboi5C2kUewAAAG8"] [Sun Jul 12 18:21:43.837101 2026] [security2:error] [pid 992244:tid 992486] [client 125.167.21.72:62057] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvl2JoJ8euboi5C2kUewAAAG8"] [Sun Jul 12 18:21:43.932879 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:43.933365 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:44.001237 2026] [security2:error] [pid 992244:tid 992395] [client 20.63.87.152:5651] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQvl2JoJ8euboi5C2kUfwAAABQ"] [Sun Jul 12 18:21:44.194727 2026] [security2:error] [pid 992244:tid 992415] [client 20.63.87.152:7335] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQvmGJoJ8euboi5C2kUhQAAACg"] [Sun Jul 12 18:21:44.366932 2026] [security2:error] [pid 992244:tid 992426] [client 20.63.87.152:19022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQvmGJoJ8euboi5C2kUhwAAADM"] [Sun Jul 12 18:21:44.566189 2026] [security2:error] [pid 992244:tid 992378] [client 20.63.87.152:36720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/0.kb-v3.php"] [unique_id "alQvmGJoJ8euboi5C2kUjgAAAAM"] [Sun Jul 12 18:21:44.701796 2026] [authz_core:error] [pid 992244:tid 992475] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:44.702280 2026] [authz_core:error] [pid 992244:tid 992475] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:44.752582 2026] [security2:error] [pid 992244:tid 992437] [client 20.63.87.152:31222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/0.php"] [unique_id "alQvmGJoJ8euboi5C2kUlQAAAD4"] [Sun Jul 12 18:21:44.978842 2026] [security2:error] [pid 992537:tid 992686] [client 20.63.87.152:14907] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/002.php"] [unique_id "alQvmGsmDw50MNj9aAK2XQAAAZE"] [Sun Jul 12 18:21:45.034903 2026] [security2:error] [pid 992537:tid 992790] [client 168.100.149.230:55544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24505/bargainor/2308_birefraction.jsp"] [unique_id "alQvmWsmDw50MNj9aAK2XwAAAfk"] [Sun Jul 12 18:21:45.180300 2026] [security2:error] [pid 992244:tid 992379] [client 20.63.87.152:7313] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/01.php"] [unique_id "alQvmWJoJ8euboi5C2kUmwAAAAQ"] [Sun Jul 12 18:21:45.382988 2026] [security2:error] [pid 992244:tid 992480] [client 20.63.87.152:40173] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/0x.php"] [unique_id "alQvmWJoJ8euboi5C2kUngAAAGk"] [Sun Jul 12 18:21:45.427443 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:45.427977 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:45.607855 2026] [security2:error] [pid 992244:tid 992431] [client 20.63.87.152:9375] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/1.php"] [unique_id "alQvmWJoJ8euboi5C2kUoQAAADg"] [Sun Jul 12 18:21:45.608247 2026] [security2:error] [pid 992244:tid 992431] [client 20.63.87.152:9375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/1.php"] [unique_id "alQvmWJoJ8euboi5C2kUoQAAADg"] [Sun Jul 12 18:21:45.808368 2026] [security2:error] [pid 992537:tid 992806] [client 20.63.87.152:36720] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/100.php"] [unique_id "alQvmWsmDw50MNj9aAK2aQAAAgk"] [Sun Jul 12 18:21:46.012228 2026] [security2:error] [pid 992537:tid 992791] [client 20.63.87.152:40183] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/122.php"] [unique_id "alQvmmsmDw50MNj9aAK2awAAAfo"] [Sun Jul 12 18:21:46.124266 2026] [security2:error] [pid 992537:tid 992774] [client 74.7.175.189:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yhc.gna.mybluehost.me"] [uri "/index.php"] [unique_id "alQvlWsmDw50MNj9aAK2NwAAAek"] [Sun Jul 12 18:21:46.125200 2026] [security2:error] [pid 992537:tid 992758] [client 74.7.175.189:33900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yhc.gna.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQvlWsmDw50MNj9aAK2NQAB2SY"] [Sun Jul 12 18:21:46.202002 2026] [security2:error] [pid 992537:tid 992698] [client 20.63.87.152:40177] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/123.php"] [unique_id "alQvmmsmDw50MNj9aAK2cQAAAZ0"] [Sun Jul 12 18:21:46.238054 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:46.238534 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:46.400162 2026] [security2:error] [pid 992537:tid 992779] [client 168.100.149.236:29708] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24570/bargainor/2308_mediator.jsp"] [unique_id "alQvmmsmDw50MNj9aAK2cgAAAe4"] [Sun Jul 12 18:21:46.419318 2026] [security2:error] [pid 992537:tid 992688] [client 20.63.87.152:9373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/13.php"] [unique_id "alQvmmsmDw50MNj9aAK2dQAAAZM"] [Sun Jul 12 18:21:46.473957 2026] [security2:error] [pid 992244:tid 992493] [client 20.210.108.71:56510] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "johndmurray.org"] [uri "/index.php"] [unique_id "alQvmmJoJ8euboi5C2kUqQAAAHY"], referer: binance.com [Sun Jul 12 18:21:46.610742 2026] [security2:error] [pid 992244:tid 992499] [client 20.63.87.152:31226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/133.php"] [unique_id "alQvmmJoJ8euboi5C2kUtAAAAHw"] [Sun Jul 12 18:21:46.725573 2026] [security2:error] [pid 992537:tid 992728] [client 24.203.79.110:62742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvmmsmDw50MNj9aAK2gwAAAbs"] [Sun Jul 12 18:21:46.725906 2026] [security2:error] [pid 992537:tid 992728] [client 24.203.79.110:62742] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvmmsmDw50MNj9aAK2gwAAAbs"] [Sun Jul 12 18:21:46.784050 2026] [security2:error] [pid 992244:tid 992485] [client 20.63.87.152:10897] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/155.php"] [unique_id "alQvmmJoJ8euboi5C2kUuQAAAG4"] [Sun Jul 12 18:21:46.807206 2026] [core:error] [pid 992244:tid 992381] [client 65.49.1.108:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:46.807270 2026] [core:error] [pid 992244:tid 992381] [client 65.49.1.108:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:46.978687 2026] [security2:error] [pid 992244:tid 992415] [client 20.63.87.152:9393] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/177.php"] [unique_id "alQvmmJoJ8euboi5C2kUxQAAACg"] [Sun Jul 12 18:21:47.005298 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:47.005834 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:47.021803 2026] [security2:error] [pid 992244:tid 992455] [client 57.141.18.2:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvmmJoJ8euboi5C2kUrQAAAFA"] [Sun Jul 12 18:21:47.180366 2026] [security2:error] [pid 992537:tid 992721] [client 20.63.87.152:36302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/1index.php"] [unique_id "alQvm2smDw50MNj9aAK2hQAAAbQ"] [Sun Jul 12 18:21:47.385301 2026] [security2:error] [pid 992537:tid 992795] [client 20.63.87.152:9394] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/2.php"] [unique_id "alQvm2smDw50MNj9aAK2jQAAAf4"] [Sun Jul 12 18:21:47.522978 2026] [security2:error] [pid 992537:tid 992612] [remote 212.64.199.62:52656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.199.64.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "gboxcargo.com"] [uri "/wp-login.php"] [unique_id "alQvm2smDw50MNj9aAK2jwACBTk"] [Sun Jul 12 18:21:47.565190 2026] [security2:error] [pid 992537:tid 992800] [client 20.63.87.152:7329] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/222.php"] [unique_id "alQvm2smDw50MNj9aAK2kAAAAgM"] [Sun Jul 12 18:21:47.766054 2026] [security2:error] [pid 992537:tid 992716] [client 20.63.87.152:41805] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/2p.update.php"] [unique_id "alQvm2smDw50MNj9aAK2kgAAAa8"] [Sun Jul 12 18:21:47.898528 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:47.899392 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:47.950312 2026] [security2:error] [pid 992244:tid 992475] [client 20.63.87.152:40180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/3.php"] [unique_id "alQvm2JoJ8euboi5C2kU0AAAAGQ"] [Sun Jul 12 18:21:48.037518 2026] [core:error] [pid 992244:tid 992452] [client 13.140.136.17:59902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:48.037596 2026] [core:error] [pid 992244:tid 992452] [client 13.140.136.17:59902] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:21:48.141454 2026] [security2:error] [pid 992244:tid 992402] [client 20.63.87.152:7339] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQvnGJoJ8euboi5C2kU2QAAABs"] [Sun Jul 12 18:21:48.165530 2026] [security2:error] [pid 992244:tid 992460] [client 57.141.18.106:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQvmmJoJ8euboi5C2kUtgAAAFU"] [Sun Jul 12 18:21:48.214553 2026] [core:error] [pid 992537:tid 992619] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.221193 2026] [core:error] [pid 992537:tid 992586] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.224125 2026] [core:error] [pid 992537:tid 992619] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.226282 2026] [core:error] [pid 992537:tid 992613] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.240608 2026] [core:error] [pid 992537:tid 992613] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.245648 2026] [core:error] [pid 992537:tid 992586] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.254230 2026] [core:error] [pid 992537:tid 992623] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.263334 2026] [core:error] [pid 992537:tid 992621] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.265303 2026] [core:error] [pid 992537:tid 992634] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.272955 2026] [core:error] [pid 992537:tid 992626] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.272972 2026] [core:error] [pid 992537:tid 992576] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.284128 2026] [core:error] [pid 992537:tid 992633] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.284173 2026] [core:error] [pid 992537:tid 992621] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.284248 2026] [core:error] [pid 992537:tid 992623] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.285241 2026] [core:error] [pid 992537:tid 992634] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.294257 2026] [core:error] [pid 992537:tid 992639] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.298704 2026] [core:error] [pid 992537:tid 992633] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.306322 2026] [core:error] [pid 992537:tid 992576] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.311352 2026] [core:error] [pid 992537:tid 992626] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.328245 2026] [core:error] [pid 992537:tid 992639] [remote 204.116.182.186:27028] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/race/ [Sun Jul 12 18:21:48.355719 2026] [security2:error] [pid 992244:tid 992376] [client 20.63.87.152:19032] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/403.php"] [unique_id "alQvnGJoJ8euboi5C2kU3AAAAAE"] [Sun Jul 12 18:21:48.567195 2026] [security2:error] [pid 992244:tid 992462] [client 20.63.87.152:7342] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.georgetownphysicaltherapy.com"] [uri "/404.php"] [unique_id "alQvnGJoJ8euboi5C2kU3wAAAFc"] [Sun Jul 12 18:21:48.759806 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:48.760333 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:49.072915 2026] [security2:error] [pid 992244:tid 992458] [client 168.100.149.146:60312] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24635/bargainor/2308_gurian.jsp"] [unique_id "alQvnWJoJ8euboi5C2kU6AAAAFM"] [Sun Jul 12 18:21:49.210201 2026] [security2:error] [pid 992244:tid 992280] [remote 74.7.227.188:36070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQvnWJoJ8euboi5C2kU6QAAKSI"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-fire-chief-patriotic-stock-p-1061.html?osCsid=69e2n2rjmme3858cf6gkbiu1l1 [Sun Jul 12 18:21:49.551877 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:49.552377 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:49.980867 2026] [security2:error] [pid 992244:tid 992265] [remote 216.73.216.109:54779] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQvnWJoJ8euboi5C2kU-AAAHBM"] [Sun Jul 12 18:21:50.352198 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:50.352722 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:50.479910 2026] [security2:error] [pid 992244:tid 992495] [client 88.8.40.23:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvnmJoJ8euboi5C2kU-gAAAHg"] [Sun Jul 12 18:21:50.836923 2026] [proxy:error] [pid 992244:tid 992390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:50.837130 2026] [proxy_http:error] [pid 992244:tid 992390] [client 74.7.230.47:53436] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:50.838982 2026] [proxy:error] [pid 992244:tid 992390] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:21:50.839143 2026] [proxy_http:error] [pid 992244:tid 992390] [client 74.7.230.47:53436] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:21:50.839355 2026] [security2:error] [pid 992244:tid 992390] [client 74.7.230.47:53436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "503"] [hostname "cpcontacts.spiritdfw.com"] [uri "/___proxy_subdomain_cpcontacts/cgi-sys/503.html"] [unique_id "alQvnmJoJ8euboi5C2kVAgAAAA8"] [Sun Jul 12 18:21:51.074373 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:51.074889 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:51.076252 2026] [security2:error] [pid 992244:tid 992437] [client 168.100.149.144:57252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24700/bargainor/2308_monkey.jsp"] [unique_id "alQvn2JoJ8euboi5C2kVBgAAAD4"] [Sun Jul 12 18:21:51.217421 2026] [security2:error] [pid 992244:tid 992450] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdlLzE1NjU1L2dlLzY0NTAvZTM4.asp"] [unique_id "alQvn2JoJ8euboi5C2kVCAAAAEs"] [Sun Jul 12 18:21:51.805098 2026] [authz_core:error] [pid 992537:tid 992786] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:51.805588 2026] [authz_core:error] [pid 992537:tid 992786] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:52.122966 2026] [security2:error] [pid 992244:tid 992376] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvn2JoJ8euboi5C2kVIgAAAAE"] [Sun Jul 12 18:21:52.128807 2026] [security2:error] [pid 992244:tid 992443] [client 65.21.113.206:37580] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdlLzE1NjU1L2dlLzY0NTAvZTM4.asp"] [unique_id "alQvn2JoJ8euboi5C2kVIAAAAEQ"] [Sun Jul 12 18:21:52.199467 2026] [security2:error] [pid 992244:tid 992376] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvn2JoJ8euboi5C2kVIgAAAAE"] [Sun Jul 12 18:21:52.149083 2026] [security2:error] [pid 992244:tid 992420] [client 217.182.73.60:52144] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.73.182.217.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.batterie-pc-portables.fr"] [uri "/nikon-batterie/bose-batterie/php_nvp/SetExpressCheckout.php"] [unique_id "alQvoGJoJ8euboi5C2kVJgAAAC0"] [Sun Jul 12 18:21:52.453508 2026] [security2:error] [pid 992537:tid 992686] [client 155.117.163.201:53598] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK24gAAAZE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.468210 2026] [security2:error] [pid 992244:tid 992454] [client 155.117.163.201:53602] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVKAAAAE8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.520156 2026] [security2:error] [pid 992537:tid 992687] [client 167.148.117.87:39844] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK25AAAAZI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.549456 2026] [security2:error] [pid 992537:tid 992699] [client 155.117.163.201:53630] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK25wAAAZ4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.562782 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:52.563282 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:52.586594 2026] [security2:error] [pid 992537:tid 992742] [client 155.117.163.60:11194] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK26AAAAck"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.587418 2026] [security2:error] [pid 992244:tid 992448] [client 155.117.163.145:46544] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVLAAAAEk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.598380 2026] [security2:error] [pid 992537:tid 992763] [client 155.117.163.201:53636] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK26gAAAd4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.631208 2026] [security2:error] [pid 992537:tid 992684] [client 155.117.163.145:46556] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK27gAAAY8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.639461 2026] [security2:error] [pid 992244:tid 992458] [client 155.117.163.114:24890] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVMAAAAFM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.642791 2026] [security2:error] [pid 992537:tid 992792] [client 155.117.163.204:58154] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK26wAAAfs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.647131 2026] [security2:error] [pid 992244:tid 992497] [client 155.117.163.60:11208] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVMwAAAHo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.662051 2026] [security2:error] [pid 992244:tid 992404] [client 155.117.163.204:58180] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVLgAAAB0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.667284 2026] [security2:error] [pid 992244:tid 992421] [client 155.117.163.204:58160] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVMQAAAC4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.669702 2026] [security2:error] [pid 992244:tid 992422] [client 167.148.117.8:53246] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVNQAAAC8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.670205 2026] [security2:error] [pid 992244:tid 992465] [client 155.117.163.201:53614] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVNAAAAFo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.673391 2026] [security2:error] [pid 992537:tid 992704] [client 155.117.163.204:58168] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK27QAAAaM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.676583 2026] [security2:error] [pid 992244:tid 992493] [client 155.117.163.145:46562] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVNgAAAHY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.812932 2026] [security2:error] [pid 992244:tid 992502] [client 67.207.92.69:38940] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVOwAAAH8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.857586 2026] [security2:error] [pid 992244:tid 992468] [client 137.184.216.197:57216] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVPgAAAF0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.857846 2026] [security2:error] [pid 992244:tid 992499] [client 192.241.151.174:34132] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVPwAAAHw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.860741 2026] [security2:error] [pid 992244:tid 992386] [client 165.22.187.243:54244] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVPQAAAAs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.862654 2026] [security2:error] [pid 992244:tid 992392] [client 206.189.184.241:58888] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGJoJ8euboi5C2kVPAAAABE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.885018 2026] [security2:error] [pid 992537:tid 992718] [client 68.183.102.107:54260] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvoGsmDw50MNj9aAK28AAAAbE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:52.953785 2026] [security2:error] [pid 992244:tid 992438] [client 51.75.23.111:50994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.23.75.51.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.batterie-pc-portables.fr"] [uri "/nikon-batterie/bose-batterie/php_nvp/SetExpressCheckout.php"] [unique_id "alQvoGJoJ8euboi5C2kVQwAAAD8"] [Sun Jul 12 18:21:53.049529 2026] [security2:error] [pid 992244:tid 992409] [client 168.100.149.181:54256] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24765/bargainor/2308_impeccance.jsp"] [unique_id "alQvoWJoJ8euboi5C2kVSwAAACI"] [Sun Jul 12 18:21:53.335016 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:53.335493 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:54.055601 2026] [security2:error] [pid 992244:tid 992309] [remote 74.7.227.188:36070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQvomJoJ8euboi5C2kVeQAAdj8"], referer: https://www.stephenspublishing.com/deluxe-plastic-fire-hats-hero-training-design-custom-p-1109.html?osCsid=69e2n2rjmme3858cf6gkbiu1l1 [Sun Jul 12 18:21:54.068021 2026] [security2:error] [pid 992244:tid 992278] [remote 104.43.50.80:59650] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.50.43.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "elleholmes.pub"] [uri "/wp-login.php"] [unique_id "alQvomJoJ8euboi5C2kVdQAAaCA"] [Sun Jul 12 18:21:54.114583 2026] [authz_core:error] [pid 992244:tid 992414] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:54.115089 2026] [authz_core:error] [pid 992244:tid 992414] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:54.179863 2026] [security2:error] [pid 992244:tid 992429] [client 14.191.133.195:1891] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVfAAAADY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.433007 2026] [security2:error] [pid 992244:tid 992481] [client 38.35.225.101:34566] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVfQAAAGo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.440264 2026] [security2:error] [pid 992244:tid 992486] [client 125.167.21.72:62514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvomJoJ8euboi5C2kVfgAAAG8"] [Sun Jul 12 18:21:54.440556 2026] [security2:error] [pid 992244:tid 992486] [client 125.167.21.72:62514] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvomJoJ8euboi5C2kVfgAAAG8"] [Sun Jul 12 18:21:54.577937 2026] [security2:error] [pid 992244:tid 992425] [client 196.189.154.106:12370] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVgAAAADI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.585017 2026] [security2:error] [pid 992244:tid 992485] [client 45.134.225.48:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "70.40.223.75"] [uri "/stage01/index.php"] [unique_id "alQvoGJoJ8euboi5C2kVLQAAAG4"] [Sun Jul 12 18:21:54.622438 2026] [security2:error] [pid 992244:tid 992472] [client 14.176.164.30:44708] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kViAAAAGE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.625531 2026] [security2:error] [pid 992537:tid 992766] [client 45.134.225.48:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "70.40.223.75"] [uri "/stage01/index.php"] [unique_id "alQvoGsmDw50MNj9aAK26QAAAeE"] [Sun Jul 12 18:21:54.717721 2026] [security2:error] [pid 992244:tid 992465] [client 201.102.52.178:51170] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVjwAAAFo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.868120 2026] [authz_core:error] [pid 992244:tid 992407] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:54.868599 2026] [authz_core:error] [pid 992244:tid 992407] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:54.923954 2026] [security2:error] [pid 992537:tid 992782] [client 179.12.105.36:53984] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomsmDw50MNj9aAK2_AAAAfE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.943368 2026] [security2:error] [pid 992537:tid 992722] [client 113.177.18.221:54741] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomsmDw50MNj9aAK2_QAAAbU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.949841 2026] [security2:error] [pid 992537:tid 992760] [client 181.43.125.183:32162] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomsmDw50MNj9aAK2_gAAAds"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.950064 2026] [security2:error] [pid 992244:tid 992401] [client 177.200.33.78:29721] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVlgAAABo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:54.994453 2026] [security2:error] [pid 992244:tid 992413] [client 181.224.186.74:55110] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVlwAAACY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.002652 2026] [security2:error] [pid 992244:tid 992474] [client 191.95.151.41:19848] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomJoJ8euboi5C2kVmAAAAGM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.083111 2026] [security2:error] [pid 992244:tid 992471] [client 207.204.114.106:45194] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVmQAAAGA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.085241 2026] [security2:error] [pid 992244:tid 992494] [client 168.100.149.199:30464] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24830/bargainor/2308_gunz.jsp"] [unique_id "alQvo2JoJ8euboi5C2kVngAAAHc"] [Sun Jul 12 18:21:55.086688 2026] [security2:error] [pid 992537:tid 992739] [client 176.108.57.183:34826] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvomsmDw50MNj9aAK2_wAAAcY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.131565 2026] [security2:error] [pid 992244:tid 992393] [client 191.104.5.163:55496] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVnAAAABI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.149460 2026] [security2:error] [pid 992244:tid 992491] [client 223.123.110.238:14130] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVnwAAAHQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.253553 2026] [security2:error] [pid 992244:tid 992459] [client 62.56.175.222:1369] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVowAAAFQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.464731 2026] [security2:error] [pid 992537:tid 992796] [client 181.43.203.105:17010] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2smDw50MNj9aAK3AAAAAf8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.569263 2026] [security2:error] [pid 992244:tid 992294] [remote 74.235.96.117:35688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 117.96.235.74.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hqh.cid.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQvo2JoJ8euboi5C2kVqgAASDA"] [Sun Jul 12 18:21:55.662371 2026] [security2:error] [pid 992244:tid 992466] [client 198.235.24.69:59196] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.24.235.198.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.jointusecalc.com"] [uri "/webshell.php"] [unique_id "alQvo2JoJ8euboi5C2kVsAAAAFs"] [Sun Jul 12 18:21:55.675494 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:55.676028 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:55.701767 2026] [security2:error] [pid 992244:tid 992435] [client 181.44.213.84:47612] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVrwAAADw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:55.779906 2026] [security2:error] [pid 992244:tid 992403] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdqLzMyNjc5L2dqLzIyMDkvanB6.asp"] [unique_id "alQvo2JoJ8euboi5C2kVsgAAABw"] [Sun Jul 12 18:21:55.842725 2026] [security2:error] [pid 992244:tid 992439] [client 179.36.247.129:33890] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvo2JoJ8euboi5C2kVsQAAAEA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:56.326766 2026] [security2:error] [pid 992244:tid 992379] [client 200.69.60.219:41000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvpGJoJ8euboi5C2kVuQAAAAQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:56.459989 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:56.460480 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:56.668314 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvpGJoJ8euboi5C2kVuwAAAHg"] [Sun Jul 12 18:21:56.668364 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvpGJoJ8euboi5C2kVuwAAAHg"] [Sun Jul 12 18:21:56.669610 2026] [security2:error] [pid 992537:tid 992765] [client 65.21.113.206:34798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdqLzMyNjc5L2dqLzIyMDkvanB6.asp"] [unique_id "alQvpGsmDw50MNj9aAK3BgAAAeA"] [Sun Jul 12 18:21:57.084383 2026] [security2:error] [pid 992244:tid 992441] [client 168.100.149.169:42578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24895/bargainor/2308_monadically.jsp"] [unique_id "alQvpWJoJ8euboi5C2kV1wAAAEI"] [Sun Jul 12 18:21:57.272597 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:57.273131 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:57.352800 2026] [security2:error] [pid 992537:tid 992788] [client 24.203.79.110:63258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvpWsmDw50MNj9aAK3DwAAAfc"] [Sun Jul 12 18:21:57.353065 2026] [security2:error] [pid 992537:tid 992788] [client 24.203.79.110:63258] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvpWsmDw50MNj9aAK3DwAAAfc"] [Sun Jul 12 18:21:58.068727 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:58.069246 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:58.457886 2026] [security2:error] [pid 992537:tid 992799] [client 177.202.188.164:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvpmsmDw50MNj9aAK3EQAAAgI"] [Sun Jul 12 18:21:58.615263 2026] [security2:error] [pid 992537:tid 992798] [client 38.49.143.10:58455] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvpmsmDw50MNj9aAK3EwAAAgE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:21:58.822007 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:58.822476 2026] [authz_core:error] [pid 992244:tid 992478] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:21:59.034852 2026] [security2:error] [pid 992537:tid 992748] [client 168.100.149.168:46826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/24960/bargainor/2308_enhalo.jsp"] [unique_id "alQvp2smDw50MNj9aAK3FwAAAc8"] [Sun Jul 12 18:21:59.264256 2026] [security2:error] [pid 992244:tid 992450] [client 190.103.28.146:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvpmJoJ8euboi5C2kV-QAAAEs"] [Sun Jul 12 18:21:59.563795 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:21:59.643505 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:00.157314 2026] [security2:error] [pid 992244:tid 992420] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdqLzMyNjc5L2dqLzkzNTYvanB6.asp"] [unique_id "alQvqGJoJ8euboi5C2kWDwAAAC0"] [Sun Jul 12 18:22:00.376574 2026] [authz_core:error] [pid 992244:tid 992484] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:00.377082 2026] [authz_core:error] [pid 992244:tid 992484] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:01.024887 2026] [security2:error] [pid 992537:tid 992734] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvqGsmDw50MNj9aAK3JwAAAcE"] [Sun Jul 12 18:22:01.025523 2026] [security2:error] [pid 992537:tid 992734] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvqGsmDw50MNj9aAK3JwAAAcE"] [Sun Jul 12 18:22:01.040893 2026] [security2:error] [pid 992537:tid 992685] [client 65.21.113.206:34808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdqLzMyNjc5L2dqLzkzNTYvanB6.asp"] [unique_id "alQvqGsmDw50MNj9aAK3JQAAAZA"] [Sun Jul 12 18:22:01.089403 2026] [security2:error] [pid 992537:tid 992789] [client 168.100.149.248:31496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25025/bargainor/2308_metalogical.jsp"] [unique_id "alQvqWsmDw50MNj9aAK3LwAAAfg"] [Sun Jul 12 18:22:01.120309 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:01.120811 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:01.859565 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:01.860123 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:01.891266 2026] [security2:error] [pid 992537:tid 992709] [client 69.89.28.191:21124] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.bhcfe.org"] [uri "/index.php"] [unique_id "alQvqWsmDw50MNj9aAK3MwAAAag"] [Sun Jul 12 18:22:02.722056 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:02.722689 2026] [authz_core:error] [pid 992244:tid 992391] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:02.724387 2026] [security2:error] [pid 992244:tid 992432] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWdzYTJsLTM4MTMvZ3MtMjAwMjUvc2EybA=="] [unique_id "alQvqmJoJ8euboi5C2kWOQAAADk"] [Sun Jul 12 18:22:02.882333 2026] [security2:error] [pid 992537:tid 992752] [client 47.82.124.145:30002] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQvqmsmDw50MNj9aAK3TwAAAdM"] [Sun Jul 12 18:22:03.058765 2026] [security2:error] [pid 992537:tid 992761] [client 168.100.149.22:41712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25090/bargainor/2308_psychoreflex.jsp"] [unique_id "alQvq2smDw50MNj9aAK3UAAAAdw"] [Sun Jul 12 18:22:03.380793 2026] [security2:error] [pid 992244:tid 992482] [client 181.126.21.248:47034] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQvq2JoJ8euboi5C2kWRgAAAGs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:03.511350 2026] [core:error] [pid 992244:tid 992398] [client 13.140.136.17:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:03.511404 2026] [core:error] [pid 992244:tid 992398] [client 13.140.136.17:56438] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:03.544234 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:03.544784 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:03.675315 2026] [security2:error] [pid 992537:tid 992750] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvq2smDw50MNj9aAK3UgAAAdE"] [Sun Jul 12 18:22:03.675364 2026] [security2:error] [pid 992537:tid 992750] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvq2smDw50MNj9aAK3UgAAAdE"] [Sun Jul 12 18:22:03.676878 2026] [security2:error] [pid 992244:tid 992464] [client 65.21.113.206:39596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWdzYTJsLTM4MTMvZ3MtMjAwMjUvc2EybA=="] [unique_id "alQvq2JoJ8euboi5C2kWQwAAAFk"] [Sun Jul 12 18:22:04.304275 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:04.304851 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:05.092372 2026] [security2:error] [pid 992244:tid 992462] [client 168.100.149.59:27660] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25155/bargainor/2308_mailable.jsp"] [unique_id "alQvrWJoJ8euboi5C2kWcAAAAFc"] [Sun Jul 12 18:22:05.096498 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:05.097100 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:05.105374 2026] [security2:error] [pid 992244:tid 992502] [client 125.167.21.72:62967] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvrWJoJ8euboi5C2kWcQAAAH8"] [Sun Jul 12 18:22:05.106185 2026] [security2:error] [pid 992244:tid 992502] [client 125.167.21.72:62967] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvrWJoJ8euboi5C2kWcQAAAH8"] [Sun Jul 12 18:22:05.314491 2026] [security2:error] [pid 992244:tid 992453] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWgtMTYwL2gxZi8xNjkwMS0xZjI4"] [unique_id "alQvrWJoJ8euboi5C2kWdwAAAE4"] [Sun Jul 12 18:22:05.829386 2026] [cgid:error] [pid 992244:tid 992446] [client 65.49.1.87:22455] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:22:05.873965 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:05.874453 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:06.019641 2026] [security2:error] [pid 992537:tid 992578] [remote 185.191.171.18:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "masticayra.online"] [uri "/"] [unique_id "alQvrmsmDw50MNj9aAK3agABwRo"] [Sun Jul 12 18:22:06.020168 2026] [security2:error] [pid 992537:tid 992734] [client 185.191.171.18:0] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "masticayra.online"] [uri "/"] [unique_id "alQvrmsmDw50MNj9aAK3agABwRo"] [Sun Jul 12 18:22:06.256843 2026] [security2:error] [pid 992244:tid 992474] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvrWJoJ8euboi5C2kWigAAAGM"] [Sun Jul 12 18:22:06.256893 2026] [security2:error] [pid 992244:tid 992474] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvrWJoJ8euboi5C2kWigAAAGM"] [Sun Jul 12 18:22:06.258206 2026] [security2:error] [pid 992537:tid 992790] [client 65.21.113.206:39602] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWgtMTYwL2gxZi8xNjkwMS0xZjI4"] [unique_id "alQvrWsmDw50MNj9aAK3aQAAAfk"] [Sun Jul 12 18:22:06.638823 2026] [security2:error] [pid 992244:tid 992421] [client 14.191.244.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.raid-n-trade.de"] [uri "/shop/index.php"] [unique_id "alQvqGJoJ8euboi5C2kWGwAAAC4"] [Sun Jul 12 18:22:06.673014 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:06.673511 2026] [authz_core:error] [pid 992244:tid 992408] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:06.788372 2026] [security2:error] [pid 992244:tid 992464] [client 54.236.1.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQvrmJoJ8euboi5C2kWkgAAAFk"] [Sun Jul 12 18:22:07.037402 2026] [security2:error] [pid 992537:tid 992727] [client 168.100.149.30:28416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25220/bargainor/2308_epidemiology.jsp"] [unique_id "alQvr2smDw50MNj9aAK3ewAAAbo"] [Sun Jul 12 18:22:07.433031 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:07.433775 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:08.006752 2026] [security2:error] [pid 992244:tid 992411] [client 24.203.79.110:63774] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvsGJoJ8euboi5C2kWsgAAACQ"] [Sun Jul 12 18:22:08.012259 2026] [security2:error] [pid 992244:tid 992411] [client 24.203.79.110:63774] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvsGJoJ8euboi5C2kWsgAAACQ"] [Sun Jul 12 18:22:08.218735 2026] [authz_core:error] [pid 992537:tid 992762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:08.224229 2026] [authz_core:error] [pid 992537:tid 992762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:08.506347 2026] [security2:error] [pid 992244:tid 992419] [client 86.24.153.115:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvsGJoJ8euboi5C2kWtgAAACw"] [Sun Jul 12 18:22:08.510856 2026] [security2:error] [pid 992244:tid 992398] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWgtNDY1OS9oMWYvMTY5MDEtMWYyOA=="] [unique_id "alQvsGJoJ8euboi5C2kWwAAAABc"] [Sun Jul 12 18:22:08.934512 2026] [security2:error] [pid 992537:tid 992575] [remote 74.7.227.188:35736] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQvsGsmDw50MNj9aAK3lgAB5Bc"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-hero-training-design-stock-p-1108.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:22:08.955976 2026] [authz_core:error] [pid 992537:tid 992710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:08.956449 2026] [authz_core:error] [pid 992537:tid 992710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:09.048146 2026] [security2:error] [pid 992537:tid 992735] [client 168.100.149.209:22206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25285/bargainor/2308_secque.jsp"] [unique_id "alQvsWsmDw50MNj9aAK3mQAAAcI"] [Sun Jul 12 18:22:09.357467 2026] [security2:error] [pid 992537:tid 992743] [client 31.17.254.128:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvsGsmDw50MNj9aAK3lQAAAco"] [Sun Jul 12 18:22:09.413181 2026] [security2:error] [pid 992537:tid 992697] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvsWsmDw50MNj9aAK3mAAAAZw"] [Sun Jul 12 18:22:09.413239 2026] [security2:error] [pid 992537:tid 992697] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvsWsmDw50MNj9aAK3mAAAAZw"] [Sun Jul 12 18:22:09.414316 2026] [security2:error] [pid 992244:tid 992436] [client 65.21.113.206:39606] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWgtNDY1OS9oMWYvMTY5MDEtMWYyOA=="] [unique_id "alQvsGJoJ8euboi5C2kWzAAAAD0"] [Sun Jul 12 18:22:09.466908 2026] [autoindex:error] [pid 992537:tid 992694] [client 74.176.216.174:54745] AH01276: Cannot serve directory /home1/sinfulm5/public_html/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sun Jul 12 18:22:09.700544 2026] [http2:warn] [pid 992537:tid 992754] [client 98.70.32.248:45990] h2_stream(992537-142-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0 [Sun Jul 12 18:22:09.709126 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:09.709611 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:10.410302 2026] [security2:error] [pid 992244:tid 992498] [client 168.100.149.2:48856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25350/bargainor/2308_dislevelment.jsp"] [unique_id "alQvsmJoJ8euboi5C2kW4QAAAHs"] [Sun Jul 12 18:22:10.495984 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:10.496462 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:11.254038 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:11.254516 2026] [authz_core:error] [pid 992244:tid 992425] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:12.003832 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:12.004356 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:12.286329 2026] [cgid:error] [pid 992244:tid 992464] [client 202.46.62.20:58965] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/ceramic-mugs-custom-p-335.html?osCsid=de7buj220o82s5n0k1caca08b0 [Sun Jul 12 18:22:12.336958 2026] [security2:error] [pid 992244:tid 992448] [client 202.46.62.10:30654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 10.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQvtGJoJ8euboi5C2kXEAAAAEk"], referer: https://www.stephenspublishing.com/ceramic-mugs-custom-p-335.html?osCsid=de7buj220o82s5n0k1caca08b0 [Sun Jul 12 18:22:12.518251 2026] [security2:error] [pid 992244:tid 992458] [client 74.7.241.168:33478] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "401"] [hostname "webdisk.slateboxstudios.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQvtGJoJ8euboi5C2kXEwAAAFM"] [Sun Jul 12 18:22:12.709305 2026] [core:error] [pid 992537:tid 992714] [client 74.7.241.168:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:12.709354 2026] [core:error] [pid 992537:tid 992714] [client 74.7.241.168:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:12.709716 2026] [security2:error] [pid 992537:tid 992714] [client 74.7.241.168:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.slateboxstudios.com"] [uri "/___proxy_subdomain_webdisk/index.php"] [unique_id "alQvtGsmDw50MNj9aAK3qgAAAa0"] [Sun Jul 12 18:22:12.710849 2026] [security2:error] [pid 992244:tid 992483] [client 74.7.241.168:50982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "webdisk.slateboxstudios.com"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQvtGJoJ8euboi5C2kXGgAAbBc"] [Sun Jul 12 18:22:12.737344 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:12.737860 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:13.031085 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:50556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWgtNDY4OC9oNjkvNDUtNjl6cw=="] [unique_id "alQvtWJoJ8euboi5C2kXIgAAACI"] [Sun Jul 12 18:22:13.090746 2026] [security2:error] [pid 992244:tid 992489] [client 168.100.149.51:26750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25415/bargainor/2308_limnoria.jsp"] [unique_id "alQvtWJoJ8euboi5C2kXJAAAAHI"] [Sun Jul 12 18:22:13.488472 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:13.488994 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:13.907473 2026] [security2:error] [pid 992537:tid 992778] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvtWsmDw50MNj9aAK3tAAAAe0"] [Sun Jul 12 18:22:13.907530 2026] [security2:error] [pid 992537:tid 992778] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvtWsmDw50MNj9aAK3tAAAAe0"] [Sun Jul 12 18:22:13.907601 2026] [security2:error] [pid 992244:tid 992433] [client 65.21.113.206:34252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWgtNDY4OC9oNjkvNDUtNjl6cw=="] [unique_id "alQvtWJoJ8euboi5C2kXLgAAADo"] [Sun Jul 12 18:22:14.253103 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:14.253658 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:14.874946 2026] [security2:error] [pid 992244:tid 992328] [remote 57.141.18.63:28264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/rkY4UcJjf_EvJNKf0T-WFDXk6Rqgh-"] [unique_id "alQvtmJoJ8euboi5C2kXSgAAQFI"] [Sun Jul 12 18:22:15.056034 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:15.056543 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:15.102355 2026] [security2:error] [pid 992537:tid 992750] [client 168.100.149.106:39480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25480/bargainor/2308_milksopism.jsp"] [unique_id "alQvt2smDw50MNj9aAK3wQAAAdE"] [Sun Jul 12 18:22:15.845692 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:15.846263 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:15.904497 2026] [security2:error] [pid 992537:tid 992770] [client 125.167.21.72:61439] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvt2smDw50MNj9aAK35AAAAeU"] [Sun Jul 12 18:22:15.904872 2026] [security2:error] [pid 992537:tid 992770] [client 125.167.21.72:61439] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvt2smDw50MNj9aAK35AAAAeU"] [Sun Jul 12 18:22:16.183732 2026] [security2:error] [pid 992244:tid 992411] [client 20.48.236.161:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 161.236.48.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lazyladylifter.com"] [uri "/.well-known/about.php"] [unique_id "alQvuGJoJ8euboi5C2kXVwAAACQ"] [Sun Jul 12 18:22:16.184049 2026] [security2:error] [pid 992244:tid 992411] [client 20.48.236.161:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "409"] [hostname "lazyladylifter.com"] [uri "/.well-known/about.php"] [unique_id "alQvuGJoJ8euboi5C2kXVwAAACQ"] [Sun Jul 12 18:22:16.612446 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:16.613262 2026] [authz_core:error] [pid 992537:tid 992775] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:17.077710 2026] [security2:error] [pid 992537:tid 992767] [client 168.100.149.95:49980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25545/bargainor/2308_capnoides.jsp"] [unique_id "alQvuWsmDw50MNj9aAK3_gAAAeI"] [Sun Jul 12 18:22:17.286401 2026] [security2:error] [pid 992537:tid 992689] [client 177.230.106.18:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvuGsmDw50MNj9aAK38gAAAZQ"] [Sun Jul 12 18:22:17.378700 2026] [security2:error] [pid 992537:tid 992703] [client 57.141.18.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQvuWsmDw50MNj9aAK3_QAAAaI"] [Sun Jul 12 18:22:17.385828 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:17.386376 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:17.946713 2026] [security2:error] [pid 992537:tid 992720] [client 74.7.175.132:55164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "salon-software.com"] [uri "/robots.txt"] [unique_id "alQvuWsmDw50MNj9aAK4EwABsyY"] [Sun Jul 12 18:22:18.184014 2026] [authz_core:error] [pid 992244:tid 992440] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:18.184553 2026] [authz_core:error] [pid 992244:tid 992440] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:18.230030 2026] [security2:error] [pid 992537:tid 992774] [client 65.49.1.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.20.104.124"] [uri "/index.php"] [unique_id "alQvuWsmDw50MNj9aAK4EAAAAek"] [Sun Jul 12 18:22:18.250943 2026] [security2:error] [pid 992244:tid 992460] [client 193.142.147.111:50299] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "69.195.69.210"] [uri "/index.php"] [unique_id "alQvtmJoJ8euboi5C2kXQAAAAFU"] [Sun Jul 12 18:22:18.602473 2026] [security2:error] [pid 992244:tid 992404] [client 43.135.145.77:46110] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "gourmetcaviarcatering.losangelesfurnituredeals.com"] [uri "/400.shtml"] [unique_id "alQvumJoJ8euboi5C2kXhgAAAB0"] [Sun Jul 12 18:22:18.661593 2026] [security2:error] [pid 992537:tid 992713] [client 24.203.79.110:64285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvumsmDw50MNj9aAK4FgAAAaw"] [Sun Jul 12 18:22:18.732969 2026] [security2:error] [pid 992537:tid 992713] [client 24.203.79.110:64285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvumsmDw50MNj9aAK4FgAAAaw"] [Sun Jul 12 18:22:18.987556 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:18.988152 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:19.024783 2026] [security2:error] [pid 992537:tid 992727] [client 216.244.66.244:51228] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "learningindia.in"] [uri "/robots.txt"] [unique_id "alQvu2smDw50MNj9aAK4GQAAAbo"] [Sun Jul 12 18:22:19.025017 2026] [security2:error] [pid 992537:tid 992727] [client 216.244.66.244:51228] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "learningindia.in"] [uri "/robots.txt"] [unique_id "alQvu2smDw50MNj9aAK4GQAAAbo"] [Sun Jul 12 18:22:19.062129 2026] [security2:error] [pid 992244:tid 992407] [client 168.100.149.143:33846] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25610/bargainor/2308_deft.jsp"] [unique_id "alQvu2JoJ8euboi5C2kXlQAAACA"] [Sun Jul 12 18:22:19.365567 2026] [security2:error] [pid 992244:tid 992462] [client 193.142.147.111:50299] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.195.69.210"] [uri "/index.php"] [unique_id "alQvumJoJ8euboi5C2kXggAAAFc"], referer: https://69.195.69.210:443/RDWeb/Pages/ [Sun Jul 12 18:22:19.367503 2026] [security2:error] [pid 992244:tid 992385] [client 193.142.147.111:49380] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.195.69.210"] [uri "/index.php"] [unique_id "alQvtWJoJ8euboi5C2kXNQAAAAo"] [Sun Jul 12 18:22:19.809998 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:19.810502 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:20.382185 2026] [security2:error] [pid 992537:tid 992776] [client 47.128.115.247:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.raid-n-trade.de"] [uri "/shop/index.php"] [unique_id "alQvuWsmDw50MNj9aAK4BAAAAes"] [Sun Jul 12 18:22:20.418389 2026] [security2:error] [pid 992244:tid 992499] [client 168.100.149.119:33582] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25675/bargainor/2308_did.jsp"] [unique_id "alQvvGJoJ8euboi5C2kXxQAAAHw"] [Sun Jul 12 18:22:20.628999 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:20.629509 2026] [authz_core:error] [pid 992244:tid 992396] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:21.273555 2026] [security2:error] [pid 992537:tid 992789] [client 65.21.113.206:39954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWk1YXVjLTU5NjAvaTUtMTc3MDEvNWF1Yw=="] [unique_id "alQvvWsmDw50MNj9aAK4PQAAAfg"] [Sun Jul 12 18:22:21.460278 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:21.460810 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:22.226428 2026] [authz_core:error] [pid 992244:tid 992455] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:22.226971 2026] [authz_core:error] [pid 992244:tid 992455] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:22.228752 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvvWJoJ8euboi5C2kX4gAAAHg"] [Sun Jul 12 18:22:22.228861 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvvWJoJ8euboi5C2kX4gAAAHg"] [Sun Jul 12 18:22:22.230038 2026] [security2:error] [pid 992537:tid 992697] [client 65.21.113.206:34254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWk1YXVjLTU5NjAvaTUtMTc3MDEvNWF1Yw=="] [unique_id "alQvvWsmDw50MNj9aAK4RAAAAZw"] [Sun Jul 12 18:22:22.439520 2026] [security2:error] [pid 992537:tid 992757] [client 168.100.149.105:29972] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25740/bargainor/2308_delphian.jsp"] [unique_id "alQvvmsmDw50MNj9aAK4TQAAAdg"] [Sun Jul 12 18:22:22.999140 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:22.999755 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:23.794501 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:23.795000 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:24.388773 2026] [security2:error] [pid 992244:tid 992457] [client 74.7.175.189:56320] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yhz.elx.mybluehost.me"] [uri "/robots.txt"] [unique_id "alQvwGJoJ8euboi5C2kYIAAAAFI"] [Sun Jul 12 18:22:24.395447 2026] [security2:error] [pid 992537:tid 992795] [client 116.179.37.208:46086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 208.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQvwGsmDw50MNj9aAK4bgAAAf4"], referer: https://idreamofjeannemarie.com/a-very-versatile-romper-for-ruby-red-fashion-friend-stella/ [Sun Jul 12 18:22:24.538910 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:24.539401 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:24.730196 2026] [security2:error] [pid 992537:tid 992774] [client 65.21.113.206:39954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWluLTI5NTMtaW4xNXctMjgwNS1uMTU=.cgi"] [unique_id "alQvwGsmDw50MNj9aAK4ewAAAek"] [Sun Jul 12 18:22:25.102595 2026] [security2:error] [pid 992244:tid 992474] [client 168.100.149.74:52754] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25805/bargainor/2308_anisodactyli.jsp"] [unique_id "alQvwWJoJ8euboi5C2kYMAAAAGM"] [Sun Jul 12 18:22:25.345552 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:25.346072 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:25.470187 2026] [security2:error] [pid 992244:tid 992490] [client 74.125.213.6:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQvwWJoJ8euboi5C2kYOAAAAHM"] [Sun Jul 12 18:22:25.788028 2026] [security2:error] [pid 992244:tid 992428] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvwWJoJ8euboi5C2kYOQAAADU"] [Sun Jul 12 18:22:25.788080 2026] [security2:error] [pid 992244:tid 992428] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvwWJoJ8euboi5C2kYOQAAADU"] [Sun Jul 12 18:22:25.789109 2026] [security2:error] [pid 992244:tid 992484] [client 65.21.113.206:59806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWluLTI5NTMtaW4xNXctMjgwNS1uMTU=.cgi"] [unique_id "alQvwWJoJ8euboi5C2kYNgAAAG0"] [Sun Jul 12 18:22:26.067501 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:26.068014 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:26.107997 2026] [security2:error] [pid 992244:tid 992400] [client 125.167.21.72:61890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvwmJoJ8euboi5C2kYRwAAABk"] [Sun Jul 12 18:22:26.108299 2026] [security2:error] [pid 992244:tid 992400] [client 125.167.21.72:61890] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvwmJoJ8euboi5C2kYRwAAABk"] [Sun Jul 12 18:22:26.295045 2026] [core:error] [pid 992244:tid 992459] [client 159.203.33.171:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:26.295083 2026] [core:error] [pid 992244:tid 992459] [client 159.203.33.171:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:26.415564 2026] [security2:error] [pid 992244:tid 992386] [client 168.100.149.78:16612] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25870/bargainor/2308_birefraction.jsp"] [unique_id "alQvwmJoJ8euboi5C2kYUwAAAAs"] [Sun Jul 12 18:22:26.574614 2026] [security2:error] [pid 992537:tid 992641] [remote 52.167.144.197:51237] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 197.144.167.52.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.shiromi.com"] [uri "/gallery3/index.php/g2/map"] [unique_id "alQvwmsmDw50MNj9aAK4lgABzlY"] [Sun Jul 12 18:22:26.605073 2026] [security2:error] [pid 992537:tid 992744] [client 107.191.36.209:50931] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "eaglestock.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQvwmsmDw50MNj9aAK4mgAAAcs"] [Sun Jul 12 18:22:26.616578 2026] [security2:error] [pid 992244:tid 992457] [client 107.191.36.209:52890] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "helen-robertson.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQvwmJoJ8euboi5C2kYVwAAAFI"] [Sun Jul 12 18:22:26.769583 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:26.770254 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:27.062014 2026] [security2:error] [pid 992537:tid 992769] [client 57.141.18.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvwmsmDw50MNj9aAK4lwAAAeQ"] [Sun Jul 12 18:22:27.138475 2026] [security2:error] [pid 992244:tid 992413] [client 172.252.218.200:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvwmJoJ8euboi5C2kYXgAAACY"] [Sun Jul 12 18:22:27.245849 2026] [security2:error] [pid 992537:tid 992720] [client 185.100.87.136:36110] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "400"] [hostname "nwuav.net"] [uri "/400.shtml"] [unique_id "alQvw2smDw50MNj9aAK4owAAAbM"] [Sun Jul 12 18:22:27.425717 2026] [security2:error] [pid 992537:tid 992685] [client 74.7.230.5:43712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mrcustomparts.com"] [uri "/robots.txt"] [unique_id "alQvw2smDw50MNj9aAK4qgAAAZA"] [Sun Jul 12 18:22:27.467269 2026] [core:error] [pid 992244:tid 992450] [client 159.203.33.171:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpanel.sportswithapurpose316.com/ [Sun Jul 12 18:22:27.467314 2026] [core:error] [pid 992244:tid 992450] [client 159.203.33.171:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://cpanel.sportswithapurpose316.com/ [Sun Jul 12 18:22:27.553589 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:27.554104 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:27.715762 2026] [security2:error] [pid 992537:tid 992688] [client 65.21.113.206:39954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWo3MDJ4LzE0OTMvajcvMjMzMDUvNw=="] [unique_id "alQvw2smDw50MNj9aAK4swAAAZM"] [Sun Jul 12 18:22:28.229222 2026] [security2:error] [pid 992244:tid 992471] [client 161.118.218.103:64260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-login.php"] [unique_id "alQvxGJoJ8euboi5C2kYggAAAGA"] [Sun Jul 12 18:22:28.337796 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:28.338295 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:28.417291 2026] [security2:error] [pid 992537:tid 992800] [client 168.100.149.52:63782] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/25935/bargainor/2308_mediator.jsp"] [unique_id "alQvxGsmDw50MNj9aAK4vAAAAgM"] [Sun Jul 12 18:22:28.644935 2026] [security2:error] [pid 992537:tid 992786] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvxGsmDw50MNj9aAK4ugAAAfU"] [Sun Jul 12 18:22:28.644995 2026] [security2:error] [pid 992537:tid 992786] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvxGsmDw50MNj9aAK4ugAAAfU"] [Sun Jul 12 18:22:28.646101 2026] [security2:error] [pid 992244:tid 992428] [client 65.21.113.206:59812] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWo3MDJ4LzE0OTMvajcvMjMzMDUvNw=="] [unique_id "alQvxGJoJ8euboi5C2kYgwAAADU"] [Sun Jul 12 18:22:28.828848 2026] [security2:error] [pid 992244:tid 992396] [client 172.252.205.14:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQvxGJoJ8euboi5C2kYhQAAABU"] [Sun Jul 12 18:22:29.143997 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:29.144481 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:29.283955 2026] [security2:error] [pid 992537:tid 992701] [client 24.203.79.110:64804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvxWsmDw50MNj9aAK40AAAAaA"] [Sun Jul 12 18:22:29.284146 2026] [security2:error] [pid 992537:tid 992701] [client 24.203.79.110:64804] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvxWsmDw50MNj9aAK40AAAAaA"] [Sun Jul 12 18:22:29.285319 2026] [security2:error] [pid 992244:tid 992478] [client 161.118.218.103:64789] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQvxWJoJ8euboi5C2kYkgAAAGc"] [Sun Jul 12 18:22:29.870370 2026] [security2:error] [pid 992244:tid 992456] [client 161.118.218.103:49240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-admin/load-scripts.php"] [unique_id "alQvxWJoJ8euboi5C2kYoQAAAFE"] [Sun Jul 12 18:22:29.917506 2026] [security2:error] [pid 992537:tid 992774] [client 65.21.113.206:39954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWp4NnM2LTg0NzEvangtNDk2MS94NnM2"] [unique_id "alQvxWsmDw50MNj9aAK42QAAAek"] [Sun Jul 12 18:22:29.949869 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:29.950347 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:30.222860 2026] [security2:error] [pid 992537:tid 992752] [client 47.128.33.90:50106] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bulentatalay.com"] [uri "/robots.txt"] [unique_id "alQvxmsmDw50MNj9aAK42wAAAdM"] [Sun Jul 12 18:22:30.428075 2026] [security2:error] [pid 992537:tid 992808] [client 168.100.149.245:37040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26000/bargainor/2308_gurian.jsp"] [unique_id "alQvxmsmDw50MNj9aAK43wAAAgs"] [Sun Jul 12 18:22:30.489120 2026] [security2:error] [pid 992537:tid 992809] [client 161.118.218.103:49690] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-admin/load-styles.php"] [unique_id "alQvxmsmDw50MNj9aAK44AAAAgw"] [Sun Jul 12 18:22:30.674528 2026] [authz_core:error] [pid 992244:tid 992443] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:30.675054 2026] [authz_core:error] [pid 992244:tid 992443] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:30.830557 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvxmJoJ8euboi5C2kYqgAAACI"] [Sun Jul 12 18:22:30.830647 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvxmJoJ8euboi5C2kYqgAAACI"] [Sun Jul 12 18:22:30.831509 2026] [security2:error] [pid 992537:tid 992738] [client 65.21.113.206:59820] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWp4NnM2LTg0NzEvangtNDk2MS94NnM2"] [unique_id "alQvxmsmDw50MNj9aAK43gAAAcU"] [Sun Jul 12 18:22:31.346241 2026] [security2:error] [pid 992244:tid 992488] [client 43.173.176.162:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.shopnanjala.com"] [uri "/index.php"] [unique_id "alQvxWJoJ8euboi5C2kYlAAAAHE"] [Sun Jul 12 18:22:31.447370 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:31.447887 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:32.045635 2026] [security2:error] [pid 992244:tid 992434] [client 161.118.218.103:50142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/version.php"] [unique_id "alQvyGJoJ8euboi5C2kY2QAAADs"] [Sun Jul 12 18:22:32.212077 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:32.212548 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:32.673834 2026] [security2:error] [pid 992244:tid 992417] [client 161.118.218.103:51246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/functions.php"] [unique_id "alQvyGJoJ8euboi5C2kY5AAAACo"] [Sun Jul 12 18:22:32.971136 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:32.971633 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:33.151933 2026] [security2:error] [pid 992244:tid 992443] [client 168.100.149.59:30222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26065/bargainor/2308_monkey.jsp"] [unique_id "alQvyWJoJ8euboi5C2kY7gAAAEQ"] [Sun Jul 12 18:22:33.261488 2026] [security2:error] [pid 992244:tid 992394] [client 161.118.218.103:51715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/class-wp.php"] [unique_id "alQvyWJoJ8euboi5C2kY8gAAABM"] [Sun Jul 12 18:22:33.634848 2026] [security2:error] [pid 992537:tid 992800] [client 65.21.113.206:39954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWpfMjY4Ni9qcmUvMTk4OV9yZQ==.htm"] [unique_id "alQvyWsmDw50MNj9aAK49gAAAgM"] [Sun Jul 12 18:22:33.696519 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:33.697018 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:33.846513 2026] [security2:error] [pid 992537:tid 992717] [client 161.118.218.103:52153] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/option.php"] [unique_id "alQvyWsmDw50MNj9aAK4_QAAAbA"] [Sun Jul 12 18:22:33.985074 2026] [security2:error] [pid 992537:tid 992640] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/.dj/index.php"] [unique_id "alQvyWsmDw50MNj9aAK4_wAB_1U"] [Sun Jul 12 18:22:34.054477 2026] [security2:error] [pid 992537:tid 992811] [client 20.63.87.152:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "divfemleaders.com"] [uri "/index.php"] [unique_id "alQvymsmDw50MNj9aAK5AAACDms"] [Sun Jul 12 18:22:34.213698 2026] [security2:error] [pid 992537:tid 992677] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/.trash7206/index.php"] [unique_id "alQvymsmDw50MNj9aAK5BQAB0Ho"] [Sun Jul 12 18:22:34.330520 2026] [autoindex:error] [pid 992537:tid 992667] [remote 20.63.87.152:0] AH01276: Cannot serve directory /home1/iamjenle/public_html/divfemleaders/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:22:34.415695 2026] [security2:error] [pid 992244:tid 992427] [client 159.223.140.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvyWJoJ8euboi5C2kY_AAAADQ"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:34.466762 2026] [autoindex:error] [pid 992537:tid 992658] [remote 20.63.87.152:0] AH01276: Cannot serve directory /home1/iamjenle/public_html/divfemleaders/.well-known/acme-challenge/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:22:34.496501 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:34.497193 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:34.503756 2026] [security2:error] [pid 992537:tid 992799] [client 161.118.218.103:52547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/post.php"] [unique_id "alQvymsmDw50MNj9aAK5CQAAAgI"] [Sun Jul 12 18:22:34.563709 2026] [security2:error] [pid 992537:tid 992676] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQvymsmDw50MNj9aAK5DAABoHk"] [Sun Jul 12 18:22:34.588766 2026] [security2:error] [pid 992537:tid 992802] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvymsmDw50MNj9aAK5AgAAAgU"] [Sun Jul 12 18:22:34.588821 2026] [security2:error] [pid 992537:tid 992802] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvymsmDw50MNj9aAK5AgAAAgU"] [Sun Jul 12 18:22:34.590017 2026] [security2:error] [pid 992244:tid 992430] [client 65.21.113.206:51918] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWpfMjY4Ni9qcmUvMTk4OV9yZQ==.htm"] [unique_id "alQvymJoJ8euboi5C2kZAwAAADc"] [Sun Jul 12 18:22:34.637695 2026] [security2:error] [pid 992537:tid 992672] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQvymsmDw50MNj9aAK5DgAB7HU"] [Sun Jul 12 18:22:34.692588 2026] [security2:error] [pid 992537:tid 992670] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQvymsmDw50MNj9aAK5DwAByXM"] [Sun Jul 12 18:22:34.752834 2026] [security2:error] [pid 992537:tid 992681] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/0.kb-v3.php"] [unique_id "alQvymsmDw50MNj9aAK5EQACB34"] [Sun Jul 12 18:22:34.808602 2026] [security2:error] [pid 992537:tid 992668] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/0.php"] [unique_id "alQvymsmDw50MNj9aAK5EgAByHE"] [Sun Jul 12 18:22:34.857959 2026] [security2:error] [pid 992244:tid 992390] [client 87.152.118.157:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvymJoJ8euboi5C2kZDQAAAA8"] [Sun Jul 12 18:22:34.862328 2026] [security2:error] [pid 992537:tid 992679] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/002.php"] [unique_id "alQvymsmDw50MNj9aAK5EwABm3w"] [Sun Jul 12 18:22:34.918202 2026] [security2:error] [pid 992537:tid 992557] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/01.php"] [unique_id "alQvymsmDw50MNj9aAK5FAACCAU"] [Sun Jul 12 18:22:34.961047 2026] [security2:error] [pid 992244:tid 992414] [client 192.81.216.56:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvyWJoJ8euboi5C2kZAAAAACc"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:34.974491 2026] [security2:error] [pid 992537:tid 992671] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/0x.php"] [unique_id "alQvymsmDw50MNj9aAK5FQAB-3Q"] [Sun Jul 12 18:22:35.033722 2026] [security2:error] [pid 992537:tid 992553] [remote 20.63.87.152:0] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "divfemleaders.com"] [uri "/1.php"] [unique_id "alQvy2smDw50MNj9aAK5FgAB_gE"] [Sun Jul 12 18:22:35.034094 2026] [security2:error] [pid 992537:tid 992553] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/1.php"] [unique_id "alQvy2smDw50MNj9aAK5FgAB_gE"] [Sun Jul 12 18:22:35.105798 2026] [security2:error] [pid 992537:tid 992680] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/100.php"] [unique_id "alQvy2smDw50MNj9aAK5GAABwn0"] [Sun Jul 12 18:22:35.128782 2026] [security2:error] [pid 992244:tid 992376] [client 161.118.218.103:53057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-includes/user.php"] [unique_id "alQvy2JoJ8euboi5C2kZIQAAAAE"] [Sun Jul 12 18:22:35.139757 2026] [security2:error] [pid 992537:tid 992703] [client 168.100.149.206:27546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26130/bargainor/2308_impeccance.jsp"] [unique_id "alQvy2smDw50MNj9aAK5GgAAAaI"] [Sun Jul 12 18:22:35.180988 2026] [security2:error] [pid 992244:tid 992455] [client 54.236.1.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQvy2JoJ8euboi5C2kZHQAAAFA"] [Sun Jul 12 18:22:35.190847 2026] [security2:error] [pid 992537:tid 992558] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/122.php"] [unique_id "alQvy2smDw50MNj9aAK5GwAB9wY"] [Sun Jul 12 18:22:35.252406 2026] [security2:error] [pid 992537:tid 992560] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/123.php"] [unique_id "alQvy2smDw50MNj9aAK5HQAB-Qg"] [Sun Jul 12 18:22:35.279052 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:35.279575 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:35.354520 2026] [core:error] [pid 992537:tid 992764] [client 13.140.136.17:55979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:35.354558 2026] [core:error] [pid 992537:tid 992764] [client 13.140.136.17:55979] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:35.378138 2026] [security2:error] [pid 992537:tid 992574] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/13.php"] [unique_id "alQvy2smDw50MNj9aAK5IQAB5RY"] [Sun Jul 12 18:22:35.435827 2026] [security2:error] [pid 992537:tid 992631] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/133.php"] [unique_id "alQvy2smDw50MNj9aAK5IwABukw"] [Sun Jul 12 18:22:35.489606 2026] [security2:error] [pid 992537:tid 992568] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/155.php"] [unique_id "alQvy2smDw50MNj9aAK5JgABwRA"] [Sun Jul 12 18:22:35.588224 2026] [security2:error] [pid 992537:tid 992562] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/177.php"] [unique_id "alQvy2smDw50MNj9aAK5JwABtQo"] [Sun Jul 12 18:22:35.609692 2026] [security2:error] [pid 992537:tid 992725] [client 185.255.126.39:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "jeanmenezes.com"] [uri "/index.php"] [unique_id "alQvyWsmDw50MNj9aAK48AAAAbg"], referer: https://jeanmenezes.com/hello-world#comment-1441 [Sun Jul 12 18:22:35.662484 2026] [security2:error] [pid 992537:tid 992682] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/1index.php"] [unique_id "alQvy2smDw50MNj9aAK5KwAB2X8"] [Sun Jul 12 18:22:35.715529 2026] [security2:error] [pid 992537:tid 992578] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/2.php"] [unique_id "alQvy2smDw50MNj9aAK5LwAB0ho"] [Sun Jul 12 18:22:35.815655 2026] [security2:error] [pid 992537:tid 992559] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/222.php"] [unique_id "alQvy2smDw50MNj9aAK5MQAB8Ac"] [Sun Jul 12 18:22:35.871123 2026] [security2:error] [pid 992537:tid 992571] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/2p.update.php"] [unique_id "alQvy2smDw50MNj9aAK5MgABlhM"] [Sun Jul 12 18:22:35.925067 2026] [security2:error] [pid 992537:tid 992561] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/3.php"] [unique_id "alQvy2smDw50MNj9aAK5NAABpQk"] [Sun Jul 12 18:22:35.981544 2026] [security2:error] [pid 992537:tid 992569] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQvy2smDw50MNj9aAK5NQAB8hE"] [Sun Jul 12 18:22:36.037114 2026] [authz_core:error] [pid 992537:tid 992807] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:36.037583 2026] [authz_core:error] [pid 992537:tid 992807] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:36.089654 2026] [security2:error] [pid 992537:tid 992575] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/403.php"] [unique_id "alQvzGsmDw50MNj9aAK5OwAB3Rc"] [Sun Jul 12 18:22:36.145229 2026] [security2:error] [pid 992537:tid 992555] [remote 20.63.87.152:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "divfemleaders.com"] [uri "/404.php"] [unique_id "alQvzGsmDw50MNj9aAK5PAABxAM"] [Sun Jul 12 18:22:36.512492 2026] [security2:error] [pid 992537:tid 992697] [client 159.223.140.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvy2smDw50MNj9aAK5KQAAAZw"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:36.670612 2026] [security2:error] [pid 992244:tid 992438] [client 125.167.21.72:62347] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvzGJoJ8euboi5C2kZPwAAAD8"] [Sun Jul 12 18:22:36.670891 2026] [security2:error] [pid 992244:tid 992438] [client 125.167.21.72:62347] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQvzGJoJ8euboi5C2kZPwAAAD8"] [Sun Jul 12 18:22:36.677792 2026] [authz_core:error] [pid 992537:tid 992773] [client 49.51.73.183:0] AH01630: client denied by server configuration: /home1/prcmanag/public_html/php.ini, referer: http://synergiainsight.com [Sun Jul 12 18:22:36.678269 2026] [authz_core:error] [pid 992537:tid 992773] [client 49.51.73.183:0] AH01630: client denied by server configuration: /home1/prcmanag/public_html/error_log, referer: http://synergiainsight.com [Sun Jul 12 18:22:36.821454 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:36.821982 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:37.070382 2026] [security2:error] [pid 992244:tid 992403] [client 168.100.149.97:42316] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26195/bargainor/2308_gunz.jsp"] [unique_id "alQvzWJoJ8euboi5C2kZUQAAABw"] [Sun Jul 12 18:22:37.246302 2026] [security2:error] [pid 992244:tid 992407] [client 202.76.166.103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQvzGJoJ8euboi5C2kZSAAAACA"] [Sun Jul 12 18:22:37.577642 2026] [authz_core:error] [pid 992537:tid 992749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:37.578234 2026] [authz_core:error] [pid 992537:tid 992749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:37.732646 2026] [security2:error] [pid 992244:tid 992451] [client 14.248.130.24:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvzGJoJ8euboi5C2kZRAAAAEw"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:38.349161 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:38.349945 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:38.827592 2026] [security2:error] [pid 992244:tid 992459] [client 161.118.218.103:53482] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.218.118.161.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "huakionline.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "alQvzmJoJ8euboi5C2kZgwAAAFQ"] [Sun Jul 12 18:22:39.037253 2026] [security2:error] [pid 992537:tid 992716] [client 65.21.113.206:40116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWpfNDQyNy9qdngvNzYxN192eA==.htm"] [unique_id "alQvz2smDw50MNj9aAK5aAAAAa8"] [Sun Jul 12 18:22:39.120290 2026] [security2:error] [pid 992537:tid 992753] [client 168.100.149.91:64858] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26260/bargainor/2308_monadically.jsp"] [unique_id "alQvz2smDw50MNj9aAK5agAAAdQ"] [Sun Jul 12 18:22:39.156004 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:39.156545 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:39.500898 2026] [security2:error] [pid 992537:tid 992774] [client 185.255.126.39:23573] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "www.jeanmenezes.com"] [uri "/wp-comments-post.php"] [unique_id "alQvz2smDw50MNj9aAK5cQAAAek"], referer: https://www.jeanmenezes.com/hello-world [Sun Jul 12 18:22:39.758815 2026] [security2:error] [pid 992537:tid 992774] [client 185.255.126.39:23573] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "www.jeanmenezes.com"] [uri "/wp-comments-post.php"] [unique_id "alQvz2smDw50MNj9aAK5cQAAAek"], referer: https://www.jeanmenezes.com/hello-world [Sun Jul 12 18:22:39.758926 2026] [security2:error] [pid 992537:tid 992774] [client 185.255.126.39:23573] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.jeanmenezes.com"] [uri "/wp-comments-post.php"] [unique_id "alQvz2smDw50MNj9aAK5cQAAAek"], referer: https://www.jeanmenezes.com/hello-world [Sun Jul 12 18:22:39.875701 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:39.876207 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:39.892209 2026] [security2:error] [pid 992244:tid 992456] [client 24.203.79.110:65318] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvz2JoJ8euboi5C2kZoQAAAFE"] [Sun Jul 12 18:22:39.897588 2026] [security2:error] [pid 992244:tid 992456] [client 24.203.79.110:65318] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQvz2JoJ8euboi5C2kZoQAAAFE"] [Sun Jul 12 18:22:39.936909 2026] [fcgid:warn] [pid 992244:tid 992464] (70014)End of file found: [client 66.132.195.103:15072] mod_fcgid: can't get data from http client [Sun Jul 12 18:22:40.010974 2026] [security2:error] [pid 992244:tid 992477] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvz2JoJ8euboi5C2kZkQAAAGY"] [Sun Jul 12 18:22:40.011048 2026] [security2:error] [pid 992244:tid 992477] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQvz2JoJ8euboi5C2kZkQAAAGY"] [Sun Jul 12 18:22:40.011959 2026] [security2:error] [pid 992537:tid 992789] [client 65.21.113.206:51930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWpfNDQyNy9qdngvNzYxN192eA==.htm"] [unique_id "alQvz2smDw50MNj9aAK5dQAAAfg"] [Sun Jul 12 18:22:40.117587 2026] [security2:error] [pid 992244:tid 992360] [remote 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZqwAAd3I"], referer: http://www.nohandsnoexcuses.com/blog/ [Sun Jul 12 18:22:40.228291 2026] [security2:error] [pid 992244:tid 992484] [client 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZrgAAbSk"], referer: http://www.nohandsnoexcuses.com/wordpress/ [Sun Jul 12 18:22:40.344056 2026] [security2:error] [pid 992244:tid 992479] [client 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZtwAAaAo"], referer: http://www.nohandsnoexcuses.com/backup/ [Sun Jul 12 18:22:40.370512 2026] [security2:error] [pid 992244:tid 992451] [client 41.227.166.235:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQvz2JoJ8euboi5C2kZogAAAEw"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:40.438656 2026] [security2:error] [pid 992537:tid 992724] [client 168.100.149.166:58220] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26325/bargainor/2308_enhalo.jsp"] [unique_id "alQv0GsmDw50MNj9aAK5ewAAAbc"] [Sun Jul 12 18:22:40.454146 2026] [security2:error] [pid 992244:tid 992406] [client 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZvwAAHws"], referer: http://www.nohandsnoexcuses.com/wp/ [Sun Jul 12 18:22:40.568556 2026] [security2:error] [pid 992244:tid 992404] [client 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZxQAAHTI"], referer: http://www.nohandsnoexcuses.com/new/ [Sun Jul 12 18:22:40.681791 2026] [security2:error] [pid 992244:tid 992330] [remote 34.162.251.64:46412] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.nohandsnoexcuses.com"] [uri "/index.php"] [unique_id "alQv0GJoJ8euboi5C2kZyQAAG1Q"], referer: http://www.nohandsnoexcuses.com/old/ [Sun Jul 12 18:22:40.689564 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:40.690073 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:41.124195 2026] [core:error] [pid 992244:tid 992464] [client 13.140.136.17:52003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:41.124241 2026] [core:error] [pid 992244:tid 992464] [client 13.140.136.17:52003] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:41.256119 2026] [security2:error] [pid 992244:tid 992443] [client 205.210.31.218:57554] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 218.31.210.205.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.akkupc-ch.huakionline.com"] [uri "/shell.php"] [unique_id "alQv0WJoJ8euboi5C2kZ5QAAAEQ"] [Sun Jul 12 18:22:41.424270 2026] [security2:error] [pid 992244:tid 992422] [client 205.210.31.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.akkupc-ch.huakionline.com"] [uri "/404.php"] [unique_id "alQv0WJoJ8euboi5C2kZ7gAAAC8"] [Sun Jul 12 18:22:41.441211 2026] [authz_core:error] [pid 992244:tid 992414] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:41.441912 2026] [authz_core:error] [pid 992244:tid 992414] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:41.594392 2026] [security2:error] [pid 992244:tid 992460] [client 116.179.37.106:5809] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQv0WJoJ8euboi5C2kZ9AAAAFU"], referer: https://idreamofjeannemarie.com/music-lessons-for-addy-or-rebecca/ [Sun Jul 12 18:22:42.179658 2026] [security2:error] [pid 992537:tid 992786] [client 181.189.34.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQv0GsmDw50MNj9aAK5hQAAAfU"] [Sun Jul 12 18:22:42.227796 2026] [security2:error] [pid 992244:tid 992482] [client 40.223.170.201:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQv0WJoJ8euboi5C2kZ_AAAAGs"] [Sun Jul 12 18:22:42.292218 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:42.292929 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:42.380975 2026] [security2:error] [pid 992244:tid 992396] [client 202.46.62.64:1803] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 64.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQv0mJoJ8euboi5C2kaBgAAABU"], referer: https://www.stephenspublishing.com/mood-pens-custom-p-538.html?osCsid=4oproq1ttdbpekjmjceak6si63 [Sun Jul 12 18:22:43.095128 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:43.095775 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:43.120220 2026] [security2:error] [pid 992537:tid 992774] [client 168.100.149.66:52882] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26390/bargainor/2308_metalogical.jsp"] [unique_id "alQv02smDw50MNj9aAK5sAAAAek"] [Sun Jul 12 18:22:43.265859 2026] [security2:error] [pid 992537:tid 992765] [client 34.86.189.162:61609] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQv02smDw50MNj9aAK5sgAAAeA"] [Sun Jul 12 18:22:43.453511 2026] [security2:error] [pid 992244:tid 992470] [client 74.7.230.24:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.api.cecweb.org"] [uri "/cgi-sys/404.html"] [unique_id "alQv02JoJ8euboi5C2kaJgAAAF8"] [Sun Jul 12 18:22:43.454981 2026] [security2:error] [pid 992244:tid 992418] [client 74.7.230.24:37222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.api.cecweb.org"] [uri "/robots.txt"] [unique_id "alQv02JoJ8euboi5C2kaJAAAKxM"] [Sun Jul 12 18:22:43.679367 2026] [security2:error] [pid 992244:tid 992366] [remote 216.73.216.109:28300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQv02JoJ8euboi5C2kaLQAATng"] [Sun Jul 12 18:22:43.982542 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:43.983150 2026] [authz_core:error] [pid 992244:tid 992395] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:44.310565 2026] [security2:error] [pid 992244:tid 992295] [remote 72.167.50.103:35180] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.50.167.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "themarkberman.com"] [uri "/wp-login.php"] [unique_id "alQv1GJoJ8euboi5C2kaNgAALjE"] [Sun Jul 12 18:22:44.434807 2026] [security2:error] [pid 992244:tid 992438] [client 168.100.149.225:31298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26455/bargainor/2308_psychoreflex.jsp"] [unique_id "alQv1GJoJ8euboi5C2kaOwAAAD8"] [Sun Jul 12 18:22:44.462258 2026] [security2:error] [pid 992244:tid 992477] [client 167.61.176.156:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQv02JoJ8euboi5C2kaIwAAAGY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:22:44.761120 2026] [security2:error] [pid 992537:tid 992735] [client 65.21.113.206:50428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWpreWprNF82OTcvamsvMTU0MjEvaw==.html"] [unique_id "alQv1GsmDw50MNj9aAK5zAAAAcI"] [Sun Jul 12 18:22:44.833058 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:44.833759 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:44.912151 2026] [security2:error] [pid 992244:tid 992444] [client 86.150.3.111:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv1GJoJ8euboi5C2kaNwAAAEU"] [Sun Jul 12 18:22:45.683168 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:45.684008 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:45.706380 2026] [security2:error] [pid 992244:tid 992461] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv1WJoJ8euboi5C2kaSgAAAFY"] [Sun Jul 12 18:22:45.706470 2026] [security2:error] [pid 992244:tid 992461] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv1WJoJ8euboi5C2kaSgAAAFY"] [Sun Jul 12 18:22:45.707695 2026] [security2:error] [pid 992537:tid 992788] [client 65.21.113.206:48256] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWpreWprNF82OTcvamsvMTU0MjEvaw==.html"] [unique_id "alQv1WsmDw50MNj9aAK50gAAAfc"] [Sun Jul 12 18:22:45.876227 2026] [security2:error] [pid 992537:tid 992698] [client 34.86.189.162:61547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.189.86.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1WsmDw50MNj9aAK52QAAAZ0"] [Sun Jul 12 18:22:45.876463 2026] [security2:error] [pid 992537:tid 992698] [client 34.86.189.162:61547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1WsmDw50MNj9aAK52QAAAZ0"] [Sun Jul 12 18:22:46.103284 2026] [security2:error] [pid 992537:tid 992713] [client 164.163.113.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "fatir.tj"] [uri "/index.php"] [unique_id "alQvz2smDw50MNj9aAK5cgAAAaw"] [Sun Jul 12 18:22:46.166218 2026] [security2:error] [pid 992244:tid 992456] [client 34.86.189.162:52801] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.189.86.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1mJoJ8euboi5C2kaVgAAAFE"] [Sun Jul 12 18:22:46.166459 2026] [security2:error] [pid 992244:tid 992456] [client 34.86.189.162:52801] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1mJoJ8euboi5C2kaVgAAAFE"] [Sun Jul 12 18:22:46.414724 2026] [security2:error] [pid 992244:tid 992387] [client 34.86.189.162:63864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.189.86.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1mJoJ8euboi5C2kaXAAAAAw"] [Sun Jul 12 18:22:46.414961 2026] [security2:error] [pid 992244:tid 992387] [client 34.86.189.162:63864] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1mJoJ8euboi5C2kaXAAAAAw"] [Sun Jul 12 18:22:46.492755 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:46.529050 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:46.621575 2026] [security2:error] [pid 992537:tid 992706] [client 34.86.189.162:57226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 162.189.86.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1msmDw50MNj9aAK54AAAAaU"] [Sun Jul 12 18:22:46.621852 2026] [security2:error] [pid 992537:tid 992706] [client 34.86.189.162:57226] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQv1msmDw50MNj9aAK54AAAAaU"] [Sun Jul 12 18:22:47.093743 2026] [security2:error] [pid 992537:tid 992745] [client 168.100.149.160:17250] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26520/bargainor/2308_mailable.jsp"] [unique_id "alQv12smDw50MNj9aAK55AAAAcw"] [Sun Jul 12 18:22:47.168506 2026] [security2:error] [pid 992244:tid 992475] [client 125.167.21.72:62795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv12JoJ8euboi5C2kacAAAAGQ"] [Sun Jul 12 18:22:47.168822 2026] [security2:error] [pid 992244:tid 992475] [client 125.167.21.72:62795] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv12JoJ8euboi5C2kacAAAAGQ"] [Sun Jul 12 18:22:47.296879 2026] [authz_core:error] [pid 992537:tid 992729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:47.297370 2026] [authz_core:error] [pid 992537:tid 992729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:48.063451 2026] [authz_core:error] [pid 992244:tid 992393] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:48.063984 2026] [authz_core:error] [pid 992244:tid 992393] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:48.228896 2026] [security2:error] [pid 992244:tid 992480] [client 65.21.113.204:59512] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/robots.txt"] [unique_id "alQv2GJoJ8euboi5C2kangAAAGk"] [Sun Jul 12 18:22:48.809741 2026] [authz_core:error] [pid 992244:tid 992443] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:48.810251 2026] [authz_core:error] [pid 992244:tid 992443] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:49.006006 2026] [security2:error] [pid 992244:tid 992453] [client 65.21.113.204:59518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/index.php"] [unique_id "alQv2GJoJ8euboi5C2kasQAAAE4"] [Sun Jul 12 18:22:49.064995 2026] [security2:error] [pid 992244:tid 992391] [client 168.100.149.80:18962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26585/bargainor/2308_epidemiology.jsp"] [unique_id "alQv2WJoJ8euboi5C2katQAAABA"] [Sun Jul 12 18:22:49.310184 2026] [security2:error] [pid 992537:tid 992728] [client 65.21.113.206:50428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWpreWprNF8xODAyL2prLzE1NDIxL2s=.html"] [unique_id "alQv2WsmDw50MNj9aAK58wAAAbs"] [Sun Jul 12 18:22:49.570729 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:49.571223 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:50.260603 2026] [security2:error] [pid 992537:tid 992799] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv2WsmDw50MNj9aAK59AAAAgI"] [Sun Jul 12 18:22:50.260688 2026] [security2:error] [pid 992537:tid 992799] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv2WsmDw50MNj9aAK59AAAAgI"] [Sun Jul 12 18:22:50.261721 2026] [security2:error] [pid 992244:tid 992404] [client 65.21.113.206:48262] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWpreWprNF8xODAyL2prLzE1NDIxL2s=.html"] [unique_id "alQv2WJoJ8euboi5C2kawwAAAB0"] [Sun Jul 12 18:22:50.332181 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:50.332683 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:50.455611 2026] [security2:error] [pid 992244:tid 992417] [client 24.203.79.110:49446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv2mJoJ8euboi5C2ka1gAAACo"] [Sun Jul 12 18:22:50.455898 2026] [security2:error] [pid 992244:tid 992417] [client 24.203.79.110:49446] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv2mJoJ8euboi5C2ka1gAAACo"] [Sun Jul 12 18:22:51.088875 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:51.089369 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:51.114753 2026] [security2:error] [pid 992244:tid 992390] [client 168.100.149.242:62888] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26650/bargainor/2308_secque.jsp"] [unique_id "alQv22JoJ8euboi5C2ka5gAAAA8"] [Sun Jul 12 18:22:51.186031 2026] [security2:error] [pid 992244:tid 992393] [client 65.21.113.204:59518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/index.php"] [unique_id "alQv2mJoJ8euboi5C2ka3QAAABI"] [Sun Jul 12 18:22:51.600214 2026] [cgid:error] [pid 992244:tid 992449] [client 167.94.146.55:0] AH01265: stderr from /home4/globalf1/public_html/website_d706bf31/cgi-bin/: attempt to invoke directory as script, referer: https://website-d706bf31.globalflower.net:443/cgi-bin [Sun Jul 12 18:22:51.868266 2026] [authz_core:error] [pid 992244:tid 992499] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:51.868788 2026] [authz_core:error] [pid 992244:tid 992499] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:52.066278 2026] [security2:error] [pid 992244:tid 992408] [client 57.141.18.81:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQv22JoJ8euboi5C2kbBwAAACE"] [Sun Jul 12 18:22:52.435801 2026] [security2:error] [pid 992537:tid 992742] [client 168.100.149.24:47258] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26715/bargainor/2308_dislevelment.jsp"] [unique_id "alQv3GsmDw50MNj9aAK6AQAAAck"] [Sun Jul 12 18:22:52.453973 2026] [security2:error] [pid 992244:tid 992377] [client 74.7.228.22:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.fairfaxfence.com"] [uri "/index.php"] [unique_id "alQv2GJoJ8euboi5C2kaogAAAAI"] [Sun Jul 12 18:22:52.454776 2026] [security2:error] [pid 992244:tid 992400] [client 74.7.228.22:46380] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mail.fairfaxfence.com"] [uri "/robots.txt"] [unique_id "alQv2GJoJ8euboi5C2kaoAAAABk"] [Sun Jul 12 18:22:52.604239 2026] [authz_core:error] [pid 992537:tid 992693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:52.604834 2026] [authz_core:error] [pid 992537:tid 992693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:52.714510 2026] [security2:error] [pid 992537:tid 992746] [client 74.7.230.62:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "fairfaxfence.com"] [uri "/index.php"] [unique_id "alQv3GsmDw50MNj9aAK6BwABzQs"] [Sun Jul 12 18:22:52.934519 2026] [security2:error] [pid 992537:tid 992689] [client 91.215.90.167:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv3GsmDw50MNj9aAK6BgAAAZQ"] [Sun Jul 12 18:22:52.949880 2026] [security2:error] [pid 992537:tid 992588] [remote 74.7.227.188:45836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQv3GsmDw50MNj9aAK6CwABqSI"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-fire-chief-patriotic-stock-p-1061.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:22:53.099962 2026] [core:error] [pid 992537:tid 992717] [client 13.140.136.17:55268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:53.100001 2026] [core:error] [pid 992537:tid 992717] [client 13.140.136.17:55268] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:53.208166 2026] [security2:error] [pid 992244:tid 992490] [client 65.21.113.204:59518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/index.php"] [unique_id "alQv3GJoJ8euboi5C2kbGAAAAHM"] [Sun Jul 12 18:22:53.332260 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:53.332774 2026] [authz_core:error] [pid 992244:tid 992436] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:53.487846 2026] [security2:error] [pid 992537:tid 992725] [client 65.21.113.206:50428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWs4OG82LTU0NTQvazgtNDIzNDEvODhvNg=="] [unique_id "alQv3WsmDw50MNj9aAK6EwAAAbg"] [Sun Jul 12 18:22:54.096320 2026] [authz_core:error] [pid 992537:tid 992738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:54.096848 2026] [authz_core:error] [pid 992537:tid 992738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:54.362521 2026] [security2:error] [pid 992537:tid 992781] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv3msmDw50MNj9aAK6GQAAAfA"] [Sun Jul 12 18:22:54.362571 2026] [security2:error] [pid 992537:tid 992781] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv3msmDw50MNj9aAK6GQAAAfA"] [Sun Jul 12 18:22:54.363760 2026] [security2:error] [pid 992244:tid 992402] [client 65.21.113.206:54300] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWs4OG82LTU0NTQvazgtNDIzNDEvODhvNg=="] [unique_id "alQv3WJoJ8euboi5C2kbNAAAABs"] [Sun Jul 12 18:22:54.645357 2026] [security2:error] [pid 992537:tid 992794] [client 168.100.149.127:45988] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26780/bargainor/2308_limnoria.jsp"] [unique_id "alQv3msmDw50MNj9aAK6KAAAAf0"] [Sun Jul 12 18:22:54.864541 2026] [authz_core:error] [pid 992537:tid 992687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:54.865062 2026] [authz_core:error] [pid 992537:tid 992687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:55.005285 2026] [security2:error] [pid 992244:tid 992498] [client 216.75.132.43:61902] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv3mJoJ8euboi5C2kbPgAAAHs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.025433 2026] [security2:error] [pid 992537:tid 992686] [client 216.75.132.10:47206] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv3msmDw50MNj9aAK6OQAAAZE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.036556 2026] [security2:error] [pid 992537:tid 992790] [client 216.75.132.182:12766] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv3msmDw50MNj9aAK6OgAAAfk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.036680 2026] [security2:error] [pid 992244:tid 992383] [client 65.21.113.204:59518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/index.php"] [unique_id "alQv3mJoJ8euboi5C2kbOwAAAAg"] [Sun Jul 12 18:22:55.072709 2026] [security2:error] [pid 992537:tid 992747] [client 216.75.132.10:47216] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv3msmDw50MNj9aAK6PAAAAc4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.077303 2026] [security2:error] [pid 992537:tid 992760] [client 207.180.11.171:54084] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv3msmDw50MNj9aAK6OwAAAds"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.120790 2026] [security2:error] [pid 992537:tid 992763] [client 144.31.35.88:13642] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6PgAAAd4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.128764 2026] [security2:error] [pid 992537:tid 992777] [client 144.31.35.88:13632] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6PQAAAew"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.130257 2026] [security2:error] [pid 992537:tid 992699] [client 143.14.6.135:48810] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6QAAAAZ4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.154127 2026] [security2:error] [pid 992537:tid 992780] [client 143.14.6.135:48784] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6PwAAAe8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.155191 2026] [security2:error] [pid 992244:tid 992499] [client 143.14.6.135:48786] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32JoJ8euboi5C2kbPwAAAHw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.172327 2026] [security2:error] [pid 992244:tid 992460] [client 144.31.35.88:13652] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32JoJ8euboi5C2kbQAAAAFU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.190518 2026] [security2:error] [pid 992537:tid 992703] [client 216.75.132.43:61918] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6QQAAAaI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.193961 2026] [security2:error] [pid 992537:tid 992735] [client 216.75.132.10:47220] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6QgAAAcI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.211337 2026] [security2:error] [pid 992244:tid 992432] [client 143.14.6.135:48802] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32JoJ8euboi5C2kbQQAAADk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.257956 2026] [security2:error] [pid 992537:tid 992742] [client 216.75.132.26:44268] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6QwAAAck"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.263102 2026] [security2:error] [pid 992244:tid 992486] [client 216.75.132.43:61916] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32JoJ8euboi5C2kbRQAAAG8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.283161 2026] [security2:error] [pid 992244:tid 992408] [client 216.75.132.10:47222] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32JoJ8euboi5C2kbRwAAACE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.286493 2026] [security2:error] [pid 992537:tid 992712] [client 144.31.35.88:13638] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv32smDw50MNj9aAK6RAAAAas"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:55.334011 2026] [security2:error] [pid 992244:tid 992468] [client 54.236.1.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQv32JoJ8euboi5C2kbRAAAAF0"] [Sun Jul 12 18:22:55.672845 2026] [authz_core:error] [pid 992537:tid 992717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:55.673321 2026] [authz_core:error] [pid 992537:tid 992717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:55.834383 2026] [security2:error] [pid 992537:tid 992751] [client 45.205.1.241:46072] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQv32smDw50MNj9aAK6TwAAAdI"] [Sun Jul 12 18:22:56.199630 2026] [security2:error] [pid 992537:tid 992727] [client 31.173.83.52:15976] ModSecurity: Warning. Pattern match "/(contact(o|.?us)?|wp-comments-post|(send)?.?(form.)?e?mail(er)?|memberlist|send|contact.form(.handler)?|thankyou|leafmailer[0-9.]*)\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1546"] [id "900923"] [msg "contact form logging"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQv4GsmDw50MNj9aAK6UwAAAbo"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:22:56.269399 2026] [security2:error] [pid 992244:tid 992398] [client 14.187.183.37:60519] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4GJoJ8euboi5C2kbWgAAABc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:56.444429 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:56.444937 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:56.508628 2026] [security2:error] [pid 992244:tid 992447] [client 79.101.146.117:52448] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4GJoJ8euboi5C2kbYAAAAEg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:56.530926 2026] [security2:error] [pid 992537:tid 992691] [client 189.203.174.54:12392] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4GsmDw50MNj9aAK6XAAAAZY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.075643 2026] [security2:error] [pid 992537:tid 992768] [client 200.192.150.177:34057] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4GsmDw50MNj9aAK6ZAAAAeM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.115339 2026] [security2:error] [pid 992244:tid 992450] [client 168.100.149.116:17776] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26845/bargainor/2308_milksopism.jsp"] [unique_id "alQv4WJoJ8euboi5C2kbfQAAAEs"] [Sun Jul 12 18:22:57.118252 2026] [security2:error] [pid 992244:tid 992497] [client 189.223.38.59:35701] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbeAAAAHo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.180047 2026] [security2:error] [pid 992244:tid 992382] [client 190.114.35.187:23614] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbeQAAAAc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.294798 2026] [authz_core:error] [pid 992537:tid 992728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:57.296265 2026] [authz_core:error] [pid 992537:tid 992728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:57.314518 2026] [security2:error] [pid 992244:tid 992397] [client 197.211.57.35:13830] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbhgAAABY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.314683 2026] [security2:error] [pid 992244:tid 992384] [client 186.109.19.29:47328] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbhwAAAAk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.414564 2026] [security2:error] [pid 992244:tid 992472] [client 190.99.75.186:15292] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbjAAAAGE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.469407 2026] [security2:error] [pid 992244:tid 992396] [client 38.44.116.145:41398] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbjgAAABU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.481222 2026] [security2:error] [pid 992244:tid 992448] [client 190.80.24.196:14291] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbkAAAAEk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.532458 2026] [security2:error] [pid 992244:tid 992499] [client 168.0.226.254:19987] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbkQAAAHw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.585158 2026] [security2:error] [pid 992537:tid 992727] [client 31.173.83.52:15976] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQv4GsmDw50MNj9aAK6UwAAAbo"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:22:57.585272 2026] [security2:error] [pid 992537:tid 992727] [client 31.173.83.52:15976] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "singularstudiosnj.com"] [uri "/wp-comments-post.php"] [unique_id "alQv4GsmDw50MNj9aAK6UwAAAbo"], referer: https://singularstudiosnj.com/product/cd-booklets/ [Sun Jul 12 18:22:57.704280 2026] [security2:error] [pid 992244:tid 992464] [client 114.119.135.172:29167] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "acedev.net"] [uri "/acedev/files/insurgency/diag/bot_disc"] [unique_id "alQv4WJoJ8euboi5C2kbmgAAAFk"], referer: https://acedev.net/acedev/files/insurgency/diag/bot_disc?C=N%3BO%3DD [Sun Jul 12 18:22:57.752762 2026] [security2:error] [pid 992244:tid 992378] [client 38.190.125.82:33006] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbmQAAAAM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:57.754101 2026] [security2:error] [pid 992537:tid 992778] [client 125.167.21.72:63248] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv4WsmDw50MNj9aAK6bgAAAe0"] [Sun Jul 12 18:22:57.754298 2026] [security2:error] [pid 992537:tid 992778] [client 125.167.21.72:63248] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv4WsmDw50MNj9aAK6bgAAAe0"] [Sun Jul 12 18:22:57.914762 2026] [security2:error] [pid 992537:tid 992726] [client 178.54.247.2:60858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WsmDw50MNj9aAK6bwAAAbk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:58.080691 2026] [security2:error] [pid 992244:tid 992405] [client 192.141.245.126:41246] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4WJoJ8euboi5C2kbpAAAAB4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:58.109335 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:58.109874 2026] [authz_core:error] [pid 992244:tid 992492] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:58.177805 2026] [security2:error] [pid 992537:tid 992783] [client 143.105.146.161:31922] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv4msmDw50MNj9aAK6cQAAAfI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:22:58.268685 2026] [security2:error] [pid 992244:tid 992412] [client 65.21.113.204:59518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "tai-ba-gua.com"] [uri "/index.php"] [unique_id "alQv4WJoJ8euboi5C2kboAAAACU"] [Sun Jul 12 18:22:58.638930 2026] [core:error] [pid 992537:tid 992759] [client 13.140.136.17:49278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:58.638976 2026] [core:error] [pid 992537:tid 992759] [client 13.140.136.17:49278] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:22:58.882337 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:58.882880 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:22:59.081339 2026] [security2:error] [pid 992244:tid 992462] [client 168.100.149.128:23878] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26910/bargainor/2308_capnoides.jsp"] [unique_id "alQv42JoJ8euboi5C2kbswAAAFc"] [Sun Jul 12 18:22:59.357609 2026] [security2:error] [pid 992244:tid 992426] [client 47.128.57.212:29692] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thecuttingedgemallorca.com"] [uri "/robots.txt"] [unique_id "alQv42JoJ8euboi5C2kbwQAAADM"] [Sun Jul 12 18:22:59.601312 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:22:59.601840 2026] [authz_core:error] [pid 992244:tid 992435] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:00.017194 2026] [security2:error] [pid 992244:tid 992443] [client 184.154.139.52:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.caw.fji.mybluehost.me"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQv5GJoJ8euboi5C2kb0gAAAEQ"] [Sun Jul 12 18:23:00.018550 2026] [security2:error] [pid 992244:tid 992447] [client 184.154.139.52:47192] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "www.caw.fji.mybluehost.me"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQv42JoJ8euboi5C2kb0QAAAEg"] [Sun Jul 12 18:23:00.388007 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:00.388490 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:00.438404 2026] [security2:error] [pid 992244:tid 992489] [client 168.100.149.238:40324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/26975/bargainor/2308_deft.jsp"] [unique_id "alQv5GJoJ8euboi5C2kb5AAAAHI"] [Sun Jul 12 18:23:00.848492 2026] [security2:error] [pid 992537:tid 992772] [client 20.63.87.152:19204] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/.dj/index.php"] [unique_id "alQv5GsmDw50MNj9aAK6fwAAAec"] [Sun Jul 12 18:23:01.076595 2026] [security2:error] [pid 992244:tid 992469] [client 24.203.79.110:49975] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv5WJoJ8euboi5C2kb8wAAAF4"] [Sun Jul 12 18:23:01.076939 2026] [security2:error] [pid 992244:tid 992469] [client 24.203.79.110:49975] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv5WJoJ8euboi5C2kb8wAAAF4"] [Sun Jul 12 18:23:01.117650 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:01.118146 2026] [authz_core:error] [pid 992244:tid 992446] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:01.147419 2026] [proxy:error] [pid 992244:tid 992462] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:01.147562 2026] [proxy_http:error] [pid 992244:tid 992462] [client 20.63.87.152:20959] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:01.149500 2026] [proxy:error] [pid 992244:tid 992462] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:01.149695 2026] [proxy_http:error] [pid 992244:tid 992462] [client 20.63.87.152:20959] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:01.405161 2026] [security2:error] [pid 992244:tid 992455] [client 20.63.87.152:19234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/.trash7206/index.php"] [unique_id "alQv5WJoJ8euboi5C2kb_QAAAFA"] [Sun Jul 12 18:23:01.501465 2026] [security2:error] [pid 992244:tid 992383] [client 65.21.113.206:57412] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQv5WJoJ8euboi5C2kcAQAAAAg"] [Sun Jul 12 18:23:01.674555 2026] [proxy:error] [pid 992537:tid 992706] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:01.674763 2026] [proxy_http:error] [pid 992537:tid 992706] [client 20.63.87.152:11506] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:01.676885 2026] [proxy:error] [pid 992537:tid 992706] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:01.677078 2026] [proxy_http:error] [pid 992537:tid 992706] [client 20.63.87.152:11506] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:01.920303 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:01.920842 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:01.999779 2026] [security2:error] [pid 992244:tid 992378] [client 65.21.113.206:54308] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQv5WJoJ8euboi5C2kcDQAAAAM"] [Sun Jul 12 18:23:02.013478 2026] [proxy:error] [pid 992244:tid 992471] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:02.013720 2026] [proxy_http:error] [pid 992244:tid 992471] [client 20.63.87.152:19219] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:02.015833 2026] [proxy:error] [pid 992244:tid 992471] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:02.016009 2026] [proxy_http:error] [pid 992244:tid 992471] [client 20.63.87.152:19219] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:02.255458 2026] [security2:error] [pid 992244:tid 992475] [client 20.63.87.152:41906] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQv5mJoJ8euboi5C2kcEgAAAGQ"] [Sun Jul 12 18:23:02.321964 2026] [security2:error] [pid 992537:tid 992806] [client 65.21.113.206:57418] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWs5LzE1MTUvazkvODI0NC85MzM=.asp"] [unique_id "alQv5msmDw50MNj9aAK6hwAAAgk"] [Sun Jul 12 18:23:02.450117 2026] [security2:error] [pid 992244:tid 992440] [client 99.228.64.143:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv5WJoJ8euboi5C2kcDAAAAEE"] [Sun Jul 12 18:23:02.487126 2026] [security2:error] [pid 992244:tid 992430] [client 20.63.87.152:19253] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/.well-known/logs233/index.php"] [unique_id "alQv5mJoJ8euboi5C2kcGwAAADc"] [Sun Jul 12 18:23:02.508081 2026] [proxy:error] [pid 992537:tid 992707] (70014)End of file found: [client 139.162.88.198:47070] AH01095: prefetch request body failed to 127.0.0.1:8443 (127.0.0.1) from 139.162.88.198 () [Sun Jul 12 18:23:02.517076 2026] [security2:error] [pid 992244:tid 992444] [client 65.21.113.206:54308] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQv5mJoJ8euboi5C2kcGgAAAEU"] [Sun Jul 12 18:23:02.534496 2026] [security2:error] [pid 992537:tid 992756] [client 65.21.113.253:47428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "smellytele.com"] [uri "/robots.txt"] [unique_id "alQv5msmDw50MNj9aAK6igAAAdc"] [Sun Jul 12 18:23:02.565181 2026] [security2:error] [pid 992537:tid 992807] [client 131.196.1.99:40830] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv5msmDw50MNj9aAK6iQAAAgo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:02.682742 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:02.683421 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:02.917934 2026] [security2:error] [pid 992244:tid 992425] [client 20.63.87.152:19078] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/.well-known/wp-cron.php"] [unique_id "alQv5mJoJ8euboi5C2kcKgAAADI"] [Sun Jul 12 18:23:03.127161 2026] [security2:error] [pid 992244:tid 992459] [client 43.153.73.200:50266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 200.73.153.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/register.php"] [unique_id "alQv5mJoJ8euboi5C2kcLgAAAFQ"] [Sun Jul 12 18:23:03.140027 2026] [security2:error] [pid 992537:tid 992775] [client 168.100.149.55:32724] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27040/bargainor/2308_did.jsp"] [unique_id "alQv52smDw50MNj9aAK6lQAAAeo"] [Sun Jul 12 18:23:03.164693 2026] [security2:error] [pid 992244:tid 992441] [client 45.205.1.241:59856] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "302"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQv52JoJ8euboi5C2kcNQAAAEI"] [Sun Jul 12 18:23:03.275840 2026] [security2:error] [pid 992244:tid 992406] [client 20.63.87.152:5186] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/0.kb-v3.php"] [unique_id "alQv52JoJ8euboi5C2kcPAAAAB8"] [Sun Jul 12 18:23:03.438703 2026] [security2:error] [pid 992244:tid 992390] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv52JoJ8euboi5C2kcMAAAAA8"] [Sun Jul 12 18:23:03.438754 2026] [security2:error] [pid 992244:tid 992390] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv52JoJ8euboi5C2kcMAAAAA8"] [Sun Jul 12 18:23:03.439722 2026] [security2:error] [pid 992244:tid 992469] [client 65.21.113.206:60984] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWs5LzE1MTUvazkvODI0NC85MzM=.asp"] [unique_id "alQv5mJoJ8euboi5C2kcLwAAAF4"] [Sun Jul 12 18:23:03.466519 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:03.467021 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:03.539891 2026] [security2:error] [pid 992244:tid 992398] [client 20.63.87.152:5201] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/0.php"] [unique_id "alQv52JoJ8euboi5C2kcQAAAABc"] [Sun Jul 12 18:23:03.780820 2026] [security2:error] [pid 992244:tid 992443] [client 20.63.87.152:20957] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/002.php"] [unique_id "alQv52JoJ8euboi5C2kcSQAAAEQ"] [Sun Jul 12 18:23:03.903808 2026] [security2:error] [pid 992244:tid 992410] [client 66.187.5.104:45764] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "webmail.thegreatermv.org"] [uri "/src/.git/HEAD"] [unique_id "alQv52JoJ8euboi5C2kcTQAAACM"] [Sun Jul 12 18:23:04.024253 2026] [security2:error] [pid 992244:tid 992440] [client 47.82.124.148:48851] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQv6GJoJ8euboi5C2kcUQAAAEE"] [Sun Jul 12 18:23:04.064564 2026] [security2:error] [pid 992244:tid 992415] [client 20.63.87.152:41872] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/01.php"] [unique_id "alQv6GJoJ8euboi5C2kcVwAAACg"] [Sun Jul 12 18:23:04.248062 2026] [security2:error] [pid 992537:tid 992729] [client 20.63.87.152:20314] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/0x.php"] [unique_id "alQv6GsmDw50MNj9aAK6ogAAAbw"] [Sun Jul 12 18:23:04.269644 2026] [authz_core:error] [pid 992537:tid 992686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:04.270155 2026] [authz_core:error] [pid 992537:tid 992686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:04.393059 2026] [security2:error] [pid 992537:tid 992747] [client 104.156.225.167:63687] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepinkbridge.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQv6GsmDw50MNj9aAK6pAAAAc4"] [Sun Jul 12 18:23:04.602142 2026] [security2:error] [pid 992537:tid 992778] [client 20.63.87.152:19108] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcontacts.bluehive.net"] [uri "/1.php"] [unique_id "alQv6GsmDw50MNj9aAK6qAAAAe0"] [Sun Jul 12 18:23:04.602428 2026] [security2:error] [pid 992537:tid 992778] [client 20.63.87.152:19108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/1.php"] [unique_id "alQv6GsmDw50MNj9aAK6qAAAAe0"] [Sun Jul 12 18:23:04.659930 2026] [security2:error] [pid 992244:tid 992316] [remote 17.246.15.241:49182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 241.15.246.17.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQv6GJoJ8euboi5C2kcXwAATEY"], referer: https://idreamofjeannemarie.com/tag/sara/page/14/ [Sun Jul 12 18:23:04.855226 2026] [security2:error] [pid 992244:tid 992479] [client 20.63.87.152:19244] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/100.php"] [unique_id "alQv6GJoJ8euboi5C2kcYwAAAGg"] [Sun Jul 12 18:23:05.009080 2026] [authz_core:error] [pid 992244:tid 992397] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:05.010014 2026] [authz_core:error] [pid 992244:tid 992397] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:05.112506 2026] [security2:error] [pid 992244:tid 992394] [client 20.63.87.152:8310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/122.php"] [unique_id "alQv6WJoJ8euboi5C2kcagAAABM"] [Sun Jul 12 18:23:05.139165 2026] [security2:error] [pid 992244:tid 992396] [client 168.100.149.127:54058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27105/bargainor/2308_delphian.jsp"] [unique_id "alQv6WJoJ8euboi5C2kcbQAAABU"] [Sun Jul 12 18:23:05.381959 2026] [security2:error] [pid 992537:tid 992743] [client 20.63.87.152:20950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/123.php"] [unique_id "alQv6WsmDw50MNj9aAK6swAAAco"] [Sun Jul 12 18:23:05.567078 2026] [security2:error] [pid 992537:tid 992722] [client 207.46.13.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQv6WsmDw50MNj9aAK6sgAAAbU"] [Sun Jul 12 18:23:05.662229 2026] [security2:error] [pid 992244:tid 992499] [client 20.63.87.152:22487] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/13.php"] [unique_id "alQv6WJoJ8euboi5C2kceAAAAHw"] [Sun Jul 12 18:23:05.765421 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:05.766020 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:05.913475 2026] [security2:error] [pid 992244:tid 992453] [client 20.63.87.152:3599] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/133.php"] [unique_id "alQv6WJoJ8euboi5C2kcfwAAAE4"] [Sun Jul 12 18:23:06.271940 2026] [security2:error] [pid 992244:tid 992501] [client 20.63.87.152:19256] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/155.php"] [unique_id "alQv6mJoJ8euboi5C2kciQAAAH4"] [Sun Jul 12 18:23:06.455677 2026] [security2:error] [pid 992244:tid 992444] [client 168.100.149.149:18992] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27170/bargainor/2308_anisodactyli.jsp"] [unique_id "alQv6mJoJ8euboi5C2kcjQAAAEU"] [Sun Jul 12 18:23:06.509915 2026] [authz_core:error] [pid 992244:tid 992449] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:06.510728 2026] [authz_core:error] [pid 992244:tid 992449] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:06.549643 2026] [security2:error] [pid 992244:tid 992391] [client 20.63.87.152:10405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/177.php"] [unique_id "alQv6mJoJ8euboi5C2kckgAAABA"] [Sun Jul 12 18:23:07.025916 2026] [security2:error] [pid 992537:tid 992785] [client 20.63.87.152:28027] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/1index.php"] [unique_id "alQv62smDw50MNj9aAK6vwAAAfQ"] [Sun Jul 12 18:23:07.100208 2026] [security2:error] [pid 992244:tid 992451] [client 57.141.18.13:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQv6mJoJ8euboi5C2kclQAAAEw"] [Sun Jul 12 18:23:07.242816 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:07.243513 2026] [authz_core:error] [pid 992244:tid 992468] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:07.310405 2026] [security2:error] [pid 992537:tid 992716] [client 86.250.229.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQv6msmDw50MNj9aAK6ugAAAa8"] [Sun Jul 12 18:23:07.313495 2026] [security2:error] [pid 992244:tid 992457] [client 20.63.87.152:21564] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/2.php"] [unique_id "alQv62JoJ8euboi5C2kcqQAAAFI"] [Sun Jul 12 18:23:07.613678 2026] [security2:error] [pid 992244:tid 992377] [client 20.63.87.152:34132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/222.php"] [unique_id "alQv62JoJ8euboi5C2kcsQAAAAI"] [Sun Jul 12 18:23:07.909237 2026] [security2:error] [pid 992244:tid 992453] [client 20.63.87.152:34163] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/2p.update.php"] [unique_id "alQv62JoJ8euboi5C2kcuAAAAE4"] [Sun Jul 12 18:23:07.979472 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:07.979982 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:08.278766 2026] [security2:error] [pid 992244:tid 992436] [client 20.63.87.152:20308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/3.php"] [unique_id "alQv7GJoJ8euboi5C2kcwgAAAD0"] [Sun Jul 12 18:23:08.350140 2026] [security2:error] [pid 992537:tid 992732] [client 125.167.21.72:61739] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv7GsmDw50MNj9aAK6ygAAAb8"] [Sun Jul 12 18:23:08.350515 2026] [security2:error] [pid 992537:tid 992732] [client 125.167.21.72:61739] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv7GsmDw50MNj9aAK6ygAAAb8"] [Sun Jul 12 18:23:08.460875 2026] [security2:error] [pid 992244:tid 992492] [client 168.100.149.194:50048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27235/bargainor/2308_birefraction.jsp"] [unique_id "alQv7GJoJ8euboi5C2kcxwAAAHU"] [Sun Jul 12 18:23:08.515943 2026] [security2:error] [pid 992244:tid 992391] [client 20.63.87.152:7234] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQv7GJoJ8euboi5C2kcyQAAABA"] [Sun Jul 12 18:23:08.692819 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:08.693317 2026] [authz_core:error] [pid 992537:tid 992798] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:08.774505 2026] [security2:error] [pid 992537:tid 992701] [client 20.63.87.152:25369] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/403.php"] [unique_id "alQv7GsmDw50MNj9aAK60QAAAaA"] [Sun Jul 12 18:23:09.109151 2026] [security2:error] [pid 992244:tid 992461] [client 20.63.87.152:11505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.bluehive.net"] [uri "/404.php"] [unique_id "alQv7WJoJ8euboi5C2kc0gAAAFY"] [Sun Jul 12 18:23:09.429209 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:09.442460 2026] [authz_core:error] [pid 992244:tid 992489] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:09.553262 2026] [security2:error] [pid 992537:tid 992729] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvMzQxOC95b2Y=.asp"] [unique_id "alQv7WsmDw50MNj9aAK62gAAAbw"] [Sun Jul 12 18:23:09.593715 2026] [core:error] [pid 992537:tid 992727] [client 13.140.136.17:53144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:09.593769 2026] [core:error] [pid 992537:tid 992727] [client 13.140.136.17:53144] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:09.700691 2026] [http2:warn] [pid 992537:tid 992754] [client 98.70.32.248:45990] h2_stream(992537-142-1,CLEANUP): started=1, scheduled=1, ready=0, out_buffer=0 [Sun Jul 12 18:23:10.225914 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:10.226422 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:10.305888 2026] [security2:error] [pid 992244:tid 992403] [client 168.144.106.227:57705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.106.144.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.dennismassawe.xbs.bcg.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQv7mJoJ8euboi5C2kc7wAAABw"] [Sun Jul 12 18:23:10.416761 2026] [security2:error] [pid 992244:tid 992325] [remote 95.108.213.142:58674] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/atari-2600-sat\\xc4\\xb1l\\xc4\\xb1k-k.html"] [unique_id "alQv7mJoJ8euboi5C2kc9gAAU08"] [Sun Jul 12 18:23:10.542590 2026] [security2:error] [pid 992537:tid 992711] [client 66.249.64.166:55730] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQv7msmDw50MNj9aAK64AAAAao"] [Sun Jul 12 18:23:10.631325 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv7mJoJ8euboi5C2kc7AAAAHg"] [Sun Jul 12 18:23:10.631394 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv7mJoJ8euboi5C2kc7AAAAHg"] [Sun Jul 12 18:23:10.632377 2026] [security2:error] [pid 992244:tid 992435] [client 65.21.113.206:60994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvMzQxOC95b2Y=.asp"] [unique_id "alQv7mJoJ8euboi5C2kc6QAAADw"] [Sun Jul 12 18:23:11.000199 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:11.000856 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:11.084102 2026] [security2:error] [pid 992244:tid 992428] [client 168.100.149.16:32636] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27300/bargainor/2308_mediator.jsp"] [unique_id "alQv72JoJ8euboi5C2kdDwAAADU"] [Sun Jul 12 18:23:11.198137 2026] [security2:error] [pid 992244:tid 992361] [remote 47.86.33.52:7758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 52.33.86.47.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "softwaresermon.com"] [uri "/wp-login.php"] [unique_id "alQv72JoJ8euboi5C2kdEAAAJ3M"] [Sun Jul 12 18:23:11.283574 2026] [security2:error] [pid 992244:tid 992479] [client 189.219.115.208:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv7mJoJ8euboi5C2kdDAAAAGg"] [Sun Jul 12 18:23:11.673709 2026] [security2:error] [pid 992244:tid 992448] [client 24.203.79.110:50496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv72JoJ8euboi5C2kdGgAAAEk"] [Sun Jul 12 18:23:11.673923 2026] [security2:error] [pid 992244:tid 992448] [client 24.203.79.110:50496] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv72JoJ8euboi5C2kdGgAAAEk"] [Sun Jul 12 18:23:11.809805 2026] [authz_core:error] [pid 992537:tid 992742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:11.810453 2026] [authz_core:error] [pid 992537:tid 992742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:12.239586 2026] [security2:error] [pid 992244:tid 992476] [client 45.225.54.32:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQv62JoJ8euboi5C2kcswAAAGU"] [Sun Jul 12 18:23:12.596562 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:12.597115 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:12.626317 2026] [security2:error] [pid 992537:tid 992788] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvNTI4MS95b2Y=.asp"] [unique_id "alQv8GsmDw50MNj9aAK68QAAAfc"] [Sun Jul 12 18:23:13.045844 2026] [security2:error] [pid 992244:tid 992258] [remote 45.132.115.70:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQv8WJoJ8euboi5C2kdSAAAeQw"] [Sun Jul 12 18:23:13.142876 2026] [security2:error] [pid 992244:tid 992499] [client 168.100.149.197:49134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27365/bargainor/2308_gurian.jsp"] [unique_id "alQv8WJoJ8euboi5C2kdTQAAAHw"] [Sun Jul 12 18:23:13.445513 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:13.446296 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:13.646191 2026] [security2:error] [pid 992244:tid 992469] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv8WJoJ8euboi5C2kdTAAAAF4"] [Sun Jul 12 18:23:13.646249 2026] [security2:error] [pid 992244:tid 992469] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv8WJoJ8euboi5C2kdTAAAAF4"] [Sun Jul 12 18:23:13.647563 2026] [security2:error] [pid 992244:tid 992396] [client 65.21.113.206:50404] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvNTI4MS95b2Y=.asp"] [unique_id "alQv8WJoJ8euboi5C2kdSgAAABU"] [Sun Jul 12 18:23:14.157232 2026] [security2:error] [pid 992537:tid 992716] [client 114.119.149.91:44127] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "50.87.174.140"] [uri "/"] [unique_id "alQv8msmDw50MNj9aAK7SQAAAa8"], referer: https://50.87.174.140/?7a2vhzg456200919f [Sun Jul 12 18:23:14.286385 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:14.287164 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:14.385762 2026] [security2:error] [pid 992244:tid 992306] [remote 52.4.76.156:0] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "barrozolaw.com"] [uri "/resources/"] [unique_id "alQv8mJoJ8euboi5C2kdfAAAGTw"] [Sun Jul 12 18:23:14.755147 2026] [security2:error] [pid 992244:tid 992394] [client 168.144.106.227:58302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 227.106.144.168.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.dennismassawe.xbs.bcg.mybluehost.me"] [uri "/administrator/"] [unique_id "alQv8mJoJ8euboi5C2kdgQAAABM"] [Sun Jul 12 18:23:15.073479 2026] [authz_core:error] [pid 992244:tid 992458] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:15.074015 2026] [authz_core:error] [pid 992244:tid 992458] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:15.180191 2026] [security2:error] [pid 992244:tid 992407] [client 168.100.149.243:34070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27430/bargainor/2308_monkey.jsp"] [unique_id "alQv82JoJ8euboi5C2kdjgAAACA"] [Sun Jul 12 18:23:15.749582 2026] [security2:error] [pid 992537:tid 992729] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvNzc1Mi95b2Y=.asp"] [unique_id "alQv82smDw50MNj9aAK7aQAAAbw"] [Sun Jul 12 18:23:15.822519 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:15.823271 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:15.894447 2026] [access_compat:error] [pid 992244:tid 992434] [client 45.176.235.189:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/compaq-ac-adapter [Sun Jul 12 18:23:15.896000 2026] [access_compat:error] [pid 992244:tid 992434] [client 45.176.235.189:0] AH01797: client denied by server configuration: /home2/huakionl/public_html/pcdenchi/401.shtml [Sun Jul 12 18:23:16.404467 2026] [security2:error] [pid 992244:tid 992381] [client 15.235.107.157:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQv82JoJ8euboi5C2kdsAAAAAY"] [Sun Jul 12 18:23:16.625690 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:16.626424 2026] [authz_core:error] [pid 992244:tid 992461] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:16.725108 2026] [security2:error] [pid 992537:tid 992715] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv9GsmDw50MNj9aAK7bAAAAa4"] [Sun Jul 12 18:23:16.725159 2026] [security2:error] [pid 992537:tid 992715] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv9GsmDw50MNj9aAK7bAAAAa4"] [Sun Jul 12 18:23:16.726110 2026] [security2:error] [pid 992244:tid 992404] [client 65.21.113.206:50418] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWt5LzgzNzUva3kvNzc1Mi95b2Y=.asp"] [unique_id "alQv9GJoJ8euboi5C2kdtwAAAB0"] [Sun Jul 12 18:23:17.152731 2026] [security2:error] [pid 992537:tid 992759] [client 168.100.149.66:27892] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27495/bargainor/2308_impeccance.jsp"] [unique_id "alQv9WsmDw50MNj9aAK7fgAAAdo"] [Sun Jul 12 18:23:17.418309 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:17.419039 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:17.449277 2026] [security2:error] [pid 992244:tid 992407] [client 43.173.178.59:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "undameta.com"] [uri "/index.php"] [unique_id "alQv9GJoJ8euboi5C2kdyAAAACA"] [Sun Jul 12 18:23:17.796341 2026] [proxy:error] [pid 992244:tid 992467] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:17.796563 2026] [proxy_http:error] [pid 992244:tid 992467] [client 193.32.162.60:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:17.798635 2026] [proxy:error] [pid 992244:tid 992467] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:23:17.798831 2026] [proxy_http:error] [pid 992244:tid 992467] [client 193.32.162.60:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:23:18.227580 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:18.228239 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:18.327355 2026] [core:error] [pid 992537:tid 992716] [client 13.140.136.17:62636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:18.327403 2026] [core:error] [pid 992537:tid 992716] [client 13.140.136.17:62636] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:18.463202 2026] [security2:error] [pid 992244:tid 992433] [client 168.100.149.91:54230] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27560/bargainor/2308_gunz.jsp"] [unique_id "alQv9mJoJ8euboi5C2kd4wAAADo"] [Sun Jul 12 18:23:19.030494 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:19.031004 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:19.274981 2026] [security2:error] [pid 992244:tid 992415] [client 125.167.21.72:62188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv92JoJ8euboi5C2kd_QAAACg"] [Sun Jul 12 18:23:19.275243 2026] [security2:error] [pid 992244:tid 992415] [client 125.167.21.72:62188] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQv92JoJ8euboi5C2kd_QAAACg"] [Sun Jul 12 18:23:19.493377 2026] [security2:error] [pid 992537:tid 992799] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWtfNjY1OV9rdGJ1L3RfMTAzNl9idW8=.html"] [unique_id "alQv92smDw50MNj9aAK7nAAAAgI"] [Sun Jul 12 18:23:19.858345 2026] [security2:error] [pid 992244:tid 992341] [remote 184.72.84.154:0] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "barrozolaw.com"] [uri "/wp-content/uploads/2019/09/cropped-logo-icon_01-270x270.png"] [unique_id "alQv92JoJ8euboi5C2keCwAAY18"] [Sun Jul 12 18:23:19.862061 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:19.862692 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:20.437011 2026] [security2:error] [pid 992537:tid 992745] [client 47.128.47.112:12614] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mws.edu.ph"] [uri "/robots.txt"] [unique_id "alQv-GsmDw50MNj9aAK7qgAAAcw"] [Sun Jul 12 18:23:20.539430 2026] [security2:error] [pid 992537:tid 992693] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv92smDw50MNj9aAK7pAAAAZg"] [Sun Jul 12 18:23:20.539534 2026] [security2:error] [pid 992537:tid 992693] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv92smDw50MNj9aAK7pAAAAZg"] [Sun Jul 12 18:23:20.540797 2026] [security2:error] [pid 992244:tid 992411] [client 65.21.113.206:50424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWtfNjY1OV9rdGJ1L3RfMTAzNl9idW8=.html"] [unique_id "alQv92JoJ8euboi5C2keDgAAACQ"] [Sun Jul 12 18:23:20.643614 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:20.644298 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:20.647300 2026] [security2:error] [pid 992244:tid 992398] [client 84.236.170.59:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv-GJoJ8euboi5C2keEwAAABc"] [Sun Jul 12 18:23:20.746303 2026] [cgid:error] [pid 992244:tid 992477] [client 184.154.139.33:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:23:20.746607 2026] [security2:error] [pid 992244:tid 992477] [client 184.154.139.33:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.borrowmyheart.org"] [uri "/404.shtml"] [unique_id "alQv-GJoJ8euboi5C2keIwAAAGY"] [Sun Jul 12 18:23:20.748877 2026] [security2:error] [pid 992244:tid 992499] [client 184.154.139.33:51638] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.borrowmyheart.org"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQv-GJoJ8euboi5C2keIQAAAHw"] [Sun Jul 12 18:23:21.104725 2026] [security2:error] [pid 992244:tid 992447] [client 168.100.149.222:44058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27625/bargainor/2308_monadically.jsp"] [unique_id "alQv-WJoJ8euboi5C2keKwAAAEg"] [Sun Jul 12 18:23:21.406239 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:21.406825 2026] [authz_core:error] [pid 992244:tid 992379] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:21.730817 2026] [security2:error] [pid 992244:tid 992395] [client 184.154.139.33:51656] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.borrowmyheart.org"] [uri "/css/colors.css"] [unique_id "alQv-WJoJ8euboi5C2kePgAAABQ"] [Sun Jul 12 18:23:22.102356 2026] [security2:error] [pid 992537:tid 992707] [client 149.28.47.172:64742] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 172.47.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "lifeisdelicio.us"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQv-msmDw50MNj9aAK7uQAAAaY"] [Sun Jul 12 18:23:22.136496 2026] [authz_core:error] [pid 992244:tid 992494] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:22.137109 2026] [authz_core:error] [pid 992244:tid 992494] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:22.323168 2026] [security2:error] [pid 992537:tid 992716] [client 24.203.79.110:51016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv-msmDw50MNj9aAK7ugAAAa8"] [Sun Jul 12 18:23:22.323366 2026] [security2:error] [pid 992537:tid 992716] [client 24.203.79.110:51016] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQv-msmDw50MNj9aAK7ugAAAa8"] [Sun Jul 12 18:23:22.841861 2026] [security2:error] [pid 992537:tid 992643] [remote 57.141.18.35:46944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 35.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/KAZeorDrSGnvH9Aod_"] [unique_id "alQv-msmDw50MNj9aAK7vwAB_1g"] [Sun Jul 12 18:23:22.868422 2026] [security2:error] [pid 992244:tid 992343] [remote 72.167.50.103:58338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.50.167.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQv-mJoJ8euboi5C2keYwAAOWE"] [Sun Jul 12 18:23:22.877039 2026] [core:error] [pid 992244:tid 992377] [client 13.140.136.17:61684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:22.877134 2026] [core:error] [pid 992244:tid 992377] [client 13.140.136.17:61684] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:22.902006 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:22.902499 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:23.099589 2026] [security2:error] [pid 992244:tid 992420] [client 168.100.149.26:56656] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27690/bargainor/2308_enhalo.jsp"] [unique_id "alQv-2JoJ8euboi5C2kebQAAAC0"] [Sun Jul 12 18:23:23.523902 2026] [security2:error] [pid 992537:tid 992773] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fMzQxOF9qOWY=.html"] [unique_id "alQv-2smDw50MNj9aAK7xwAAAeg"] [Sun Jul 12 18:23:23.673952 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:23.674614 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:24.200384 2026] [security2:error] [pid 992537:tid 992799] [client 167.86.90.243:50936] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "omnimodedigital.com"] [uri "/wp-config.php-backup"] [unique_id "alQv_GsmDw50MNj9aAK71wAAAgI"] [Sun Jul 12 18:23:24.247138 2026] [security2:error] [pid 992537:tid 992702] [client 167.86.90.243:50924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(wp-)?config\\\\.(php\\\\.)?(?:bac?k|o(?:ld|rig)|copy|s(?:ave|wp)|vim?\\\\.|~)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1254"] [id "390597"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data Leakage - attempt to access backup config file (disable this rule if you require access to these backup files)"] [severity "CRITICAL"] [hostname "omnimodedigital.com"] [uri "/wp-config.bak"] [unique_id "alQv_GsmDw50MNj9aAK72QAAAaE"] [Sun Jul 12 18:23:24.482741 2026] [authz_core:error] [pid 992537:tid 992728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:24.483248 2026] [authz_core:error] [pid 992537:tid 992728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:24.581313 2026] [security2:error] [pid 992537:tid 992684] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv_GsmDw50MNj9aAK7zwAAAY8"] [Sun Jul 12 18:23:24.581381 2026] [security2:error] [pid 992537:tid 992684] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv_GsmDw50MNj9aAK7zwAAAY8"] [Sun Jul 12 18:23:24.581983 2026] [security2:error] [pid 992244:tid 992479] [client 65.21.113.206:57036] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fMzQxOF9qOWY=.html"] [unique_id "alQv_GJoJ8euboi5C2keggAAAGg"] [Sun Jul 12 18:23:24.897302 2026] [security2:error] [pid 992537:tid 992693] [client 167.86.90.243:47880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GsmDw50MNj9aAK76QAAAZg"] [Sun Jul 12 18:23:24.897637 2026] [security2:error] [pid 992244:tid 992396] [client 167.86.90.243:47794] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "omnimodedigital.com"] [uri "/api/index.php/v1/config/application"] [unique_id "alQv_GJoJ8euboi5C2kenAAAABU"] [Sun Jul 12 18:23:24.899070 2026] [security2:error] [pid 992244:tid 992432] [client 167.86.90.243:47902] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kengAAADk"] [Sun Jul 12 18:23:24.899567 2026] [security2:error] [pid 992244:tid 992399] [client 167.86.90.243:47818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kenQAAABg"] [Sun Jul 12 18:23:24.899713 2026] [security2:error] [pid 992244:tid 992436] [client 167.86.90.243:47930] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/components/com_contushdvideoshare/hdflvplayer/download.php"] [unique_id "alQv_GJoJ8euboi5C2kenwAAAD0"] [Sun Jul 12 18:23:24.901076 2026] [security2:error] [pid 992244:tid 992489] [client 167.86.90.243:47848] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2keoAAAAHI"] [Sun Jul 12 18:23:24.918676 2026] [security2:error] [pid 992244:tid 992481] [client 167.86.90.243:47784] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/modules/mod_dvfoldercontent/download.php"] [unique_id "alQv_GJoJ8euboi5C2keoQAAAGo"] [Sun Jul 12 18:23:24.924091 2026] [security2:error] [pid 992244:tid 992377] [client 167.86.90.243:47864] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/plugins/content/wd/wddownload.php"] [unique_id "alQv_GJoJ8euboi5C2keogAAAAI"] [Sun Jul 12 18:23:24.924369 2026] [security2:error] [pid 992244:tid 992450] [client 167.86.90.243:47942] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2keowAAAEs"] [Sun Jul 12 18:23:24.926256 2026] [security2:error] [pid 992244:tid 992383] [client 167.86.90.243:47812] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kepQAAAAg"] [Sun Jul 12 18:23:24.927174 2026] [security2:error] [pid 992244:tid 992416] [client 167.86.90.243:47920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kepAAAACk"] [Sun Jul 12 18:23:24.928259 2026] [security2:error] [pid 992244:tid 992482] [client 167.86.90.243:47950] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/components/com_docman/dl2.php"] [unique_id "alQv_GJoJ8euboi5C2kepgAAAGs"] [Sun Jul 12 18:23:24.928720 2026] [security2:error] [pid 992537:tid 992788] [client 167.86.90.243:47940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GsmDw50MNj9aAK76wAAAfc"] [Sun Jul 12 18:23:24.931126 2026] [security2:error] [pid 992244:tid 992463] [client 167.86.90.243:47956] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kepwAAAFg"] [Sun Jul 12 18:23:24.937933 2026] [security2:error] [pid 992244:tid 992469] [client 167.86.90.243:47910] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kemAAAAF4"] [Sun Jul 12 18:23:24.941655 2026] [security2:error] [pid 992244:tid 992492] [client 167.86.90.243:47832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/components/com_hdflvplayer/hdflvplayer/download.php"] [unique_id "alQv_GJoJ8euboi5C2keqAAAAHU"] [Sun Jul 12 18:23:24.945165 2026] [security2:error] [pid 992244:tid 992424] [client 167.86.90.243:47846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/plugins/content/s5_media_player/helper.php"] [unique_id "alQv_GJoJ8euboi5C2kemwAAADE"] [Sun Jul 12 18:23:24.946546 2026] [security2:error] [pid 992244:tid 992415] [client 167.86.90.243:47968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/plugins/content/jw_allvideos/includes/download.php"] [unique_id "alQv_GJoJ8euboi5C2keqQAAACg"] [Sun Jul 12 18:23:24.949788 2026] [security2:error] [pid 992244:tid 992410] [client 167.86.90.243:47888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kemQAAACM"] [Sun Jul 12 18:23:24.998265 2026] [security2:error] [pid 992244:tid 992435] [client 167.86.90.243:47804] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/administrator/components/com_aceftp/quixplorer/index.php"] [unique_id "alQv_GJoJ8euboi5C2kemgAAADw"] [Sun Jul 12 18:23:25.146079 2026] [security2:error] [pid 992244:tid 992402] [client 168.100.149.217:22180] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27755/bargainor/2308_metalogical.jsp"] [unique_id "alQv_WJoJ8euboi5C2keqwAAABs"] [Sun Jul 12 18:23:25.259211 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:25.259887 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:25.454645 2026] [autoindex:error] [pid 992244:tid 992433] [client 139.59.67.106:0] AH01276: Cannot serve directory /home4/airqtool/public_html/premiumscentingtools/: No matching DirectoryIndex (index.php,index.html,/index.php) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:23:25.463389 2026] [core:error] [pid 992244:tid 992433] [client 139.59.67.106:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:25.635472 2026] [security2:error] [pid 992244:tid 992393] [client 155.117.163.113:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQv_GJoJ8euboi5C2kekQAAABI"], referer: https://mackinstyle.com/ [Sun Jul 12 18:23:25.666202 2026] [security2:error] [pid 992537:tid 992783] [client 167.172.92.64:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQv_GsmDw50MNj9aAK75AAAAfI"], referer: https://mackinstyle.com/ [Sun Jul 12 18:23:25.717508 2026] [core:error] [pid 992244:tid 992488] [client 13.140.136.17:53586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:25.717547 2026] [core:error] [pid 992244:tid 992488] [client 13.140.136.17:53586] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:25.733016 2026] [security2:error] [pid 992537:tid 992770] [client 167.86.90.243:48026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK7_QAAAeU"] [Sun Jul 12 18:23:25.733418 2026] [security2:error] [pid 992244:tid 992497] [client 167.86.90.243:48014] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2keyAAAAHo"] [Sun Jul 12 18:23:25.733602 2026] [security2:error] [pid 992244:tid 992496] [client 167.86.90.243:47976] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2keyQAAAHk"] [Sun Jul 12 18:23:25.742087 2026] [security2:error] [pid 992537:tid 992796] [client 167.86.90.243:47990] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK7_gAAAf8"] [Sun Jul 12 18:23:25.742756 2026] [security2:error] [pid 992244:tid 992428] [client 167.86.90.243:48004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2keywAAADU"] [Sun Jul 12 18:23:25.750531 2026] [security2:error] [pid 992537:tid 992801] [client 167.86.90.243:48006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK7_wAAAgQ"] [Sun Jul 12 18:23:25.792921 2026] [security2:error] [pid 992537:tid 992761] [client 167.86.90.243:48056] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK8AAAAAdw"] [Sun Jul 12 18:23:25.812125 2026] [security2:error] [pid 992537:tid 992756] [client 167.86.90.243:48040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK8AQAAAdc"] [Sun Jul 12 18:23:25.812982 2026] [security2:error] [pid 992537:tid 992733] [client 167.86.90.243:48122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK8AgAAAcA"] [Sun Jul 12 18:23:25.816208 2026] [security2:error] [pid 992244:tid 992494] [client 167.86.90.243:48042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke1gAAAHc"] [Sun Jul 12 18:23:25.817831 2026] [security2:error] [pid 992244:tid 992384] [client 167.86.90.243:48128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke1wAAAAk"] [Sun Jul 12 18:23:25.822701 2026] [security2:error] [pid 992244:tid 992418] [client 167.86.90.243:48094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke2QAAACs"] [Sun Jul 12 18:23:25.822847 2026] [security2:error] [pid 992244:tid 992403] [client 167.86.90.243:48070] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke2AAAABw"] [Sun Jul 12 18:23:25.825651 2026] [security2:error] [pid 992244:tid 992461] [client 167.86.90.243:48104] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke2gAAAFY"] [Sun Jul 12 18:23:25.833442 2026] [security2:error] [pid 992244:tid 992498] [client 167.86.90.243:48084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WJoJ8euboi5C2ke2wAAAHs"] [Sun Jul 12 18:23:25.836324 2026] [security2:error] [pid 992537:tid 992762] [client 167.86.90.243:48110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK8AwAAAd0"] [Sun Jul 12 18:23:25.848031 2026] [security2:error] [pid 992537:tid 992724] [client 167.86.90.243:48130] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_WsmDw50MNj9aAK8BAAAAbc"] [Sun Jul 12 18:23:26.038594 2026] [authz_core:error] [pid 992537:tid 992691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:26.039182 2026] [authz_core:error] [pid 992537:tid 992691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:26.316442 2026] [security2:error] [pid 992244:tid 992415] [client 167.86.90.243:48134] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2ke6gAAACg"] [Sun Jul 12 18:23:26.423453 2026] [security2:error] [pid 992537:tid 992727] [client 167.86.90.243:48166] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8FwAAAbo"] [Sun Jul 12 18:23:26.423455 2026] [security2:error] [pid 992537:tid 992702] [client 167.86.90.243:48150] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8GAAAAaE"] [Sun Jul 12 18:23:26.423972 2026] [security2:error] [pid 992537:tid 992799] [client 167.86.90.243:48170] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8GQAAAgI"] [Sun Jul 12 18:23:26.561225 2026] [security2:error] [pid 992537:tid 992723] [client 195.2.80.133:50285] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "195.2.80.133" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-comments-post.php"] [unique_id "alQv_msmDw50MNj9aAK8GwAAAbY"], referer: https://www.neighborspacebaltimorecounty.org/2020/12/08/givngtuesday2020-turnerstation-post1/#comment-19898 [Sun Jul 12 18:23:26.561431 2026] [security2:error] [pid 992537:tid 992723] [client 195.2.80.133:50285] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-comments-post.php"] [unique_id "alQv_msmDw50MNj9aAK8GwAAAbY"], referer: https://www.neighborspacebaltimorecounty.org/2020/12/08/givngtuesday2020-turnerstation-post1/#comment-19898 [Sun Jul 12 18:23:26.611566 2026] [security2:error] [pid 992244:tid 992442] [client 57.141.18.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2ke7QAAAEM"] [Sun Jul 12 18:23:26.676809 2026] [security2:error] [pid 992537:tid 992778] [client 184.154.139.33:36128] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.borrowmyheart.org"] [uri "/font-icons/custom-icons/css/custom-icons-ie7.css"] [unique_id "alQv_msmDw50MNj9aAK8HQAAAe0"] [Sun Jul 12 18:23:26.820164 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:26.820845 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:26.868854 2026] [security2:error] [pid 992244:tid 992387] [client 167.86.90.243:48200] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2ke_AAAAAw"] [Sun Jul 12 18:23:26.869432 2026] [security2:error] [pid 992537:tid 992793] [client 167.86.90.243:48206] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php"] [unique_id "alQv_msmDw50MNj9aAK8HwAAAfw"] [Sun Jul 12 18:23:26.869713 2026] [security2:error] [pid 992537:tid 992793] [client 167.86.90.243:48206] ModSecurity: Warning. Matched phrase "FDM" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "omnimodedigital.com"] [uri "/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php"] [unique_id "alQv_msmDw50MNj9aAK8HwAAAfw"] [Sun Jul 12 18:23:26.872712 2026] [security2:error] [pid 992537:tid 992714] [client 167.86.90.243:48178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8IAAAAa0"] [Sun Jul 12 18:23:26.887308 2026] [security2:error] [pid 992244:tid 992453] [client 167.86.90.243:48188] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2ke_gAAAE4"] [Sun Jul 12 18:23:26.897440 2026] [security2:error] [pid 992537:tid 992759] [client 167.86.90.243:48230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8IQAAAdo"] [Sun Jul 12 18:23:26.903318 2026] [security2:error] [pid 992537:tid 992771] [client 167.86.90.243:48240] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8IgAAAeY"] [Sun Jul 12 18:23:26.903547 2026] [security2:error] [pid 992244:tid 992476] [client 167.86.90.243:48258] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2ke_wAAAGU"] [Sun Jul 12 18:23:26.906369 2026] [security2:error] [pid 992244:tid 992376] [client 167.86.90.243:48254] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2kfAAAAAAE"] [Sun Jul 12 18:23:26.911655 2026] [security2:error] [pid 992244:tid 992385] [client 167.86.90.243:48222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2kfAQAAAAo"] [Sun Jul 12 18:23:26.920855 2026] [security2:error] [pid 992537:tid 992764] [client 167.86.90.243:48260] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8IwAAAd8"] [Sun Jul 12 18:23:26.933028 2026] [security2:error] [pid 992537:tid 992693] [client 167.86.90.243:48212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8JAAAAZg"] [Sun Jul 12 18:23:26.945821 2026] [security2:error] [pid 992244:tid 992400] [client 167.86.90.243:48262] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_mJoJ8euboi5C2kfAgAAABk"] [Sun Jul 12 18:23:26.952947 2026] [security2:error] [pid 992537:tid 992751] [client 167.86.90.243:48272] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQv_msmDw50MNj9aAK8JQAAAdI"] [Sun Jul 12 18:23:27.132977 2026] [security2:error] [pid 992244:tid 992448] [client 168.100.149.176:23648] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27820/bargainor/2308_psychoreflex.jsp"] [unique_id "alQv_2JoJ8euboi5C2kfCAAAAEk"] [Sun Jul 12 18:23:27.170137 2026] [cgid:error] [pid 992244:tid 992428] [client 184.154.139.33:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home1/zoeyblue/public_html/404.shtml [Sun Jul 12 18:23:27.170390 2026] [security2:error] [pid 992244:tid 992428] [client 184.154.139.33:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.borrowmyheart.org"] [uri "/404.shtml"] [unique_id "alQv_2JoJ8euboi5C2kfCwAAADU"] [Sun Jul 12 18:23:27.177171 2026] [security2:error] [pid 992244:tid 992468] [client 184.154.139.33:36142] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.borrowmyheart.org"] [uri "/a"] [unique_id "alQv_2JoJ8euboi5C2kfCgAAAF0"] [Sun Jul 12 18:23:27.235982 2026] [security2:error] [pid 992537:tid 992725] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fNTI4MV9qOWY=.html"] [unique_id "alQv_2smDw50MNj9aAK8MAAAAbg"] [Sun Jul 12 18:23:27.613252 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:27.613770 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:28.137583 2026] [security2:error] [pid 992244:tid 992470] [client 109.248.14.65:47337] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.14.248.109.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-comments-post.php"] [unique_id "alQwAGJoJ8euboi5C2kfEgAAAF8"], referer: https://www.neighborspacebaltimorecounty.org/2020/12/08/givngtuesday2020-turnerstation-post1/#comment-19898 [Sun Jul 12 18:23:28.137945 2026] [security2:error] [pid 992244:tid 992470] [client 109.248.14.65:47337] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "409"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/wp-comments-post.php"] [unique_id "alQwAGJoJ8euboi5C2kfEgAAAF8"], referer: https://www.neighborspacebaltimorecounty.org/2020/12/08/givngtuesday2020-turnerstation-post1/#comment-19898 [Sun Jul 12 18:23:28.141592 2026] [security2:error] [pid 992537:tid 992783] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv_2smDw50MNj9aAK8PAAAAfI"] [Sun Jul 12 18:23:28.141654 2026] [security2:error] [pid 992537:tid 992783] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQv_2smDw50MNj9aAK8PAAAAfI"] [Sun Jul 12 18:23:28.142604 2026] [security2:error] [pid 992537:tid 992803] [client 65.21.113.206:57046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fNTI4MV9qOWY=.html"] [unique_id "alQv_2smDw50MNj9aAK8OQAAAgY"] [Sun Jul 12 18:23:28.390687 2026] [proxy:warn] [pid 992244:tid 992399] [client 43.130.31.17:38160] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be wwcufm.com for uri /400.shtml [Sun Jul 12 18:23:28.403706 2026] [security2:error] [pid 992244:tid 992399] [client 43.130.31.17:38160] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "wwcufm.com"] [uri "/400.shtml"] [unique_id "alQwAGJoJ8euboi5C2kfGgAAABg"] [Sun Jul 12 18:23:28.425941 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:28.426413 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:28.752031 2026] [security2:error] [pid 992537:tid 992769] [client 46.35.147.159:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQv_2smDw50MNj9aAK8RgAAAeQ"], referer: https://mackinstyle.com/ [Sun Jul 12 18:23:29.101477 2026] [security2:error] [pid 992244:tid 992388] [client 168.100.149.91:49034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27885/bargainor/2308_mailable.jsp"] [unique_id "alQwAWJoJ8euboi5C2kfKwAAAA0"] [Sun Jul 12 18:23:29.171200 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:29.171914 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:29.546802 2026] [security2:error] [pid 992537:tid 992735] [client 125.167.21.72:62641] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwAWsmDw50MNj9aAK8WQAAAcI"] [Sun Jul 12 18:23:29.547028 2026] [security2:error] [pid 992537:tid 992735] [client 125.167.21.72:62641] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwAWsmDw50MNj9aAK8WQAAAcI"] [Sun Jul 12 18:23:29.991470 2026] [authz_core:error] [pid 992244:tid 992433] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:29.992522 2026] [authz_core:error] [pid 992244:tid 992433] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:30.442521 2026] [core:error] [pid 992537:tid 992696] [client 13.140.136.17:64640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:30.442562 2026] [core:error] [pid 992537:tid 992696] [client 13.140.136.17:64640] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:30.605756 2026] [security2:error] [pid 992537:tid 992716] [client 45.198.224.53:50754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.185.110"] [uri "/"] [unique_id "alQwAmsmDw50MNj9aAK8bwAAAa8"] [Sun Jul 12 18:23:30.818549 2026] [authz_core:error] [pid 992244:tid 992477] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:30.819054 2026] [authz_core:error] [pid 992244:tid 992477] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:31.106962 2026] [security2:error] [pid 992244:tid 992497] [client 168.100.149.139:49688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/27950/bargainor/2308_epidemiology.jsp"] [unique_id "alQwA2JoJ8euboi5C2kfTwAAAHo"] [Sun Jul 12 18:23:31.614729 2026] [authz_core:error] [pid 992537:tid 992761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:31.615216 2026] [authz_core:error] [pid 992537:tid 992761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:31.735653 2026] [core:error] [pid 992244:tid 992435] [client 139.59.67.106:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://67.20.110.78/ [Sun Jul 12 18:23:31.735714 2026] [core:error] [pid 992244:tid 992435] [client 139.59.67.106:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://67.20.110.78/ [Sun Jul 12 18:23:31.790685 2026] [security2:error] [pid 992537:tid 992724] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fNzc1Ml9qOWY=.html"] [unique_id "alQwA2smDw50MNj9aAK8fgAAAbc"] [Sun Jul 12 18:23:32.268124 2026] [security2:error] [pid 992244:tid 992406] [client 185.247.39.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwA2JoJ8euboi5C2kfaAAAAB8"] [Sun Jul 12 18:23:32.448704 2026] [authz_core:error] [pid 992537:tid 992747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:32.449213 2026] [authz_core:error] [pid 992537:tid 992747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:32.645576 2026] [security2:error] [pid 992244:tid 992481] [client 169.224.88.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwA2JoJ8euboi5C2kfYQAAAGo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:23:32.739484 2026] [security2:error] [pid 992537:tid 992708] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwBGsmDw50MNj9aAK8igAAAac"] [Sun Jul 12 18:23:32.739536 2026] [security2:error] [pid 992537:tid 992708] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwBGsmDw50MNj9aAK8igAAAac"] [Sun Jul 12 18:23:32.740722 2026] [security2:error] [pid 992244:tid 992476] [client 65.21.113.206:57056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWtfODMzOV9rbWo5L21fNzc1Ml9qOWY=.html"] [unique_id "alQwBGJoJ8euboi5C2kfcwAAAGU"] [Sun Jul 12 18:23:32.959182 2026] [security2:error] [pid 992537:tid 992728] [client 24.203.79.110:51534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwBGsmDw50MNj9aAK8lQAAAbs"] [Sun Jul 12 18:23:32.965674 2026] [security2:error] [pid 992537:tid 992728] [client 24.203.79.110:51534] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwBGsmDw50MNj9aAK8lQAAAbs"] [Sun Jul 12 18:23:33.143516 2026] [security2:error] [pid 992244:tid 992489] [client 168.100.149.89:59198] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28015/bargainor/2308_secque.jsp"] [unique_id "alQwBWJoJ8euboi5C2kfhwAAAHI"] [Sun Jul 12 18:23:33.232583 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:33.233094 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:33.963609 2026] [authz_core:error] [pid 992537:tid 992730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:33.964143 2026] [authz_core:error] [pid 992537:tid 992730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:34.159189 2026] [core:error] [pid 992537:tid 992726] [client 13.140.136.17:51723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:34.159235 2026] [core:error] [pid 992537:tid 992726] [client 13.140.136.17:51723] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:34.347118 2026] [security2:error] [pid 992537:tid 992791] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWwtMzMzMy9sd3UvNDE2NTMtd3V6dA=="] [unique_id "alQwBmsmDw50MNj9aAK8pQAAAfo"] [Sun Jul 12 18:23:34.472507 2026] [security2:error] [pid 992244:tid 992446] [client 168.100.149.202:21540] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28080/bargainor/2308_dislevelment.jsp"] [unique_id "alQwBmJoJ8euboi5C2kflgAAAEc"] [Sun Jul 12 18:23:34.733637 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:34.746093 2026] [authz_core:error] [pid 992244:tid 992385] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:35.230046 2026] [security2:error] [pid 992244:tid 992434] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwBmJoJ8euboi5C2kfoQAAADs"] [Sun Jul 12 18:23:35.230123 2026] [security2:error] [pid 992244:tid 992434] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwBmJoJ8euboi5C2kfoQAAADs"] [Sun Jul 12 18:23:35.231048 2026] [security2:error] [pid 992244:tid 992382] [client 65.21.113.206:54996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWwtMzMzMy9sd3UvNDE2NTMtd3V6dA=="] [unique_id "alQwBmJoJ8euboi5C2kfnQAAAAc"] [Sun Jul 12 18:23:35.403546 2026] [security2:error] [pid 992537:tid 992561] [remote 216.73.216.109:18932] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQwB2smDw50MNj9aAK8sgAB9Ak"] [Sun Jul 12 18:23:35.492929 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:35.493609 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:35.917334 2026] [security2:error] [pid 992244:tid 992390] [client 82.0.45.155:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwB2JoJ8euboi5C2kfrAAAAA8"] [Sun Jul 12 18:23:36.252824 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:36.253307 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:36.666283 2026] [security2:error] [pid 992537:tid 992804] [client 167.86.90.243:52970] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "232"] [id "900331"] [msg "Joomla Com_Content SQL Injection POST"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQwCGsmDw50MNj9aAK8vwAAAgc"] [Sun Jul 12 18:23:36.992159 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:36.992648 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:37.103692 2026] [security2:error] [pid 992537:tid 992744] [client 168.100.149.165:61212] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28145/bargainor/2308_limnoria.jsp"] [unique_id "alQwCWsmDw50MNj9aAK8xQAAAcs"] [Sun Jul 12 18:23:37.348594 2026] [security2:error] [pid 992244:tid 992472] [client 37.49.228.218:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "67.20.65.75"] [uri "/index.html"] [unique_id "alQwCWJoJ8euboi5C2kfyAAAAGE"] [Sun Jul 12 18:23:37.353163 2026] [security2:error] [pid 992244:tid 992387] [client 37.49.228.218:54616] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "67.20.65.75"] [uri "/"] [unique_id "alQwCWJoJ8euboi5C2kfxgAAAAw"] [Sun Jul 12 18:23:37.387336 2026] [security2:error] [pid 992244:tid 992377] [client 167.86.90.243:52980] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/duxjnn.php.json"] [unique_id "alQwCWJoJ8euboi5C2kfyQAAAAI"] [Sun Jul 12 18:23:37.487689 2026] [security2:error] [pid 992537:tid 992609] [remote 110.249.202.82:12596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.jimmybuy.co.uk"] [uri "/toshiba-battery/Satellite-P205-S6267"] [unique_id "alQwCWsmDw50MNj9aAK8ywABszY"] [Sun Jul 12 18:23:37.767721 2026] [authz_core:error] [pid 992537:tid 992708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:37.768195 2026] [authz_core:error] [pid 992537:tid 992708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:37.863404 2026] [security2:error] [pid 992244:tid 992453] [client 167.86.90.243:52982] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/duxjnn.php.json"] [unique_id "alQwCWJoJ8euboi5C2kfzwAAAE4"] [Sun Jul 12 18:23:37.863644 2026] [security2:error] [pid 992244:tid 992453] [client 167.86.90.243:52982] ModSecurity: Warning. Matched phrase "Mail.RU_Bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "409"] [hostname "omnimodedigital.com"] [uri "/duxjnn.php.json"] [unique_id "alQwCWJoJ8euboi5C2kfzwAAAE4"] [Sun Jul 12 18:23:38.000430 2026] [security2:error] [pid 992537:tid 992594] [remote 40.77.167.14:39983] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.167.77.40.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.mtcalvarywordoffaith.org"] [uri "/ministries.php"] [unique_id "alQwCWsmDw50MNj9aAK80wACAic"] [Sun Jul 12 18:23:38.284101 2026] [security2:error] [pid 992537:tid 992710] [client 167.86.90.243:52998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/index.php"] [unique_id "alQwCmsmDw50MNj9aAK81wAAAak"] [Sun Jul 12 18:23:38.502851 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:38.503349 2026] [authz_core:error] [pid 992244:tid 992418] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:38.516078 2026] [security2:error] [pid 992244:tid 992482] [client 201.182.250.138:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "elleholmes.pub"] [uri "/index.php"] [unique_id "alQwCmJoJ8euboi5C2kf1AAAAGs"] [Sun Jul 12 18:23:38.733986 2026] [security2:error] [pid 992537:tid 992759] [client 65.21.113.206:56964] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWwtNzEyMC9sd3UvNDE2NTMtd3V6dA=="] [unique_id "alQwCmsmDw50MNj9aAK83QAAAdo"] [Sun Jul 12 18:23:38.955348 2026] [security2:error] [pid 992244:tid 992394] [client 38.51.197.160:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwCmJoJ8euboi5C2kf4QAAABM"] [Sun Jul 12 18:23:39.040559 2026] [security2:error] [pid 992537:tid 992722] [client 167.86.90.243:53002] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/templates/shaper_helix3/layout/duxjnn.php.json"] [unique_id "alQwC2smDw50MNj9aAK85gAAAbU"] [Sun Jul 12 18:23:39.110433 2026] [security2:error] [pid 992537:tid 992699] [client 168.100.149.87:49018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28210/bargainor/2308_milksopism.jsp"] [unique_id "alQwC2smDw50MNj9aAK86AAAAZ4"] [Sun Jul 12 18:23:39.270029 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:39.271089 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:39.492827 2026] [security2:error] [pid 992537:tid 992806] [client 167.86.90.243:53016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 243.90.86.167.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "omnimodedigital.com"] [uri "/templates/shaper_helix3/layout/duxjnn.php.json"] [unique_id "alQwC2smDw50MNj9aAK87wAAAgk"] [Sun Jul 12 18:23:39.700448 2026] [security2:error] [pid 992537:tid 992770] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwC2smDw50MNj9aAK87gAAAeU"] [Sun Jul 12 18:23:39.700502 2026] [security2:error] [pid 992537:tid 992770] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwC2smDw50MNj9aAK87gAAAeU"] [Sun Jul 12 18:23:39.701852 2026] [security2:error] [pid 992537:tid 992725] [client 65.21.113.206:55000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWwtNzEyMC9sd3UvNDE2NTMtd3V6dA=="] [unique_id "alQwC2smDw50MNj9aAK87QAAAbg"] [Sun Jul 12 18:23:40.011846 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:40.012332 2026] [authz_core:error] [pid 992244:tid 992495] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:40.166331 2026] [security2:error] [pid 992537:tid 992707] [client 125.167.21.72:61767] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwDGsmDw50MNj9aAK89wAAAaY"] [Sun Jul 12 18:23:40.166576 2026] [security2:error] [pid 992537:tid 992707] [client 125.167.21.72:61767] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwDGsmDw50MNj9aAK89wAAAaY"] [Sun Jul 12 18:23:40.340931 2026] [security2:error] [pid 992537:tid 992783] [client 65.21.113.253:51594] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQwDGsmDw50MNj9aAK8-AAAAfI"] [Sun Jul 12 18:23:40.472430 2026] [security2:error] [pid 992537:tid 992805] [client 168.100.149.196:27534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28275/bargainor/2308_capnoides.jsp"] [unique_id "alQwDGsmDw50MNj9aAK8-gAAAgg"] [Sun Jul 12 18:23:40.778748 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:40.779233 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:40.864319 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.253:38482] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQwDGJoJ8euboi5C2kgHwAAAFM"] [Sun Jul 12 18:23:40.868931 2026] [security2:error] [pid 992244:tid 992447] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQwDGJoJ8euboi5C2kgKAAAAEg"] [Sun Jul 12 18:23:41.343695 2026] [core:error] [pid 992537:tid 992749] [client 144.31.156.249:41322] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:23:41.520531 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:41.521049 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:42.090990 2026] [autoindex:error] [pid 992244:tid 992409] [client 151.243.11.245:0] AH01276: Cannot serve directory /home4/sammorel/public_html/smalltowntheatre/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:23:42.296092 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:42.296573 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:42.477096 2026] [security2:error] [pid 992244:tid 992419] [client 168.100.149.116:38672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28340/bargainor/2308_deft.jsp"] [unique_id "alQwDmJoJ8euboi5C2kgVgAAACw"] [Sun Jul 12 18:23:43.172868 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:43.173381 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:43.669401 2026] [security2:error] [pid 992244:tid 992415] [client 24.203.79.110:52053] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwD2JoJ8euboi5C2kgcQAAACg"] [Sun Jul 12 18:23:43.669752 2026] [security2:error] [pid 992244:tid 992415] [client 24.203.79.110:52053] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwD2JoJ8euboi5C2kgcQAAACg"] [Sun Jul 12 18:23:43.691177 2026] [security2:error] [pid 992244:tid 992386] [client 14.176.151.52:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQwDmJoJ8euboi5C2kgXwAAC30"] [Sun Jul 12 18:23:43.887728 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:43.888403 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:44.501266 2026] [security2:error] [pid 992244:tid 992251] [remote 57.141.18.46:62534] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 46.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/B6jDVwfYOKCcZ/CCmUAT7R0Eri4Z6z.lWez"] [unique_id "alQwEGJoJ8euboi5C2kgjgAASwU"] [Sun Jul 12 18:23:44.632472 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:44.632975 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:45.110239 2026] [security2:error] [pid 992244:tid 992429] [client 168.100.149.84:50058] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28405/bargainor/2308_did.jsp"] [unique_id "alQwEWJoJ8euboi5C2kgmAAAADY"] [Sun Jul 12 18:23:45.408061 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:45.408841 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:45.909775 2026] [cgid:error] [pid 992244:tid 992382] [client 74.7.241.159:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml [Sun Jul 12 18:23:45.910043 2026] [security2:error] [pid 992244:tid 992382] [client 74.7.241.159:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "globalflower.net"] [uri "/404.shtml"] [unique_id "alQwEWJoJ8euboi5C2kgrwAAAAc"] [Sun Jul 12 18:23:45.911128 2026] [security2:error] [pid 992244:tid 992459] [client 74.7.241.159:55500] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "globalflower.net"] [uri "/robots.txt"] [unique_id "alQwEWJoJ8euboi5C2kgrgAAVCc"] [Sun Jul 12 18:23:46.150627 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:46.151121 2026] [authz_core:error] [pid 992244:tid 992427] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:46.157199 2026] [security2:error] [pid 992244:tid 992433] [client 146.174.160.174:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwEWJoJ8euboi5C2kgqAAAADo"] [Sun Jul 12 18:23:46.401875 2026] [security2:error] [pid 992244:tid 992451] [client 57.141.18.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwEWJoJ8euboi5C2kgsgAAAEw"] [Sun Jul 12 18:23:46.780430 2026] [core:error] [pid 992244:tid 992498] [client 13.140.136.17:63151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:46.780474 2026] [core:error] [pid 992244:tid 992498] [client 13.140.136.17:63151] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:46.826703 2026] [security2:error] [pid 992244:tid 992446] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWxfNTg4Ni9sZjgvMzY2ODFfZjg=.htm"] [unique_id "alQwEmJoJ8euboi5C2kgzAAAAEc"] [Sun Jul 12 18:23:46.904385 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:46.905429 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:47.124140 2026] [security2:error] [pid 992244:tid 992487] [client 168.100.149.228:33198] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28470/bargainor/2308_delphian.jsp"] [unique_id "alQwE2JoJ8euboi5C2kg0AAAAHA"] [Sun Jul 12 18:23:47.411265 2026] [security2:error] [pid 992244:tid 992414] [client 59.40.77.241:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.mymmdesign.com"] [uri "/favicon.ico"] [unique_id "alQwE2JoJ8euboi5C2kg1QAAACc"] [Sun Jul 12 18:23:47.679036 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:47.679526 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:47.725372 2026] [security2:error] [pid 992244:tid 992417] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwE2JoJ8euboi5C2kg0wAAACo"] [Sun Jul 12 18:23:47.725446 2026] [security2:error] [pid 992244:tid 992417] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwE2JoJ8euboi5C2kg0wAAACo"] [Sun Jul 12 18:23:47.726460 2026] [security2:error] [pid 992244:tid 992452] [client 65.21.113.206:44196] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWxfNTg4Ni9sZjgvMzY2ODFfZjg=.htm"] [unique_id "alQwE2JoJ8euboi5C2kg0QAAAE0"] [Sun Jul 12 18:23:47.788598 2026] [core:error] [pid 992244:tid 992474] [client 13.140.136.17:55402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:47.788653 2026] [core:error] [pid 992244:tid 992474] [client 13.140.136.17:55402] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:48.294574 2026] [security2:error] [pid 992537:tid 992717] [client 145.239.10.137:38370] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheckman.com"] [uri "/t.php"] [unique_id "alQwFGsmDw50MNj9aAK9VwAAAbA"], referer: http://sheckman.com/t.php [Sun Jul 12 18:23:48.414364 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:48.414870 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:48.969442 2026] [security2:error] [pid 992537:tid 992775] [client 47.82.124.92:19427] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.batterie-pc-portables.fr"] [uri "/p_imgbig/HSTNH-L01B.jpg"] [unique_id "alQwFGsmDw50MNj9aAK9aQAAAeo"] [Sun Jul 12 18:23:49.126351 2026] [security2:error] [pid 992244:tid 992489] [client 168.100.149.83:49808] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28535/bargainor/2308_anisodactyli.jsp"] [unique_id "alQwFWJoJ8euboi5C2kg9AAAAHI"] [Sun Jul 12 18:23:49.187258 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:49.187827 2026] [authz_core:error] [pid 992244:tid 992467] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:49.199458 2026] [security2:error] [pid 992244:tid 992496] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja180NDcwL2xjLzEyMzQxL2M=.html"] [unique_id "alQwFWJoJ8euboi5C2kg9QAAAHk"] [Sun Jul 12 18:23:49.977200 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:49.977719 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:50.122370 2026] [security2:error] [pid 992244:tid 992456] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwFWJoJ8euboi5C2kg_gAAAFE"] [Sun Jul 12 18:23:50.122423 2026] [security2:error] [pid 992244:tid 992456] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwFWJoJ8euboi5C2kg_gAAAFE"] [Sun Jul 12 18:23:50.124105 2026] [security2:error] [pid 992537:tid 992786] [client 65.21.113.206:44198] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja180NDcwL2xjLzEyMzQxL2M=.html"] [unique_id "alQwFWsmDw50MNj9aAK9dQAAAfU"] [Sun Jul 12 18:23:50.478594 2026] [security2:error] [pid 992537:tid 992689] [client 168.100.149.179:55436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28600/bargainor/2308_birefraction.jsp"] [unique_id "alQwFmsmDw50MNj9aAK9iQAAAZQ"] [Sun Jul 12 18:23:50.683750 2026] [security2:error] [pid 992244:tid 992459] [client 74.7.175.182:37532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "ampollacerebral.com"] [uri "/robots.txt"] [unique_id "alQwFmJoJ8euboi5C2khGwAAVCg"] [Sun Jul 12 18:23:50.698427 2026] [security2:error] [pid 992244:tid 992461] [client 125.167.21.72:62213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwFmJoJ8euboi5C2khHQAAAFY"] [Sun Jul 12 18:23:50.698695 2026] [security2:error] [pid 992244:tid 992461] [client 125.167.21.72:62213] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwFmJoJ8euboi5C2khHQAAAFY"] [Sun Jul 12 18:23:50.754388 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:50.754895 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:51.070528 2026] [security2:error] [pid 992244:tid 992379] [client 74.7.175.171:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.jeanmenezes.com"] [uri "/index.php"] [unique_id "alQwFmJoJ8euboi5C2khIgAAAAQ"] [Sun Jul 12 18:23:51.071967 2026] [security2:error] [pid 992537:tid 992758] [client 74.7.175.171:53426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.jeanmenezes.com"] [uri "/robots.txt"] [unique_id "alQwFmsmDw50MNj9aAK9kAAB2Vo"] [Sun Jul 12 18:23:51.514915 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:51.515457 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:51.983478 2026] [security2:error] [pid 992244:tid 992397] [client 216.244.66.196:58906] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "sheehycares.com"] [uri "/category/sheehy-lexus-of-annapolis/"] [unique_id "alQwF2JoJ8euboi5C2khPQAAABY"] [Sun Jul 12 18:23:51.983732 2026] [security2:error] [pid 992244:tid 992397] [client 216.244.66.196:58906] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "sheehycares.com"] [uri "/category/sheehy-lexus-of-annapolis/"] [unique_id "alQwF2JoJ8euboi5C2khPQAAABY"] [Sun Jul 12 18:23:52.262809 2026] [security2:error] [pid 992537:tid 992657] [remote 87.250.224.102:49988] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/volanli-etek-yap\\xc4\\xb1m\\xc4\\xb1-k.html"] [unique_id "alQwGGsmDw50MNj9aAK9pAAB8mY"] [Sun Jul 12 18:23:52.316975 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:52.317719 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:52.383267 2026] [security2:error] [pid 992537:tid 992762] [client 163.47.13.37:55904] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gethsemanegardens.com"] [uri "/sftp-config.json"] [unique_id "alQwGGsmDw50MNj9aAK9qwAAAd0"] [Sun Jul 12 18:23:52.488431 2026] [security2:error] [pid 992244:tid 992434] [client 168.100.149.206:20448] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28665/bargainor/2308_mediator.jsp"] [unique_id "alQwGGJoJ8euboi5C2khSQAAADs"] [Sun Jul 12 18:23:52.963208 2026] [security2:error] [pid 992244:tid 992490] [client 163.47.13.37:56113] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gethsemanegardens.com"] [uri "/sftp-config.json"] [unique_id "alQwGGJoJ8euboi5C2khUwAAAHM"] [Sun Jul 12 18:23:53.103394 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:53.103959 2026] [authz_core:error] [pid 992537:tid 992690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:53.567871 2026] [security2:error] [pid 992244:tid 992387] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja180NTIxL2xjLzEyMzQxL2M=.html"] [unique_id "alQwGWJoJ8euboi5C2khZAAAAAw"] [Sun Jul 12 18:23:53.815500 2026] [security2:error] [pid 992537:tid 992694] [client 91.92.42.131:48042] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/wp-config.php"] [unique_id "alQwGWsmDw50MNj9aAK9vgAAAZk"] [Sun Jul 12 18:23:53.853078 2026] [core:error] [pid 992537:tid 992808] [client 13.140.136.17:61754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:53.853127 2026] [core:error] [pid 992537:tid 992808] [client 13.140.136.17:61754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:23:53.874021 2026] [authz_core:error] [pid 992537:tid 992737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:53.874807 2026] [authz_core:error] [pid 992537:tid 992737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:53.950131 2026] [security2:error] [pid 992537:tid 992790] [client 34.74.242.206:1821] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "justfeelgood.com"] [uri "/robots.txt"] [unique_id "alQwGWsmDw50MNj9aAK9wQAAAfk"] [Sun Jul 12 18:23:53.950389 2026] [security2:error] [pid 992537:tid 992790] [client 34.74.242.206:1821] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "justfeelgood.com"] [uri "/robots.txt"] [unique_id "alQwGWsmDw50MNj9aAK9wQAAAfk"] [Sun Jul 12 18:23:54.067167 2026] [security2:error] [pid 992244:tid 992457] [client 34.74.242.206:1793] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "justfeelgood.com"] [uri "/"] [unique_id "alQwGmJoJ8euboi5C2khbAAAAFI"] [Sun Jul 12 18:23:54.067364 2026] [security2:error] [pid 992244:tid 992457] [client 34.74.242.206:1793] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "justfeelgood.com"] [uri "/"] [unique_id "alQwGmJoJ8euboi5C2khbAAAAFI"] [Sun Jul 12 18:23:54.143224 2026] [security2:error] [pid 992244:tid 992439] [client 91.92.42.131:48046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.187.16"] [uri "/wp-config.php.bak"] [unique_id "alQwGmJoJ8euboi5C2khcAAAAEA"] [Sun Jul 12 18:23:54.391578 2026] [security2:error] [pid 992537:tid 992778] [client 24.203.79.110:52584] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwGmsmDw50MNj9aAK9xgAAAe0"] [Sun Jul 12 18:23:54.391902 2026] [security2:error] [pid 992537:tid 992778] [client 24.203.79.110:52584] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwGmsmDw50MNj9aAK9xgAAAe0"] [Sun Jul 12 18:23:54.489175 2026] [security2:error] [pid 992244:tid 992386] [client 168.100.149.194:20566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28730/bargainor/2308_gurian.jsp"] [unique_id "alQwGmJoJ8euboi5C2khegAAAAs"] [Sun Jul 12 18:23:54.501580 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwGmsmDw50MNj9aAK9wgAAAaA"] [Sun Jul 12 18:23:54.501688 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwGmsmDw50MNj9aAK9wgAAAaA"] [Sun Jul 12 18:23:54.502637 2026] [security2:error] [pid 992244:tid 992489] [client 65.21.113.206:33306] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja180NTIxL2xjLzEyMzQxL2M=.html"] [unique_id "alQwGmJoJ8euboi5C2khagAAAHI"] [Sun Jul 12 18:23:54.583417 2026] [security2:error] [pid 992244:tid 992411] [client 163.47.13.37:56259] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gethsemanegardens.com"] [uri "/.vscode/sftp.json"] [unique_id "alQwGmJoJ8euboi5C2khfQAAACQ"] [Sun Jul 12 18:23:54.671955 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:54.672716 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:55.091636 2026] [security2:error] [pid 992537:tid 992717] [client 51.68.111.239:29465] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "jonettasmith.com"] [uri "/robots.txt"] [unique_id "alQwG2smDw50MNj9aAK91QAAAbA"] [Sun Jul 12 18:23:55.091934 2026] [security2:error] [pid 992537:tid 992717] [client 51.68.111.239:29465] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "jonettasmith.com"] [uri "/robots.txt"] [unique_id "alQwG2smDw50MNj9aAK91QAAAbA"] [Sun Jul 12 18:23:55.244528 2026] [security2:error] [pid 992244:tid 992434] [client 64.233.172.130:61438] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.carmedic.biz"] [uri "/index.php"] [unique_id "alQwGmJoJ8euboi5C2khfwAAADs"] [Sun Jul 12 18:23:55.378861 2026] [security2:error] [pid 992244:tid 992331] [remote 74.7.227.188:49712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQwG2JoJ8euboi5C2khnwAAS1U"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-keep-custom-p-1066.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:23:55.458092 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:55.458597 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:55.561930 2026] [security2:error] [pid 992244:tid 992480] [client 155.117.163.65:55202] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khogAAAGk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.599042 2026] [security2:error] [pid 992244:tid 992388] [client 167.148.117.154:44000] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khpwAAAA0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.606351 2026] [security2:error] [pid 992244:tid 992445] [client 155.117.163.82:24768] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khowAAAEY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.609588 2026] [security2:error] [pid 992244:tid 992391] [client 155.117.163.110:49846] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khpgAAABA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.616861 2026] [security2:error] [pid 992537:tid 992801] [client 163.47.13.37:56646] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "gethsemanegardens.com"] [uri "/.vscode/sftp.json"] [unique_id "alQwG2smDw50MNj9aAK94AAAAgQ"] [Sun Jul 12 18:23:55.617237 2026] [security2:error] [pid 992244:tid 992462] [client 167.148.117.194:20992] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khqgAAAFc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.619330 2026] [security2:error] [pid 992244:tid 992419] [client 167.148.117.194:20984] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khpAAAACw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.619454 2026] [security2:error] [pid 992244:tid 992403] [client 155.117.163.65:55210] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khqAAAABw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.631175 2026] [security2:error] [pid 992244:tid 992408] [client 155.117.163.81:27704] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khpQAAACE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.647596 2026] [security2:error] [pid 992244:tid 992472] [client 155.117.163.110:49854] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khqwAAAGE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.649767 2026] [security2:error] [pid 992244:tid 992444] [client 167.148.117.194:20996] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khrAAAAEU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.651610 2026] [security2:error] [pid 992537:tid 992802] [client 155.117.163.110:49860] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2smDw50MNj9aAK93QAAAgU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.666100 2026] [security2:error] [pid 992244:tid 992387] [client 155.117.163.81:27712] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khqQAAAAw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.669886 2026] [security2:error] [pid 992537:tid 992785] [client 207.180.11.97:45172] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2smDw50MNj9aAK93gAAAfQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.670597 2026] [security2:error] [pid 992244:tid 992495] [client 216.75.132.32:45558] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khrQAAAHg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.671408 2026] [security2:error] [pid 992537:tid 992798] [client 216.75.132.249:43904] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2smDw50MNj9aAK93wAAAgE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.758882 2026] [security2:error] [pid 992537:tid 992734] [client 143.20.253.236:49390] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2smDw50MNj9aAK94QAAAcE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.811235 2026] [security2:error] [pid 992537:tid 992695] [client 207.180.11.97:45182] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2smDw50MNj9aAK95AAAAZo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:55.890189 2026] [security2:error] [pid 992244:tid 992390] [client 91.92.42.131:48118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/phpinfo.php"] [unique_id "alQwG2JoJ8euboi5C2khtAAAAA8"] [Sun Jul 12 18:23:56.007219 2026] [security2:error] [pid 992244:tid 992425] [client 143.20.253.236:49402] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwG2JoJ8euboi5C2khtgAAADI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:56.218766 2026] [security2:error] [pid 992244:tid 992424] [client 91.92.42.131:48120] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/info.php"] [unique_id "alQwHGJoJ8euboi5C2khuwAAADE"] [Sun Jul 12 18:23:56.248446 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:56.248980 2026] [authz_core:error] [pid 992244:tid 992490] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:56.347544 2026] [security2:error] [pid 992244:tid 992451] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja185MjAzL2xjLzEyMzQxL2M=.html"] [unique_id "alQwHGJoJ8euboi5C2khwgAAAEw"] [Sun Jul 12 18:23:56.483068 2026] [security2:error] [pid 992244:tid 992399] [client 168.100.149.196:23274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28795/bargainor/2308_monkey.jsp"] [unique_id "alQwHGJoJ8euboi5C2khyQAAABg"] [Sun Jul 12 18:23:56.813066 2026] [security2:error] [pid 992244:tid 992468] [client 14.186.236.54:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "learningindia.in"] [uri "/index.php"] [unique_id "alQwHGJoJ8euboi5C2khyAAAAF0"] [Sun Jul 12 18:23:56.930074 2026] [security2:error] [pid 992244:tid 992491] [client 123.21.28.76:51451] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHGJoJ8euboi5C2kh1wAAAHQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.043975 2026] [authz_core:error] [pid 992537:tid 992790] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:57.044568 2026] [authz_core:error] [pid 992537:tid 992790] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:57.090112 2026] [security2:error] [pid 992244:tid 992480] [client 14.191.254.71:20693] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHGJoJ8euboi5C2kh2gAAAGk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.117345 2026] [security2:error] [pid 992537:tid 992692] [client 14.172.88.255:43584] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHWsmDw50MNj9aAK9_gAAAZc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.230642 2026] [security2:error] [pid 992244:tid 992383] [client 91.92.42.131:48152] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/config.php"] [unique_id "alQwHWJoJ8euboi5C2kh3wAAAAg"] [Sun Jul 12 18:23:57.270494 2026] [security2:error] [pid 992537:tid 992808] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwHGsmDw50MNj9aAK99wAAAgs"] [Sun Jul 12 18:23:57.270558 2026] [security2:error] [pid 992537:tid 992808] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwHGsmDw50MNj9aAK99wAAAgs"] [Sun Jul 12 18:23:57.271954 2026] [security2:error] [pid 992244:tid 992416] [client 65.21.113.206:33322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YWxjNWNja185MjAzL2xjLzEyMzQxL2M=.html"] [unique_id "alQwHGJoJ8euboi5C2kh1QAAACk"] [Sun Jul 12 18:23:57.580346 2026] [security2:error] [pid 992244:tid 992400] [client 91.92.42.131:48160] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/config/config.php"] [unique_id "alQwHWJoJ8euboi5C2kh6gAAABk"] [Sun Jul 12 18:23:57.594007 2026] [security2:error] [pid 992244:tid 992472] [client 156.197.145.172:30686] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHWJoJ8euboi5C2kh5wAAAGE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.727263 2026] [security2:error] [pid 992244:tid 992414] [client 101.47.26.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQwHGJoJ8euboi5C2kh2AAAJ24"] [Sun Jul 12 18:23:57.764608 2026] [security2:error] [pid 992537:tid 992704] [client 190.166.136.249:49220] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHWsmDw50MNj9aAK-CAAAAaM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.808699 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:57.809179 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:57.891643 2026] [security2:error] [pid 992244:tid 992387] [client 37.150.230.32:50228] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHWJoJ8euboi5C2kh9wAAAAw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:57.974952 2026] [security2:error] [pid 992537:tid 992725] [client 91.92.42.131:48174] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/includes/config.php"] [unique_id "alQwHWsmDw50MNj9aAK-DgAAAbg"] [Sun Jul 12 18:23:58.058935 2026] [security2:error] [pid 992244:tid 992384] [client 139.135.42.115:28404] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHWJoJ8euboi5C2kh_wAAAAk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.072439 2026] [security2:error] [pid 992537:tid 992795] [client 201.190.251.69:58592] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-EQAAAf4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.156091 2026] [security2:error] [pid 992537:tid 992779] [client 157.100.168.161:39758] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-EwAAAe4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.287658 2026] [security2:error] [pid 992537:tid 992793] [client 189.217.205.105:45089] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-FwAAAfw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.292559 2026] [security2:error] [pid 992244:tid 992375] [client 91.92.42.131:48178] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/config/database.php"] [unique_id "alQwHmJoJ8euboi5C2kiCQAAAAA"] [Sun Jul 12 18:23:58.380935 2026] [security2:error] [pid 992537:tid 992806] [client 45.237.88.194:57514] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-GgAAAgk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.491338 2026] [security2:error] [pid 992244:tid 992380] [client 168.100.149.204:39116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28860/bargainor/2308_impeccance.jsp"] [unique_id "alQwHmJoJ8euboi5C2kiDwAAAAU"] [Sun Jul 12 18:23:58.553088 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:58.553577 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:58.656731 2026] [security2:error] [pid 992537:tid 992758] [client 170.0.59.121:53197] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-HQAAAdk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:58.674539 2026] [security2:error] [pid 992537:tid 992717] [client 189.28.95.72:52074] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwHmsmDw50MNj9aAK-HgAAAbA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:23:59.295118 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:23:59.295601 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:23:59.985599 2026] [security2:error] [pid 992244:tid 992485] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXA0eXU2Y18yNjg2L3A0LzE4OTcvNA==.html"] [unique_id "alQwH2JoJ8euboi5C2kiMAAAAG4"] [Sun Jul 12 18:24:00.053524 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:00.054054 2026] [authz_core:error] [pid 992244:tid 992412] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:00.690236 2026] [security2:error] [pid 992244:tid 992435] [client 57.141.18.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwIGJoJ8euboi5C2kiQQAAADw"] [Sun Jul 12 18:24:00.791433 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:00.791951 2026] [authz_core:error] [pid 992244:tid 992382] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:00.803073 2026] [security2:error] [pid 992244:tid 992378] [client 217.218.39.90:13797] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwIGJoJ8euboi5C2kiTAAAAAM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:00.884926 2026] [security2:error] [pid 992244:tid 992484] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwIGJoJ8euboi5C2kiRAAAAG0"] [Sun Jul 12 18:24:00.885870 2026] [security2:error] [pid 992537:tid 992700] [client 65.21.113.206:33324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXA0eXU2Y18yNjg2L3A0LzE4OTcvNA==.html"] [unique_id "alQwIGsmDw50MNj9aAK-PgAAAZ8"] [Sun Jul 12 18:24:00.894496 2026] [security2:error] [pid 992244:tid 992484] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwIGJoJ8euboi5C2kiRAAAAG0"] [Sun Jul 12 18:24:01.117744 2026] [security2:error] [pid 992537:tid 992801] [client 168.100.149.189:39282] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28925/bargainor/2308_gunz.jsp"] [unique_id "alQwIWsmDw50MNj9aAK-RAAAAgQ"] [Sun Jul 12 18:24:01.533596 2026] [authz_core:error] [pid 992537:tid 992731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:01.534109 2026] [authz_core:error] [pid 992537:tid 992731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:01.942859 2026] [security2:error] [pid 992244:tid 992460] [client 181.43.227.149:29912] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwIWJoJ8euboi5C2kiZwAAAFU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:02.050215 2026] [security2:error] [pid 992244:tid 992408] [client 125.167.21.72:62659] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwImJoJ8euboi5C2kibAAAACE"] [Sun Jul 12 18:24:02.050555 2026] [security2:error] [pid 992244:tid 992408] [client 125.167.21.72:62659] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwImJoJ8euboi5C2kibAAAACE"] [Sun Jul 12 18:24:02.386068 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:02.386651 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:02.622258 2026] [security2:error] [pid 992244:tid 992459] [client 91.92.42.131:52072] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "50.87.187.16"] [uri "/proc/self/environ"] [unique_id "alQwImJoJ8euboi5C2kicwAAAFQ"] [Sun Jul 12 18:24:02.918900 2026] [security2:error] [pid 992537:tid 992794] [client 177.73.30.205:33381] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwImsmDw50MNj9aAK-YAAAAf0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:03.140259 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:03.140807 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:03.188807 2026] [security2:error] [pid 992244:tid 992444] [client 168.100.149.156:62998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/28990/bargainor/2308_monadically.jsp"] [unique_id "alQwI2JoJ8euboi5C2kifAAAAEU"] [Sun Jul 12 18:24:03.740175 2026] [security2:error] [pid 992244:tid 992411] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXAtNzg1Mi9wdG8vMzc5NTctdG9xYg=="] [unique_id "alQwI2JoJ8euboi5C2kihwAAACQ"] [Sun Jul 12 18:24:03.849897 2026] [core:error] [pid 992244:tid 992402] [client 13.140.136.17:58436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:03.849933 2026] [core:error] [pid 992244:tid 992402] [client 13.140.136.17:58436] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:03.879931 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:03.880416 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:04.170508 2026] [security2:error] [pid 992244:tid 992383] [client 186.90.216.32:46084] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwJGJoJ8euboi5C2kijwAAAAg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:04.454264 2026] [security2:error] [pid 992537:tid 992698] [client 116.179.37.7:38722] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.37.179.116.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwJGsmDw50MNj9aAK-dwAAAZ0"], referer: https://idreamofjeannemarie.com/day-2-of-my-fun-christmas-box/comment-page-1/ [Sun Jul 12 18:24:04.509190 2026] [security2:error] [pid 992244:tid 992412] [client 168.100.149.11:42384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29055/bargainor/2308_enhalo.jsp"] [unique_id "alQwJGJoJ8euboi5C2kiogAAACU"] [Sun Jul 12 18:24:04.621519 2026] [security2:error] [pid 992244:tid 992394] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwJGJoJ8euboi5C2kikwAAABM"] [Sun Jul 12 18:24:04.621572 2026] [security2:error] [pid 992244:tid 992394] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwJGJoJ8euboi5C2kikwAAABM"] [Sun Jul 12 18:24:04.622734 2026] [security2:error] [pid 992244:tid 992376] [client 65.21.113.206:55040] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXAtNzg1Mi9wdG8vMzc5NTctdG9xYg=="] [unique_id "alQwJGJoJ8euboi5C2kikgAAAAE"] [Sun Jul 12 18:24:04.646838 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:04.647371 2026] [authz_core:error] [pid 992244:tid 992464] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:05.028553 2026] [security2:error] [pid 992537:tid 992750] [client 24.203.79.110:53108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwJWsmDw50MNj9aAK-gAAAAdE"] [Sun Jul 12 18:24:05.028817 2026] [security2:error] [pid 992537:tid 992750] [client 24.203.79.110:53108] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwJWsmDw50MNj9aAK-gAAAAdE"] [Sun Jul 12 18:24:05.396773 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:05.397290 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:05.772753 2026] [security2:error] [pid 992244:tid 992491] [client 93.148.97.110:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwJWJoJ8euboi5C2kiuAAAAHQ"] [Sun Jul 12 18:24:06.104597 2026] [authz_core:error] [pid 992244:tid 992403] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:06.105145 2026] [authz_core:error] [pid 992244:tid 992403] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:06.380588 2026] [security2:error] [pid 992537:tid 992693] [client 95.154.108.188:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwJWsmDw50MNj9aAK-kAAAAZg"] [Sun Jul 12 18:24:06.508308 2026] [security2:error] [pid 992244:tid 992437] [client 168.100.149.88:41006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29120/bargainor/2308_metalogical.jsp"] [unique_id "alQwJmJoJ8euboi5C2kixwAAAD4"] [Sun Jul 12 18:24:06.897652 2026] [authz_core:error] [pid 992244:tid 992417] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:06.898185 2026] [authz_core:error] [pid 992244:tid 992417] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:07.669385 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:07.669917 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:08.356885 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXBrLTE3MDY1LXBrY3FrLTM5NzIta2Nx.cgi"] [unique_id "alQwKGJoJ8euboi5C2ki4wAAAFM"] [Sun Jul 12 18:24:08.423568 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:08.424178 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:08.502010 2026] [security2:error] [pid 992244:tid 992457] [client 168.100.149.9:50214] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29185/bargainor/2308_psychoreflex.jsp"] [unique_id "alQwKGJoJ8euboi5C2ki5AAAAFI"] [Sun Jul 12 18:24:08.618414 2026] [security2:error] [pid 992244:tid 992433] [client 101.47.26.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQwJ2JoJ8euboi5C2ki2gAAOhc"] [Sun Jul 12 18:24:09.156594 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:09.157106 2026] [authz_core:error] [pid 992244:tid 992392] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:09.247005 2026] [security2:error] [pid 992244:tid 992382] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwKGJoJ8euboi5C2ki6AAAAAc"] [Sun Jul 12 18:24:09.247061 2026] [security2:error] [pid 992244:tid 992382] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwKGJoJ8euboi5C2ki6AAAAAc"] [Sun Jul 12 18:24:09.253581 2026] [security2:error] [pid 992537:tid 992780] [client 65.21.113.206:55050] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXBrLTE3MDY1LXBrY3FrLTM5NzIta2Nx.cgi"] [unique_id "alQwKGsmDw50MNj9aAK-tgAAAe8"] [Sun Jul 12 18:24:09.899643 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:09.900180 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:10.326310 2026] [cgid:error] [pid 992244:tid 992408] [client 202.46.62.32:9308] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-223.html?osCsid=mafjrifdpmhh02g57piq5n5je5 [Sun Jul 12 18:24:10.436124 2026] [security2:error] [pid 992244:tid 992441] [client 202.46.62.76:28071] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwKmJoJ8euboi5C2kjBAAAAEI"], referer: https://www.stephenspublishing.com/color-wood-rulers-custom-p-223.html?osCsid=mafjrifdpmhh02g57piq5n5je5 [Sun Jul 12 18:24:10.642708 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:10.643189 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:10.863490 2026] [core:error] [pid 992244:tid 992464] [client 13.140.136.17:49437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:10.863529 2026] [core:error] [pid 992244:tid 992464] [client 13.140.136.17:49437] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:11.215926 2026] [security2:error] [pid 992537:tid 992733] [client 168.100.149.221:31290] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29250/bargainor/2308_mailable.jsp"] [unique_id "alQwK2smDw50MNj9aAK-1wAAAcA"] [Sun Jul 12 18:24:11.397865 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:11.398344 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:11.486147 2026] [security2:error] [pid 992244:tid 992487] [client 65.21.113.206:33982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFfMzM2MjNfcTV4Yi81XzQ1MjBfeGIx.html"] [unique_id "alQwK2JoJ8euboi5C2kjHQAAAHA"] [Sun Jul 12 18:24:11.756738 2026] [security2:error] [pid 992537:tid 992738] [client 125.167.21.72:63266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwK2smDw50MNj9aAK-3gAAAcU"] [Sun Jul 12 18:24:11.756988 2026] [security2:error] [pid 992537:tid 992738] [client 125.167.21.72:63266] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwK2smDw50MNj9aAK-3gAAAcU"] [Sun Jul 12 18:24:11.805978 2026] [lsapi:warn] [pid 992537:tid 992784] [client 192.0.102.146:38892] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:24:11.904195 2026] [security2:error] [pid 992537:tid 992608] [remote 111.225.148.68:49030] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.jimmybuy.co.uk"] [uri "/fujitsu-battery/Packard-Bell-EasyNote-R6-Serie"] [unique_id "alQwK2smDw50MNj9aAK-5QABvzU"] [Sun Jul 12 18:24:12.130048 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:12.130552 2026] [authz_core:error] [pid 992537:tid 992694] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:12.389036 2026] [security2:error] [pid 992537:tid 992726] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwLGsmDw50MNj9aAK-6QAAAbk"] [Sun Jul 12 18:24:12.389106 2026] [security2:error] [pid 992537:tid 992726] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwLGsmDw50MNj9aAK-6QAAAbk"] [Sun Jul 12 18:24:12.390079 2026] [security2:error] [pid 992244:tid 992466] [client 65.21.113.206:55060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFfMzM2MjNfcTV4Yi81XzQ1MjBfeGIx.html"] [unique_id "alQwK2JoJ8euboi5C2kjHwAAAFs"] [Sun Jul 12 18:24:12.562880 2026] [security2:error] [pid 992244:tid 992392] [client 45.198.224.53:39172] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "70.40.200.116"] [uri "/"] [unique_id "alQwLGJoJ8euboi5C2kjKgAAABE"] [Sun Jul 12 18:24:12.847243 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:12.847748 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:13.133203 2026] [security2:error] [pid 992537:tid 992722] [client 168.100.149.49:21394] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29315/bargainor/2308_epidemiology.jsp"] [unique_id "alQwLWsmDw50MNj9aAK_CAAAAbU"] [Sun Jul 12 18:24:13.614388 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:13.614906 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:14.003407 2026] [security2:error] [pid 992537:tid 992584] [remote 107.151.249.246:43226] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.idealicious.com"] [uri "/"] [unique_id "alQwLmsmDw50MNj9aAK_KAABrB8"] [Sun Jul 12 18:24:14.364572 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:14.365077 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:14.511447 2026] [security2:error] [pid 992244:tid 992432] [client 168.100.149.132:39718] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29380/bargainor/2308_secque.jsp"] [unique_id "alQwLmJoJ8euboi5C2kjLQAAADk"] [Sun Jul 12 18:24:15.099536 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:15.100300 2026] [authz_core:error] [pid 992244:tid 992462] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:15.694572 2026] [security2:error] [pid 992244:tid 992434] [client 24.203.79.110:53628] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 110.79.203.24.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwL2JoJ8euboi5C2kjQgAAADs"] [Sun Jul 12 18:24:15.694967 2026] [security2:error] [pid 992244:tid 992434] [client 24.203.79.110:53628] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "newjetnet.com"] [uri "/xmlrpc.php"] [unique_id "alQwL2JoJ8euboi5C2kjQgAAADs"] [Sun Jul 12 18:24:15.862436 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:15.863012 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:16.504346 2026] [security2:error] [pid 992244:tid 992476] [client 168.100.149.17:47676] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29445/bargainor/2308_dislevelment.jsp"] [unique_id "alQwMGJoJ8euboi5C2kjSwAAAGU"] [Sun Jul 12 18:24:16.657166 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:16.657697 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:17.417612 2026] [security2:error] [pid 992244:tid 992450] [client 65.21.113.206:44476] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFfMzk4OTVfcWswbC9rXzc1NDVfMGw2.html"] [unique_id "alQwMWJoJ8euboi5C2kjWwAAAEs"] [Sun Jul 12 18:24:17.509585 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:17.510314 2026] [authz_core:error] [pid 992244:tid 992466] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:17.783713 2026] [core:error] [pid 992244:tid 992483] [client 13.140.136.17:54882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:17.783760 2026] [core:error] [pid 992244:tid 992483] [client 13.140.136.17:54882] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:18.314372 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:18.314898 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:18.478756 2026] [security2:error] [pid 992244:tid 992410] [client 65.21.113.206:60700] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFfMzk4OTVfcWswbC9rXzc1NDVfMGw2.html"] [unique_id "alQwMWJoJ8euboi5C2kjYwAAACM"] [Sun Jul 12 18:24:18.489132 2026] [security2:error] [pid 992244:tid 992439] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwMWJoJ8euboi5C2kjZgAAAEA"] [Sun Jul 12 18:24:18.489210 2026] [security2:error] [pid 992244:tid 992439] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwMWJoJ8euboi5C2kjZgAAAEA"] [Sun Jul 12 18:24:18.514160 2026] [security2:error] [pid 992244:tid 992437] [client 168.100.149.237:34748] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29510/bargainor/2308_limnoria.jsp"] [unique_id "alQwMmJoJ8euboi5C2kjcgAAAD4"] [Sun Jul 12 18:24:19.139754 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:19.140254 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:19.442526 2026] [security2:error] [pid 992244:tid 992502] [client 54.184.226.94:10501] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "voiceonclick.com"] [uri "/"] [unique_id "alQwM2JoJ8euboi5C2kjfwAAAH8"] [Sun Jul 12 18:24:19.485518 2026] [security2:error] [pid 992244:tid 992381] [client 54.184.226.94:34892] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "TRACE" at REQUEST_METHOD. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "52"] [id "340002"] [rev "3"] [msg "Atomicorp.com WAF Rules: TRACE/TRACK method denied"] [severity "CRITICAL"] [hostname "voiceonclick.com"] [uri "/"] [unique_id "alQwM2JoJ8euboi5C2kjgAAAAAY"] [Sun Jul 12 18:24:19.970858 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:19.971352 2026] [authz_core:error] [pid 992244:tid 992415] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:20.187571 2026] [core:error] [pid 992537:tid 992711] [client 13.140.136.17:49677] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:20.187630 2026] [core:error] [pid 992537:tid 992711] [client 13.140.136.17:49677] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:20.287263 2026] [core:error] [pid 992537:tid 992756] [client 154.54.100.177:49694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:20.287301 2026] [core:error] [pid 992537:tid 992756] [client 154.54.100.177:49694] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:20.792812 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:20.793296 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:21.202127 2026] [security2:error] [pid 992244:tid 992470] [client 168.100.149.79:17798] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29575/bargainor/2308_milksopism.jsp"] [unique_id "alQwNWJoJ8euboi5C2kjoAAAAF8"] [Sun Jul 12 18:24:21.252247 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:44476] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFfNDIyNzVfcW1mei9tXzU0NTRfZnp4.html"] [unique_id "alQwNWJoJ8euboi5C2kjoQAAACI"] [Sun Jul 12 18:24:21.372762 2026] [cgid:error] [pid 992537:tid 992732] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/wordpress/ [Sun Jul 12 18:24:21.501292 2026] [cgid:error] [pid 992537:tid 992786] [client 202.46.62.89:32034] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/oven-sticks-custom-p-129.html?osCsid=2jueefv2qoqcnqgkg949s93r37 [Sun Jul 12 18:24:21.507084 2026] [cgid:error] [pid 992537:tid 992808] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/old/ [Sun Jul 12 18:24:21.561985 2026] [authz_core:error] [pid 992537:tid 992754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:21.562496 2026] [authz_core:error] [pid 992537:tid 992754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:21.657819 2026] [cgid:error] [pid 992244:tid 992441] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/blog/ [Sun Jul 12 18:24:21.797862 2026] [cgid:error] [pid 992537:tid 992789] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/backup/ [Sun Jul 12 18:24:22.056072 2026] [cgid:error] [pid 992537:tid 992778] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/wp/ [Sun Jul 12 18:24:22.195027 2026] [cgid:error] [pid 992537:tid 992716] [client 34.186.224.150:0] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/globalf1/public_html/404.shtml, referer: http://www.globalflower.net/new/ [Sun Jul 12 18:24:22.248022 2026] [security2:error] [pid 992537:tid 992703] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwNWsmDw50MNj9aAK_sAAAAaI"] [Sun Jul 12 18:24:22.248076 2026] [security2:error] [pid 992537:tid 992703] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwNWsmDw50MNj9aAK_sAAAAaI"] [Sun Jul 12 18:24:22.249005 2026] [security2:error] [pid 992537:tid 992751] [client 65.21.113.206:60702] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFfNDIyNzVfcW1mei9tXzU0NTRfZnp4.html"] [unique_id "alQwNWsmDw50MNj9aAK_rwAAAdI"] [Sun Jul 12 18:24:22.301695 2026] [authz_core:error] [pid 992537:tid 992795] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:22.302177 2026] [authz_core:error] [pid 992537:tid 992795] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:22.340518 2026] [proxy:warn] [pid 992244:tid 992396] [client 3.130.168.2:55948] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be avidagents.com for uri /400.shtml [Sun Jul 12 18:24:22.340642 2026] [proxy:error] [pid 992244:tid 992396] (70014)End of file found: [client 3.130.168.2:55948] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.130.168.2 () [Sun Jul 12 18:24:22.380940 2026] [security2:error] [pid 992244:tid 992489] [client 125.167.21.72:63091] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwNmJoJ8euboi5C2kjwwAAAHI"] [Sun Jul 12 18:24:22.381412 2026] [security2:error] [pid 992244:tid 992489] [client 125.167.21.72:63091] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwNmJoJ8euboi5C2kjwwAAAHI"] [Sun Jul 12 18:24:23.020921 2026] [security2:error] [pid 992537:tid 992792] [client 145.239.10.137:50397] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehybuyscars.com"] [uri "/t.php"] [unique_id "alQwN2smDw50MNj9aAK_zQAAAfs"], referer: http://sheehybuyscars.com/t.php [Sun Jul 12 18:24:23.081141 2026] [authz_core:error] [pid 992537:tid 992738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:23.081608 2026] [authz_core:error] [pid 992537:tid 992738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:23.182297 2026] [security2:error] [pid 992244:tid 992388] [client 168.100.149.123:37270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29640/bargainor/2308_capnoides.jsp"] [unique_id "alQwN2JoJ8euboi5C2kj7gAAAA0"] [Sun Jul 12 18:24:23.251597 2026] [security2:error] [pid 992244:tid 992470] [client 145.239.10.137:47587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycares.com"] [uri "/t.php"] [unique_id "alQwN2JoJ8euboi5C2kj8AAAAF8"], referer: http://sheehycares.com/t.php [Sun Jul 12 18:24:23.306429 2026] [security2:error] [pid 992244:tid 992427] [client 145.239.10.137:53127] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/t.php"] [unique_id "alQwN2JoJ8euboi5C2kj8QAAADQ"], referer: http://sheehycareers.com/t.php [Sun Jul 12 18:24:23.862748 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:23.863404 2026] [authz_core:error] [pid 992244:tid 992386] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:24.576475 2026] [security2:error] [pid 992537:tid 992708] [client 209.61.5.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwOGsmDw50MNj9aAK_1QAAAac"] [Sun Jul 12 18:24:24.647410 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:24.647973 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:25.201481 2026] [security2:error] [pid 992537:tid 992808] [client 168.100.149.111:47856] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29705/bargainor/2308_deft.jsp"] [unique_id "alQwOWsmDw50MNj9aAK_4QAAAgs"] [Sun Jul 12 18:24:25.403807 2026] [authz_core:error] [pid 992537:tid 992769] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:25.404297 2026] [authz_core:error] [pid 992537:tid 992769] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:25.589278 2026] [fcgid:warn] [pid 992244:tid 992460] (70014)End of file found: [client 3.130.168.2:19902] mod_fcgid: can't get data from http client [Sun Jul 12 18:24:26.215651 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:26.216166 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:26.513689 2026] [security2:error] [pid 992537:tid 992739] [client 168.100.149.170:30790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29770/bargainor/2308_did.jsp"] [unique_id "alQwOmsmDw50MNj9aAK_9wAAAcY"] [Sun Jul 12 18:24:27.009221 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:27.009913 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:27.064141 2026] [security2:error] [pid 992244:tid 992382] [client 57.141.18.43:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwOmJoJ8euboi5C2kkPAAAAAc"] [Sun Jul 12 18:24:27.297859 2026] [security2:error] [pid 992537:tid 992580] [remote 147.135.138.90:48108] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.138.135.147.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "learningindia.in"] [uri "/wp-login.php"] [unique_id "alQwO2smDw50MNj9aALAEAAB_Rw"] [Sun Jul 12 18:24:27.472527 2026] [security2:error] [pid 992244:tid 992390] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFnbXFtLzc4NTIvcWcvMzc5MjEvZw=="] [unique_id "alQwO2JoJ8euboi5C2kkXQAAAA8"] [Sun Jul 12 18:24:27.809785 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:27.810268 2026] [authz_core:error] [pid 992244:tid 992481] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:28.133066 2026] [security2:error] [pid 992244:tid 992293] [remote 57.141.18.105:39844] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/A0KVdK.lWez"] [unique_id "alQwPGJoJ8euboi5C2kkZgAASi8"] [Sun Jul 12 18:24:28.208307 2026] [cgid:error] [pid 992244:tid 992501] [client 202.46.62.44:62941] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/oven-sticks-custom-p-129.html?osCsid=vqsndc3ese2sfjmg2kvipa6cf0 [Sun Jul 12 18:24:28.331152 2026] [security2:error] [pid 992537:tid 992710] [client 91.92.42.131:60478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/login/index.php"] [unique_id "alQwPGsmDw50MNj9aALAHgAAAak"] [Sun Jul 12 18:24:28.427909 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwO2smDw50MNj9aALAHQAAAaA"] [Sun Jul 12 18:24:28.427978 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwO2smDw50MNj9aALAHQAAAaA"] [Sun Jul 12 18:24:28.431020 2026] [security2:error] [pid 992537:tid 992727] [client 65.21.113.206:57222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFnbXFtLzc4NTIvcWcvMzc5MjEvZw=="] [unique_id "alQwO2smDw50MNj9aALAGwAAAbo"] [Sun Jul 12 18:24:28.517989 2026] [security2:error] [pid 992537:tid 992696] [client 168.100.149.179:19946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29835/bargainor/2308_delphian.jsp"] [unique_id "alQwPGsmDw50MNj9aALAIgAAAZs"] [Sun Jul 12 18:24:28.555404 2026] [security2:error] [pid 992244:tid 992474] [client 34.60.131.171:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "girlwithbluesails.com"] [uri "/index.php"] [unique_id "alQwO2JoJ8euboi5C2kkWwAAYw0"] [Sun Jul 12 18:24:28.567377 2026] [authz_core:error] [pid 992244:tid 992479] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:28.567882 2026] [authz_core:error] [pid 992244:tid 992479] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:28.688996 2026] [security2:error] [pid 992244:tid 992387] [client 91.92.42.131:60484] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwPGJoJ8euboi5C2kkcQAAAAw"] [Sun Jul 12 18:24:29.327863 2026] [authz_core:error] [pid 992537:tid 992757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:29.328381 2026] [authz_core:error] [pid 992537:tid 992757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:30.266117 2026] [authz_core:error] [pid 992537:tid 992707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:30.269916 2026] [authz_core:error] [pid 992537:tid 992707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:30.595783 2026] [security2:error] [pid 992244:tid 992402] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFobGFiLTQyOTMvcWgtMTMxMzcvaGxhYg=="] [unique_id "alQwPmJoJ8euboi5C2kktAAAABs"] [Sun Jul 12 18:24:31.054872 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:31.055352 2026] [authz_core:error] [pid 992244:tid 992441] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:31.148992 2026] [security2:error] [pid 992244:tid 992447] [client 168.100.149.70:30154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29900/bargainor/2308_anisodactyli.jsp"] [unique_id "alQwP2JoJ8euboi5C2kkxQAAAEg"] [Sun Jul 12 18:24:31.623456 2026] [security2:error] [pid 992244:tid 992406] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwP2JoJ8euboi5C2kkxAAAAB8"] [Sun Jul 12 18:24:31.623533 2026] [security2:error] [pid 992244:tid 992406] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwP2JoJ8euboi5C2kkxAAAAB8"] [Sun Jul 12 18:24:31.624708 2026] [security2:error] [pid 992244:tid 992468] [client 65.21.113.206:57234] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFobGFiLTQyOTMvcWgtMTMxMzcvaGxhYg=="] [unique_id "alQwP2JoJ8euboi5C2kkwgAAAF0"] [Sun Jul 12 18:24:31.786625 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:31.787134 2026] [authz_core:error] [pid 992244:tid 992502] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:32.541204 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:32.541705 2026] [authz_core:error] [pid 992244:tid 992463] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:33.211540 2026] [security2:error] [pid 992244:tid 992377] [client 168.100.149.3:61348] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/29965/bargainor/2308_birefraction.jsp"] [unique_id "alQwQWJoJ8euboi5C2kk8QAAAAI"] [Sun Jul 12 18:24:33.316343 2026] [authz_core:error] [pid 992244:tid 992454] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:33.316854 2026] [authz_core:error] [pid 992244:tid 992454] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:33.346459 2026] [core:error] [pid 992244:tid 992403] [client 13.140.136.17:58455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:33.346500 2026] [core:error] [pid 992244:tid 992403] [client 13.140.136.17:58455] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:33.447419 2026] [security2:error] [pid 992244:tid 992457] [client 35.232.185.89:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/index.php"] [unique_id "alQwQWJoJ8euboi5C2kk6gAAAFI"] [Sun Jul 12 18:24:33.737608 2026] [security2:error] [pid 992244:tid 992448] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFvNHc1LTMwNTgvcW8tNDQ0NjkvbzR3NQ=="] [unique_id "alQwQWJoJ8euboi5C2kk_AAAAEk"] [Sun Jul 12 18:24:34.027299 2026] [security2:error] [pid 992537:tid 992697] [client 78.142.18.40:57762] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.tentmakersinamerica.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwQmsmDw50MNj9aALAiAAAAZw"] [Sun Jul 12 18:24:34.044137 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:34.044710 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:34.175901 2026] [security2:error] [pid 992244:tid 992412] [client 125.167.21.72:61656] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwQmJoJ8euboi5C2klCAAAACU"] [Sun Jul 12 18:24:34.176169 2026] [security2:error] [pid 992244:tid 992412] [client 125.167.21.72:61656] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwQmJoJ8euboi5C2klCAAAACU"] [Sun Jul 12 18:24:34.284023 2026] [security2:error] [pid 992537:tid 992781] [client 78.142.18.40:58633] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.tentmakersinamerica.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwQmsmDw50MNj9aALAigAAAfA"] [Sun Jul 12 18:24:34.327867 2026] [core:error] [pid 992537:tid 992741] [client 13.140.136.17:60630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:34.327917 2026] [core:error] [pid 992537:tid 992741] [client 13.140.136.17:60630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:34.479321 2026] [security2:error] [pid 992244:tid 992444] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwPWJoJ8euboi5C2kkgwAAAEU"], referer: http://50.87.187.16/api/v1/credentials [Sun Jul 12 18:24:34.554491 2026] [security2:error] [pid 992244:tid 992414] [client 78.142.18.40:58933] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.tentmakersinamerica.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwQmJoJ8euboi5C2klFQAAACc"] [Sun Jul 12 18:24:34.680021 2026] [security2:error] [pid 992244:tid 992381] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwQmJoJ8euboi5C2klDgAAAAY"] [Sun Jul 12 18:24:34.680094 2026] [security2:error] [pid 992244:tid 992381] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwQmJoJ8euboi5C2klDgAAAAY"] [Sun Jul 12 18:24:34.681238 2026] [security2:error] [pid 992244:tid 992466] [client 65.21.113.206:50518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFvNHc1LTMwNTgvcW8tNDQ0NjkvbzR3NQ=="] [unique_id "alQwQmJoJ8euboi5C2klCwAAAFs"] [Sun Jul 12 18:24:34.811921 2026] [security2:error] [pid 992244:tid 992474] [client 191.37.151.160:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwQmJoJ8euboi5C2klDAAAAGM"] [Sun Jul 12 18:24:34.816992 2026] [security2:error] [pid 992244:tid 992425] [client 78.142.18.40:59187] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.142.78.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.tentmakersinamerica.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwQmJoJ8euboi5C2klHQAAADI"] [Sun Jul 12 18:24:34.861272 2026] [authz_core:error] [pid 992537:tid 992754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:34.862144 2026] [authz_core:error] [pid 992537:tid 992754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:35.199604 2026] [security2:error] [pid 992244:tid 992486] [client 168.100.149.125:18786] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30030/bargainor/2308_mediator.jsp"] [unique_id "alQwQ2JoJ8euboi5C2klLgAAAG8"] [Sun Jul 12 18:24:35.274632 2026] [security2:error] [pid 992537:tid 992769] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwQ2smDw50MNj9aALAnAAAAeQ"], referer: http://50.87.187.16/api/v1/serverInfo [Sun Jul 12 18:24:35.564013 2026] [security2:error] [pid 992244:tid 992426] [client 57.141.18.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwQ2JoJ8euboi5C2klMQAAADM"] [Sun Jul 12 18:24:35.564495 2026] [security2:error] [pid 992244:tid 992376] [client 114.119.129.235:56753] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "theprogressionplaybook.com"] [uri "/how-to-pass-the-icaew-aca-strategic-business-management-exam/"] [unique_id "alQwQ2JoJ8euboi5C2klOwAAAAE"], referer: https://theprogressionplaybook.com/post-sitemap.xml [Sun Jul 12 18:24:35.676244 2026] [authz_core:error] [pid 992537:tid 992786] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:35.676771 2026] [authz_core:error] [pid 992537:tid 992786] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:35.834637 2026] [security2:error] [pid 992244:tid 992446] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwQ2JoJ8euboi5C2klPAAAAEc"], referer: http://50.87.187.16/api/session/properties [Sun Jul 12 18:24:36.277981 2026] [security2:error] [pid 992244:tid 992452] [client 167.148.117.80:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwQ2JoJ8euboi5C2klLQAAAE0"], referer: https://mackinstyle.com/ [Sun Jul 12 18:24:36.286818 2026] [security2:error] [pid 992537:tid 992731] [client 216.75.132.176:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwQ2smDw50MNj9aALAnQAAAb4"], referer: https://mackinstyle.com/ [Sun Jul 12 18:24:36.382444 2026] [security2:error] [pid 992244:tid 992467] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwRGJoJ8euboi5C2klSQAAAFw"], referer: http://50.87.187.16/api/v1/version [Sun Jul 12 18:24:36.469902 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:36.470389 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:36.957491 2026] [security2:error] [pid 992244:tid 992484] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwRGJoJ8euboi5C2klWwAAAG0"], referer: http://50.87.187.16/script [Sun Jul 12 18:24:37.206353 2026] [security2:error] [pid 992537:tid 992726] [client 168.100.149.52:15604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30095/bargainor/2308_gurian.jsp"] [unique_id "alQwRWsmDw50MNj9aALAtwAAAbk"] [Sun Jul 12 18:24:37.210142 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:37.210654 2026] [authz_core:error] [pid 992244:tid 992383] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:37.255861 2026] [security2:error] [pid 992537:tid 992658] [remote 139.59.184.99:46278] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 99.184.59.139.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "ccnss-org.johndmurray.org"] [uri "/wp-login.php"] [unique_id "alQwRWsmDw50MNj9aALAtgABtGc"] [Sun Jul 12 18:24:37.365744 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXFvNHc1LTk3L3FvLTQ0NDY5L280dzU="] [unique_id "alQwRWJoJ8euboi5C2klYwAAADg"] [Sun Jul 12 18:24:37.478764 2026] [security2:error] [pid 992537:tid 992667] [remote 207.46.13.127:53345] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 127.13.46.207.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "theflic.org"] [uri "/login.php"] [unique_id "alQwRWsmDw50MNj9aALAwAABnnA"] [Sun Jul 12 18:24:37.929012 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:37.929545 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:38.488271 2026] [security2:error] [pid 992244:tid 992405] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwRWJoJ8euboi5C2klaAAAAB4"] [Sun Jul 12 18:24:38.488343 2026] [security2:error] [pid 992244:tid 992405] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwRWJoJ8euboi5C2klaAAAAB4"] [Sun Jul 12 18:24:38.494681 2026] [security2:error] [pid 992537:tid 992686] [client 65.21.113.206:50532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXFvNHc1LTk3L3FvLTQ0NDY5L280dzU="] [unique_id "alQwRWsmDw50MNj9aALAxwAAAZE"] [Sun Jul 12 18:24:38.513522 2026] [security2:error] [pid 992244:tid 992452] [client 100.28.133.214:52047] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.turnweb.org"] [uri "/videos/building-collaborative-structures-a-systems-approach/"] [unique_id "alQwRmJoJ8euboi5C2klfAAAAE0"] [Sun Jul 12 18:24:38.696171 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:38.697182 2026] [authz_core:error] [pid 992244:tid 992409] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:39.234910 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.60:28632] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30160/bargainor/2308_monkey.jsp"] [unique_id "alQwR2JoJ8euboi5C2kljAAAAHE"] [Sun Jul 12 18:24:39.448570 2026] [authz_core:error] [pid 992244:tid 992390] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:39.457189 2026] [authz_core:error] [pid 992244:tid 992390] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:39.583583 2026] [security2:error] [pid 992244:tid 992433] [client 177.227.194.141:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwRmJoJ8euboi5C2klfwAAADo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:24:40.065131 2026] [security2:error] [pid 992244:tid 992429] [client 177.155.195.78:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwR2JoJ8euboi5C2kligAAADY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:24:40.245870 2026] [authz_core:error] [pid 992537:tid 992766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:40.246470 2026] [authz_core:error] [pid 992537:tid 992766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:40.409918 2026] [security2:error] [pid 992537:tid 992705] [client 149.28.43.156:52491] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.43.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "vibraniumacademy.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQwSGsmDw50MNj9aALA4gAAAaQ"] [Sun Jul 12 18:24:40.515259 2026] [security2:error] [pid 992244:tid 992428] [client 114.119.147.6:44181] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "21csfweb.org"] [uri "/"] [unique_id "alQwSGJoJ8euboi5C2klrgAAADU"], referer: https://21csfweb.org/ [Sun Jul 12 18:24:40.521245 2026] [security2:error] [pid 992537:tid 992794] [client 168.100.149.64:30574] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30225/bargainor/2308_impeccance.jsp"] [unique_id "alQwSGsmDw50MNj9aALA5QAAAf0"] [Sun Jul 12 18:24:40.948762 2026] [security2:error] [pid 992244:tid 992407] [client 104.0.151.122:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwSGJoJ8euboi5C2klrQAAACA"] [Sun Jul 12 18:24:41.014028 2026] [authz_core:error] [pid 992537:tid 992752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:41.014704 2026] [authz_core:error] [pid 992537:tid 992752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:41.108312 2026] [security2:error] [pid 992244:tid 992437] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXI2NXhiLzEzMDIvcjYvNTI3NjEvNg=="] [unique_id "alQwSWJoJ8euboi5C2klswAAAD4"] [Sun Jul 12 18:24:41.113234 2026] [proxy:warn] [pid 992244:tid 992384] [client 3.130.168.2:60558] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be avidagents.com for uri /400.shtml [Sun Jul 12 18:24:41.113306 2026] [proxy:error] [pid 992244:tid 992384] (70014)End of file found: [client 3.130.168.2:60558] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.130.168.2 () [Sun Jul 12 18:24:41.748469 2026] [security2:error] [pid 992537:tid 992702] [client 110.37.111.58:51925] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "box2216.bluehost.com"] [uri "/boaform/admin/formLogin"] [unique_id "alQwSWsmDw50MNj9aALBBgAAAaE"] [Sun Jul 12 18:24:41.782120 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:41.782605 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:41.818993 2026] [security2:error] [pid 992537:tid 992811] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwSWsmDw50MNj9aALBAAAAAg4"], referer: http://50.87.187.16/credentials/store/system/domain/_/ [Sun Jul 12 18:24:41.848533 2026] [security2:error] [pid 992537:tid 992702] [client 110.37.111.58:51925] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "box2216.bluehost.com"] [uri "/index.cgi"] [unique_id "alQwSWsmDw50MNj9aALBBgAAAaE"] [Sun Jul 12 18:24:42.171716 2026] [security2:error] [pid 992537:tid 992718] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwSWsmDw50MNj9aALBAwAAAbE"] [Sun Jul 12 18:24:42.171789 2026] [security2:error] [pid 992537:tid 992718] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwSWsmDw50MNj9aALBAwAAAbE"] [Sun Jul 12 18:24:42.172913 2026] [security2:error] [pid 992537:tid 992736] [client 65.21.113.206:50542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXI2NXhiLzEzMDIvcjYvNTI3NjEvNg=="] [unique_id "alQwSWsmDw50MNj9aALBAgAAAcM"] [Sun Jul 12 18:24:42.611434 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:42.612137 2026] [authz_core:error] [pid 992244:tid 992413] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:43.131888 2026] [security2:error] [pid 992244:tid 992501] [client 65.21.136.254:48692] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 254.136.21.65.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/bookmark.php"] [unique_id "alQwS2JoJ8euboi5C2kl4wAAAH4"] [Sun Jul 12 18:24:43.233897 2026] [security2:error] [pid 992244:tid 992482] [client 168.100.149.96:24516] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30290/bargainor/2308_gunz.jsp"] [unique_id "alQwS2JoJ8euboi5C2kl5AAAAGs"] [Sun Jul 12 18:24:43.454848 2026] [security2:error] [pid 992244:tid 992456] [client 141.94.194.132:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQwS2JoJ8euboi5C2kl4gAAAFE"] [Sun Jul 12 18:24:43.472216 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:43.472938 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:44.075010 2026] [security2:error] [pid 992244:tid 992453] [client 140.248.75.123:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.brazentrail.com"] [uri "/index.php"] [unique_id "alQwS2JoJ8euboi5C2kl7gAAAE4"] [Sun Jul 12 18:24:44.115747 2026] [security2:error] [pid 992537:tid 992685] [client 140.248.75.123:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.brazentrail.com"] [uri "/index.php"] [unique_id "alQwS2smDw50MNj9aALBGQAAAZA"] [Sun Jul 12 18:24:44.220550 2026] [security2:error] [pid 992244:tid 992475] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXJ2LTcxMy1ydnhtNS03NzAwLXZ4bQ==.cgi"] [unique_id "alQwTGJoJ8euboi5C2kl-gAAAGQ"] [Sun Jul 12 18:24:44.319816 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:44.320301 2026] [authz_core:error] [pid 992244:tid 992422] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:44.320713 2026] [security2:error] [pid 992244:tid 992486] [client 66.249.66.204:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "shopnanjala.com"] [uri "/index.php"] [unique_id "alQwSWJoJ8euboi5C2klwAAAAG8"] [Sun Jul 12 18:24:44.916784 2026] [security2:error] [pid 992244:tid 992412] [client 125.167.21.72:62124] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwTGJoJ8euboi5C2kmCgAAACU"] [Sun Jul 12 18:24:44.917147 2026] [security2:error] [pid 992244:tid 992412] [client 125.167.21.72:62124] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQwTGJoJ8euboi5C2kmCgAAACU"] [Sun Jul 12 18:24:45.140549 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:45.141101 2026] [authz_core:error] [pid 992244:tid 992420] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:45.200862 2026] [security2:error] [pid 992244:tid 992389] [client 168.100.149.166:15868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30355/bargainor/2308_monadically.jsp"] [unique_id "alQwTWJoJ8euboi5C2kmFgAAAA4"] [Sun Jul 12 18:24:45.228099 2026] [security2:error] [pid 992537:tid 992756] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwTGsmDw50MNj9aALBKgAAAdc"] [Sun Jul 12 18:24:45.228151 2026] [security2:error] [pid 992537:tid 992756] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwTGsmDw50MNj9aALBKgAAAdc"] [Sun Jul 12 18:24:45.230723 2026] [security2:error] [pid 992244:tid 992431] [client 65.21.113.206:47930] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXJ2LTcxMy1ydnhtNS03NzAwLXZ4bQ==.cgi"] [unique_id "alQwTGJoJ8euboi5C2kmCAAAADg"] [Sun Jul 12 18:24:45.287413 2026] [security2:error] [pid 992244:tid 992393] [client 216.24.219.183:56077] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.219.24.216.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQwTWJoJ8euboi5C2kmFwAAABI"] [Sun Jul 12 18:24:45.474929 2026] [core:error] [pid 992244:tid 992259] [remote 74.7.244.60:37084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:45.474983 2026] [core:error] [pid 992244:tid 992259] [remote 74.7.244.60:37084] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:45.475526 2026] [security2:error] [pid 992244:tid 992494] [client 74.7.244.60:37084] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.newjobgreatjob.stillcom.net"] [uri "/newjobgreatjob/index.php"] [unique_id "alQwTWJoJ8euboi5C2kmGgAAdw0"] [Sun Jul 12 18:24:45.931295 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:45.932138 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:46.309994 2026] [security2:error] [pid 992244:tid 992403] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwTmJoJ8euboi5C2kmJAAAABw"], referer: http://50.87.187.16/manage/credentials/ [Sun Jul 12 18:24:46.526133 2026] [security2:error] [pid 992244:tid 992430] [client 168.100.149.150:25610] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30420/bargainor/2308_enhalo.jsp"] [unique_id "alQwTmJoJ8euboi5C2kmLAAAADc"] [Sun Jul 12 18:24:46.745546 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:46.746136 2026] [authz_core:error] [pid 992244:tid 992476] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:46.903007 2026] [fcgid:warn] [pid 992244:tid 992471] (70014)End of file found: [client 3.130.168.2:43586] mod_fcgid: can't get data from http client [Sun Jul 12 18:24:47.013296 2026] [security2:error] [pid 992244:tid 992383] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXJ2LTcxMy1ydnhtNS0xMzUzLXZ4bQ==.cgi"] [unique_id "alQwT2JoJ8euboi5C2kmNwAAAAg"] [Sun Jul 12 18:24:47.511788 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:47.512263 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:48.064417 2026] [security2:error] [pid 992244:tid 992414] [client 65.21.113.206:47944] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXJ2LTcxMy1ydnhtNS0xMzUzLXZ4bQ==.cgi"] [unique_id "alQwT2JoJ8euboi5C2kmQwAAACc"] [Sun Jul 12 18:24:48.064638 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwT2JoJ8euboi5C2kmRgAAAFg"] [Sun Jul 12 18:24:48.064694 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwT2JoJ8euboi5C2kmRgAAAFg"] [Sun Jul 12 18:24:48.319144 2026] [access_compat:error] [pid 992244:tid 992310] [remote 47.86.10.240:48394] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php [Sun Jul 12 18:24:48.320541 2026] [access_compat:error] [pid 992244:tid 992310] [remote 47.86.10.240:48394] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.phtml [Sun Jul 12 18:24:48.333274 2026] [authz_core:error] [pid 992537:tid 992758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:48.333832 2026] [authz_core:error] [pid 992537:tid 992758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:48.497002 2026] [core:error] [pid 992537:tid 992764] [client 13.140.136.17:58030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:48.497044 2026] [core:error] [pid 992537:tid 992764] [client 13.140.136.17:58030] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:48.521192 2026] [core:error] [pid 992537:tid 992731] [client 13.140.136.17:61647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:48.521238 2026] [core:error] [pid 992537:tid 992731] [client 13.140.136.17:61647] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:24:48.524926 2026] [security2:error] [pid 992537:tid 992708] [client 168.100.149.51:30960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30485/bargainor/2308_metalogical.jsp"] [unique_id "alQwUGsmDw50MNj9aALBWwAAAac"] [Sun Jul 12 18:24:49.136393 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:49.136932 2026] [authz_core:error] [pid 992244:tid 992442] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:49.285917 2026] [security2:error] [pid 992244:tid 992383] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXJkLTU0NzMtcmRxd3ktNjMyNy1kcXc=.cgi"] [unique_id "alQwUWJoJ8euboi5C2kmeAAAAAg"] [Sun Jul 12 18:24:49.918593 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:49.919178 2026] [authz_core:error] [pid 992244:tid 992487] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:50.263981 2026] [security2:error] [pid 992244:tid 992485] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwUWJoJ8euboi5C2kmggAAAG4"] [Sun Jul 12 18:24:50.264043 2026] [security2:error] [pid 992244:tid 992485] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwUWJoJ8euboi5C2kmggAAAG4"] [Sun Jul 12 18:24:50.265028 2026] [security2:error] [pid 992244:tid 992429] [client 65.21.113.206:47958] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXJkLTU0NzMtcmRxd3ktNjMyNy1kcXc=.cgi"] [unique_id "alQwUWJoJ8euboi5C2kmfwAAADY"] [Sun Jul 12 18:24:50.526592 2026] [security2:error] [pid 992244:tid 992391] [client 168.100.149.105:20784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30550/bargainor/2308_psychoreflex.jsp"] [unique_id "alQwUmJoJ8euboi5C2kmkwAAABA"] [Sun Jul 12 18:24:50.634766 2026] [security2:error] [pid 992244:tid 992444] [client 62.183.19.83:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwUmJoJ8euboi5C2kmiQAAAEU"] [Sun Jul 12 18:24:50.711032 2026] [authz_core:error] [pid 992537:tid 992752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:50.711504 2026] [authz_core:error] [pid 992537:tid 992752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:50.722182 2026] [security2:error] [pid 992537:tid 992704] [client 91.92.42.131:51540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.187.16"] [uri "/.env"] [unique_id "alQwUmsmDw50MNj9aALBawAAAaM"], referer: http://50.87.187.16/.env [Sun Jul 12 18:24:51.371409 2026] [security2:error] [pid 992244:tid 992493] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwU2JoJ8euboi5C2kmoQAAAHY"], referer: http://50.87.187.16/cli?remoting=false [Sun Jul 12 18:24:51.516709 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:51.517183 2026] [authz_core:error] [pid 992244:tid 992483] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:51.963748 2026] [security2:error] [pid 992244:tid 992404] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwU2JoJ8euboi5C2kmrwAAAB0"], referer: http://50.87.187.16/rest/V1/store/storeConfigs [Sun Jul 12 18:24:52.115027 2026] [security2:error] [pid 992244:tid 992492] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXJkLTU0NzMtcmRxd3ktOTEyOS1kcXc=.cgi"] [unique_id "alQwVGJoJ8euboi5C2kmuAAAAHU"] [Sun Jul 12 18:24:52.287226 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:52.287797 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:52.520030 2026] [security2:error] [pid 992244:tid 992450] [client 168.100.149.210:58208] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30615/bargainor/2308_mailable.jsp"] [unique_id "alQwVGJoJ8euboi5C2kmvwAAAEs"] [Sun Jul 12 18:24:52.577333 2026] [security2:error] [pid 992537:tid 992700] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwVGsmDw50MNj9aALBhAAAAZ8"], referer: http://50.87.187.16/rest/V1/directory/countries [Sun Jul 12 18:24:52.592465 2026] [security2:error] [pid 992244:tid 992424] [client 57.141.18.1:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwU2JoJ8euboi5C2kmpgAAADE"] [Sun Jul 12 18:24:53.047800 2026] [authz_core:error] [pid 992244:tid 992405] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:53.048498 2026] [authz_core:error] [pid 992244:tid 992405] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:53.171092 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwVGJoJ8euboi5C2kmxQAAAFg"] [Sun Jul 12 18:24:53.171159 2026] [security2:error] [pid 992244:tid 992463] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwVGJoJ8euboi5C2kmxQAAAFg"] [Sun Jul 12 18:24:53.172651 2026] [security2:error] [pid 992537:tid 992783] [client 65.21.113.206:36342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXJkLTU0NzMtcmRxd3ktOTEyOS1kcXc=.cgi"] [unique_id "alQwVGsmDw50MNj9aALBhQAAAfI"] [Sun Jul 12 18:24:53.242801 2026] [security2:error] [pid 992537:tid 992795] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwVGsmDw50MNj9aALBiQAAAf4"], referer: http://50.87.187.16/api/sonicos/v1/server/info [Sun Jul 12 18:24:53.357279 2026] [security2:error] [pid 992244:tid 992457] [client 85.204.70.96:37488] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "mindatpeacemoving.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQwVWJoJ8euboi5C2km0AAAAFI"] [Sun Jul 12 18:24:53.550262 2026] [security2:error] [pid 992244:tid 992370] [remote 216.73.216.109:53280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 109.216.73.216.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cecweb.org"] [uri "/wp-includes__8678478/Requests/src/Exception/Transport/"] [unique_id "alQwVWJoJ8euboi5C2km0QAAXHw"] [Sun Jul 12 18:24:53.855501 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:53.856140 2026] [authz_core:error] [pid 992244:tid 992439] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:53.948947 2026] [security2:error] [pid 992244:tid 992491] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwVWJoJ8euboi5C2km1AAAAHQ"], referer: http://50.87.187.16/api/sonicos/v1/config/current/export [Sun Jul 12 18:24:54.100336 2026] [security2:error] [pid 992537:tid 992734] [client 85.204.70.96:35426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mindatpeacemoving.com"] [uri "/xmlrpc.php"] [unique_id "alQwVmsmDw50MNj9aALBlgAAAcE"] [Sun Jul 12 18:24:54.618686 2026] [authz_core:error] [pid 992537:tid 992710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:54.619177 2026] [authz_core:error] [pid 992537:tid 992710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:54.637049 2026] [security2:error] [pid 992244:tid 992497] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwVmJoJ8euboi5C2km5QAAAHo"], referer: http://50.87.187.16/api/sonicos/v1/user/local-users [Sun Jul 12 18:24:54.719487 2026] [security2:error] [pid 992537:tid 992704] [client 198.199.87.132:57642] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmsmDw50MNj9aALBngAAAaM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.766923 2026] [security2:error] [pid 992244:tid 992425] [client 198.199.87.132:57630] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmJoJ8euboi5C2km6gAAADI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.772016 2026] [security2:error] [pid 992244:tid 992381] [client 167.99.153.18:33446] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmJoJ8euboi5C2km7AAAAAY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.785680 2026] [security2:error] [pid 992537:tid 992787] [client 206.189.195.4:50600] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmsmDw50MNj9aALBnwAAAfY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.800336 2026] [security2:error] [pid 992244:tid 992418] [client 159.89.225.78:59426] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmJoJ8euboi5C2km6wAAACs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.816336 2026] [security2:error] [pid 992537:tid 992697] [client 204.48.20.211:49938] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwVmsmDw50MNj9aALBoAAAAZw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:54.832458 2026] [security2:error] [pid 992244:tid 992489] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXJuM3M2LTM1NTgvcm4tMTk4MDEvbjNzNg=="] [unique_id "alQwVmJoJ8euboi5C2km8QAAAHI"] [Sun Jul 12 18:24:54.998597 2026] [security2:error] [pid 992244:tid 992485] [client 162.141.167.3:57330] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "guildings.ca"] [uri "/.env"] [unique_id "alQwVmJoJ8euboi5C2km9wAAAG4"] [Sun Jul 12 18:24:55.159514 2026] [security2:error] [pid 992244:tid 992474] [client 168.100.149.235:27278] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30680/bargainor/2308_epidemiology.jsp"] [unique_id "alQwV2JoJ8euboi5C2km_gAAAGM"] [Sun Jul 12 18:24:55.277895 2026] [security2:error] [pid 992244:tid 992399] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwVmJoJ8euboi5C2km9gAAABg"], referer: http://50.87.187.16/api/sonicos/v1/user/local-groups [Sun Jul 12 18:24:55.459821 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:55.460301 2026] [authz_core:error] [pid 992244:tid 992453] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:55.691226 2026] [security2:error] [pid 992244:tid 992262] [remote 74.7.227.188:42884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQwV2JoJ8euboi5C2knCwAAVhA"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-junior-firefighter-custom-p-1063.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:24:55.755518 2026] [security2:error] [pid 992244:tid 992496] [client 74.7.230.5:44230] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "playmatchgame.com"] [uri "/robots.txt"] [unique_id "alQwV2JoJ8euboi5C2knDAAAeXs"] [Sun Jul 12 18:24:55.923940 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwV2JoJ8euboi5C2knBAAAAFM"] [Sun Jul 12 18:24:55.923997 2026] [security2:error] [pid 992244:tid 992458] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwV2JoJ8euboi5C2knBAAAAFM"] [Sun Jul 12 18:24:55.924689 2026] [security2:error] [pid 992244:tid 992467] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwV2JoJ8euboi5C2knCgAAAFw"], referer: http://50.87.187.16/api/sonicos/v1/radius-server [Sun Jul 12 18:24:55.925073 2026] [security2:error] [pid 992244:tid 992398] [client 65.21.113.206:36344] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXJuM3M2LTM1NTgvcm4tMTk4MDEvbjNzNg=="] [unique_id "alQwV2JoJ8euboi5C2knAQAAABc"] [Sun Jul 12 18:24:56.072286 2026] [security2:error] [pid 992244:tid 992495] [client 14.191.167.18:24881] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwV2JoJ8euboi5C2knDgAAAHg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:56.225842 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:56.226330 2026] [authz_core:error] [pid 992244:tid 992430] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:56.435481 2026] [security2:error] [pid 992244:tid 992451] [client 103.58.73.157:44936] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwWGJoJ8euboi5C2knFAAAAEw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:56.511281 2026] [security2:error] [pid 992244:tid 992395] [client 178.54.191.57:57688] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwWGJoJ8euboi5C2knFwAAABQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:56.537053 2026] [security2:error] [pid 992244:tid 992421] [client 168.100.149.72:44710] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30745/bargainor/2308_secque.jsp"] [unique_id "alQwWGJoJ8euboi5C2knGgAAAC4"] [Sun Jul 12 18:24:56.588753 2026] [proxy_http:error] [pid 992244:tid 992423] (70007)The timeout specified has expired: [client 186.107.79.152:53366] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:24:56.588819 2026] [proxy:error] [pid 992244:tid 992423] [client 186.107.79.152:53366] AH00898: Error reading from remote server returned by /commoditys/371630-108428345, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:24:56.596719 2026] [proxy_http:error] [pid 992244:tid 992473] (70007)The timeout specified has expired: [client 127.0.0.1:50814] AH01102: error reading status line from remote server 50.87.254.158:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:24:56.596779 2026] [proxy:error] [pid 992244:tid 992473] [client 127.0.0.1:50814] AH00898: Error reading from remote server returned by /commoditys/371630-108428345, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:24:56.626349 2026] [security2:error] [pid 992537:tid 992779] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwWGsmDw50MNj9aALBvgAAAe4"], referer: http://50.87.187.16/api/sonicos/v1/ldap/base-settings [Sun Jul 12 18:24:56.638422 2026] [security2:error] [pid 992537:tid 992793] [client 189.201.48.232:9939] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwWGsmDw50MNj9aALBwwAAAfw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:56.841961 2026] [security2:error] [pid 992537:tid 992766] [client 181.118.47.201:35854] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwWGsmDw50MNj9aALBxgAAAeE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:57.006479 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:57.007006 2026] [authz_core:error] [pid 992244:tid 992376] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:57.162597 2026] [security2:error] [pid 992244:tid 992455] [client 47.128.21.180:31304] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.pacareerlinkchesco.org"] [uri "/robots.txt"] [unique_id "alQwWWJoJ8euboi5C2knKgAAAFA"] [Sun Jul 12 18:24:57.249789 2026] [security2:error] [pid 992244:tid 992501] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwWGJoJ8euboi5C2knKAAAAH4"], referer: http://50.87.187.16/api/sonicos/v1/vpn/l2tp-server [Sun Jul 12 18:24:57.477193 2026] [security2:error] [pid 992537:tid 992738] [client 177.3.98.86:33084] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwWWsmDw50MNj9aALB0wAAAcU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:24:57.787056 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:57.787611 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:57.862024 2026] [security2:error] [pid 992537:tid 992788] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwWWsmDw50MNj9aALB1wAAAfc"], referer: http://50.87.187.16/api/sonicos/v1/log/export [Sun Jul 12 18:24:58.059874 2026] [security2:error] [pid 992537:tid 992624] [remote 57.141.18.40:27320] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 40.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/GhtPFHACWP1Zir/vByfD5dKZ.lWez"] [unique_id "alQwWmsmDw50MNj9aALB2wABo0U"] [Sun Jul 12 18:24:58.227009 2026] [cgid:error] [pid 992244:tid 992444] [client 202.46.62.111:3272] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/oven-mitts-custom-p-697.html?osCsid=siau703jrr2qpjlduhcbvvjns7 [Sun Jul 12 18:24:58.325877 2026] [security2:error] [pid 992244:tid 992498] [client 202.46.62.91:27828] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 91.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwWmJoJ8euboi5C2knOwAAAHs"], referer: https://www.stephenspublishing.com/oven-mitts-custom-p-697.html?osCsid=siau703jrr2qpjlduhcbvvjns7 [Sun Jul 12 18:24:58.481535 2026] [security2:error] [pid 992244:tid 992479] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwWmJoJ8euboi5C2knOgAAAGg"], referer: http://50.87.187.16/cgi-bin/sslvpn/portal.cgi [Sun Jul 12 18:24:58.522944 2026] [security2:error] [pid 992244:tid 992448] [client 168.100.149.160:24474] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30810/bargainor/2308_dislevelment.jsp"] [unique_id "alQwWmJoJ8euboi5C2knPQAAAEk"] [Sun Jul 12 18:24:58.569867 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:58.570359 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:58.668257 2026] [security2:error] [pid 992244:tid 992475] [client 65.21.113.206:47086] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXMtNTc3MS9zY3YvMTY2OS1jdnd4"] [unique_id "alQwWmJoJ8euboi5C2knRQAAAGQ"] [Sun Jul 12 18:24:59.052434 2026] [security2:error] [pid 992244:tid 992439] [client 162.141.167.3:57296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "guildings.ca"] [uri "/backend/.env"] [unique_id "alQwW2JoJ8euboi5C2knSQAAAEA"] [Sun Jul 12 18:24:59.108369 2026] [security2:error] [pid 992244:tid 992430] [client 162.141.167.3:57296] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "guildings.ca"] [uri "/api/.env"] [unique_id "alQwW2JoJ8euboi5C2knSwAAADc"] [Sun Jul 12 18:24:59.164381 2026] [security2:error] [pid 992244:tid 992398] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwWmJoJ8euboi5C2knRwAAABc"], referer: http://50.87.187.16/cgi-bin/portal [Sun Jul 12 18:24:59.389476 2026] [authz_core:error] [pid 992537:tid 992736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:24:59.390043 2026] [authz_core:error] [pid 992537:tid 992736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:24:59.754589 2026] [security2:error] [pid 992244:tid 992433] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwW2JoJ8euboi5C2knUAAAADo"] [Sun Jul 12 18:24:59.754701 2026] [security2:error] [pid 992244:tid 992433] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwW2JoJ8euboi5C2knUAAAADo"] [Sun Jul 12 18:24:59.756205 2026] [security2:error] [pid 992244:tid 992441] [client 65.21.113.206:36354] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXMtNTc3MS9zY3YvMTY2OS1jdnd4"] [unique_id "alQwW2JoJ8euboi5C2knTgAAAEI"] [Sun Jul 12 18:24:59.817501 2026] [security2:error] [pid 992244:tid 992403] [client 223.109.252.157:46524] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.com"] [uri "/products.html"] [unique_id "alQwW2JoJ8euboi5C2knWwAAABw"] [Sun Jul 12 18:24:59.817855 2026] [security2:error] [pid 992244:tid 992403] [client 223.109.252.157:46524] ModSecurity: Warning. Matched phrase "Sogou web spider" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.nwuav.com"] [uri "/products.html"] [unique_id "alQwW2JoJ8euboi5C2knWwAAABw"] [Sun Jul 12 18:24:59.880980 2026] [security2:error] [pid 992537:tid 992779] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwW2smDw50MNj9aALCAQAAAe4"], referer: http://50.87.187.16/cgi-bin/sslvpnclient [Sun Jul 12 18:24:59.973312 2026] [security2:error] [pid 992537:tid 992798] [client 85.204.70.96:23133] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.70.204.85.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mindatpeacemoving.com"] [uri "/xmlrpc.php"] [unique_id "alQwW2smDw50MNj9aALCCAAAAgE"] [Sun Jul 12 18:24:59.973532 2026] [security2:error] [pid 992537:tid 992798] [client 85.204.70.96:23133] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "mindatpeacemoving.com"] [uri "/xmlrpc.php"] [unique_id "alQwW2smDw50MNj9aALCCAAAAgE"] [Sun Jul 12 18:25:00.183853 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:00.184342 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:00.910865 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:00.911346 2026] [authz_core:error] [pid 992244:tid 992457] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:01.005718 2026] [security2:error] [pid 992244:tid 992438] [client 57.141.18.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwW2JoJ8euboi5C2knWQAAAD8"] [Sun Jul 12 18:25:01.221210 2026] [security2:error] [pid 992244:tid 992488] [client 168.100.149.13:41070] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30875/bargainor/2308_limnoria.jsp"] [unique_id "alQwXWJoJ8euboi5C2knggAAAHE"] [Sun Jul 12 18:25:01.708798 2026] [authz_core:error] [pid 992537:tid 992740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:01.709437 2026] [authz_core:error] [pid 992537:tid 992740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:01.882152 2026] [security2:error] [pid 992537:tid 992721] [client 209.38.198.157:13893] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "173.254.107.93"] [uri "/sdk"] [unique_id "alQwXWsmDw50MNj9aALCIgAAAbQ"] [Sun Jul 12 18:25:02.393974 2026] [security2:error] [pid 992244:tid 992401] [client 82.102.18.126:3844] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQwXmJoJ8euboi5C2knlwAAABo"] [Sun Jul 12 18:25:02.503905 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:02.504400 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:02.744515 2026] [security2:error] [pid 992244:tid 992420] [client 82.102.18.126:55572] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 126.18.102.82.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "brunolongarini.com"] [uri "/xmlrpc.php"] [unique_id "alQwXmJoJ8euboi5C2knmwAAAC0"] [Sun Jul 12 18:25:02.821466 2026] [security2:error] [pid 992244:tid 992452] [client 209.38.198.157:5129] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "173.254.107.93"] [uri "/"] [unique_id "alQwXmJoJ8euboi5C2knnwAAAE0"] [Sun Jul 12 18:25:03.032587 2026] [security2:error] [pid 992537:tid 992769] [client 82.102.18.126:5964] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQwX2smDw50MNj9aALCMgAAAeQ"] [Sun Jul 12 18:25:03.213041 2026] [security2:error] [pid 992244:tid 992482] [client 168.100.149.33:23694] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/30940/bargainor/2308_milksopism.jsp"] [unique_id "alQwX2JoJ8euboi5C2knpwAAAGs"] [Sun Jul 12 18:25:03.272267 2026] [authz_core:error] [pid 992244:tid 992405] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:03.272948 2026] [authz_core:error] [pid 992244:tid 992405] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:03.287051 2026] [security2:error] [pid 992244:tid 992407] [client 65.21.113.206:39408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQwX2JoJ8euboi5C2knqAAAACA"] [Sun Jul 12 18:25:03.336306 2026] [security2:error] [pid 992537:tid 992695] [client 82.102.18.126:33365] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQwX2smDw50MNj9aALCNgAAAZo"] [Sun Jul 12 18:25:03.622073 2026] [security2:error] [pid 992537:tid 992762] [client 82.102.18.126:58846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQwX2smDw50MNj9aALCOgAAAd0"] [Sun Jul 12 18:25:03.785254 2026] [security2:error] [pid 992244:tid 992388] [client 65.21.113.206:55034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQwX2JoJ8euboi5C2kntAAAAA0"] [Sun Jul 12 18:25:03.944290 2026] [security2:error] [pid 992244:tid 992467] [client 82.102.18.126:58856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQwX2JoJ8euboi5C2knvAAAAFw"] [Sun Jul 12 18:25:04.065904 2026] [authz_core:error] [pid 992244:tid 992496] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:04.066398 2026] [authz_core:error] [pid 992244:tid 992496] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:04.113809 2026] [security2:error] [pid 992244:tid 992495] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXMtNTg4Ni9zbngvMzY2NDEtbnh2cA=="] [unique_id "alQwYGJoJ8euboi5C2knvwAAAHg"] [Sun Jul 12 18:25:04.123421 2026] [security2:error] [pid 992537:tid 992633] [remote 47.86.10.240:49734] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/httpd/modsecurity.d/01_asl_content.conf"] [line "64"] [id "391213"] [msg "Atomicorp.com WAF Rules: Request content type is not allowed by policy"] [data "application/grpc"] [severity "WARNING"] [hostname "50.87.169.225"] [uri "/grpc.reflection.v1alpha.ServerReflection/ServerReflectionInfo"] [unique_id "alQwYGsmDw50MNj9aALCQQABnk4"] [Sun Jul 12 18:25:04.229092 2026] [security2:error] [pid 992244:tid 992398] [client 82.102.18.126:26084] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "alQwYGJoJ8euboi5C2knwgAAABc"] [Sun Jul 12 18:25:04.291084 2026] [security2:error] [pid 992244:tid 992387] [client 65.21.113.206:55034] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQwYGJoJ8euboi5C2knxQAAAAw"] [Sun Jul 12 18:25:04.297355 2026] [security2:error] [pid 992244:tid 992393] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwX2JoJ8euboi5C2knvQAAABI"], referer: http://50.87.187.16/cgi-bin/login [Sun Jul 12 18:25:04.325094 2026] [security2:error] [pid 992537:tid 992622] [remote 47.86.10.240:49734] ModSecurity: Access denied with code 406 (phase 2). Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/etc/httpd/modsecurity.d/01_asl_content.conf"] [line "64"] [id "391213"] [msg "Atomicorp.com WAF Rules: Request content type is not allowed by policy"] [data "application/grpc"] [severity "WARNING"] [hostname "50.87.169.225"] [uri "/grpc.reflection.v1alpha.ServerReflection/ServerReflectionInfo"] [unique_id "alQwYGsmDw50MNj9aALCQwABtUM"] [Sun Jul 12 18:25:04.525394 2026] [security2:error] [pid 992244:tid 992433] [client 82.102.18.126:58884] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQwYGJoJ8euboi5C2knxwAAADo"] [Sun Jul 12 18:25:04.550291 2026] [security2:error] [pid 992244:tid 992417] [client 168.100.149.130:53410] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31005/bargainor/2308_capnoides.jsp"] [unique_id "alQwYGJoJ8euboi5C2knyAAAACo"] [Sun Jul 12 18:25:04.681579 2026] [security2:error] [pid 992537:tid 992767] [client 172.252.201.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQwYGsmDw50MNj9aALCQgAAAeI"] [Sun Jul 12 18:25:04.854593 2026] [security2:error] [pid 992537:tid 992725] [client 82.102.18.126:42755] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "alQwYGsmDw50MNj9aALCTgAAAbg"] [Sun Jul 12 18:25:04.857544 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:04.858280 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:05.150298 2026] [security2:error] [pid 992537:tid 992714] [client 82.102.18.126:43858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQwYWsmDw50MNj9aALCWQAAAa0"] [Sun Jul 12 18:25:05.381084 2026] [security2:error] [pid 992244:tid 992489] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwYGJoJ8euboi5C2kn0wAAAHI"] [Sun Jul 12 18:25:05.381152 2026] [security2:error] [pid 992244:tid 992489] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwYGJoJ8euboi5C2kn0wAAAHI"] [Sun Jul 12 18:25:05.391152 2026] [security2:error] [pid 992244:tid 992403] [client 65.21.113.206:55048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXMtNTg4Ni9zbngvMzY2NDEtbnh2cA=="] [unique_id "alQwYGJoJ8euboi5C2kn0QAAABw"] [Sun Jul 12 18:25:05.436804 2026] [security2:error] [pid 992537:tid 992772] [client 82.102.18.126:58916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQwYWsmDw50MNj9aALCYAAAAec"] [Sun Jul 12 18:25:05.673020 2026] [authz_core:error] [pid 992244:tid 992480] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:05.673498 2026] [authz_core:error] [pid 992244:tid 992480] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:05.716465 2026] [core:error] [pid 992537:tid 992713] [client 13.140.136.17:56183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:05.716517 2026] [core:error] [pid 992537:tid 992713] [client 13.140.136.17:56183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:05.724293 2026] [core:error] [pid 992537:tid 992723] [client 13.140.136.17:62690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:05.724334 2026] [core:error] [pid 992537:tid 992723] [client 13.140.136.17:62690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:05.744302 2026] [security2:error] [pid 992537:tid 992810] [client 82.102.18.126:51021] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQwYWsmDw50MNj9aALCagAAAg0"] [Sun Jul 12 18:25:06.030521 2026] [security2:error] [pid 992537:tid 992695] [client 82.102.18.126:39233] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQwYmsmDw50MNj9aALCbwAAAZo"] [Sun Jul 12 18:25:06.323323 2026] [security2:error] [pid 992244:tid 992402] [client 82.102.18.126:58956] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "brunolongarini.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "alQwYmJoJ8euboi5C2kn6QAAABs"] [Sun Jul 12 18:25:06.443489 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:06.444254 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:06.537824 2026] [security2:error] [pid 992537:tid 992722] [client 168.100.149.112:30966] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31070/bargainor/2308_deft.jsp"] [unique_id "alQwYmsmDw50MNj9aALCfgAAAbU"] [Sun Jul 12 18:25:06.586029 2026] [security2:error] [pid 992244:tid 992438] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXMtODI0NC9zY3YvMTY2OS1jdnd4"] [unique_id "alQwYmJoJ8euboi5C2kn7wAAAD8"] [Sun Jul 12 18:25:07.036327 2026] [security2:error] [pid 992244:tid 992317] [remote 141.94.161.61:47608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.161.94.141.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "smellytele.com"] [uri "/wp-login.php"] [unique_id "alQwY2JoJ8euboi5C2kn9gAAXEc"] [Sun Jul 12 18:25:07.228942 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:07.229579 2026] [authz_core:error] [pid 992244:tid 992488] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:07.281507 2026] [security2:error] [pid 992537:tid 992705] [client 57.141.18.89:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwYmsmDw50MNj9aALCggAAAaQ"] [Sun Jul 12 18:25:07.290596 2026] [security2:error] [pid 992244:tid 992437] [client 161.118.238.173:53615] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.starchildyoga.com"] [uri "/wp-login.php"] [unique_id "alQwY2JoJ8euboi5C2koAwAAAD4"] [Sun Jul 12 18:25:07.600039 2026] [security2:error] [pid 992244:tid 992454] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwY2JoJ8euboi5C2kn-QAAAE8"] [Sun Jul 12 18:25:07.600095 2026] [security2:error] [pid 992244:tid 992454] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwY2JoJ8euboi5C2kn-QAAAE8"] [Sun Jul 12 18:25:07.601757 2026] [security2:error] [pid 992537:tid 992763] [client 65.21.113.206:55060] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXMtODI0NC9zY3YvMTY2OS1jdnd4"] [unique_id "alQwY2smDw50MNj9aALCgwAAAd4"] [Sun Jul 12 18:25:07.676299 2026] [security2:error] [pid 992244:tid 992485] [client 83.51.222.11:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwY2JoJ8euboi5C2koAAAAAG4"] [Sun Jul 12 18:25:07.698358 2026] [security2:error] [pid 992244:tid 992474] [client 161.118.238.173:53794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.starchildyoga.com"] [uri "/wp-login.php"] [unique_id "alQwY2JoJ8euboi5C2koDAAAAGM"], referer: https://wordpress.org/ [Sun Jul 12 18:25:07.995505 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:07.996036 2026] [authz_core:error] [pid 992244:tid 992452] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:08.184995 2026] [proxy:warn] [pid 992244:tid 992384] [client 3.130.168.2:27688] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be avidagents.com for uri /400.shtml [Sun Jul 12 18:25:08.185079 2026] [proxy:error] [pid 992244:tid 992384] (70014)End of file found: [client 3.130.168.2:27688] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.130.168.2 () [Sun Jul 12 18:25:08.226991 2026] [proxy:error] [pid 992537:tid 992789] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:25:08.227210 2026] [proxy_http:error] [pid 992537:tid 992789] [client 142.93.211.23:42092] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:25:08.236784 2026] [proxy:error] [pid 992537:tid 992789] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:25:08.236966 2026] [proxy_http:error] [pid 992537:tid 992789] [client 142.93.211.23:42092] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:25:08.551561 2026] [security2:error] [pid 992244:tid 992422] [client 168.100.149.212:41416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31135/bargainor/2308_did.jsp"] [unique_id "alQwZGJoJ8euboi5C2koKAAAAC8"] [Sun Jul 12 18:25:08.626010 2026] [security2:error] [pid 992244:tid 992314] [remote 72.167.50.103:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.50.167.72.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/wp-login.php"] [unique_id "alQwZGJoJ8euboi5C2koLQAAKUQ"] [Sun Jul 12 18:25:08.741309 2026] [proxy:error] [pid 992244:tid 992398] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:25:08.741554 2026] [proxy_http:error] [pid 992244:tid 992398] [client 142.93.211.23:42098] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.kqe.fyn.mybluehost.me/ [Sun Jul 12 18:25:08.743797 2026] [proxy:error] [pid 992244:tid 992398] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:25:08.744026 2026] [proxy_http:error] [pid 992244:tid 992398] [client 142.93.211.23:42098] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.kqe.fyn.mybluehost.me/ [Sun Jul 12 18:25:08.766141 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:08.766725 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:08.965331 2026] [security2:error] [pid 992244:tid 992399] [client 57.141.18.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwZGJoJ8euboi5C2koMgAAABg"] [Sun Jul 12 18:25:09.151793 2026] [security2:error] [pid 992537:tid 992749] [client 161.118.238.173:54164] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.starchildyoga.net"] [uri "/wp-login.php"] [unique_id "alQwZWsmDw50MNj9aALClwAAAdA"], referer: https://www.facebook.com/ [Sun Jul 12 18:25:09.510074 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:09.510550 2026] [authz_core:error] [pid 992244:tid 992377] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:09.536360 2026] [security2:error] [pid 992244:tid 992387] [client 161.118.238.173:54338] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.starchildyoga.net"] [uri "/wp-login.php"] [unique_id "alQwZWJoJ8euboi5C2koTAAAAAw"], referer: https://wordpress.org/ [Sun Jul 12 18:25:09.590977 2026] [security2:error] [pid 992244:tid 992401] [client 91.92.42.131:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "50.87.187.16"] [uri "/index.php"] [unique_id "alQwZWJoJ8euboi5C2koRAAAABo"], referer: http://50.87.187.16/actuator/env [Sun Jul 12 18:25:10.311787 2026] [authz_core:error] [pid 992537:tid 992793] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:10.312278 2026] [authz_core:error] [pid 992537:tid 992793] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:10.332122 2026] [security2:error] [pid 992244:tid 992471] [client 47.128.31.97:47306] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "elisacarrio.org"] [uri "/robots.txt"] [unique_id "alQwZmJoJ8euboi5C2koYQAAAGA"] [Sun Jul 12 18:25:10.531799 2026] [security2:error] [pid 992244:tid 992416] [client 168.100.149.57:32422] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31200/bargainor/2308_delphian.jsp"] [unique_id "alQwZmJoJ8euboi5C2koZgAAACk"] [Sun Jul 12 18:25:10.547460 2026] [core:error] [pid 992244:tid 992467] [client 142.93.211.23:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:10.547501 2026] [core:error] [pid 992244:tid 992467] [client 142.93.211.23:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:10.897602 2026] [security2:error] [pid 992244:tid 992447] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXMzY3VyLTIyODcvczMtNDQ5NDUvM2N1cg=="] [unique_id "alQwZmJoJ8euboi5C2kocAAAAEg"] [Sun Jul 12 18:25:11.016777 2026] [security2:error] [pid 992244:tid 992399] [client 104.180.166.105:49185] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQwZmJoJ8euboi5C2kobQAAGGs"] [Sun Jul 12 18:25:11.019513 2026] [security2:error] [pid 992244:tid 992399] [client 104.180.166.105:49185] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQwZmJoJ8euboi5C2kobgAAGGE"] [Sun Jul 12 18:25:11.117726 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:11.118201 2026] [authz_core:error] [pid 992244:tid 992451] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:11.835405 2026] [security2:error] [pid 992537:tid 992799] [client 104.156.225.167:63794] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thepeachypassport.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQwZ2smDw50MNj9aALC0wAAAgI"] [Sun Jul 12 18:25:11.888207 2026] [security2:error] [pid 992537:tid 992765] [client 103.115.196.238:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwZ2smDw50MNj9aALCygAAAeA"] [Sun Jul 12 18:25:11.905516 2026] [authz_core:error] [pid 992244:tid 992496] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:11.906050 2026] [authz_core:error] [pid 992244:tid 992496] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:11.930102 2026] [security2:error] [pid 992244:tid 992387] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwZ2JoJ8euboi5C2kohAAAAAw"] [Sun Jul 12 18:25:11.931809 2026] [security2:error] [pid 992537:tid 992791] [client 65.21.113.206:55072] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXMzY3VyLTIyODcvczMtNDQ5NDUvM2N1cg=="] [unique_id "alQwZ2smDw50MNj9aALCyQAAAfo"] [Sun Jul 12 18:25:11.932090 2026] [security2:error] [pid 992244:tid 992387] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwZ2JoJ8euboi5C2kohAAAAAw"] [Sun Jul 12 18:25:12.007642 2026] [security2:error] [pid 992537:tid 992691] [client 47.128.111.103:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wwcufm.com"] [uri "/stage01/index.php"] [unique_id "alQwZWsmDw50MNj9aALCnAAAAZY"] [Sun Jul 12 18:25:12.533346 2026] [security2:error] [pid 992537:tid 992739] [client 168.100.149.15:25152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31265/bargainor/2308_anisodactyli.jsp"] [unique_id "alQwaGsmDw50MNj9aALC2gAAAcY"] [Sun Jul 12 18:25:12.724067 2026] [authz_core:error] [pid 992244:tid 992421] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:12.724545 2026] [authz_core:error] [pid 992244:tid 992421] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:12.910532 2026] [security2:error] [pid 992537:tid 992723] [client 47.128.111.103:44158] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wwcufm.com"] [uri "/stage01/index.php"] [unique_id "alQwaGsmDw50MNj9aALC2QABtmU"], referer: https://www.wwcufm.com/special-thanks [Sun Jul 12 18:25:13.105383 2026] [security2:error] [pid 992537:tid 992723] [client 47.128.111.103:44158] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wwcufm.com"] [uri "/stage01/index.php"] [unique_id "alQwaGsmDw50MNj9aALC3gABtmg"], referer: https://www.wwcufm.com/special-thanks [Sun Jul 12 18:25:13.454161 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:13.454679 2026] [authz_core:error] [pid 992244:tid 992447] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:14.198137 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:14.198841 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:14.933510 2026] [security2:error] [pid 992244:tid 992470] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXMzY3VyLTgyMjYvczMtNDQ5NDUvM2N1cg=="] [unique_id "alQwamJoJ8euboi5C2ko0wAAAF8"] [Sun Jul 12 18:25:14.988317 2026] [fcgid:warn] [pid 992244:tid 992467] (70014)End of file found: [client 3.130.168.2:55366] mod_fcgid: can't get data from http client [Sun Jul 12 18:25:15.009102 2026] [authz_core:error] [pid 992244:tid 992493] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:15.009606 2026] [authz_core:error] [pid 992244:tid 992493] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:15.173395 2026] [security2:error] [pid 992244:tid 992389] [client 168.100.149.91:50866] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31330/bargainor/2308_birefraction.jsp"] [unique_id "alQwa2JoJ8euboi5C2ko3QAAAA4"] [Sun Jul 12 18:25:15.417340 2026] [fcgid:warn] [pid 992537:tid 992689] (70014)End of file found: [client 66.132.224.86:51682] mod_fcgid: can't get data from http client [Sun Jul 12 18:25:15.702980 2026] [security2:error] [pid 992244:tid 992433] [client 202.46.62.66:47661] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwa2JoJ8euboi5C2ko6wAAADo"], referer: https://www.stephenspublishing.com/flyers-custom-frisbees-p-461.html?osCsid=6qr8f6e911lkhbbfsg6poofli3 [Sun Jul 12 18:25:15.765586 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:15.766116 2026] [authz_core:error] [pid 992244:tid 992474] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:15.839590 2026] [security2:error] [pid 992244:tid 992434] [client 146.70.40.70:47384] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQwa2JoJ8euboi5C2ko7gAAADs"] [Sun Jul 12 18:25:16.052777 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwa2JoJ8euboi5C2ko4QAAACI"] [Sun Jul 12 18:25:16.052828 2026] [security2:error] [pid 992244:tid 992409] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwa2JoJ8euboi5C2ko4QAAACI"] [Sun Jul 12 18:25:16.057995 2026] [security2:error] [pid 992244:tid 992494] [client 65.21.113.206:46744] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXMzY3VyLTgyMjYvczMtNDQ5NDUvM2N1cg=="] [unique_id "alQwa2JoJ8euboi5C2ko3wAAAHc"] [Sun Jul 12 18:25:16.488091 2026] [security2:error] [pid 992244:tid 992435] [client 146.70.40.70:47400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.40.70.146.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwbGJoJ8euboi5C2ko-wAAADw"] [Sun Jul 12 18:25:16.494936 2026] [authz_core:error] [pid 992244:tid 992378] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:16.495409 2026] [authz_core:error] [pid 992244:tid 992378] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:16.550309 2026] [security2:error] [pid 992537:tid 992743] [client 168.100.149.30:62092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31395/bargainor/2308_mediator.jsp"] [unique_id "alQwbGsmDw50MNj9aALC_QAAAco"] [Sun Jul 12 18:25:17.065131 2026] [security2:error] [pid 992244:tid 992465] [client 146.70.40.70:47402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQwbWJoJ8euboi5C2kpCQAAAFo"] [Sun Jul 12 18:25:17.275349 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:17.275847 2026] [authz_core:error] [pid 992244:tid 992460] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:17.648551 2026] [security2:error] [pid 992244:tid 992484] [client 146.70.40.70:47410] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQwbWJoJ8euboi5C2kpGAAAAG0"] [Sun Jul 12 18:25:18.038659 2026] [authz_core:error] [pid 992244:tid 992445] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:18.039192 2026] [authz_core:error] [pid 992244:tid 992445] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:18.257513 2026] [security2:error] [pid 992244:tid 992434] [client 146.70.40.70:58090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQwbmJoJ8euboi5C2kpIwAAADs"] [Sun Jul 12 18:25:18.505374 2026] [security2:error] [pid 992244:tid 992447] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXN3Z3J2LTEwMzYvc3ctNjY0MS93Z3J2"] [unique_id "alQwbmJoJ8euboi5C2kpKAAAAEg"] [Sun Jul 12 18:25:18.787805 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:18.788284 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:18.803703 2026] [security2:error] [pid 992244:tid 992412] [client 186.12.169.215:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwbmJoJ8euboi5C2kpJwAAACU"] [Sun Jul 12 18:25:18.832105 2026] [security2:error] [pid 992244:tid 992494] [client 146.70.40.70:58100] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQwbmJoJ8euboi5C2kpKwAAAHc"] [Sun Jul 12 18:25:18.996102 2026] [security2:error] [pid 992537:tid 992553] [remote 165.73.0.178:58356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 178.0.73.165.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "undameta.com"] [uri "/wp-login.php"] [unique_id "alQwbmsmDw50MNj9aALDFQABxgE"] [Sun Jul 12 18:25:19.003331 2026] [security2:error] [pid 992537:tid 992653] [remote 157.66.26.183:59004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.26.66.157.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "nty.zks.mybluehost.me"] [uri "/wp-login.php"] [unique_id "alQwbmsmDw50MNj9aALDFgACDWI"] [Sun Jul 12 18:25:19.172476 2026] [security2:error] [pid 992537:tid 992768] [client 168.100.149.153:33612] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31460/bargainor/2308_gurian.jsp"] [unique_id "alQwb2smDw50MNj9aALDGwAAAeM"] [Sun Jul 12 18:25:19.414798 2026] [security2:error] [pid 992537:tid 992697] [client 146.70.40.70:58112] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQwb2smDw50MNj9aALDHwAAAZw"] [Sun Jul 12 18:25:19.490213 2026] [security2:error] [pid 992244:tid 992486] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwb2JoJ8euboi5C2kpMQAAAG8"] [Sun Jul 12 18:25:19.490292 2026] [security2:error] [pid 992244:tid 992486] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwb2JoJ8euboi5C2kpMQAAAG8"] [Sun Jul 12 18:25:19.492142 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:46760] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXN3Z3J2LTEwMzYvc3ctNjY0MS93Z3J2"] [unique_id "alQwbmsmDw50MNj9aALDFwAAAbY"] [Sun Jul 12 18:25:19.553396 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:19.553942 2026] [authz_core:error] [pid 992244:tid 992469] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:19.983018 2026] [security2:error] [pid 992537:tid 992806] [client 146.70.40.70:58114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "alQwb2smDw50MNj9aALDJQAAAgk"] [Sun Jul 12 18:25:20.323115 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:20.323580 2026] [authz_core:error] [pid 992244:tid 992471] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:20.541400 2026] [security2:error] [pid 992537:tid 992696] [client 168.100.149.52:25948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31525/bargainor/2308_monkey.jsp"] [unique_id "alQwcGsmDw50MNj9aALDLgAAAZs"] [Sun Jul 12 18:25:20.557176 2026] [security2:error] [pid 992537:tid 992808] [client 146.70.40.70:58124] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQwcGsmDw50MNj9aALDLwAAAgs"] [Sun Jul 12 18:25:21.048807 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:21.049416 2026] [authz_core:error] [pid 992244:tid 992431] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:21.125967 2026] [security2:error] [pid 992244:tid 992452] [client 146.70.40.70:58126] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQwcWJoJ8euboi5C2kpXQAAAE0"] [Sun Jul 12 18:25:21.257552 2026] [core:error] [pid 992537:tid 992710] [client 13.140.136.17:51412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:21.257595 2026] [core:error] [pid 992537:tid 992789] [client 13.140.136.17:51406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:21.257625 2026] [core:error] [pid 992537:tid 992710] [client 13.140.136.17:51412] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:21.257681 2026] [core:error] [pid 992537:tid 992789] [client 13.140.136.17:51406] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:21.708851 2026] [security2:error] [pid 992537:tid 992737] [client 146.70.40.70:58140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "alQwcWsmDw50MNj9aALDNwAAAcQ"] [Sun Jul 12 18:25:21.766795 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:21.767320 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:21.963742 2026] [security2:error] [pid 992244:tid 992420] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNfMjg3OS9zMHMvMTA5MjFfMHM=.htm"] [unique_id "alQwcWJoJ8euboi5C2kpZwAAAC0"] [Sun Jul 12 18:25:22.287861 2026] [security2:error] [pid 992244:tid 992464] [client 146.70.40.70:58142] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQwcmJoJ8euboi5C2kpbwAAAFk"] [Sun Jul 12 18:25:22.554097 2026] [security2:error] [pid 992537:tid 992783] [client 168.100.149.31:56496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31590/bargainor/2308_impeccance.jsp"] [unique_id "alQwcmsmDw50MNj9aALDSQAAAfI"] [Sun Jul 12 18:25:22.588582 2026] [authz_core:error] [pid 992537:tid 992773] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:22.589334 2026] [authz_core:error] [pid 992537:tid 992773] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:22.593136 2026] [security2:error] [pid 992537:tid 992802] [client 64.176.198.37:49366] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "islandoaksmedia.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQwcmsmDw50MNj9aALDSgAAAgU"] [Sun Jul 12 18:25:22.604265 2026] [security2:error] [pid 992244:tid 992437] [client 57.141.18.79:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hangar34liverpool.co.uk"] [uri "/index.php"] [unique_id "alQwcGJoJ8euboi5C2kpTAAAAD4"] [Sun Jul 12 18:25:22.864171 2026] [security2:error] [pid 992244:tid 992421] [client 146.70.40.70:3964] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQwcmJoJ8euboi5C2kpdwAAAC4"] [Sun Jul 12 18:25:23.012179 2026] [security2:error] [pid 992537:tid 992805] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwcmsmDw50MNj9aALDRwAAAgg"] [Sun Jul 12 18:25:23.012271 2026] [security2:error] [pid 992537:tid 992805] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwcmsmDw50MNj9aALDRwAAAgg"] [Sun Jul 12 18:25:23.014012 2026] [security2:error] [pid 992244:tid 992435] [client 65.21.113.206:46766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNfMjg3OS9zMHMvMTA5MjFfMHM=.htm"] [unique_id "alQwcmJoJ8euboi5C2kpcQAAADw"] [Sun Jul 12 18:25:23.351855 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:23.352342 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:23.459823 2026] [security2:error] [pid 992244:tid 992399] [client 146.70.40.70:58154] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "alQwc2JoJ8euboi5C2kpgQAAABg"] [Sun Jul 12 18:25:23.537592 2026] [security2:error] [pid 992537:tid 992777] [client 216.152.151.182:63060] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mail.nutechits.com"] [uri "/rdweb/pages/"] [unique_id "alQwc2smDw50MNj9aALDVwAAAew"] [Sun Jul 12 18:25:23.801079 2026] [security2:error] [pid 992244:tid 992401] [client 52.167.144.194:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQwcGJoJ8euboi5C2kpUwAAABo"] [Sun Jul 12 18:25:24.135719 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:24.136224 2026] [authz_core:error] [pid 992537:tid 992774] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:24.554176 2026] [security2:error] [pid 992537:tid 992763] [client 168.100.149.95:64614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31655/bargainor/2308_gunz.jsp"] [unique_id "alQwdGsmDw50MNj9aALDawAAAd4"] [Sun Jul 12 18:25:24.891576 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:24.892117 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:25.185173 2026] [security2:error] [pid 992244:tid 992486] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNfMjg5OC9zbXAvMzA3NzNfbXA=.htm"] [unique_id "alQwdWJoJ8euboi5C2kprwAAAG8"] [Sun Jul 12 18:25:25.680641 2026] [authz_core:error] [pid 992244:tid 992397] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:25.681191 2026] [authz_core:error] [pid 992244:tid 992397] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:26.390477 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwdWsmDw50MNj9aALDjQAAAbY"] [Sun Jul 12 18:25:26.390539 2026] [security2:error] [pid 992537:tid 992723] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwdWsmDw50MNj9aALDjQAAAbY"] [Sun Jul 12 18:25:26.391604 2026] [security2:error] [pid 992244:tid 992415] [client 65.21.113.206:47142] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNfMjg5OC9zbXAvMzA3NzNfbXA=.htm"] [unique_id "alQwdWJoJ8euboi5C2kpvAAAACg"] [Sun Jul 12 18:25:26.505838 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:26.506610 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:26.745121 2026] [security2:error] [pid 992244:tid 992270] [remote 57.141.18.14:50092] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 14.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/WWd0QXJAAPXNMxyLGPt6amg.lWez"] [unique_id "alQwdmJoJ8euboi5C2kp2AAAaBg"] [Sun Jul 12 18:25:27.080047 2026] [security2:error] [pid 992537:tid 992745] [client 114.119.134.155:26875] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "lifeisdelicio.us"] [uri "/wp-content/uploads/2018/06/sc06.jpg"] [unique_id "alQwd2smDw50MNj9aALDogAAAcw"], referer: https://lifeisdelicio.us/wp-content/uploads/2018/06/sc06.jpg [Sun Jul 12 18:25:27.239439 2026] [security2:error] [pid 992244:tid 992449] [client 168.100.149.129:16452] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31720/bargainor/2308_monadically.jsp"] [unique_id "alQwd2JoJ8euboi5C2kp6QAAAEo"] [Sun Jul 12 18:25:27.328038 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:27.328530 2026] [authz_core:error] [pid 992537:tid 992778] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:27.597318 2026] [security2:error] [pid 992244:tid 992470] [client 110.249.202.96:63048] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.bulentatalay.com"] [uri "/robots.txt"] [unique_id "alQwd2JoJ8euboi5C2kp9QAAAF8"] [Sun Jul 12 18:25:27.804730 2026] [security2:error] [pid 992537:tid 992725] [client 193.56.116.69:54327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.116.56.193.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "terrygronenthal.com"] [uri "/wp-login.php"] [unique_id "alQwd2smDw50MNj9aALDuAAAAbg"] [Sun Jul 12 18:25:28.152021 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:28.152511 2026] [authz_core:error] [pid 992537:tid 992700] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:28.741817 2026] [authz_core:error] [pid 992244:tid 992427] [client 66.132.172.204:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/dev/php.ini [Sun Jul 12 18:25:28.768391 2026] [authz_core:error] [pid 992244:tid 992427] [client 66.132.172.204:0] AH01630: client denied by server configuration: /home3/pacareer/public_html/dev/error_log [Sun Jul 12 18:25:28.933504 2026] [authz_core:error] [pid 992537:tid 992729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:28.934164 2026] [authz_core:error] [pid 992537:tid 992729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:29.195205 2026] [security2:error] [pid 992244:tid 992405] [client 168.100.149.175:38696] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31785/bargainor/2308_enhalo.jsp"] [unique_id "alQweWJoJ8euboi5C2kqFAAAAB4"] [Sun Jul 12 18:25:29.352039 2026] [proxy:warn] [pid 992537:tid 992687] [client 3.130.168.2:13290] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be avidagents.com for uri /400.shtml [Sun Jul 12 18:25:29.352133 2026] [proxy:error] [pid 992537:tid 992687] (70014)End of file found: [client 3.130.168.2:13290] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 3.130.168.2 () [Sun Jul 12 18:25:29.478859 2026] [security2:error] [pid 992244:tid 992466] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNfMzUyOC9zam0vMTUyNjFfam0=.htm"] [unique_id "alQweWJoJ8euboi5C2kqGAAAAFs"] [Sun Jul 12 18:25:29.559106 2026] [security2:error] [pid 992537:tid 992781] [client 202.46.62.12:55596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQweWsmDw50MNj9aALDzAAAAfA"], referer: https://www.stephenspublishing.com/oval-zipper-pulls-custom-p-479.html?osCsid=3v8vbh8o5ndeabsflm2bkbhp92 [Sun Jul 12 18:25:29.613240 2026] [security2:error] [pid 992244:tid 992454] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwdmJoJ8euboi5C2kpyAAATwg"], referer: http://www.totalflexwaukesha.com/wp/ [Sun Jul 12 18:25:29.760381 2026] [authz_core:error] [pid 992244:tid 992475] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:29.761090 2026] [authz_core:error] [pid 992244:tid 992475] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:29.952391 2026] [security2:error] [pid 992244:tid 992391] [client 172.252.197.128:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQweWJoJ8euboi5C2kqGgAAABA"] [Sun Jul 12 18:25:29.990817 2026] [security2:error] [pid 992537:tid 992674] [remote 57.141.18.96:32194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/FJ-algpncU.lWez"] [unique_id "alQweWsmDw50MNj9aALD1wABznc"] [Sun Jul 12 18:25:30.556515 2026] [security2:error] [pid 992244:tid 992399] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwemJoJ8euboi5C2kqKAAAABg"] [Sun Jul 12 18:25:30.556578 2026] [security2:error] [pid 992244:tid 992399] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwemJoJ8euboi5C2kqKAAAABg"] [Sun Jul 12 18:25:30.557562 2026] [security2:error] [pid 992244:tid 992449] [client 65.21.113.206:47152] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNfMzUyOC9zam0vMTUyNjFfam0=.htm"] [unique_id "alQweWJoJ8euboi5C2kqJQAAAEo"] [Sun Jul 12 18:25:30.587281 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:30.588131 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:30.731777 2026] [security2:error] [pid 992537:tid 992803] [client 34.162.188.36:36522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQweWsmDw50MNj9aALD0gACBh4"], referer: https://www.totalflexwaukesha.com/wp/ [Sun Jul 12 18:25:30.934913 2026] [security2:error] [pid 992537:tid 992690] [client 20.63.87.152:30999] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/.dj/index.php"] [unique_id "alQwemsmDw50MNj9aALD6AAAAZU"] [Sun Jul 12 18:25:31.199826 2026] [core:error] [pid 992537:tid 992716] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:31.199896 2026] [core:error] [pid 992537:tid 992716] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:31.218035 2026] [security2:error] [pid 992537:tid 992790] [client 168.100.149.244:53268] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31850/bargainor/2308_metalogical.jsp"] [unique_id "alQwe2smDw50MNj9aALD8AAAAfk"] [Sun Jul 12 18:25:31.346898 2026] [security2:error] [pid 992537:tid 992698] [client 188.213.202.104:33245] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 104.202.213.188.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "michaeloremus.org"] [uri "/wp-login.php"] [unique_id "alQwe2smDw50MNj9aALD8gAAAZ0"] [Sun Jul 12 18:25:31.350156 2026] [authz_core:error] [pid 992537:tid 992693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:31.350684 2026] [authz_core:error] [pid 992537:tid 992693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:31.437198 2026] [security2:error] [pid 992244:tid 992496] [client 20.63.87.152:29915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/.trash7206/index.php"] [unique_id "alQwe2JoJ8euboi5C2kqOwAAAHk"] [Sun Jul 12 18:25:31.562997 2026] [security2:error] [pid 992244:tid 992471] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwemJoJ8euboi5C2kqNAAAYGI"], referer: http://www.totalflexwaukesha.com/new/ [Sun Jul 12 18:25:31.766041 2026] [core:error] [pid 992244:tid 992446] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:31.766079 2026] [core:error] [pid 992244:tid 992446] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:32.037393 2026] [core:error] [pid 992244:tid 992396] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:32.037436 2026] [core:error] [pid 992244:tid 992396] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:32.124191 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:32.124718 2026] [authz_core:error] [pid 992244:tid 992384] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:32.364471 2026] [security2:error] [pid 992537:tid 992692] [client 20.63.87.152:30500] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQwfGsmDw50MNj9aALEEwAAAZc"] [Sun Jul 12 18:25:32.382910 2026] [security2:error] [pid 992537:tid 992775] [client 34.162.188.36:36522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwe2smDw50MNj9aALEAQAB6io"], referer: https://www.totalflexwaukesha.com/new/ [Sun Jul 12 18:25:32.480551 2026] [security2:error] [pid 992244:tid 992477] [client 82.197.75.150:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwfGJoJ8euboi5C2kqUwAAAGY"] [Sun Jul 12 18:25:32.587586 2026] [security2:error] [pid 992244:tid 992499] [client 168.100.149.87:50566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31915/bargainor/2308_psychoreflex.jsp"] [unique_id "alQwfGJoJ8euboi5C2kqYQAAAHw"] [Sun Jul 12 18:25:32.630310 2026] [security2:error] [pid 992537:tid 992801] [client 20.63.87.152:29947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQwfGsmDw50MNj9aALEGAAAAgQ"] [Sun Jul 12 18:25:32.928119 2026] [security2:error] [pid 992537:tid 992764] [client 20.63.87.152:4565] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQwfGsmDw50MNj9aALEHAAAAd8"] [Sun Jul 12 18:25:32.937409 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:32.938117 2026] [authz_core:error] [pid 992244:tid 992472] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:33.194892 2026] [security2:error] [pid 992244:tid 992470] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNfODI0MS9zam0vMTUyNjFfam0=.htm"] [unique_id "alQwfWJoJ8euboi5C2kqawAAAF8"] [Sun Jul 12 18:25:33.205976 2026] [security2:error] [pid 992537:tid 992758] [client 20.63.87.152:29911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/0.kb-v3.php"] [unique_id "alQwfWsmDw50MNj9aALEIAAAAdk"] [Sun Jul 12 18:25:33.206483 2026] [security2:error] [pid 992244:tid 992489] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwfGJoJ8euboi5C2kqYAAAcms"], referer: http://www.totalflexwaukesha.com/wordpress/ [Sun Jul 12 18:25:33.476144 2026] [security2:error] [pid 992244:tid 992387] [client 20.63.87.152:30973] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/0.php"] [unique_id "alQwfWJoJ8euboi5C2kqdAAAAAw"] [Sun Jul 12 18:25:33.476838 2026] [security2:error] [pid 992244:tid 992486] [client 57.141.18.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwfGJoJ8euboi5C2kqWQAAAG8"] [Sun Jul 12 18:25:33.706338 2026] [authz_core:error] [pid 992537:tid 992762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:33.706859 2026] [authz_core:error] [pid 992537:tid 992762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:33.855384 2026] [security2:error] [pid 992244:tid 992451] [client 20.63.87.152:25194] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/002.php"] [unique_id "alQwfWJoJ8euboi5C2kqfwAAAEw"] [Sun Jul 12 18:25:33.997140 2026] [security2:error] [pid 992537:tid 992780] [client 34.162.188.36:36522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwfWsmDw50MNj9aALEIgAB7zw"], referer: https://www.totalflexwaukesha.com/wordpress/ [Sun Jul 12 18:25:34.115658 2026] [security2:error] [pid 992537:tid 992726] [client 20.63.87.152:29998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/01.php"] [unique_id "alQwfmsmDw50MNj9aALEJwAAAbk"] [Sun Jul 12 18:25:34.255243 2026] [security2:error] [pid 992537:tid 992694] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwfWsmDw50MNj9aALEJQAAAZk"] [Sun Jul 12 18:25:34.255297 2026] [security2:error] [pid 992537:tid 992694] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwfWsmDw50MNj9aALEJQAAAZk"] [Sun Jul 12 18:25:34.256327 2026] [security2:error] [pid 992244:tid 992389] [client 65.21.113.206:47242] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNfODI0MS9zam0vMTUyNjFfam0=.htm"] [unique_id "alQwfWJoJ8euboi5C2kqeAAAAA4"] [Sun Jul 12 18:25:34.331359 2026] [security2:error] [pid 992537:tid 992745] [client 20.63.87.152:25165] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/0x.php"] [unique_id "alQwfmsmDw50MNj9aALEKAAAAcw"] [Sun Jul 12 18:25:34.474040 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:34.474524 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:34.552501 2026] [security2:error] [pid 992244:tid 992392] [client 168.100.149.110:33238] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/31980/bargainor/2308_mailable.jsp"] [unique_id "alQwfmJoJ8euboi5C2kqiQAAABE"] [Sun Jul 12 18:25:34.594302 2026] [security2:error] [pid 992244:tid 992454] [client 20.63.87.152:39371] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/1.php"] [unique_id "alQwfmJoJ8euboi5C2kqjAAAAE8"] [Sun Jul 12 18:25:34.594601 2026] [security2:error] [pid 992244:tid 992454] [client 20.63.87.152:39371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/1.php"] [unique_id "alQwfmJoJ8euboi5C2kqjAAAAE8"] [Sun Jul 12 18:25:34.874088 2026] [security2:error] [pid 992244:tid 992391] [client 20.63.87.152:25215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/100.php"] [unique_id "alQwfmJoJ8euboi5C2kqkgAAABA"] [Sun Jul 12 18:25:34.904761 2026] [security2:error] [pid 992244:tid 992446] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwfmJoJ8euboi5C2kqgAAAR2w"], referer: http://www.totalflexwaukesha.com/old/ [Sun Jul 12 18:25:35.115518 2026] [security2:error] [pid 992244:tid 992439] [client 20.63.87.152:30468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/122.php"] [unique_id "alQwf2JoJ8euboi5C2kqnQAAAEA"] [Sun Jul 12 18:25:35.200428 2026] [authz_core:error] [pid 992244:tid 992438] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:35.201060 2026] [authz_core:error] [pid 992244:tid 992438] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:35.343888 2026] [cgid:error] [pid 992244:tid 992370] [remote 52.167.144.140:35575] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/404.shtml [Sun Jul 12 18:25:35.397928 2026] [security2:error] [pid 992244:tid 992408] [client 20.63.87.152:4598] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/123.php"] [unique_id "alQwf2JoJ8euboi5C2kqqwAAACE"] [Sun Jul 12 18:25:35.649951 2026] [security2:error] [pid 992537:tid 992792] [client 34.162.188.36:36522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwfmsmDw50MNj9aALEMQAB-z8"], referer: https://www.totalflexwaukesha.com/old/ [Sun Jul 12 18:25:35.753460 2026] [security2:error] [pid 992244:tid 992407] [client 20.63.87.152:39362] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/13.php"] [unique_id "alQwf2JoJ8euboi5C2kqtAAAACA"] [Sun Jul 12 18:25:35.941363 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:35.941880 2026] [authz_core:error] [pid 992244:tid 992389] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:36.004027 2026] [security2:error] [pid 992244:tid 992434] [client 20.63.87.152:20589] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/133.php"] [unique_id "alQwgGJoJ8euboi5C2kqvQAAADs"] [Sun Jul 12 18:25:36.087371 2026] [security2:error] [pid 992244:tid 992279] [remote 130.12.182.12:30432] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.ugu.jxc.mybluehost.me"] [uri "/.env"] [unique_id "alQwgGJoJ8euboi5C2kqwgAAIiE"] [Sun Jul 12 18:25:36.241318 2026] [security2:error] [pid 992244:tid 992405] [client 20.63.87.152:33082] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/155.php"] [unique_id "alQwgGJoJ8euboi5C2kqxgAAAB4"] [Sun Jul 12 18:25:36.480702 2026] [security2:error] [pid 992537:tid 992703] [client 20.63.87.152:23915] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/177.php"] [unique_id "alQwgGsmDw50MNj9aALEPAAAAaI"] [Sun Jul 12 18:25:36.682361 2026] [authz_core:error] [pid 992537:tid 992783] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:36.682938 2026] [authz_core:error] [pid 992537:tid 992783] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:36.740912 2026] [security2:error] [pid 992244:tid 992484] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNiLzI4MDU5L3NiLzE4MjcvYnNj.asp"] [unique_id "alQwgGJoJ8euboi5C2kq0QAAAG0"] [Sun Jul 12 18:25:36.846303 2026] [security2:error] [pid 992244:tid 992466] [client 20.63.87.152:39539] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/1index.php"] [unique_id "alQwgGJoJ8euboi5C2kq1gAAAFs"] [Sun Jul 12 18:25:36.877959 2026] [security2:error] [pid 992244:tid 992439] [client 202.46.62.20:25145] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwgGJoJ8euboi5C2kq1wAAAEA"], referer: https://www.stephenspublishing.com/round-stick-pens-custom-p-493.html?osCsid=8ub0b37thc4d0sds1an9gdibr4 [Sun Jul 12 18:25:37.097414 2026] [security2:error] [pid 992537:tid 992604] [remote 130.12.182.12:30446] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "webmail.ugu.jxc.mybluehost.me"] [uri "/.git/HEAD"] [unique_id "alQwgWsmDw50MNj9aALERwAByTE"] [Sun Jul 12 18:25:37.237013 2026] [security2:error] [pid 992244:tid 992485] [client 20.63.87.152:19716] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/2.php"] [unique_id "alQwgWJoJ8euboi5C2kq2QAAAG4"] [Sun Jul 12 18:25:37.268325 2026] [security2:error] [pid 992244:tid 992449] [client 168.100.149.24:37078] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32045/bargainor/2308_epidemiology.jsp"] [unique_id "alQwgWJoJ8euboi5C2kq2wAAAEo"] [Sun Jul 12 18:25:37.292013 2026] [security2:error] [pid 992244:tid 992404] [client 124.104.217.243:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwgGJoJ8euboi5C2kq1QAAAB0"] [Sun Jul 12 18:25:37.474414 2026] [security2:error] [pid 992537:tid 992799] [client 20.63.87.152:14105] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/222.php"] [unique_id "alQwgWsmDw50MNj9aALETAAAAgI"] [Sun Jul 12 18:25:37.486136 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:37.486832 2026] [authz_core:error] [pid 992244:tid 992498] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:37.773225 2026] [security2:error] [pid 992244:tid 992386] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwgWJoJ8euboi5C2kq2gAAAAs"] [Sun Jul 12 18:25:37.773331 2026] [security2:error] [pid 992244:tid 992386] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwgWJoJ8euboi5C2kq2gAAAAs"] [Sun Jul 12 18:25:37.774643 2026] [security2:error] [pid 992537:tid 992695] [client 65.21.113.206:47244] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNiLzI4MDU5L3NiLzE4MjcvYnNj.asp"] [unique_id "alQwgWsmDw50MNj9aALESAAAAZo"] [Sun Jul 12 18:25:37.839823 2026] [security2:error] [pid 992537:tid 992687] [client 20.63.87.152:38022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/2p.update.php"] [unique_id "alQwgWsmDw50MNj9aALEUAAAAZI"] [Sun Jul 12 18:25:37.914917 2026] [core:error] [pid 992244:tid 992393] [client 13.140.136.17:51180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:37.914963 2026] [core:error] [pid 992244:tid 992393] [client 13.140.136.17:51180] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:37.914964 2026] [core:error] [pid 992537:tid 992725] [client 13.140.136.17:55883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:37.915006 2026] [core:error] [pid 992537:tid 992725] [client 13.140.136.17:55883] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:37.982589 2026] [security2:error] [pid 992244:tid 992477] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwgWJoJ8euboi5C2kq4AAAZns"], referer: http://www.totalflexwaukesha.com/blog/ [Sun Jul 12 18:25:38.104448 2026] [security2:error] [pid 992244:tid 992467] [client 20.63.87.152:20568] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/3.php"] [unique_id "alQwgmJoJ8euboi5C2kq7wAAAFw"] [Sun Jul 12 18:25:38.299163 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:38.299709 2026] [authz_core:error] [pid 992244:tid 992400] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:38.401289 2026] [security2:error] [pid 992244:tid 992425] [client 20.63.87.152:36916] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQwgmJoJ8euboi5C2kq-wAAADI"] [Sun Jul 12 18:25:38.765735 2026] [security2:error] [pid 992537:tid 992754] [client 20.63.87.152:26667] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/403.php"] [unique_id "alQwgmsmDw50MNj9aALEVwAAAdU"] [Sun Jul 12 18:25:39.120752 2026] [cgid:error] [pid 992537:tid 992689] [client 202.46.62.28:32480] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/oven-mitts-custom-p-697.html?osCsid=c0jl71llquu20sl7i82blgpqt3 [Sun Jul 12 18:25:39.123214 2026] [security2:error] [pid 992244:tid 992421] [client 20.63.87.152:4535] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.searchhomelongisland.com"] [uri "/404.php"] [unique_id "alQwg2JoJ8euboi5C2krCAAAAC4"] [Sun Jul 12 18:25:39.134105 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:39.134588 2026] [authz_core:error] [pid 992244:tid 992432] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:39.202713 2026] [security2:error] [pid 992244:tid 992385] [client 168.100.149.220:57424] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32110/bargainor/2308_secque.jsp"] [unique_id "alQwg2JoJ8euboi5C2krDAAAAAo"] [Sun Jul 12 18:25:39.253501 2026] [security2:error] [pid 992244:tid 992375] [client 202.46.62.23:17607] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 23.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwg2JoJ8euboi5C2krDgAAAAA"], referer: https://www.stephenspublishing.com/oven-mitts-custom-p-697.html?osCsid=c0jl71llquu20sl7i82blgpqt3 [Sun Jul 12 18:25:39.343025 2026] [security2:error] [pid 992537:tid 992712] [client 164.68.123.141:50658] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.rap.jxc.mybluehost.me"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "alQwg2smDw50MNj9aALEXgAAAas"] [Sun Jul 12 18:25:39.601474 2026] [security2:error] [pid 992537:tid 992696] [client 114.119.136.208:56457] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "johndmurray.org"] [uri "/"] [unique_id "alQwg2smDw50MNj9aALEYgAAAZs"], referer: https://johndmurray.org/ [Sun Jul 12 18:25:39.767517 2026] [security2:error] [pid 992244:tid 992490] [client 34.162.188.36:36520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwgmJoJ8euboi5C2krBgAAcyw"], referer: http://www.totalflexwaukesha.com/backup/ [Sun Jul 12 18:25:39.906592 2026] [authz_core:error] [pid 992244:tid 992485] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:39.907186 2026] [authz_core:error] [pid 992244:tid 992485] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:39.987059 2026] [security2:error] [pid 992537:tid 992778] [client 164.68.123.141:50704] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.rap.jxc.mybluehost.me"] [uri "/"] [unique_id "alQwg2smDw50MNj9aALEdAAAAe0"] [Sun Jul 12 18:25:40.363171 2026] [security2:error] [pid 992537:tid 992786] [client 164.68.123.141:50731] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.rap.jxc.mybluehost.me"] [uri "/"] [unique_id "alQwhGsmDw50MNj9aALEeQAAAfU"] [Sun Jul 12 18:25:40.663369 2026] [security2:error] [pid 992537:tid 992690] [client 34.162.188.36:36522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "totalflexwaukesha.com"] [uri "/index.php"] [unique_id "alQwg2smDw50MNj9aALEcgABlWE"], referer: https://www.totalflexwaukesha.com/backup/ [Sun Jul 12 18:25:40.734544 2026] [security2:error] [pid 992537:tid 992759] [client 164.68.123.141:50758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.rap.jxc.mybluehost.me"] [uri "/"] [unique_id "alQwhGsmDw50MNj9aALEgAAAAdo"] [Sun Jul 12 18:25:40.791263 2026] [authz_core:error] [pid 992244:tid 992407] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:40.791847 2026] [authz_core:error] [pid 992244:tid 992407] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:41.035120 2026] [core:error] [pid 992244:tid 992379] [client 146.190.218.146:43092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:41.035163 2026] [core:error] [pid 992244:tid 992379] [client 146.190.218.146:43092] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:41.244138 2026] [security2:error] [pid 992537:tid 992651] [remote 34.233.208.81:34098] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.208.233.34.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "undameta.com"] [uri "/wp-login.php"] [unique_id "alQwhWsmDw50MNj9aALEggAB5GA"] [Sun Jul 12 18:25:41.291952 2026] [security2:error] [pid 992244:tid 992380] [client 168.100.149.149:20364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32175/bargainor/2308_dislevelment.jsp"] [unique_id "alQwhWJoJ8euboi5C2krOwAAAAU"] [Sun Jul 12 18:25:41.321932 2026] [security2:error] [pid 992244:tid 992424] [client 146.190.218.146:43108] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "cpanel.airqsd.com"] [uri "/"] [unique_id "alQwhWJoJ8euboi5C2krPAAAADE"] [Sun Jul 12 18:25:41.391146 2026] [security2:error] [pid 992244:tid 992435] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXNxcDliLzI4MDUvc3EvMjg2NS9x"] [unique_id "alQwhWJoJ8euboi5C2krQAAAADw"] [Sun Jul 12 18:25:41.569049 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:41.569748 2026] [authz_core:error] [pid 992537:tid 992771] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:41.970206 2026] [security2:error] [pid 992244:tid 992490] [client 65.21.113.253:56610] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQwhWJoJ8euboi5C2krVQAAAHM"] [Sun Jul 12 18:25:42.147789 2026] [security2:error] [pid 992244:tid 992437] [client 74.7.244.20:33162] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kahonuamomona.org"] [uri "/robots.txt"] [unique_id "alQwhmJoJ8euboi5C2krWgAAPjQ"] [Sun Jul 12 18:25:42.354298 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:42.354816 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:42.479319 2026] [security2:error] [pid 992244:tid 992474] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQwhmJoJ8euboi5C2kraQAAAGM"] [Sun Jul 12 18:25:42.480214 2026] [security2:error] [pid 992244:tid 992442] [client 65.21.113.253:43552] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQwhmJoJ8euboi5C2krZwAAAEM"] [Sun Jul 12 18:25:42.495398 2026] [security2:error] [pid 992244:tid 992481] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwhWJoJ8euboi5C2krVAAAAGo"] [Sun Jul 12 18:25:42.495478 2026] [security2:error] [pid 992244:tid 992481] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwhWJoJ8euboi5C2krVAAAAGo"] [Sun Jul 12 18:25:42.497498 2026] [security2:error] [pid 992537:tid 992793] [client 65.21.113.206:47254] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXNxcDliLzI4MDUvc3EvMjg2NS9x"] [unique_id "alQwhWsmDw50MNj9aALEjgAAAfw"] [Sun Jul 12 18:25:42.816369 2026] [security2:error] [pid 992244:tid 992327] [remote 157.55.39.49:63860] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQwhmJoJ8euboi5C2krdAAAUFE"] [Sun Jul 12 18:25:42.825007 2026] [security2:error] [pid 992537:tid 992699] [client 172.252.201.37:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQwhmsmDw50MNj9aALElQAAAZ4"] [Sun Jul 12 18:25:43.132055 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:43.132543 2026] [authz_core:error] [pid 992244:tid 992411] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:43.218315 2026] [security2:error] [pid 992537:tid 992688] [client 168.100.149.225:26874] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32240/bargainor/2308_limnoria.jsp"] [unique_id "alQwh2smDw50MNj9aALEpAAAAZM"] [Sun Jul 12 18:25:43.277386 2026] [security2:error] [pid 992244:tid 992424] [client 57.141.18.69:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwhmJoJ8euboi5C2krfAAAADE"] [Sun Jul 12 18:25:43.891076 2026] [authz_core:error] [pid 992244:tid 992479] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:43.891559 2026] [authz_core:error] [pid 992244:tid 992479] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:44.161443 2026] [security2:error] [pid 992537:tid 992800] [client 43.130.67.6:33764] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.67.130.43.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "miniparadise.com"] [uri "/wordpress/index.php"] [unique_id "alQwiGsmDw50MNj9aALErgAAAgM"] [Sun Jul 12 18:25:44.684869 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:44.685348 2026] [authz_core:error] [pid 992537:tid 992806] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:44.775432 2026] [security2:error] [pid 992244:tid 992409] [client 81.107.95.175:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwiGJoJ8euboi5C2krvQAAACI"] [Sun Jul 12 18:25:44.932753 2026] [security2:error] [pid 992244:tid 992440] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXQtMTAyL3RocS8xNDE1Ny1ocXZi"] [unique_id "alQwiGJoJ8euboi5C2kr0AAAAEE"] [Sun Jul 12 18:25:45.256858 2026] [security2:error] [pid 992244:tid 992458] [client 168.100.149.217:64190] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32305/bargainor/2308_milksopism.jsp"] [unique_id "alQwiWJoJ8euboi5C2kr2gAAAFM"] [Sun Jul 12 18:25:45.464425 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:45.464948 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:45.989803 2026] [security2:error] [pid 992244:tid 992491] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwiWJoJ8euboi5C2kr5gAAAHQ"] [Sun Jul 12 18:25:45.989858 2026] [security2:error] [pid 992244:tid 992491] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwiWJoJ8euboi5C2kr5gAAAHQ"] [Sun Jul 12 18:25:45.999234 2026] [security2:error] [pid 992244:tid 992476] [client 65.21.113.206:52620] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXQtMTAyL3RocS8xNDE1Ny1ocXZi"] [unique_id "alQwiWJoJ8euboi5C2kr4QAAAGU"] [Sun Jul 12 18:25:46.227809 2026] [authz_core:error] [pid 992244:tid 992434] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:46.228338 2026] [authz_core:error] [pid 992244:tid 992434] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:46.242479 2026] [security2:error] [pid 992537:tid 992773] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwiGsmDw50MNj9aALEuAAB6FU"], referer: http://www.wrappedinjazz.com/wp/ [Sun Jul 12 18:25:46.564142 2026] [security2:error] [pid 992537:tid 992778] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwimsmDw50MNj9aALE2gAB7Qg"], referer: http://www.wrappedinjazz.com/new/ [Sun Jul 12 18:25:46.873594 2026] [security2:error] [pid 992537:tid 992786] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwimsmDw50MNj9aALE4QAB9Rg"], referer: http://www.wrappedinjazz.com/wordpress/ [Sun Jul 12 18:25:47.023978 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:47.024642 2026] [authz_core:error] [pid 992244:tid 992380] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:47.184227 2026] [security2:error] [pid 992537:tid 992690] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwimsmDw50MNj9aALE5QABlT0"], referer: http://www.wrappedinjazz.com/old/ [Sun Jul 12 18:25:47.240851 2026] [security2:error] [pid 992537:tid 992733] [client 57.141.18.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwiWsmDw50MNj9aALEywAAAcA"] [Sun Jul 12 18:25:47.280031 2026] [security2:error] [pid 992244:tid 992387] [client 168.100.149.68:35542] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32370/bargainor/2308_capnoides.jsp"] [unique_id "alQwi2JoJ8euboi5C2kr_gAAAAw"] [Sun Jul 12 18:25:47.290741 2026] [security2:error] [pid 992244:tid 992438] [client 57.141.18.34:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwimJoJ8euboi5C2kr9QAAAD8"] [Sun Jul 12 18:25:47.727846 2026] [security2:error] [pid 992537:tid 992768] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwi2smDw50MNj9aALE7QAB4xY"], referer: http://www.wrappedinjazz.com/blog/ [Sun Jul 12 18:25:47.834440 2026] [authz_core:error] [pid 992244:tid 992444] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:47.835157 2026] [authz_core:error] [pid 992244:tid 992444] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:47.970752 2026] [fcgid:warn] [pid 992244:tid 992457] (70014)End of file found: [client 3.130.168.2:35366] mod_fcgid: can't get data from http client [Sun Jul 12 18:25:48.019842 2026] [security2:error] [pid 992537:tid 992796] [client 34.162.188.36:50858] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.wrappedinjazz.com"] [uri "/index.php"] [unique_id "alQwi2smDw50MNj9aALE9AAB_xQ"], referer: http://www.wrappedinjazz.com/backup/ [Sun Jul 12 18:25:48.544382 2026] [security2:error] [pid 992244:tid 992462] [client 65.21.113.206:39416] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXQtOTc0OS90aHEvMTQxNTctaHF2Yg=="] [unique_id "alQwjGJoJ8euboi5C2ksFwAAAFc"] [Sun Jul 12 18:25:48.612056 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:48.612775 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:49.258563 2026] [security2:error] [pid 992537:tid 992769] [client 168.100.149.202:36244] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32435/bargainor/2308_deft.jsp"] [unique_id "alQwjWsmDw50MNj9aALFKAAAAeQ"] [Sun Jul 12 18:25:49.389503 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:49.390404 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:49.608990 2026] [security2:error] [pid 992537:tid 992693] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwjWsmDw50MNj9aALFIAAAAZg"] [Sun Jul 12 18:25:49.609047 2026] [security2:error] [pid 992537:tid 992693] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwjWsmDw50MNj9aALFIAAAAZg"] [Sun Jul 12 18:25:49.614737 2026] [security2:error] [pid 992537:tid 992753] [client 65.21.113.206:52624] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXQtOTc0OS90aHEvMTQxNTctaHF2Yg=="] [unique_id "alQwjWsmDw50MNj9aALFHwAAAdQ"] [Sun Jul 12 18:25:50.024745 2026] [security2:error] [pid 992244:tid 992424] [client 155.2.212.11:42721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.212.2.155.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQwjWJoJ8euboi5C2ksKgAAADE"] [Sun Jul 12 18:25:50.192884 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:50.193468 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:50.576954 2026] [security2:error] [pid 992244:tid 992420] [client 168.100.149.37:25622] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32500/bargainor/2308_did.jsp"] [unique_id "alQwjmJoJ8euboi5C2ksNQAAAC0"] [Sun Jul 12 18:25:51.004352 2026] [authz_core:error] [pid 992537:tid 992718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:51.004923 2026] [authz_core:error] [pid 992537:tid 992718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:51.102291 2026] [core:error] [pid 992537:tid 992794] [client 66.249.68.4:48869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:51.102343 2026] [core:error] [pid 992537:tid 992794] [client 66.249.68.4:48869] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:51.236599 2026] [security2:error] [pid 992537:tid 992591] [remote 95.108.213.103:56274] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/yamaha-ybr-125-yak\\xc4\\xb1t-k.html"] [unique_id "alQwj2smDw50MNj9aALFTQAB7SQ"] [Sun Jul 12 18:25:51.911793 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:51.912480 2026] [authz_core:error] [pid 992537:tid 992706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:52.269282 2026] [security2:error] [pid 992537:tid 992687] [client 65.21.113.206:42378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXQwc250LTE4NDAvdDAtMzk2ODEvMHNudA=="] [unique_id "alQwkGsmDw50MNj9aALFcQAAAZI"] [Sun Jul 12 18:25:52.371115 2026] [security2:error] [pid 992537:tid 992688] [client 102.89.34.83:9362] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "webmail.atfp.com"] [uri "/"] [unique_id "alQwkGsmDw50MNj9aALFcwAAAZM"] [Sun Jul 12 18:25:52.583398 2026] [security2:error] [pid 992537:tid 992811] [client 168.100.149.65:48056] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32565/bargainor/2308_delphian.jsp"] [unique_id "alQwkGsmDw50MNj9aALFegAAAg4"] [Sun Jul 12 18:25:52.689033 2026] [authz_core:error] [pid 992537:tid 992724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:52.689517 2026] [authz_core:error] [pid 992537:tid 992724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:53.212375 2026] [proxy:warn] [pid 992537:tid 992719] [client 185.100.87.136:38008] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be falconaviation.org for uri /400.shtml [Sun Jul 12 18:25:53.256079 2026] [security2:error] [pid 992537:tid 992719] [client 185.100.87.136:38008] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "falconaviation.org"] [uri "/400.shtml"] [unique_id "alQwkWsmDw50MNj9aALFjgAAAbI"] [Sun Jul 12 18:25:53.264213 2026] [security2:error] [pid 992537:tid 992806] [client 185.100.87.136:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "falconaviation.org"] [uri "/400.shtml"] [unique_id "alQwkWsmDw50MNj9aALFkgAAAgk"] [Sun Jul 12 18:25:53.468202 2026] [security2:error] [pid 992537:tid 992791] [client 88.183.85.208:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwkGsmDw50MNj9aALFhgAAAfo"] [Sun Jul 12 18:25:53.506793 2026] [security2:error] [pid 992537:tid 992737] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwkGsmDw50MNj9aALFhAAAAcQ"] [Sun Jul 12 18:25:53.506866 2026] [security2:error] [pid 992537:tid 992737] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwkGsmDw50MNj9aALFhAAAAcQ"] [Sun Jul 12 18:25:53.510329 2026] [security2:error] [pid 992537:tid 992701] [client 65.21.113.206:59136] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXQwc250LTE4NDAvdDAtMzk2ODEvMHNudA=="] [unique_id "alQwkGsmDw50MNj9aALFgAAAAaA"] [Sun Jul 12 18:25:53.525523 2026] [security2:error] [pid 992537:tid 992697] [client 102.89.34.83:6656] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "mail.atfp.com"] [uri "/"] [unique_id "alQwkWsmDw50MNj9aALFoQAAAZw"] [Sun Jul 12 18:25:53.536176 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:53.536864 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:53.728085 2026] [core:error] [pid 992537:tid 992793] [client 13.140.136.17:59531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:53.728125 2026] [core:error] [pid 992537:tid 992793] [client 13.140.136.17:59531] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:53.730146 2026] [core:error] [pid 992537:tid 992699] [client 13.140.136.17:59537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:53.730198 2026] [core:error] [pid 992537:tid 992699] [client 13.140.136.17:59537] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:25:53.971042 2026] [security2:error] [pid 992537:tid 992756] [client 47.88.49.128:4490] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehycares.com"] [uri "/"] [unique_id "alQwkWsmDw50MNj9aALFswAAAdc"] [Sun Jul 12 18:25:53.972943 2026] [security2:error] [pid 992537:tid 992782] [client 47.88.49.128:21713] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehycareers.com"] [uri "/"] [unique_id "alQwkWsmDw50MNj9aALFtAAAAfE"] [Sun Jul 12 18:25:53.973112 2026] [security2:error] [pid 992537:tid 992755] [client 47.88.49.128:34609] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehybuyscars.com"] [uri "/"] [unique_id "alQwkWsmDw50MNj9aALFtQAAAdY"] [Sun Jul 12 18:25:54.389837 2026] [authz_core:error] [pid 992537:tid 992696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:54.390493 2026] [authz_core:error] [pid 992537:tid 992696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:54.400548 2026] [security2:error] [pid 992537:tid 992794] [client 93.152.221.13:52024] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/phpinfo.php"] [unique_id "alQwkmsmDw50MNj9aALFywAAAf0"] [Sun Jul 12 18:25:54.442465 2026] [security2:error] [pid 992537:tid 992753] [client 102.89.34.83:8915] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "atfp.com"] [uri "/webmail"] [unique_id "alQwkmsmDw50MNj9aALFzAAAAdQ"] [Sun Jul 12 18:25:54.591659 2026] [security2:error] [pid 992537:tid 992804] [client 168.100.149.116:51426] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32630/bargainor/2308_anisodactyli.jsp"] [unique_id "alQwkmsmDw50MNj9aALF0gAAAgc"] [Sun Jul 12 18:25:54.688018 2026] [security2:error] [pid 992537:tid 992809] [client 47.88.49.128:12887] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehycareers.com"] [uri "/"] [unique_id "alQwkmsmDw50MNj9aALF1gAAAgw"] [Sun Jul 12 18:25:54.688967 2026] [security2:error] [pid 992537:tid 992728] [client 47.88.49.128:24541] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehybuyscars.com"] [uri "/"] [unique_id "alQwkmsmDw50MNj9aALF1wAAAbs"] [Sun Jul 12 18:25:54.690178 2026] [security2:error] [pid 992537:tid 992750] [client 47.88.49.128:53622] ModSecurity: Access denied with code 409 (phase 1). Match of "eq 1" against "&REQUEST_COOKIES:humans_21909" required. [file "/opt/mod_security/hg_rules.conf"] [line "1568"] [id "900932"] [msg "Alibaba Cloud Abuse"] [hostname "sheehycares.com"] [uri "/"] [unique_id "alQwkmsmDw50MNj9aALF2AAAAdE"] [Sun Jul 12 18:25:54.706300 2026] [security2:error] [pid 992537:tid 992738] [client 93.152.221.13:61914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/test.php"] [unique_id "alQwkmsmDw50MNj9aALF2QAAAcU"] [Sun Jul 12 18:25:55.135933 2026] [security2:error] [pid 992537:tid 992763] [client 144.31.35.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwkWsmDw50MNj9aALFsAAAAd4"], referer: https://mackinstyle.com/ [Sun Jul 12 18:25:55.230128 2026] [cgid:error] [pid 992537:tid 992780] [client 66.132.172.204:0] AH01265: stderr from /home3/pacareer/public_html/dev/cgi-bin/: attempt to invoke directory as script, referer: https://dev.pacareerlinkchesco.org:443/cgi-bin [Sun Jul 12 18:25:55.231586 2026] [security2:error] [pid 992537:tid 992794] [client 93.152.221.13:63221] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/info.php"] [unique_id "alQwk2smDw50MNj9aALF9wAAAf0"] [Sun Jul 12 18:25:55.244397 2026] [authz_core:error] [pid 992537:tid 992698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:55.244931 2026] [authz_core:error] [pid 992537:tid 992698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:55.335649 2026] [security2:error] [pid 992537:tid 992759] [client 207.180.11.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwkWsmDw50MNj9aALFtgAAAdo"], referer: https://mackinstyle.com/ [Sun Jul 12 18:25:55.475884 2026] [security2:error] [pid 992537:tid 992736] [client 207.180.11.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwkmsmDw50MNj9aALFxQAAAcM"], referer: https://mackinstyle.com/ [Sun Jul 12 18:25:55.525070 2026] [security2:error] [pid 992537:tid 992783] [client 93.152.221.13:64396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/php.php"] [unique_id "alQwk2smDw50MNj9aALF_AAAAfI"] [Sun Jul 12 18:25:55.560686 2026] [security2:error] [pid 992537:tid 992688] [client 65.21.113.206:42378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXUxLTQxNzYxLXUxa21kLTMzMzMtMWtt.cgi"] [unique_id "alQwk2smDw50MNj9aALGAwAAAZM"] [Sun Jul 12 18:25:55.680269 2026] [security2:error] [pid 992537:tid 992802] [client 64.7.220.73:48642] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "connorpresbyterianchurch.org"] [uri "/"] [unique_id "alQwk2smDw50MNj9aALGDwAAAgU"] [Sun Jul 12 18:25:55.818710 2026] [security2:error] [pid 992537:tid 992769] [client 93.152.221.13:58715] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/php_info.php"] [unique_id "alQwk2smDw50MNj9aALGEwAAAeQ"] [Sun Jul 12 18:25:55.996548 2026] [security2:error] [pid 992537:tid 992799] [client 216.73.216.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "lifeisdelicio.us"] [uri "/index.php"] [unique_id "alQwk2smDw50MNj9aALGBgAAAgI"] [Sun Jul 12 18:25:56.052773 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:56.053285 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:56.146486 2026] [security2:error] [pid 992537:tid 992792] [client 93.152.221.13:61920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/i.php"] [unique_id "alQwlGsmDw50MNj9aALGJgAAAfs"] [Sun Jul 12 18:25:56.437352 2026] [security2:error] [pid 992537:tid 992758] [client 93.152.221.13:51557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/pi.php"] [unique_id "alQwlGsmDw50MNj9aALGMwAAAdk"] [Sun Jul 12 18:25:56.551499 2026] [core:error] [pid 992537:tid 992618] (13)Permission denied: [remote 98.97.24.246:0] AH00132: file permissions deny server access: /home4/girlwjb6/public_html/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://girlwithbluesails.com/housekeeping-camp/ [Sun Jul 12 18:25:56.565307 2026] [security2:error] [pid 992537:tid 992709] [client 216.73.216.76:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "lifeisdelicio.us"] [uri "/index.php"] [unique_id "alQwlGsmDw50MNj9aALGIgAAAag"], referer: https://lifeisdelicio.us/sitemap.xml [Sun Jul 12 18:25:56.572289 2026] [security2:error] [pid 992537:tid 992727] [client 143.198.183.127:56742] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGMgAAAbo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.599904 2026] [security2:error] [pid 992537:tid 992685] [client 143.198.179.178:39698] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGNgAAAZA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.601991 2026] [security2:error] [pid 992537:tid 992695] [client 137.184.52.189:40338] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGNQAAAZo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.620430 2026] [security2:error] [pid 992537:tid 992698] [client 137.184.52.189:40334] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGNwAAAZ0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.642043 2026] [security2:error] [pid 992537:tid 992697] [client 206.189.230.179:36752] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGNAAAAZw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.642322 2026] [security2:error] [pid 992537:tid 992718] [client 137.184.52.189:40318] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGOAAAAbE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.687933 2026] [security2:error] [pid 992537:tid 992733] [client 206.189.230.179:36754] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGOwAAAcA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.711519 2026] [security2:error] [pid 992537:tid 992791] [client 137.184.71.162:48234] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGPAAAAfo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.711680 2026] [security2:error] [pid 992537:tid 992731] [client 165.227.86.148:60358] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGOQAAAb4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.739477 2026] [security2:error] [pid 992537:tid 992687] [client 137.184.52.189:40340] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGPQAAAZI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.741299 2026] [security2:error] [pid 992537:tid 992741] [client 159.223.106.32:48184] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGPgAAAcg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.785952 2026] [security2:error] [pid 992537:tid 992770] [client 137.184.71.162:48250] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlGsmDw50MNj9aALGQAAAAeU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:56.841333 2026] [security2:error] [pid 992537:tid 992796] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwlGsmDw50MNj9aALGIQAAAf8"] [Sun Jul 12 18:25:56.841409 2026] [security2:error] [pid 992537:tid 992796] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwlGsmDw50MNj9aALGIQAAAf8"] [Sun Jul 12 18:25:56.843034 2026] [security2:error] [pid 992537:tid 992784] [client 65.21.113.206:59142] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXUxLTQxNzYxLXUxa21kLTMzMzMtMWtt.cgi"] [unique_id "alQwlGsmDw50MNj9aALGHgAAAfM"] [Sun Jul 12 18:25:56.892147 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:56.892689 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:57.019509 2026] [security2:error] [pid 992537:tid 992637] [remote 74.7.227.188:47246] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQwlWsmDw50MNj9aALGUQABo1I"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-junior-fire-chief-custom-p-1062.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:25:57.269450 2026] [security2:error] [pid 992537:tid 992753] [client 168.100.149.125:60642] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32695/bargainor/2308_birefraction.jsp"] [unique_id "alQwlWsmDw50MNj9aALGawAAAdQ"] [Sun Jul 12 18:25:57.296949 2026] [security2:error] [pid 992537:tid 992714] [client 93.152.221.13:50468] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/admin/phpinfo.php"] [unique_id "alQwlWsmDw50MNj9aALGbwAAAa0"] [Sun Jul 12 18:25:57.508803 2026] [cgid:error] [pid 992537:tid 992784] [client 50.87.253.215:31704] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/uktaxref/public_html/404.shtml [Sun Jul 12 18:25:57.605626 2026] [security2:error] [pid 992537:tid 992721] [client 93.152.221.13:53712] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/pinfo.php"] [unique_id "alQwlWsmDw50MNj9aALGgQAAAbQ"] [Sun Jul 12 18:25:57.684213 2026] [core:error] [pid 992537:tid 992629] (13)Permission denied: [remote 98.97.24.246:0] AH00132: file permissions deny server access: /home4/girlwjb6/public_html/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://girlwithbluesails.com/housekeeping-camp/ [Sun Jul 12 18:25:57.688389 2026] [authz_core:error] [pid 992537:tid 992702] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:57.688955 2026] [authz_core:error] [pid 992537:tid 992702] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:57.905485 2026] [security2:error] [pid 992537:tid 992688] [client 93.152.221.13:50562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.thepeachypassport.com"] [uri "/php_version.php"] [unique_id "alQwlWsmDw50MNj9aALGjgAAAZM"] [Sun Jul 12 18:25:57.964315 2026] [security2:error] [pid 992537:tid 992789] [client 123.19.12.205:40477] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlWsmDw50MNj9aALGjAAAAfg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:57.995361 2026] [cgid:error] [pid 992537:tid 992691] [client 50.87.253.215:31716] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/uktaxref/public_html/404.shtml [Sun Jul 12 18:25:58.177306 2026] [security2:error] [pid 992537:tid 992780] [client 143.198.121.43:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwlWsmDw50MNj9aALGWAAAAe8"], referer: https://mackinstyle.com/ [Sun Jul 12 18:25:58.184579 2026] [security2:error] [pid 992537:tid 992701] [client 14.191.175.147:14562] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALGlAAAAaA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:58.379526 2026] [security2:error] [pid 992537:tid 992689] [client 93.152.221.13:59678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.thepeachypassport.com"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "alQwlmsmDw50MNj9aALGrQAAAZQ"] [Sun Jul 12 18:25:58.415978 2026] [cgid:error] [pid 992537:tid 992707] [client 50.87.253.215:31726] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/uktaxref/public_html/404.shtml [Sun Jul 12 18:25:58.476551 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:58.477485 2026] [authz_core:error] [pid 992537:tid 992791] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:58.734086 2026] [security2:error] [pid 992537:tid 992714] [client 190.72.12.73:47228] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALGtAAAAa0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:58.863990 2026] [cgid:error] [pid 992537:tid 992777] [client 50.87.253.215:31736] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/uktaxref/public_html/404.shtml [Sun Jul 12 18:25:58.911361 2026] [security2:error] [pid 992537:tid 992803] [client 93.152.221.13:59678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webmail.thepeachypassport.com"] [uri "/___proxy_subdomain_webmail/.env.backup"] [unique_id "alQwlmsmDw50MNj9aALGygAAAgY"] [Sun Jul 12 18:25:58.949043 2026] [security2:error] [pid 992537:tid 992695] [client 86.97.143.207:48408] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALGwwAAAZo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:58.963095 2026] [security2:error] [pid 992537:tid 992755] [client 143.0.191.251:29047] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALGwgAAAdY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.035478 2026] [security2:error] [pid 992537:tid 992748] [client 192.140.44.28:13175] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALGyQAAAc8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.040580 2026] [security2:error] [pid 992537:tid 992774] [client 57.141.18.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwlWsmDw50MNj9aALGfAAAAek"] [Sun Jul 12 18:25:59.069790 2026] [security2:error] [pid 992537:tid 992786] [client 93.152.221.13:59678] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.thepeachypassport.com"] [uri "/___proxy_subdomain_webmail/config/.env"] [unique_id "alQwl2smDw50MNj9aALG5AAAAfU"] [Sun Jul 12 18:25:59.127510 2026] [security2:error] [pid 992537:tid 992741] [client 181.43.211.122:12124] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwlmsmDw50MNj9aALG1QAAAcg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.187596 2026] [security2:error] [pid 992537:tid 992725] [client 131.196.247.219:34462] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwl2smDw50MNj9aALG4QAAAbg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.207219 2026] [security2:error] [pid 992537:tid 992720] [client 5.62.145.180:14171] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwl2smDw50MNj9aALG4wAAAbM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.230172 2026] [security2:error] [pid 992537:tid 992699] [client 168.100.149.172:35028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32760/bargainor/2308_mediator.jsp"] [unique_id "alQwl2smDw50MNj9aALG7wAAAZ4"] [Sun Jul 12 18:25:59.369717 2026] [authz_core:error] [pid 992537:tid 992759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:25:59.370393 2026] [authz_core:error] [pid 992537:tid 992759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:25:59.397542 2026] [security2:error] [pid 992537:tid 992769] [client 187.101.113.125:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwlmsmDw50MNj9aALGlwAAAeQ"], referer: https://mackinstyle.com/ [Sun Jul 12 18:25:59.541392 2026] [security2:error] [pid 992537:tid 992790] [client 40.223.213.165:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQwl2smDw50MNj9aALG4gAAAfk"] [Sun Jul 12 18:25:59.548164 2026] [security2:error] [pid 992537:tid 992768] [client 186.205.23.178:20964] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwl2smDw50MNj9aALHAQAAAeM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:25:59.783305 2026] [security2:error] [pid 992537:tid 992801] [client 45.236.247.149:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.srijb.org"] [uri "/index.php"] [unique_id "alQwjmsmDw50MNj9aALFMAAAAgQ"] [Sun Jul 12 18:26:00.008137 2026] [security2:error] [pid 992537:tid 992811] [client 116.71.180.10:1616] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwl2smDw50MNj9aALHDgAAAg4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:00.092368 2026] [security2:error] [pid 992537:tid 992706] [client 65.21.113.206:42378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXUxLTQxNzYxLXUxa21kLTcxMjAtMWtt.cgi"] [unique_id "alQwmGsmDw50MNj9aALHGQAAAaU"] [Sun Jul 12 18:26:00.215833 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:00.216352 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:00.247228 2026] [security2:error] [pid 992537:tid 992808] [client 5.161.215.244:58766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQwmGsmDw50MNj9aALHIwAAAgs"], referer: https://nwuav.com [Sun Jul 12 18:26:01.026532 2026] [authz_core:error] [pid 992537:tid 992751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:01.027239 2026] [authz_core:error] [pid 992537:tid 992751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:01.065899 2026] [security2:error] [pid 992537:tid 992771] [client 113.162.178.204:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwl2smDw50MNj9aALHEwAAAeY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:26:01.208711 2026] [security2:error] [pid 992537:tid 992700] [client 168.100.149.200:22418] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32825/bargainor/2308_gurian.jsp"] [unique_id "alQwmWsmDw50MNj9aALHTQAAAZ8"] [Sun Jul 12 18:26:01.270447 2026] [security2:error] [pid 992537:tid 992686] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwmGsmDw50MNj9aALHOAAAAZE"] [Sun Jul 12 18:26:01.270547 2026] [security2:error] [pid 992537:tid 992686] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwmGsmDw50MNj9aALHOAAAAZE"] [Sun Jul 12 18:26:01.273144 2026] [security2:error] [pid 992537:tid 992713] [client 65.21.113.206:59156] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXUxLTQxNzYxLXUxa21kLTcxMjAtMWtt.cgi"] [unique_id "alQwmGsmDw50MNj9aALHMQAAAaw"] [Sun Jul 12 18:26:01.739525 2026] [security2:error] [pid 992537:tid 992764] [client 57.141.18.37:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.tonypena.net"] [uri "/index.php"] [unique_id "alQwj2smDw50MNj9aALFZQAAAd8"] [Sun Jul 12 18:26:01.876336 2026] [security2:error] [pid 992537:tid 992702] [client 45.172.97.145:51838] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwmWsmDw50MNj9aALHXgAAAaE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:01.896332 2026] [security2:error] [pid 992537:tid 992684] [client 35.247.124.106:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQwmWsmDw50MNj9aALHXAAAAY8"] [Sun Jul 12 18:26:01.910186 2026] [authz_core:error] [pid 992537:tid 992779] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:01.910929 2026] [authz_core:error] [pid 992537:tid 992779] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:02.119584 2026] [security2:error] [pid 992537:tid 992756] [client 45.239.179.105:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwmGsmDw50MNj9aALHQQAAAdc"], referer: https://mackinstyle.com/ [Sun Jul 12 18:26:02.664659 2026] [security2:error] [pid 992537:tid 992717] [client 187.225.46.0:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwmWsmDw50MNj9aALHVQAAAbA"], referer: https://mackinstyle.com/ [Sun Jul 12 18:26:02.764358 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:02.765060 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:02.872407 2026] [security2:error] [pid 992537:tid 992798] [client 86.170.59.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwmmsmDw50MNj9aALHcwAAAgE"] [Sun Jul 12 18:26:03.257479 2026] [security2:error] [pid 992537:tid 992718] [client 168.100.149.166:58604] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32890/bargainor/2308_monkey.jsp"] [unique_id "alQwm2smDw50MNj9aALHnwAAAbE"] [Sun Jul 12 18:26:03.538429 2026] [security2:error] [pid 992537:tid 992755] [client 65.21.113.206:42378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzExOTAvdXkvMjI3NDUveQ=="] [unique_id "alQwm2smDw50MNj9aALHuAAAAdY"] [Sun Jul 12 18:26:03.552140 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:03.552833 2026] [authz_core:error] [pid 992537:tid 992725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:03.928244 2026] [security2:error] [pid 992537:tid 992692] [client 74.7.228.20:57596] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.randw.ie"] [uri "/robots.txt"] [unique_id "alQwm2smDw50MNj9aALHxgAAAZc"] [Sun Jul 12 18:26:04.331180 2026] [authz_core:error] [pid 992537:tid 992704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:04.331705 2026] [authz_core:error] [pid 992537:tid 992704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:04.542421 2026] [security2:error] [pid 992537:tid 992707] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwnGsmDw50MNj9aALHzgAAAaY"] [Sun Jul 12 18:26:04.542467 2026] [security2:error] [pid 992537:tid 992719] [client 65.21.113.206:45948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzExOTAvdXkvMjI3NDUveQ=="] [unique_id "alQwnGsmDw50MNj9aALHzAAAAbI"] [Sun Jul 12 18:26:04.542485 2026] [security2:error] [pid 992537:tid 992707] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwnGsmDw50MNj9aALHzgAAAaY"] [Sun Jul 12 18:26:04.619626 2026] [security2:error] [pid 992537:tid 992722] [client 57.141.18.86:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQwm2smDw50MNj9aALHrQAAAbU"] [Sun Jul 12 18:26:05.086697 2026] [authz_core:error] [pid 992537:tid 992685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:05.087242 2026] [authz_core:error] [pid 992537:tid 992685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:05.205962 2026] [security2:error] [pid 992537:tid 992769] [client 168.100.149.63:30608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/32955/bargainor/2308_impeccance.jsp"] [unique_id "alQwnWsmDw50MNj9aALH8AAAAeQ"] [Sun Jul 12 18:26:05.876064 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:05.876588 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:06.580644 2026] [security2:error] [pid 992537:tid 992758] [client 168.100.149.123:31372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33020/bargainor/2308_gunz.jsp"] [unique_id "alQwnmsmDw50MNj9aALIFwAAAdk"] [Sun Jul 12 18:26:06.679245 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:06.679772 2026] [authz_core:error] [pid 992537:tid 992780] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:06.806513 2026] [proxy:warn] [pid 992537:tid 992785] [client 45.205.1.223:36318] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be idreamofjeannemarie.com for uri /400.shtml [Sun Jul 12 18:26:06.826028 2026] [security2:error] [pid 992537:tid 992739] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "idreamofjeannemarie.com"] [uri "/400.shtml"] [unique_id "alQwnmsmDw50MNj9aALIJAAAAcY"] [Sun Jul 12 18:26:06.826966 2026] [security2:error] [pid 992537:tid 992785] [client 45.205.1.223:36318] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "idreamofjeannemarie.com"] [uri "/400.shtml"] [unique_id "alQwnmsmDw50MNj9aALIIAAAAfQ"] [Sun Jul 12 18:26:07.037812 2026] [security2:error] [pid 992537:tid 992775] [client 65.21.113.206:42378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzI0NTgvdXkvMjI3NDUveQ=="] [unique_id "alQwn2smDw50MNj9aALILQAAAeo"] [Sun Jul 12 18:26:07.190314 2026] [security2:error] [pid 992537:tid 992770] [client 173.252.70.34:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.waasrealty.com"] [uri "/index.php"] [unique_id "alQwnWsmDw50MNj9aALH-QAAAeU"] [Sun Jul 12 18:26:07.210417 2026] [core:error] [pid 992537:tid 992725] [client 154.54.100.177:37086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.210474 2026] [core:error] [pid 992537:tid 992725] [client 154.54.100.177:37086] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.219406 2026] [core:error] [pid 992537:tid 992737] [client 154.54.100.177:37102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.219468 2026] [core:error] [pid 992537:tid 992737] [client 154.54.100.177:37102] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.302964 2026] [core:error] [pid 992537:tid 992744] [client 154.54.100.177:37124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.303008 2026] [core:error] [pid 992537:tid 992744] [client 154.54.100.177:37124] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.352454 2026] [core:error] [pid 992537:tid 992793] [client 154.54.100.177:37140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.352496 2026] [core:error] [pid 992537:tid 992793] [client 154.54.100.177:37140] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:07.403414 2026] [proxy:warn] [pid 992537:tid 992690] [client 45.205.1.223:36332] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be idreamofjeannemarie.com for uri /400.shtml [Sun Jul 12 18:26:07.418329 2026] [security2:error] [pid 992537:tid 992690] [client 45.205.1.223:36332] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "idreamofjeannemarie.com"] [uri "/400.shtml"] [unique_id "alQwn2smDw50MNj9aALIRAAAAZU"] [Sun Jul 12 18:26:07.438931 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:07.439695 2026] [authz_core:error] [pid 992537:tid 992810] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:07.742244 2026] [security2:error] [pid 992537:tid 992754] [client 143.244.57.123:34574] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "salon-software.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQwn2smDw50MNj9aALITwAAAdU"] [Sun Jul 12 18:26:08.100304 2026] [security2:error] [pid 992537:tid 992751] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwn2smDw50MNj9aALISwAAAdI"] [Sun Jul 12 18:26:08.100325 2026] [security2:error] [pid 992537:tid 992735] [client 65.21.113.206:45954] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzI0NTgvdXkvMjI3NDUveQ=="] [unique_id "alQwn2smDw50MNj9aALISQAAAcI"] [Sun Jul 12 18:26:08.100353 2026] [security2:error] [pid 992537:tid 992751] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwn2smDw50MNj9aALISwAAAdI"] [Sun Jul 12 18:26:08.272521 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:08.273066 2026] [authz_core:error] [pid 992537:tid 992741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:09.045379 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:09.045945 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:09.209604 2026] [security2:error] [pid 992537:tid 992703] [client 168.100.149.196:56114] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33085/bargainor/2308_monadically.jsp"] [unique_id "alQwoWsmDw50MNj9aALIhwAAAaI"] [Sun Jul 12 18:26:09.260606 2026] [security2:error] [pid 992537:tid 992737] [client 107.191.36.209:58151] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 209.36.191.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "ellethehandycat.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQwoWsmDw50MNj9aALIiQAAAcQ"] [Sun Jul 12 18:26:09.806547 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:09.807281 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:09.983957 2026] [core:error] [pid 992537:tid 992706] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:09.983999 2026] [core:error] [pid 992537:tid 992706] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:10.592167 2026] [authz_core:error] [pid 992537:tid 992692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:10.592681 2026] [authz_core:error] [pid 992537:tid 992692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:11.228028 2026] [security2:error] [pid 992537:tid 992689] [client 168.100.149.234:41048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33150/bargainor/2308_enhalo.jsp"] [unique_id "alQwo2smDw50MNj9aALI4QAAAZQ"] [Sun Jul 12 18:26:11.270934 2026] [security2:error] [pid 992537:tid 992753] [client 143.244.57.123:34582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwo2smDw50MNj9aALI4wAAAdQ"] [Sun Jul 12 18:26:11.271234 2026] [security2:error] [pid 992537:tid 992753] [client 143.244.57.123:34582] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwo2smDw50MNj9aALI4wAAAdQ"] [Sun Jul 12 18:26:11.378202 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:11.378919 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:11.514720 2026] [security2:error] [pid 992537:tid 992698] [client 74.7.228.51:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.ilovedatacentres.com"] [uri "/robots.txt"] [unique_id "alQwo2smDw50MNj9aALI3AAAAZ0"] [Sun Jul 12 18:26:11.514998 2026] [security2:error] [pid 992537:tid 992722] [client 127.0.0.1:17532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQwo2smDw50MNj9aALI3QAAAbU"] [Sun Jul 12 18:26:11.518200 2026] [security2:error] [pid 992537:tid 992717] [client 57.141.18.73:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "pr-title.com"] [uri "/index.php"] [unique_id "alQwn2smDw50MNj9aALILwAAAbA"] [Sun Jul 12 18:26:11.827994 2026] [security2:error] [pid 992537:tid 992754] [client 117.99.209.225:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwo2smDw50MNj9aALI4AAAAdU"] [Sun Jul 12 18:26:11.873076 2026] [security2:error] [pid 992537:tid 992762] [client 143.244.57.123:35416] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwo2smDw50MNj9aALI-QAAAd0"] [Sun Jul 12 18:26:11.873359 2026] [security2:error] [pid 992537:tid 992762] [client 143.244.57.123:35416] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwo2smDw50MNj9aALI-QAAAd0"] [Sun Jul 12 18:26:11.934772 2026] [security2:error] [pid 992537:tid 992787] [client 152.168.197.96:43928] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQwo2smDw50MNj9aALI-gAAAfY"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/Lenovo-V130-15IGM(81HL002DGE)-portable-batterie.htm [Sun Jul 12 18:26:12.026905 2026] [core:error] [pid 992537:tid 992770] [client 13.140.136.17:59059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:12.026960 2026] [core:error] [pid 992537:tid 992770] [client 13.140.136.17:59059] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:12.085571 2026] [autoindex:error] [pid 992537:tid 992751] [client 13.140.136.17:62447] AH01276: Cannot serve directory /home4/homeyeat/public_html/homeyeats/.well-known/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:26:12.154678 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:12.155172 2026] [authz_core:error] [pid 992537:tid 992733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:12.255898 2026] [security2:error] [pid 992537:tid 992663] [remote 57.141.18.81:34668] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 81.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/9P3MLW8WudQ"] [unique_id "alQwpGsmDw50MNj9aALJAwABnmw"] [Sun Jul 12 18:26:12.303336 2026] [security2:error] [pid 992537:tid 992776] [client 74.7.228.20:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.randw.ie"] [uri "/index.php"] [unique_id "alQwnGsmDw50MNj9aALH1AAAAes"], referer: http://www.randw.ie/robots.txt [Sun Jul 12 18:26:12.303383 2026] [security2:error] [pid 992537:tid 992776] [client 74.7.228.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.randw.ie"] [uri "/index.php"] [unique_id "alQwnGsmDw50MNj9aALH1AAAAes"], referer: http://www.randw.ie/robots.txt [Sun Jul 12 18:26:12.304782 2026] [security2:error] [pid 992537:tid 992778] [client 74.7.228.20:45054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.randw.ie"] [uri "/robots.txt"] [unique_id "alQwnGsmDw50MNj9aALHzwAB7VI"], referer: http://www.randw.ie/robots.txt [Sun Jul 12 18:26:12.482651 2026] [security2:error] [pid 992537:tid 992712] [client 143.244.57.123:35424] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwpGsmDw50MNj9aALJDAAAAas"] [Sun Jul 12 18:26:12.482882 2026] [security2:error] [pid 992537:tid 992712] [client 143.244.57.123:35424] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "salon-software.com"] [uri "/xmlrpc.php"] [unique_id "alQwpGsmDw50MNj9aALJDAAAAas"] [Sun Jul 12 18:26:12.492331 2026] [security2:error] [pid 992537:tid 992696] [client 74.7.228.20:47550] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "randw.ie"] [uri "/robots.txt"] [unique_id "alQwpGsmDw50MNj9aALJCwABm3k"], referer: https://www.randw.ie/robots.txt [Sun Jul 12 18:26:12.591633 2026] [core:error] [pid 992537:tid 992753] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:12.591699 2026] [core:error] [pid 992537:tid 992753] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:12.901273 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:12.901819 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:13.233929 2026] [security2:error] [pid 992537:tid 992762] [client 168.100.149.205:43222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33215/bargainor/2308_metalogical.jsp"] [unique_id "alQwpWsmDw50MNj9aALJKwAAAd0"] [Sun Jul 12 18:26:13.623639 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:13.624157 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:14.217334 2026] [security2:error] [pid 992537:tid 992794] [client 145.239.10.137:37227] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "privatelendingsystem.com"] [uri "/eetu.php"] [unique_id "alQwpmsmDw50MNj9aALJRgAAAf0"], referer: http://privatelendingsystem.com/eetu.php [Sun Jul 12 18:26:14.370750 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:14.371368 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:15.025558 2026] [core:error] [pid 992537:tid 992739] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:15.025636 2026] [core:error] [pid 992537:tid 992739] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:15.078486 2026] [security2:error] [pid 992537:tid 992717] [client 35.247.124.106:58074] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.124.247.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQwp2smDw50MNj9aALJgwAAAbA"] [Sun Jul 12 18:26:15.176783 2026] [security2:error] [pid 992537:tid 992756] [client 35.247.124.106:58166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.124.247.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/wp-login.php"] [unique_id "alQwp2smDw50MNj9aALJdwAAAdc"] [Sun Jul 12 18:26:15.235762 2026] [security2:error] [pid 992537:tid 992811] [client 35.247.124.106:58252] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 106.124.247.35.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "idreamofjeannemarie.com"] [uri "/xmlrpc.php"] [unique_id "alQwp2smDw50MNj9aALJiAAAAg4"] [Sun Jul 12 18:26:15.281843 2026] [security2:error] [pid 992537:tid 992734] [client 168.100.149.58:29624] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33280/bargainor/2308_psychoreflex.jsp"] [unique_id "alQwp2smDw50MNj9aALJvAAAAcE"] [Sun Jul 12 18:26:15.299334 2026] [http2:info] [pid 1011499:tid 1011499] h2_workers: created with min=128 max=192 idle_ms=600000 [Sun Jul 12 18:26:15.377731 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:15.378516 2026] [authz_core:error] [pid 992537:tid 992712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:15.407374 2026] [security2:error] [pid 992537:tid 992811] [client 65.21.113.206:32794] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzY1MTcvdXkvMjI3NDUveQ=="] [unique_id "alQwp2smDw50MNj9aALJ4wAAAg4"] [Sun Jul 12 18:26:15.852019 2026] [security2:error] [pid 992537:tid 992742] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQwpGsmDw50MNj9aALJHAAAAck"] [Sun Jul 12 18:26:16.597356 2026] [security2:error] [pid 992537:tid 992784] [client 168.100.149.44:54346] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33345/bargainor/2308_mailable.jsp"] [unique_id "alQwqGsmDw50MNj9aALKJQAAAfM"] [Sun Jul 12 18:26:16.669315 2026] [authz_core:error] [pid 992537:tid 992717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:16.669960 2026] [authz_core:error] [pid 992537:tid 992717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:16.844196 2026] [security2:error] [pid 992537:tid 992720] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwp2smDw50MNj9aALKAQAAAbM"] [Sun Jul 12 18:26:16.845337 2026] [security2:error] [pid 1011499:tid 1011648] [client 65.21.113.206:37474] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXV5YWZlLzY1MTcvdXkvMjI3NDUveQ=="] [unique_id "alQwpzawpHZwffLOvcP6nwAAAI0"] [Sun Jul 12 18:26:16.874631 2026] [security2:error] [pid 992537:tid 992720] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwp2smDw50MNj9aALKAQAAAbM"] [Sun Jul 12 18:26:16.930740 2026] [autoindex:error] [pid 992537:tid 992708] [client 20.40.50.229:64517] AH01276: Cannot serve directory /home2/tandemc4/public_html/wp-admin/css/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com [Sun Jul 12 18:26:17.360214 2026] [autoindex:error] [pid 992537:tid 992748] [client 199.45.154.147:50514] AH01276: Cannot serve directory /home4/zigzags3/public_html/tenethomes/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:26:17.618145 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:17.618652 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:17.778075 2026] [security2:error] [pid 1011499:tid 1011653] [client 57.141.18.22:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwqTawpHZwffLOvcP6vwAAAJI"] [Sun Jul 12 18:26:17.801876 2026] [security2:error] [pid 1011499:tid 1011735] [client 40.223.136.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQwqTawpHZwffLOvcP6xgAAAOQ"] [Sun Jul 12 18:26:18.014184 2026] [security2:error] [pid 1011499:tid 1011689] [client 35.247.124.106:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQwqDawpHZwffLOvcP6pwAAALY"] [Sun Jul 12 18:26:18.537733 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:18.538228 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:18.594345 2026] [security2:error] [pid 1011499:tid 1011718] [client 168.100.149.171:57976] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33410/bargainor/2308_epidemiology.jsp"] [unique_id "alQwqjawpHZwffLOvcP65QAAANM"] [Sun Jul 12 18:26:19.320508 2026] [authz_core:error] [pid 1011499:tid 1011730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:19.321217 2026] [authz_core:error] [pid 1011499:tid 1011730] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:19.458870 2026] [core:error] [pid 992537:tid 992793] [client 5.255.124.170:37362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:19.458942 2026] [core:error] [pid 992537:tid 992793] [client 5.255.124.170:37362] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:20.118420 2026] [authz_core:error] [pid 1011499:tid 1011763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:20.118936 2026] [authz_core:error] [pid 1011499:tid 1011763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:20.547652 2026] [security2:error] [pid 1011499:tid 1011706] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "74.220.208.93"] [uri "/index.php"] [unique_id "alQwrDawpHZwffLOvcP7BQAAAMc"] [Sun Jul 12 18:26:20.854539 2026] [security2:error] [pid 992537:tid 992756] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXVfODIzNy91b3QvMTM5NzNfb3Q=.htm"] [unique_id "alQwrGsmDw50MNj9aALKdgAAAdc"] [Sun Jul 12 18:26:20.890756 2026] [authz_core:error] [pid 1011499:tid 1011669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:20.891253 2026] [authz_core:error] [pid 1011499:tid 1011669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:21.232370 2026] [security2:error] [pid 1011499:tid 1011648] [client 168.100.149.93:29462] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33475/bargainor/2308_secque.jsp"] [unique_id "alQwrTawpHZwffLOvcP7FgAAAI0"] [Sun Jul 12 18:26:21.666980 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:21.667484 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:21.927799 2026] [security2:error] [pid 992537:tid 992685] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwrWsmDw50MNj9aALKgwAAAZA"] [Sun Jul 12 18:26:21.927881 2026] [security2:error] [pid 992537:tid 992685] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwrWsmDw50MNj9aALKgwAAAZA"] [Sun Jul 12 18:26:21.935648 2026] [security2:error] [pid 1011499:tid 1011705] [client 65.21.113.206:37482] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXVfODIzNy91b3QvMTM5NzNfb3Q=.htm"] [unique_id "alQwrTawpHZwffLOvcP7FwAAAMY"] [Sun Jul 12 18:26:22.061811 2026] [core:error] [pid 992537:tid 992751] [client 5.255.124.170:59126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:22.061865 2026] [core:error] [pid 992537:tid 992751] [client 5.255.124.170:59126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:22.072006 2026] [security2:error] [pid 992537:tid 992708] [client 190.93.36.8:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwrWsmDw50MNj9aALKhwAAAac"] [Sun Jul 12 18:26:22.426050 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:22.426550 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:22.598272 2026] [security2:error] [pid 1011499:tid 1011752] [client 168.100.149.40:41026] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33540/bargainor/2308_dislevelment.jsp"] [unique_id "alQwrjawpHZwffLOvcP7KgAAAPU"] [Sun Jul 12 18:26:23.185873 2026] [authz_core:error] [pid 992537:tid 992724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:23.186347 2026] [authz_core:error] [pid 992537:tid 992724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:23.822364 2026] [security2:error] [pid 1011499:tid 1011764] [client 43.165.170.119:40782] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "planopercussion.org"] [uri "/400.shtml"] [unique_id "alQwrzawpHZwffLOvcP7NgAAAQE"] [Sun Jul 12 18:26:23.886824 2026] [core:error] [pid 992537:tid 992731] [client 13.140.136.17:53872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:23.886872 2026] [core:error] [pid 992537:tid 992731] [client 13.140.136.17:53872] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:23.891862 2026] [core:error] [pid 1011499:tid 1011742] [client 13.140.136.17:53825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:23.891909 2026] [core:error] [pid 1011499:tid 1011742] [client 13.140.136.17:53825] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:23.950072 2026] [autoindex:error] [pid 1011499:tid 1011645] [client 79.177.139.19:0] AH01276: Cannot serve directory /home2/cecillin/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:26:24.001996 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:24.002707 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:24.039316 2026] [security2:error] [pid 1011499:tid 1011524] [remote 57.141.18.83:38688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 83.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/Mns040C.lWez"] [unique_id "alQwsDawpHZwffLOvcP7QgAAng4"] [Sun Jul 12 18:26:24.083887 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXVkc21uLTE4NDAvdWQtMzk4MjEvZHNtbg=="] [unique_id "alQwsGsmDw50MNj9aALKsgAAAdM"] [Sun Jul 12 18:26:24.785943 2026] [authz_core:error] [pid 992537:tid 992751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:24.786442 2026] [authz_core:error] [pid 992537:tid 992751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:25.089688 2026] [security2:error] [pid 992537:tid 992782] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwsGsmDw50MNj9aALKxQAAAfE"] [Sun Jul 12 18:26:25.090515 2026] [security2:error] [pid 992537:tid 992745] [client 65.21.113.206:60020] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXVkc21uLTE4NDAvdWQtMzk4MjEvZHNtbg=="] [unique_id "alQwsGsmDw50MNj9aALKwQAAAcw"] [Sun Jul 12 18:26:25.107149 2026] [security2:error] [pid 992537:tid 992782] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwsGsmDw50MNj9aALKxQAAAfE"] [Sun Jul 12 18:26:25.304129 2026] [security2:error] [pid 992537:tid 992702] [client 168.100.149.184:17574] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33605/bargainor/2308_limnoria.jsp"] [unique_id "alQwsWsmDw50MNj9aALK2AAAAaE"] [Sun Jul 12 18:26:25.574355 2026] [authz_core:error] [pid 992537:tid 992744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:25.574908 2026] [authz_core:error] [pid 992537:tid 992744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:25.790084 2026] [core:error] [pid 992537:tid 992755] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:25.790138 2026] [core:error] [pid 992537:tid 992755] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:25.798518 2026] [core:error] [pid 1011499:tid 1011735] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:25.798559 2026] [core:error] [pid 1011499:tid 1011735] [client 3.20.201.240:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:26.352297 2026] [authz_core:error] [pid 992537:tid 992740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:26.352875 2026] [authz_core:error] [pid 992537:tid 992740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:26.597861 2026] [security2:error] [pid 1011499:tid 1011665] [client 168.100.149.81:52412] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33670/bargainor/2308_milksopism.jsp"] [unique_id "alQwsjawpHZwffLOvcP7bgAAAJ4"] [Sun Jul 12 18:26:27.176968 2026] [security2:error] [pid 992537:tid 992747] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXVkc21uLTc1NDUvdWQtMzk4MjEvZHNtbg=="] [unique_id "alQws2smDw50MNj9aALLDQAAAc4"] [Sun Jul 12 18:26:27.268044 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:27.268543 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:27.537545 2026] [security2:error] [pid 992537:tid 992763] [client 57.141.18.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwsmsmDw50MNj9aALLBAAAAd4"] [Sun Jul 12 18:26:27.566238 2026] [autoindex:error] [pid 1011499:tid 1011667] [client 79.177.139.19:0] AH01276: Cannot serve directory /home2/cecillin/public_html/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:26:28.067037 2026] [core:error] [pid 992537:tid 992689] [client 5.255.124.170:59146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:28.067092 2026] [core:error] [pid 992537:tid 992689] [client 5.255.124.170:59146] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:28.115494 2026] [authz_core:error] [pid 992537:tid 992731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:28.116051 2026] [authz_core:error] [pid 992537:tid 992731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:28.270194 2026] [security2:error] [pid 1011499:tid 1011722] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwszawpHZwffLOvcP7jQAAANc"] [Sun Jul 12 18:26:28.270267 2026] [security2:error] [pid 1011499:tid 1011722] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwszawpHZwffLOvcP7jQAAANc"] [Sun Jul 12 18:26:28.271909 2026] [security2:error] [pid 1011499:tid 1011694] [client 65.21.113.206:60028] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXVkc21uLTc1NDUvdWQtMzk4MjEvZHNtbg=="] [unique_id "alQwszawpHZwffLOvcP7igAAALs"] [Sun Jul 12 18:26:28.606907 2026] [security2:error] [pid 1011499:tid 1011733] [client 168.100.149.240:58588] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33735/bargainor/2308_capnoides.jsp"] [unique_id "alQwtDawpHZwffLOvcP7nwAAAOI"] [Sun Jul 12 18:26:28.869989 2026] [security2:error] [pid 1011499:tid 1011705] [client 34.60.131.171:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "girlwithbluesails.com"] [uri "/index.php"] [unique_id "alQwszawpHZwffLOvcP7lAAAxiU"] [Sun Jul 12 18:26:28.914338 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:28.914857 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:29.019890 2026] [security2:error] [pid 992537:tid 992736] [client 157.230.91.1:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQws2smDw50MNj9aALLJAAAAcM"], referer: https://mackinstyle.com/ [Sun Jul 12 18:26:29.706389 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:29.706918 2026] [authz_core:error] [pid 992537:tid 992763] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:30.065023 2026] [security2:error] [pid 992537:tid 992704] [client 185.187.78.210:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwtWsmDw50MNj9aALLSAAAAaM"] [Sun Jul 12 18:26:30.307224 2026] [access_compat:error] [pid 992537:tid 992689] [client 47.76.128.255:58902] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php [Sun Jul 12 18:26:30.309131 2026] [access_compat:error] [pid 992537:tid 992689] [client 47.76.128.255:58902] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.phtml [Sun Jul 12 18:26:30.381600 2026] [security2:error] [pid 992537:tid 992767] [client 206.195.75.20:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQwtWsmDw50MNj9aALLVgAAAeI"] [Sun Jul 12 18:26:30.528353 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:30.528908 2026] [authz_core:error] [pid 992537:tid 992801] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:30.656845 2026] [security2:error] [pid 992537:tid 992685] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXVnajdzLzI4NzkvdWcvMTA3MzMvZw=="] [unique_id "alQwtmsmDw50MNj9aALLbwAAAZA"] [Sun Jul 12 18:26:31.259203 2026] [security2:error] [pid 1011499:tid 1011720] [client 168.100.149.11:15510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33800/bargainor/2308_deft.jsp"] [unique_id "alQwtzawpHZwffLOvcP70AAAANU"] [Sun Jul 12 18:26:31.315029 2026] [authz_core:error] [pid 1011499:tid 1011713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:31.315542 2026] [authz_core:error] [pid 1011499:tid 1011713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:31.482326 2026] [access_compat:error] [pid 992537:tid 992772] [client 47.76.128.255:59108] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.php [Sun Jul 12 18:26:31.483942 2026] [access_compat:error] [pid 992537:tid 992772] [client 47.76.128.255:59108] AH01797: client denied by server configuration: /home2/dvdcopya/public_html/cloneralliance/index.phtml [Sun Jul 12 18:26:31.683011 2026] [security2:error] [pid 992537:tid 992715] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwt2smDw50MNj9aALLgAAAAa4"] [Sun Jul 12 18:26:31.683061 2026] [security2:error] [pid 992537:tid 992715] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwt2smDw50MNj9aALLgAAAAa4"] [Sun Jul 12 18:26:31.684525 2026] [security2:error] [pid 1011499:tid 1011731] [client 65.21.113.206:60036] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXVnajdzLzI4NzkvdWcvMTA3MzMvZw=="] [unique_id "alQwtzawpHZwffLOvcP7yAAAAOA"] [Sun Jul 12 18:26:31.818715 2026] [core:error] [pid 1011499:tid 1011684] [client 5.255.124.170:59156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:31.818771 2026] [core:error] [pid 1011499:tid 1011684] [client 5.255.124.170:59156] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:32.182512 2026] [authz_core:error] [pid 1011499:tid 1011693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:32.183304 2026] [authz_core:error] [pid 1011499:tid 1011693] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:32.676739 2026] [security2:error] [pid 992537:tid 992809] [client 34.60.131.171:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "girlwithbluesails.com"] [uri "/index.php"] [unique_id "alQwt2smDw50MNj9aALLlQACDEE"] [Sun Jul 12 18:26:32.711563 2026] [security2:error] [pid 1011499:tid 1011754] [client 59.103.218.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQwtzawpHZwffLOvcP71QAAAPc"], referer: https://mackinstyle.com/ [Sun Jul 12 18:26:32.966738 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:32.967216 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:33.289909 2026] [security2:error] [pid 992537:tid 992698] [client 168.100.149.134:48364] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33865/bargainor/2308_did.jsp"] [unique_id "alQwuWsmDw50MNj9aALLtAAAAZ0"] [Sun Jul 12 18:26:33.737317 2026] [security2:error] [pid 992537:tid 992626] [remote 57.141.18.69:64883] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 69.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/112tqs7y.lWez"] [unique_id "alQwuWsmDw50MNj9aALLvwACC0c"] [Sun Jul 12 18:26:33.752418 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:33.753112 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:33.977054 2026] [security2:error] [pid 992537:tid 992710] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXVucnhnLTQ1MjAvdW4tMzM0OTMvbnJ4Zw=="] [unique_id "alQwuWsmDw50MNj9aALLxgAAAak"] [Sun Jul 12 18:26:34.401532 2026] [core:error] [pid 992537:tid 992737] [client 5.255.124.170:55952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:34.401577 2026] [core:error] [pid 992537:tid 992737] [client 5.255.124.170:55952] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:34.455797 2026] [security2:error] [pid 992537:tid 992748] [client 199.45.154.145:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "theblessednewbie.org"] [uri "/index.php"] [unique_id "alQwumsmDw50MNj9aALLxwAAAc8"] [Sun Jul 12 18:26:34.537512 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:34.538040 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:34.599868 2026] [security2:error] [pid 1011499:tid 1011671] [client 168.100.149.109:23628] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33930/bargainor/2308_delphian.jsp"] [unique_id "alQwujawpHZwffLOvcP8CQAAAKQ"] [Sun Jul 12 18:26:34.950869 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwumsmDw50MNj9aALL0wAAAdM"] [Sun Jul 12 18:26:34.950922 2026] [security2:error] [pid 992537:tid 992752] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwumsmDw50MNj9aALL0wAAAdM"] [Sun Jul 12 18:26:34.951872 2026] [security2:error] [pid 992537:tid 992756] [client 65.21.113.206:52882] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXVucnhnLTQ1MjAvdW4tMzM0OTMvbnJ4Zw=="] [unique_id "alQwumsmDw50MNj9aALLzQAAAdc"] [Sun Jul 12 18:26:35.298063 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:35.298568 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:36.055845 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:36.056326 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:36.809442 2026] [authz_core:error] [pid 992537:tid 992748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:36.810579 2026] [authz_core:error] [pid 992537:tid 992748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:36.925709 2026] [security2:error] [pid 992537:tid 992769] [client 216.198.122.83:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "appleseednetwork.org"] [uri "/index.php"] [unique_id "alQwu2smDw50MNj9aALL4QAB5B8"], referer: https://appleseednetwork.org/ [Sun Jul 12 18:26:37.261941 2026] [security2:error] [pid 992537:tid 992720] [client 168.100.149.119:29228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/33995/bargainor/2308_anisodactyli.jsp"] [unique_id "alQwvWsmDw50MNj9aALMDwAAAbM"] [Sun Jul 12 18:26:37.573715 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:37.574227 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:37.995770 2026] [security2:error] [pid 992537:tid 992762] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXYxMDQwLTI4MDUvdjEtMjgzMy8xMDQw"] [unique_id "alQwvWsmDw50MNj9aALMHQAAAd0"] [Sun Jul 12 18:26:38.364749 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:38.365268 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:38.631887 2026] [security2:error] [pid 992537:tid 992792] [client 168.100.149.127:54298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34060/bargainor/2308_birefraction.jsp"] [unique_id "alQwvmsmDw50MNj9aALMKgAAAfs"] [Sun Jul 12 18:26:38.967243 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwvjawpHZwffLOvcP8RwAAAIY"] [Sun Jul 12 18:26:38.967303 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwvjawpHZwffLOvcP8RwAAAIY"] [Sun Jul 12 18:26:38.971043 2026] [security2:error] [pid 1011499:tid 1011760] [client 65.21.113.206:52888] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXYxMDQwLTI4MDUvdjEtMjgzMy8xMDQw"] [unique_id "alQwvjawpHZwffLOvcP8RAAAAP0"] [Sun Jul 12 18:26:39.013975 2026] [security2:error] [pid 1011499:tid 1011706] [client 78.173.58.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwvjawpHZwffLOvcP8SQAAAMc"] [Sun Jul 12 18:26:39.140297 2026] [security2:error] [pid 1011499:tid 1011652] [client 103.203.57.3:51754] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "173.254.111.106"] [uri "/"] [unique_id "alQwvzawpHZwffLOvcP8UgAAAJE"] [Sun Jul 12 18:26:39.160087 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:39.160554 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:39.344980 2026] [core:error] [pid 992537:tid 992726] [client 13.140.136.17:49804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.345023 2026] [core:error] [pid 992537:tid 992726] [client 13.140.136.17:49804] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.350004 2026] [core:error] [pid 992537:tid 992803] [client 13.140.136.17:49850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.350049 2026] [core:error] [pid 992537:tid 992803] [client 13.140.136.17:49850] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.545126 2026] [security2:error] [pid 992537:tid 992749] [client 114.119.130.151:36875] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "69.195.110.188"] [uri "/mainichireviewb.htm"] [unique_id "alQwv2smDw50MNj9aALMPAAAAdA"], referer: https://69.195.110.188/interviewsc.htm [Sun Jul 12 18:26:39.558396 2026] [security2:error] [pid 1011499:tid 1011651] [client 154.54.100.177:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQwvjawpHZwffLOvcP8TAAAAJA"] [Sun Jul 12 18:26:39.799489 2026] [core:error] [pid 992537:tid 992802] [client 5.255.124.170:55966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.799533 2026] [core:error] [pid 992537:tid 992802] [client 5.255.124.170:55966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:39.904396 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:39.904906 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:40.230735 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.253:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/cgi-sys/404.html"] [unique_id "alQwwDawpHZwffLOvcP8YgAAAJI"] [Sun Jul 12 18:26:40.231902 2026] [security2:error] [pid 992537:tid 992774] [client 65.21.113.253:38044] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.sfurology.com"] [uri "/robots.txt"] [unique_id "alQwwGsmDw50MNj9aALMSAAAAek"] [Sun Jul 12 18:26:40.624554 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:40.625126 2026] [authz_core:error] [pid 992537:tid 992734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:41.286303 2026] [security2:error] [pid 1011499:tid 1011765] [client 45.79.211.133:45820] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "sarahjoyyoga.com"] [uri "/"] [unique_id "alQwwTawpHZwffLOvcP8cgAAAQI"] [Sun Jul 12 18:26:41.288033 2026] [proxy:warn] [pid 1011499:tid 1011765] [client 45.79.211.133:45820] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri / [Sun Jul 12 18:26:41.429553 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:41.430188 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:41.561506 2026] [security2:error] [pid 992537:tid 992732] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXZ1NWhyMF80MTQ4L3Z1LzUwNTYxL3U=.html"] [unique_id "alQwwWsmDw50MNj9aALMZgAAAb8"] [Sun Jul 12 18:26:42.269016 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:42.269766 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:42.766561 2026] [security2:error] [pid 1011499:tid 1011656] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwwjawpHZwffLOvcP8fwAAAJU"] [Sun Jul 12 18:26:42.766640 2026] [security2:error] [pid 1011499:tid 1011656] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwwjawpHZwffLOvcP8fwAAAJU"] [Sun Jul 12 18:26:42.767703 2026] [security2:error] [pid 992537:tid 992753] [client 65.21.113.206:52898] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXZ1NWhyMF80MTQ4L3Z1LzUwNTYxL3U=.html"] [unique_id "alQwwmsmDw50MNj9aALMbgAAAdQ"] [Sun Jul 12 18:26:42.860976 2026] [security2:error] [pid 992537:tid 992748] [client 45.79.211.133:45828] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "sarahjoyyoga.com"] [uri "/"] [unique_id "alQwwmsmDw50MNj9aALMfgAAAc8"] [Sun Jul 12 18:26:43.189605 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:43.190246 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:43.311128 2026] [security2:error] [pid 1011499:tid 1011663] [client 168.100.149.124:25378] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34190/bargainor/2308_gurian.jsp"] [unique_id "alQwwzawpHZwffLOvcP8kQAAAJw"] [Sun Jul 12 18:26:43.470443 2026] [security2:error] [pid 992537:tid 992704] [client 172.252.218.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQww2smDw50MNj9aALMiwAAAaM"] [Sun Jul 12 18:26:43.513123 2026] [core:error] [pid 992537:tid 992810] [client 5.255.124.170:48476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:43.513190 2026] [core:error] [pid 992537:tid 992810] [client 5.255.124.170:48476] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:43.568808 2026] [security2:error] [pid 1011499:tid 1011745] [client 45.79.211.133:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQwwTawpHZwffLOvcP8cwAAAO4"] [Sun Jul 12 18:26:43.569123 2026] [security2:error] [pid 1011499:tid 1011765] [client 45.79.211.133:45820] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "sarahjoyyoga.com"] [uri "/"] [unique_id "alQwwTawpHZwffLOvcP8cgAAAQI"] [Sun Jul 12 18:26:43.709172 2026] [security2:error] [pid 1011499:tid 1011647] [client 136.144.35.132:44469] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.binarywerks.net"] [uri "/wp-includes/css/buttons.css"] [unique_id "alQwwzawpHZwffLOvcP8kgAAAIw"] [Sun Jul 12 18:26:43.785099 2026] [security2:error] [pid 992537:tid 992763] [client 45.79.211.133:45828] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQwwmsmDw50MNj9aALMfgAAAc8"] [Sun Jul 12 18:26:43.972308 2026] [authz_core:error] [pid 992537:tid 992797] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:43.972817 2026] [authz_core:error] [pid 992537:tid 992797] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:44.181734 2026] [core:error] [pid 992537:tid 992694] [client 13.140.136.17:54001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:44.181879 2026] [core:error] [pid 992537:tid 992694] [client 13.140.136.17:54001] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:44.184125 2026] [core:error] [pid 992537:tid 992767] [client 13.140.136.17:64149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:44.184169 2026] [core:error] [pid 992537:tid 992767] [client 13.140.136.17:64149] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:44.584133 2026] [security2:error] [pid 992537:tid 992686] [client 103.154.160.12:45594] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQwxGsmDw50MNj9aALMugAAAZE"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/L17C2PB4-portable-batterie.htm [Sun Jul 12 18:26:44.619597 2026] [security2:error] [pid 992537:tid 992775] [client 168.100.149.225:30024] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34255/bargainor/2308_monkey.jsp"] [unique_id "alQwxGsmDw50MNj9aALMvwAAAeo"] [Sun Jul 12 18:26:44.730462 2026] [security2:error] [pid 992537:tid 992655] [remote 40.77.167.3:6923] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQwxGsmDw50MNj9aALMwQAB4GQ"] [Sun Jul 12 18:26:44.744793 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:44.745300 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:45.086392 2026] [security2:error] [pid 1011499:tid 1011735] [client 168.100.149.60:56570] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34125/bargainor/2308_mediator.jsp"] [unique_id "alQwxTawpHZwffLOvcP8rQAAAOQ"] [Sun Jul 12 18:26:45.229051 2026] [security2:error] [pid 992537:tid 992713] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXZmNmFhLTg0NS92Zi0yMjI2NS9mNmFh"] [unique_id "alQwxWsmDw50MNj9aALM0AAAAaw"] [Sun Jul 12 18:26:45.557155 2026] [authz_core:error] [pid 992537:tid 992792] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:45.557703 2026] [authz_core:error] [pid 992537:tid 992792] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:46.349603 2026] [authz_core:error] [pid 992537:tid 992715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:46.350305 2026] [authz_core:error] [pid 992537:tid 992715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:46.393660 2026] [security2:error] [pid 1011499:tid 1011754] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwxTawpHZwffLOvcP8uwAAAPc"] [Sun Jul 12 18:26:46.393755 2026] [security2:error] [pid 1011499:tid 1011754] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwxTawpHZwffLOvcP8uwAAAPc"] [Sun Jul 12 18:26:46.395172 2026] [security2:error] [pid 992537:tid 992703] [client 65.21.113.206:44566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXZmNmFhLTg0NS92Zi0yMjI2NS9mNmFh"] [unique_id "alQwxWsmDw50MNj9aALM4gAAAaI"] [Sun Jul 12 18:26:47.160109 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:47.160622 2026] [authz_core:error] [pid 992537:tid 992768] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:47.297586 2026] [security2:error] [pid 992537:tid 992734] [client 168.100.149.220:15996] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34320/bargainor/2308_impeccance.jsp"] [unique_id "alQwx2smDw50MNj9aALM-wAAAcE"] [Sun Jul 12 18:26:47.538518 2026] [core:error] [pid 1011499:tid 1011712] [client 5.255.124.170:48490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:47.538565 2026] [core:error] [pid 1011499:tid 1011712] [client 5.255.124.170:48490] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:47.993481 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:47.994306 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:48.822831 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:48.823394 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:49.326495 2026] [security2:error] [pid 992537:tid 992719] [client 168.100.149.20:63672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34385/bargainor/2308_gunz.jsp"] [unique_id "alQwyWsmDw50MNj9aALNKQAAAbI"] [Sun Jul 12 18:26:49.339497 2026] [security2:error] [pid 992537:tid 992772] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXZrZm1peV85MTQ2L3ZrLzQ0MS9r.html"] [unique_id "alQwyWsmDw50MNj9aALNKgAAAec"] [Sun Jul 12 18:26:49.550228 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:49.550762 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:50.144737 2026] [security2:error] [pid 992537:tid 992776] [client 87.199.196.160:53074] ModSecurity: Access denied with code 406 (phase 1). IPmatchFromFile: "87.199.196.160" matched at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1090"] [id "999022"] [msg "Blacklisted IP Address for POST data StopForumSpam List"] [hostname "www.thecuttingedgemallorca.com"] [uri "/wp-comments-post.php"] [unique_id "alQwymsmDw50MNj9aALNUgAAAes"], referer: https://www.thecuttingedgemallorca.com/sample-page/ [Sun Jul 12 18:26:50.144946 2026] [security2:error] [pid 992537:tid 992776] [client 87.199.196.160:53074] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "147"] [id "900404"] [msg "wp-comments-post POST logging"] [data "406"] [hostname "www.thecuttingedgemallorca.com"] [uri "/wp-comments-post.php"] [unique_id "alQwymsmDw50MNj9aALNUgAAAes"], referer: https://www.thecuttingedgemallorca.com/sample-page/ [Sun Jul 12 18:26:50.304838 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:50.305348 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:50.384135 2026] [security2:error] [pid 992537:tid 992714] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwyWsmDw50MNj9aALNRgAAAa0"] [Sun Jul 12 18:26:50.384227 2026] [security2:error] [pid 992537:tid 992714] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwyWsmDw50MNj9aALNRgAAAa0"] [Sun Jul 12 18:26:50.385219 2026] [security2:error] [pid 992537:tid 992807] [client 65.21.113.206:44578] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXZrZm1peV85MTQ2L3ZrLzQ0MS9r.html"] [unique_id "alQwyWsmDw50MNj9aALNRQAAAgo"] [Sun Jul 12 18:26:50.627128 2026] [security2:error] [pid 992537:tid 992793] [client 168.100.149.225:30046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34450/bargainor/2308_monadically.jsp"] [unique_id "alQwymsmDw50MNj9aALNXwAAAfw"] [Sun Jul 12 18:26:50.663469 2026] [autoindex:error] [pid 1011499:tid 1011671] [client 65.49.1.118:0] AH01276: Cannot serve directory /home4/airqtool/public_html/premiumscentingtools/: No matching DirectoryIndex (index.php,index.html,/index.php) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:26:50.688758 2026] [core:error] [pid 1011499:tid 1011671] [client 65.49.1.118:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:51.091724 2026] [authz_core:error] [pid 1011499:tid 1011735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:51.092257 2026] [authz_core:error] [pid 1011499:tid 1011735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:51.335360 2026] [security2:error] [pid 1011499:tid 1011670] [client 57.141.18.73:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQwyjawpHZwffLOvcP9EQAAAKM"] [Sun Jul 12 18:26:51.866438 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:51.867167 2026] [authz_core:error] [pid 992537:tid 992689] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:51.941180 2026] [core:error] [pid 1011499:tid 1011723] [client 5.255.124.170:54208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:51.941242 2026] [core:error] [pid 1011499:tid 1011723] [client 5.255.124.170:54208] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:52.121811 2026] [security2:error] [pid 992537:tid 992669] [remote 147.135.138.90:54308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 90.138.135.147.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "thepeachypassport.com"] [uri "/wp-login.php"] [unique_id "alQwzGsmDw50MNj9aALNegABy3I"] [Sun Jul 12 18:26:52.147187 2026] [security2:error] [pid 992537:tid 992712] [client 64.176.198.37:53129] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.198.176.64.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jamaawealthfinancial.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQwzGsmDw50MNj9aALNewAAAas"] [Sun Jul 12 18:26:52.683157 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:52.683655 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:52.802219 2026] [security2:error] [pid 992537:tid 992776] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXZrZm1peV8xOTQwL3ZrLzQ0MS9r.html"] [unique_id "alQwzGsmDw50MNj9aALNjgAAAes"] [Sun Jul 12 18:26:53.022140 2026] [security2:error] [pid 1011499:tid 1011712] [client 92.119.43.253:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQwyjawpHZwffLOvcP9CAAAAM0"], referer: https://theprogressionplaybook.com/ [Sun Jul 12 18:26:53.334415 2026] [security2:error] [pid 992537:tid 992746] [client 168.100.149.145:64536] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34515/bargainor/2308_enhalo.jsp"] [unique_id "alQwzWsmDw50MNj9aALNoAAAAc0"] [Sun Jul 12 18:26:53.384460 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:53.384977 2026] [authz_core:error] [pid 992537:tid 992743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:53.471970 2026] [security2:error] [pid 992537:tid 992755] [client 202.46.62.105:56410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 105.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQwzWsmDw50MNj9aALNpAAAAdY"], referer: https://www.stephenspublishing.com/square-zipper-pulls-custom-p-477.html?osCsid=rvoav2qcud9kp6c3u92045j1c0 [Sun Jul 12 18:26:53.814713 2026] [security2:error] [pid 992537:tid 992753] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwzWsmDw50MNj9aALNnwAAAdQ"] [Sun Jul 12 18:26:53.814772 2026] [security2:error] [pid 992537:tid 992753] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQwzWsmDw50MNj9aALNnwAAAdQ"] [Sun Jul 12 18:26:53.815697 2026] [security2:error] [pid 1011499:tid 1011715] [client 65.21.113.206:36240] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXZrZm1peV8xOTQwL3ZrLzQ0MS9r.html"] [unique_id "alQwzTawpHZwffLOvcP9JwAAANA"] [Sun Jul 12 18:26:54.151798 2026] [authz_core:error] [pid 1011499:tid 1011765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:54.152282 2026] [authz_core:error] [pid 1011499:tid 1011765] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:54.320872 2026] [security2:error] [pid 1011499:tid 1011529] [remote 194.35.121.137:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "cpcontacts.cscauto.ca"] [uri "/"] [unique_id "alQwzjawpHZwffLOvcP9MgAA4RM"], referer: http://cpcontacts.cscauto.ca [Sun Jul 12 18:26:54.842478 2026] [core:error] [pid 992537:tid 992786] [client 5.255.124.170:54224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:54.842516 2026] [core:error] [pid 992537:tid 992786] [client 5.255.124.170:54224] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:54.881009 2026] [security2:error] [pid 992537:tid 992568] [remote 194.156.224.92:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "autodiscover.cscauto.ca"] [uri "/"] [unique_id "alQwzmsmDw50MNj9aALNuQABtRA"], referer: http://autodiscover.cscauto.ca [Sun Jul 12 18:26:54.928683 2026] [authz_core:error] [pid 1011499:tid 1011733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:54.929176 2026] [authz_core:error] [pid 1011499:tid 1011733] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:55.309219 2026] [security2:error] [pid 992537:tid 992805] [client 168.100.149.134:31554] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34580/bargainor/2308_metalogical.jsp"] [unique_id "alQwz2smDw50MNj9aALNwAAAAgg"] [Sun Jul 12 18:26:55.712705 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:55.713243 2026] [authz_core:error] [pid 992537:tid 992714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:55.790098 2026] [security2:error] [pid 992537:tid 992769] [client 143.20.253.70:62178] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALNywAAAeQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:55.818699 2026] [security2:error] [pid 992537:tid 992796] [client 144.31.35.194:33344] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALNzAAAAf8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.033490 2026] [security2:error] [pid 992537:tid 992794] [client 147.182.183.133:53226] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN0AAAAf0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.057704 2026] [security2:error] [pid 992537:tid 992807] [client 206.189.186.241:54580] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN2QAAAgo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.071007 2026] [security2:error] [pid 992537:tid 992729] [client 104.248.53.221:47174] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN0QAAAbw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.071930 2026] [security2:error] [pid 992537:tid 992759] [client 104.248.226.111:46780] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN0wAAAdo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.075349 2026] [security2:error] [pid 992537:tid 992773] [client 64.227.7.35:57290] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN1gAAAeg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.082337 2026] [security2:error] [pid 992537:tid 992693] [client 162.243.175.238:36746] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN1QAAAZg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.093728 2026] [security2:error] [pid 992537:tid 992741] [client 64.227.7.35:57282] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN1wAAAcg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.095007 2026] [security2:error] [pid 992537:tid 992809] [client 64.227.7.35:57302] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN2AAAAgw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.100865 2026] [security2:error] [pid 992537:tid 992777] [client 206.189.186.241:54592] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN2wAAAew"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.102903 2026] [security2:error] [pid 992537:tid 992770] [client 167.99.6.55:40238] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN1AAAAeU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.103166 2026] [security2:error] [pid 992537:tid 992720] [client 162.243.175.238:36750] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN2gAAAbM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.114892 2026] [security2:error] [pid 992537:tid 992762] [client 144.31.35.194:33356] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN3QAAAd0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.144574 2026] [security2:error] [pid 1011499:tid 1011521] [remote 176.223.172.185:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "cscauto.ca"] [uri "/"] [unique_id "alQw0DawpHZwffLOvcP9QwAA6As"], referer: http://cscauto.ca [Sun Jul 12 18:26:56.148800 2026] [security2:error] [pid 992537:tid 992804] [client 207.180.11.167:21850] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQwz2smDw50MNj9aALN3gAAAgc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.148971 2026] [security2:error] [pid 992537:tid 992793] [client 144.31.35.194:33372] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0GsmDw50MNj9aALN3wAAAfw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:56.438807 2026] [security2:error] [pid 992537:tid 992717] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXc5LzE0NjE5L3c5LzI0NjMvOWpq.asp"] [unique_id "alQw0GsmDw50MNj9aALN5wAAAbA"] [Sun Jul 12 18:26:56.527381 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:56.527995 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:56.848269 2026] [core:error] [pid 992537:tid 992781] [client 13.140.136.17:58307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:56.848311 2026] [core:error] [pid 992537:tid 992781] [client 13.140.136.17:58307] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:56.853916 2026] [core:error] [pid 1011499:tid 1011689] [client 13.140.136.17:58390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:56.853956 2026] [core:error] [pid 1011499:tid 1011689] [client 13.140.136.17:58390] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:56.866102 2026] [security2:error] [pid 992537:tid 992735] [client 190.134.34.58:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw0GsmDw50MNj9aALN5AAAAcI"] [Sun Jul 12 18:26:57.125872 2026] [lsapi:error] [pid 992244:tid 992500] [client 186.107.79.152:0] [host mail.lazyladylifter.com] Error on sending request(GET /commoditys/371630-108428345 HTTP/1.1); uri(/index.php) content-length(0): ReceiveAckHdr: timeout 300 is exceeded, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:26:57.271932 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:57.272737 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:57.284130 2026] [security2:error] [pid 992537:tid 992688] [client 168.100.149.138:23608] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34645/bargainor/2308_psychoreflex.jsp"] [unique_id "alQw0WsmDw50MNj9aALN_gAAAZM"] [Sun Jul 12 18:26:57.302763 2026] [core:error] [pid 992537:tid 992801] [client 5.255.124.170:54232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:57.302836 2026] [core:error] [pid 992537:tid 992801] [client 5.255.124.170:54232] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:26:57.321825 2026] [security2:error] [pid 992537:tid 992754] [client 113.174.15.59:53143] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0WsmDw50MNj9aALN-wAAAdU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:57.496177 2026] [security2:error] [pid 1011499:tid 1011680] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw0DawpHZwffLOvcP9UAAAAK0"] [Sun Jul 12 18:26:57.496250 2026] [security2:error] [pid 1011499:tid 1011680] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw0DawpHZwffLOvcP9UAAAAK0"] [Sun Jul 12 18:26:57.497299 2026] [security2:error] [pid 992537:tid 992684] [client 65.21.113.206:36256] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXc5LzE0NjE5L3c5LzI0NjMvOWpq.asp"] [unique_id "alQw0GsmDw50MNj9aALN8wAAAY8"] [Sun Jul 12 18:26:57.500657 2026] [security2:error] [pid 992537:tid 992701] [client 123.27.105.100:58521] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0WsmDw50MNj9aALOAQAAAaA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:57.804205 2026] [security2:error] [pid 992537:tid 992783] [client 213.230.86.17:33496] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0WsmDw50MNj9aALOBwAAAfI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:57.956427 2026] [security2:error] [pid 1011499:tid 1011696] [client 186.82.102.60:2449] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0TawpHZwffLOvcP9YAAAAL0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:57.995905 2026] [security2:error] [pid 1011499:tid 1011641] [client 189.222.126.165:48720] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0TawpHZwffLOvcP9YQAAAIY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:58.064471 2026] [authz_core:error] [pid 1011499:tid 1011716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:58.065101 2026] [authz_core:error] [pid 1011499:tid 1011716] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:58.189802 2026] [security2:error] [pid 1011499:tid 1011669] [client 181.178.165.67:41418] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0jawpHZwffLOvcP9ZQAAAKI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:58.342568 2026] [security2:error] [pid 992537:tid 992770] [client 213.230.80.6:47912] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0msmDw50MNj9aALOJAAAAeU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:58.423205 2026] [security2:error] [pid 992537:tid 992771] [client 14.248.22.248:57792] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0msmDw50MNj9aALOJQAAAeY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:58.627076 2026] [security2:error] [pid 992537:tid 992728] [client 168.100.149.157:30554] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34710/bargainor/2308_mailable.jsp"] [unique_id "alQw0msmDw50MNj9aALOKgAAAbs"] [Sun Jul 12 18:26:58.834231 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:58.834749 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:58.907377 2026] [security2:error] [pid 992537:tid 992710] [client 152.172.202.252:57292] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0msmDw50MNj9aALOLwAAAak"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:59.019539 2026] [security2:error] [pid 992537:tid 992773] [client 197.238.219.85:53384] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw0msmDw50MNj9aALOMwAAAeg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:59.217430 2026] [security2:error] [pid 992537:tid 992766] [client 47.128.57.195:38214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "keithwallacelaw.com"] [uri "/robots.txt"] [unique_id "alQw02smDw50MNj9aALOPQAAAeE"] [Sun Jul 12 18:26:59.373982 2026] [security2:error] [pid 992537:tid 992725] [client 114.119.134.216:65343] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "elleholmes.pub"] [uri "/silent-bluebird/"] [unique_id "alQw02smDw50MNj9aALOQwAAAbg"], referer: https://elleholmes.pub/silent-bluebird/ [Sun Jul 12 18:26:59.436562 2026] [security2:error] [pid 992537:tid 992798] [client 41.62.198.62:57766] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw02smDw50MNj9aALOQgAAAgE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:26:59.465339 2026] [security2:error] [pid 992537:tid 992722] [client 84.9.212.176:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQw0msmDw50MNj9aALONgAAAbU"] [Sun Jul 12 18:26:59.588846 2026] [authz_core:error] [pid 992537:tid 992769] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:26:59.589345 2026] [authz_core:error] [pid 992537:tid 992769] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:26:59.659343 2026] [security2:error] [pid 992537:tid 992794] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXctNDQ2OC93a3QvMzg0MDUta3R5ag=="] [unique_id "alQw02smDw50MNj9aALOUAAAAf0"] [Sun Jul 12 18:26:59.961516 2026] [autoindex:error] [pid 992537:tid 992786] [client 195.96.139.153:57947] AH01276: Cannot serve directory /home3/malazfur/store.malazfurniture.com/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:27:00.304541 2026] [authz_core:error] [pid 992537:tid 992797] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:00.305046 2026] [authz_core:error] [pid 992537:tid 992797] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:00.387220 2026] [core:error] [pid 992537:tid 992771] [client 13.140.136.17:56540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:00.387266 2026] [core:error] [pid 992537:tid 992771] [client 13.140.136.17:56540] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:00.652028 2026] [security2:error] [pid 992537:tid 992770] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw1GsmDw50MNj9aALOXAAAAeU"] [Sun Jul 12 18:27:00.652080 2026] [security2:error] [pid 992537:tid 992770] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw1GsmDw50MNj9aALOXAAAAeU"] [Sun Jul 12 18:27:00.653138 2026] [security2:error] [pid 992537:tid 992793] [client 65.21.113.206:36270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXctNDQ2OC93a3QvMzg0MDUta3R5ag=="] [unique_id "alQw1GsmDw50MNj9aALOWgAAAfw"] [Sun Jul 12 18:27:00.800414 2026] [core:error] [pid 992537:tid 992762] [client 5.255.124.170:54234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:00.800459 2026] [core:error] [pid 992537:tid 992762] [client 5.255.124.170:54234] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:01.017027 2026] [security2:error] [pid 1011499:tid 1011672] [client 46.101.252.154:2411] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "redsautorehab.com"] [uri "/"] [unique_id "alQw1TawpHZwffLOvcP9dgAAAKU"] [Sun Jul 12 18:27:01.018687 2026] [proxy:warn] [pid 1011499:tid 1011672] [client 46.101.252.154:2411] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be redsautorehab.com for uri / [Sun Jul 12 18:27:01.143397 2026] [authz_core:error] [pid 992537:tid 992715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:01.144171 2026] [authz_core:error] [pid 992537:tid 992715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:01.155288 2026] [security2:error] [pid 992537:tid 992556] [remote 74.7.227.188:49748] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 188.227.7.74.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/product_reviews_write.php"] [unique_id "alQw1WsmDw50MNj9aALOdAABnQQ"], referer: https://www.stephenspublishing.com/deluxe-fire-hats-fire-marshal-custom-p-1064.html?osCsid=do28pqciao5tetrkqp3fipki11 [Sun Jul 12 18:27:01.282939 2026] [security2:error] [pid 992537:tid 992805] [client 168.100.149.229:42270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34775/bargainor/2308_epidemiology.jsp"] [unique_id "alQw1WsmDw50MNj9aALOeQAAAgg"] [Sun Jul 12 18:27:01.949591 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:01.950121 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:02.283679 2026] [security2:error] [pid 1011499:tid 1011699] [client 46.101.252.154:12181] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "173.254.107.93"] [uri "/sdk"] [unique_id "alQw1jawpHZwffLOvcP9gAAAAMA"] [Sun Jul 12 18:27:02.650109 2026] [security2:error] [pid 1011499:tid 1011732] [client 197.119.211.146:45290] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw1jawpHZwffLOvcP9hQAAAOE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:02.744065 2026] [authz_core:error] [pid 1011499:tid 1011679] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:02.744563 2026] [authz_core:error] [pid 1011499:tid 1011679] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:02.828093 2026] [security2:error] [pid 992537:tid 992767] [client 46.105.38.210:18655] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "musecology.info"] [uri "/robots.txt"] [unique_id "alQw1msmDw50MNj9aALOkwAAAeI"] [Sun Jul 12 18:27:02.828364 2026] [security2:error] [pid 992537:tid 992767] [client 46.105.38.210:18655] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "musecology.info"] [uri "/robots.txt"] [unique_id "alQw1msmDw50MNj9aALOkwAAAeI"] [Sun Jul 12 18:27:02.933248 2026] [security2:error] [pid 992537:tid 992685] [client 191.37.19.167:56674] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw1msmDw50MNj9aALOlwAAAZA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:03.199734 2026] [security2:error] [pid 1011499:tid 1011704] [client 177.37.155.115:29832] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw1zawpHZwffLOvcP9iwAAAMU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:03.314960 2026] [security2:error] [pid 1011499:tid 1011663] [client 168.100.149.234:54052] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34840/bargainor/2308_secque.jsp"] [unique_id "alQw1zawpHZwffLOvcP9kQAAAJw"] [Sun Jul 12 18:27:03.493742 2026] [authz_core:error] [pid 1011499:tid 1011712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:03.494242 2026] [authz_core:error] [pid 1011499:tid 1011712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:03.557069 2026] [security2:error] [pid 992537:tid 992641] [remote 45.11.80.138:0] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.cscauto.ca"] [uri "/"] [unique_id "alQw12smDw50MNj9aALOpAAB-VY"], referer: http://www.cscauto.ca [Sun Jul 12 18:27:03.807639 2026] [security2:error] [pid 992537:tid 992762] [client 65.21.113.206:32806] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXctOTIwMy93Y2wvMTIyMjUtY2x1ZA=="] [unique_id "alQw12smDw50MNj9aALOrgAAAd0"] [Sun Jul 12 18:27:04.290123 2026] [authz_core:error] [pid 1011499:tid 1011724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:04.291272 2026] [authz_core:error] [pid 1011499:tid 1011724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:04.572224 2026] [security2:error] [pid 992537:tid 992796] [client 51.158.144.117:54443] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "ttbpopup.com"] [uri "/wp-login.php"] [unique_id "alQw2GsmDw50MNj9aALOuwAAAf8"] [Sun Jul 12 18:27:04.752189 2026] [security2:error] [pid 992537:tid 992709] [client 57.141.18.0:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQw1WsmDw50MNj9aALOdwAAAag"] [Sun Jul 12 18:27:04.753433 2026] [security2:error] [pid 992537:tid 992714] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw2GsmDw50MNj9aALOuAAAAa0"] [Sun Jul 12 18:27:04.753480 2026] [security2:error] [pid 992537:tid 992714] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw2GsmDw50MNj9aALOuAAAAa0"] [Sun Jul 12 18:27:04.754546 2026] [security2:error] [pid 1011499:tid 1011692] [client 65.21.113.206:34316] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXctOTIwMy93Y2wvMTIyMjUtY2x1ZA=="] [unique_id "alQw2DawpHZwffLOvcP9owAAALk"] [Sun Jul 12 18:27:05.041923 2026] [authz_core:error] [pid 992537:tid 992784] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:05.042434 2026] [authz_core:error] [pid 992537:tid 992784] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:05.281998 2026] [security2:error] [pid 1011499:tid 1011705] [client 168.100.149.43:61046] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34905/bargainor/2308_dislevelment.jsp"] [unique_id "alQw2TawpHZwffLOvcP9rQAAAMY"] [Sun Jul 12 18:27:05.292134 2026] [security2:error] [pid 992537:tid 992759] [client 136.66.113.141:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQw2WsmDw50MNj9aALOxgAAAdo"] [Sun Jul 12 18:27:05.321067 2026] [security2:error] [pid 992537:tid 992787] [client 158.62.62.37:26430] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQw2WsmDw50MNj9aALOygAAAfY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:05.364635 2026] [security2:error] [pid 1011499:tid 1011688] [client 46.101.252.154:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.107.93"] [uri "/index.php"] [unique_id "alQw1jawpHZwffLOvcP9gwAAALU"] [Sun Jul 12 18:27:05.427151 2026] [core:error] [pid 1011499:tid 1011682] [client 5.255.124.170:45852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:05.427200 2026] [core:error] [pid 1011499:tid 1011682] [client 5.255.124.170:45852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:05.816190 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:05.816721 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:06.589278 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:06.589981 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:06.612881 2026] [security2:error] [pid 992537:tid 992760] [client 46.101.252.154:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.107.93"] [uri "/index.php"] [unique_id "alQw2msmDw50MNj9aALO5QAAAds"] [Sun Jul 12 18:27:06.613593 2026] [security2:error] [pid 1011499:tid 1011689] [client 46.101.252.154:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.107.93"] [uri "/index.php"] [unique_id "alQw2jawpHZwffLOvcP9uAAAALY"] [Sun Jul 12 18:27:06.640604 2026] [security2:error] [pid 1011499:tid 1011651] [client 168.100.149.240:41700] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/34970/bargainor/2308_limnoria.jsp"] [unique_id "alQw2jawpHZwffLOvcP9vAAAAJA"] [Sun Jul 12 18:27:07.426773 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:07.427348 2026] [authz_core:error] [pid 992537:tid 992684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:07.521745 2026] [core:error] [pid 992537:tid 992805] [client 5.255.124.170:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:07.521803 2026] [core:error] [pid 992537:tid 992805] [client 5.255.124.170:45864] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:07.542332 2026] [security2:error] [pid 992537:tid 992792] [client 46.101.252.154:32355] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "redsautorehab.com"] [uri "/"] [unique_id "alQw22smDw50MNj9aALPCgAAAfs"] [Sun Jul 12 18:27:07.544316 2026] [proxy:warn] [pid 992537:tid 992792] [client 46.101.252.154:32355] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be redsautorehab.com for uri / [Sun Jul 12 18:27:07.777852 2026] [security2:error] [pid 1011499:tid 1011701] [client 197.200.93.249:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw2zawpHZwffLOvcP9wwAAAMI"] [Sun Jul 12 18:27:07.793966 2026] [security2:error] [pid 1011499:tid 1011644] [client 57.141.18.12:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQw2zawpHZwffLOvcP9wgAAAIk"] [Sun Jul 12 18:27:08.209718 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:08.210385 2026] [authz_core:error] [pid 992537:tid 992767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:08.289633 2026] [security2:error] [pid 1011499:tid 1011562] [remote 57.141.18.70:56446] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/KQPnc2efO_FyH2.lWez"] [unique_id "alQw3DawpHZwffLOvcP9xgAA8DM"] [Sun Jul 12 18:27:08.337362 2026] [security2:error] [pid 992537:tid 992703] [client 46.101.252.154:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "173.254.107.93"] [uri "/index.php"] [unique_id "alQw3GsmDw50MNj9aALPHgAAAaI"] [Sun Jul 12 18:27:08.371869 2026] [security2:error] [pid 1011499:tid 1011678] [client 65.21.113.206:54830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQw3DawpHZwffLOvcP9xwAAAKs"] [Sun Jul 12 18:27:08.481218 2026] [security2:error] [pid 992537:tid 992808] [client 46.101.252.154:23717] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "173.254.107.93"] [uri "/"] [unique_id "alQw3GsmDw50MNj9aALPHAAAAgs"] [Sun Jul 12 18:27:08.617625 2026] [security2:error] [pid 992537:tid 992717] [client 51.158.144.117:54475] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "155"] [id "900406"] [msg "wp-login POST logging"] [data "200"] [hostname "ttbpopup.com"] [uri "/wp-login.php"] [unique_id "alQw3GsmDw50MNj9aALPHwAAAbA"], referer: https://ttbpopup.com/wp-login.php [Sun Jul 12 18:27:08.644635 2026] [security2:error] [pid 992537:tid 992768] [client 168.100.149.0:59216] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35035/bargainor/2308_milksopism.jsp"] [unique_id "alQw3GsmDw50MNj9aALPKAAAAeM"] [Sun Jul 12 18:27:08.863469 2026] [security2:error] [pid 992537:tid 992710] [client 65.21.113.206:34318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQw3GsmDw50MNj9aALPMQAAAak"] [Sun Jul 12 18:27:08.896952 2026] [security2:error] [pid 992537:tid 992800] [client 190.44.213.19:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "joeysantosdesigns.com"] [uri "/index.php"] [unique_id "alQw2WsmDw50MNj9aALO0AAAAgM"] [Sun Jul 12 18:27:08.926471 2026] [authz_core:error] [pid 992537:tid 992802] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:08.926984 2026] [authz_core:error] [pid 992537:tid 992802] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:08.932760 2026] [security2:error] [pid 992537:tid 992766] [client 45.79.0.241:41176] ModSecurity: Warning. Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/00_asl_zz_strict.conf"] [line "82"] [id "331030"] [rev "2"] [msg "Atomicorp.com WAF Rules: Suspicious activity detected - HTTP Request Missing a Host Header"] [severity "NOTICE"] [tag "no_ar"] [hostname "sarahjoyyoga.com"] [uri "/"] [unique_id "alQw3GsmDw50MNj9aALPNAAAAeE"] [Sun Jul 12 18:27:08.933900 2026] [proxy:warn] [pid 992537:tid 992766] [client 45.79.0.241:41176] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri / [Sun Jul 12 18:27:08.940643 2026] [security2:error] [pid 992537:tid 992766] [client 45.79.0.241:41176] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "sarahjoyyoga.com"] [uri "/"] [unique_id "alQw3GsmDw50MNj9aALPNAAAAeE"] [Sun Jul 12 18:27:09.184747 2026] [security2:error] [pid 1011499:tid 1011712] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXd4LTEyMDI1LXd4OG41LTUwNDcteDhu.cgi"] [unique_id "alQw3TawpHZwffLOvcP9ygAAAM0"] [Sun Jul 12 18:27:09.360202 2026] [security2:error] [pid 992537:tid 992741] [client 65.21.113.206:34318] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQw3WsmDw50MNj9aALPRgAAAcg"] [Sun Jul 12 18:27:09.688270 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:09.688769 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:10.261639 2026] [security2:error] [pid 992537:tid 992732] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw3WsmDw50MNj9aALPXAAAAb8"] [Sun Jul 12 18:27:10.261720 2026] [security2:error] [pid 992537:tid 992732] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw3WsmDw50MNj9aALPXAAAAb8"] [Sun Jul 12 18:27:10.276490 2026] [security2:error] [pid 992537:tid 992797] [client 65.21.113.206:34320] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXd4LTEyMDI1LXd4OG41LTUwNDcteDhu.cgi"] [unique_id "alQw3WsmDw50MNj9aALPWgAAAgA"] [Sun Jul 12 18:27:10.315451 2026] [security2:error] [pid 992537:tid 992649] [remote 117.0.21.154:54372] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 154.21.0.117.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "cobalt42.com"] [uri "/wp-login.php"] [unique_id "alQw3msmDw50MNj9aALPbgABu14"] [Sun Jul 12 18:27:10.433063 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:10.433543 2026] [authz_core:error] [pid 992537:tid 992781] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:10.587312 2026] [proxy:warn] [pid 1011499:tid 1011654] [client 45.79.0.241:41194] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri /400.shtml [Sun Jul 12 18:27:10.587430 2026] [proxy:error] [pid 1011499:tid 1011654] (70014)End of file found: [client 45.79.0.241:41194] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 45.79.0.241 () [Sun Jul 12 18:27:10.650303 2026] [security2:error] [pid 992537:tid 992709] [client 168.100.149.211:20440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35100/bargainor/2308_capnoides.jsp"] [unique_id "alQw3msmDw50MNj9aALPegAAAag"] [Sun Jul 12 18:27:10.800100 2026] [security2:error] [pid 1011499:tid 1011642] [client 41.122.148.67:18121] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQw3jawpHZwffLOvcP91QAAAIc"], referer: https://www.portables-batterie.fr/lenovo/Lenovo-V330-15IKB-portable-batterie.htm [Sun Jul 12 18:27:10.819978 2026] [security2:error] [pid 992537:tid 992789] [client 123.16.38.242:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQw3WsmDw50MNj9aALPTwAAAfg"] [Sun Jul 12 18:27:11.017207 2026] [security2:error] [pid 992537:tid 992784] [client 3.112.211.130:55741] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/api/.env"] [unique_id "alQw32smDw50MNj9aALPhwAAAfM"] [Sun Jul 12 18:27:11.018462 2026] [security2:error] [pid 1011499:tid 1011742] [client 3.112.211.130:55738] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/.env"] [unique_id "alQw3zawpHZwffLOvcP92QAAAOs"] [Sun Jul 12 18:27:11.018473 2026] [security2:error] [pid 992537:tid 992793] [client 3.112.211.130:55736] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/.env.bak"] [unique_id "alQw32smDw50MNj9aALPigAAAfw"] [Sun Jul 12 18:27:11.020180 2026] [security2:error] [pid 992537:tid 992755] [client 3.112.211.130:55746] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/.env.backup"] [unique_id "alQw32smDw50MNj9aALPhQAAAdY"] [Sun Jul 12 18:27:11.020638 2026] [security2:error] [pid 992537:tid 992792] [client 3.112.211.130:55735] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.211.112.3.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.portables-batterie.fr"] [uri "/config/mail.php"] [unique_id "alQw32smDw50MNj9aALPiAAAAfs"] [Sun Jul 12 18:27:11.038810 2026] [security2:error] [pid 992537:tid 992794] [client 3.112.211.130:55737] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/.env.old"] [unique_id "alQw32smDw50MNj9aALPjgAAAf0"] [Sun Jul 12 18:27:11.039489 2026] [security2:error] [pid 992537:tid 992687] [client 3.112.211.130:55742] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/storage/.env"] [unique_id "alQw32smDw50MNj9aALPjAAAAZI"] [Sun Jul 12 18:27:11.040109 2026] [security2:error] [pid 992537:tid 992801] [client 3.112.211.130:55744] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.portables-batterie.fr"] [uri "/public/.env"] [unique_id "alQw32smDw50MNj9aALPjQAAAgQ"] [Sun Jul 12 18:27:11.082011 2026] [security2:error] [pid 992537:tid 992769] [client 3.112.211.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQw32smDw50MNj9aALPkAAAAeQ"] [Sun Jul 12 18:27:11.099436 2026] [security2:error] [pid 992537:tid 992758] [client 3.112.211.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQw32smDw50MNj9aALPkQAAAdk"] [Sun Jul 12 18:27:11.110935 2026] [security2:error] [pid 992537:tid 992771] [client 3.112.211.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQw32smDw50MNj9aALPkwAAAeY"] [Sun Jul 12 18:27:11.112935 2026] [security2:error] [pid 992537:tid 992777] [client 3.112.211.130:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQw32smDw50MNj9aALPkgAAAew"] [Sun Jul 12 18:27:11.123385 2026] [core:error] [pid 992537:tid 992695] [client 23.180.120.146:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:11.123423 2026] [core:error] [pid 992537:tid 992695] [client 23.180.120.146:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:11.255977 2026] [authz_core:error] [pid 992537:tid 992727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:11.256471 2026] [authz_core:error] [pid 992537:tid 992727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:11.462676 2026] [core:error] [pid 992537:tid 992798] [client 5.255.124.170:43690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:11.462726 2026] [core:error] [pid 992537:tid 992798] [client 5.255.124.170:43690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:11.526930 2026] [security2:error] [pid 992537:tid 992764] [client 3.112.211.130:56016] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.211.112.3.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.portables-batterie.fr"] [uri "/config/services.php"] [unique_id "alQw32smDw50MNj9aALPnwAAAd8"] [Sun Jul 12 18:27:11.533215 2026] [security2:error] [pid 992537:tid 992772] [client 3.112.211.130:56017] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.211.112.3.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.portables-batterie.fr"] [uri "/bootstrap/cache/config.php"] [unique_id "alQw32smDw50MNj9aALPoAAAAec"] [Sun Jul 12 18:27:11.535212 2026] [security2:error] [pid 1011499:tid 1011763] [client 3.112.211.130:56015] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 130.211.112.3.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.portables-batterie.fr"] [uri "/wp-config.php"] [unique_id "alQw3zawpHZwffLOvcP95QAAAQA"] [Sun Jul 12 18:27:12.042370 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:12.042983 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:12.914510 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:12.915019 2026] [authz_core:error] [pid 992537:tid 992755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:13.094657 2026] [core:error] [pid 1011499:tid 1011764] [client 13.140.136.17:55799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:13.094740 2026] [core:error] [pid 1011499:tid 1011764] [client 13.140.136.17:55799] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:13.202539 2026] [security2:error] [pid 1011499:tid 1011646] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXd4LTEyMDI1LXd4OG41LTc3MTcteDhu.cgi"] [unique_id "alQw4TawpHZwffLOvcP98wAAAIs"] [Sun Jul 12 18:27:13.384965 2026] [security2:error] [pid 992537:tid 992746] [client 168.100.149.192:45774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35165/bargainor/2308_deft.jsp"] [unique_id "alQw4WsmDw50MNj9aALQAgAAAc0"] [Sun Jul 12 18:27:13.732597 2026] [authz_core:error] [pid 1011499:tid 1011656] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:13.733146 2026] [authz_core:error] [pid 1011499:tid 1011656] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:13.770838 2026] [proxy:warn] [pid 992537:tid 992706] [client 45.79.0.241:41228] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri /400.shtml [Sun Jul 12 18:27:13.770918 2026] [proxy:error] [pid 992537:tid 992706] (70014)End of file found: [client 45.79.0.241:41228] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 45.79.0.241 () [Sun Jul 12 18:27:13.875401 2026] [proxy:warn] [pid 1011499:tid 1011650] [client 45.79.0.241:41230] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri /400.shtml [Sun Jul 12 18:27:13.875462 2026] [proxy:error] [pid 1011499:tid 1011650] (70014)End of file found: [client 45.79.0.241:41230] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 45.79.0.241 () [Sun Jul 12 18:27:14.031649 2026] [proxy:warn] [pid 1011499:tid 1011664] [client 45.205.1.241:44306] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be colonialcollisionofacton.automotiveadvertisinggroup.com for uri /400.shtml [Sun Jul 12 18:27:14.123237 2026] [security2:error] [pid 992537:tid 992785] [client 5.255.124.170:43928] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/public/.env"] [unique_id "alQw4msmDw50MNj9aALQFQAAAfQ"] [Sun Jul 12 18:27:14.125642 2026] [security2:error] [pid 992537:tid 992748] [client 5.255.124.170:43926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/app/.env"] [unique_id "alQw4msmDw50MNj9aALQFgAAAc8"] [Sun Jul 12 18:27:14.128396 2026] [security2:error] [pid 1011499:tid 1011689] [client 5.255.124.170:43914] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/backend/.env"] [unique_id "alQw4jawpHZwffLOvcP-EgAAALY"] [Sun Jul 12 18:27:14.133998 2026] [security2:error] [pid 992537:tid 992691] [client 5.255.124.170:43938] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.ssh/id_rsa"] [unique_id "alQw4msmDw50MNj9aALQGwAAAZY"] [Sun Jul 12 18:27:14.141807 2026] [core:error] [pid 1011499:tid 1011746] [client 5.255.124.170:43966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.141849 2026] [core:error] [pid 1011499:tid 1011746] [client 5.255.124.170:43966] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.142988 2026] [security2:error] [pid 992537:tid 992756] [client 5.255.124.170:43898] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/api/.env"] [unique_id "alQw4msmDw50MNj9aALQFwAAAdc"] [Sun Jul 12 18:27:14.144284 2026] [security2:error] [pid 1011499:tid 1011693] [client 5.255.124.170:43964] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.ssh/id_dsa"] [unique_id "alQw4jawpHZwffLOvcP-EAAAALo"] [Sun Jul 12 18:27:14.167503 2026] [security2:error] [pid 1011499:tid 1011673] [client 5.255.124.170:43858] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "alQw4jawpHZwffLOvcP-FwAAAKY"] [Sun Jul 12 18:27:14.177229 2026] [core:error] [pid 992537:tid 992741] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.177285 2026] [core:error] [pid 992537:tid 992741] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.180946 2026] [core:error] [pid 992537:tid 992712] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.180983 2026] [core:error] [pid 992537:tid 992712] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.184367 2026] [core:error] [pid 992537:tid 992701] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.184483 2026] [core:error] [pid 992537:tid 992701] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.186149 2026] [core:error] [pid 1011499:tid 1011754] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.186150 2026] [core:error] [pid 1011499:tid 1011757] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.186186 2026] [core:error] [pid 1011499:tid 1011754] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.186257 2026] [core:error] [pid 1011499:tid 1011757] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.196526 2026] [core:error] [pid 992537:tid 992714] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.196565 2026] [core:error] [pid 992537:tid 992714] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.197055 2026] [core:error] [pid 992537:tid 992699] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.197093 2026] [core:error] [pid 992537:tid 992699] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.197908 2026] [core:error] [pid 1011499:tid 1011760] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.197951 2026] [core:error] [pid 1011499:tid 1011760] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.198553 2026] [core:error] [pid 992537:tid 992767] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.198591 2026] [core:error] [pid 992537:tid 992767] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.208440 2026] [core:error] [pid 992537:tid 992774] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.208484 2026] [core:error] [pid 992537:tid 992774] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.216159 2026] [core:error] [pid 1011499:tid 1011743] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.216316 2026] [core:error] [pid 1011499:tid 1011743] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.291316 2026] [security2:error] [pid 1011499:tid 1011683] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw4TawpHZwffLOvcP9_gAAALA"] [Sun Jul 12 18:27:14.291374 2026] [security2:error] [pid 1011499:tid 1011683] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw4TawpHZwffLOvcP9_gAAALA"] [Sun Jul 12 18:27:14.292632 2026] [security2:error] [pid 992537:tid 992726] [client 65.21.113.206:38762] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXd4LTEyMDI1LXd4OG41LTc3MTcteDhu.cgi"] [unique_id "alQw4WsmDw50MNj9aALQDAAAAbk"] [Sun Jul 12 18:27:14.403803 2026] [security2:error] [pid 992537:tid 992690] [client 5.255.124.170:43852] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.env.backup"] [unique_id "alQw4msmDw50MNj9aALQMwAAAZU"] [Sun Jul 12 18:27:14.411004 2026] [core:error] [pid 992537:tid 992735] [client 5.255.124.170:43726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.411048 2026] [core:error] [pid 992537:tid 992735] [client 5.255.124.170:43726] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.437932 2026] [security2:error] [pid 992537:tid 992762] [client 5.255.124.170:43792] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "alQw4msmDw50MNj9aALQOQAAAd0"] [Sun Jul 12 18:27:14.441353 2026] [security2:error] [pid 992537:tid 992737] [client 5.255.124.170:43870] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "webmail.vegaspirate.com"] [uri "/___proxy_subdomain_webmail/.env.old"] [unique_id "alQw4msmDw50MNj9aALQPgAAAcQ"] [Sun Jul 12 18:27:14.451438 2026] [core:error] [pid 992537:tid 992696] [client 5.255.124.170:43754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.451475 2026] [core:error] [pid 992537:tid 992696] [client 5.255.124.170:43754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.466219 2026] [core:error] [pid 992537:tid 992747] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.466259 2026] [core:error] [pid 992537:tid 992747] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.482226 2026] [core:error] [pid 992537:tid 992730] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.482265 2026] [core:error] [pid 992537:tid 992730] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.488076 2026] [core:error] [pid 992537:tid 992808] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.488139 2026] [core:error] [pid 992537:tid 992808] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.492864 2026] [core:error] [pid 992537:tid 992703] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.492913 2026] [core:error] [pid 992537:tid 992703] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.497064 2026] [core:error] [pid 992537:tid 992771] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.497096 2026] [core:error] [pid 992537:tid 992771] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.497900 2026] [core:error] [pid 992537:tid 992769] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.497934 2026] [core:error] [pid 992537:tid 992769] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.504970 2026] [core:error] [pid 992537:tid 992806] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.505008 2026] [core:error] [pid 992537:tid 992806] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.505298 2026] [core:error] [pid 992537:tid 992692] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.505339 2026] [core:error] [pid 992537:tid 992692] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.536345 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:14.536875 2026] [authz_core:error] [pid 992537:tid 992695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:14.745129 2026] [core:error] [pid 992537:tid 992697] [client 5.255.124.170:43988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:14.745175 2026] [core:error] [pid 992537:tid 992697] [client 5.255.124.170:43988] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.167553 2026] [security2:error] [pid 992537:tid 992805] [client 57.141.18.47:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQw4WsmDw50MNj9aALQEAAAAgg"] [Sun Jul 12 18:27:15.281711 2026] [security2:error] [pid 1011499:tid 1011736] [client 79.117.239.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw4jawpHZwffLOvcP-JwAAAOU"] [Sun Jul 12 18:27:15.316829 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:15.317354 2026] [authz_core:error] [pid 992537:tid 992750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:15.340008 2026] [core:error] [pid 992537:tid 992777] [client 5.255.124.170:43852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.340064 2026] [core:error] [pid 992537:tid 992777] [client 5.255.124.170:43852] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.345591 2026] [security2:error] [pid 992537:tid 992762] [client 168.100.149.112:29774] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35230/bargainor/2308_did.jsp"] [unique_id "alQw42smDw50MNj9aALQcQAAAd0"] [Sun Jul 12 18:27:15.352808 2026] [core:error] [pid 1011499:tid 1011702] [client 5.255.124.170:43858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.352859 2026] [core:error] [pid 1011499:tid 1011702] [client 5.255.124.170:43858] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.355558 2026] [core:error] [pid 992537:tid 992791] [client 5.255.124.170:43926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.355606 2026] [core:error] [pid 992537:tid 992791] [client 5.255.124.170:43926] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.356818 2026] [core:error] [pid 992537:tid 992735] [client 5.255.124.170:43870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.356858 2026] [core:error] [pid 992537:tid 992735] [client 5.255.124.170:43870] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.357326 2026] [core:error] [pid 992537:tid 992792] [client 5.255.124.170:43938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.357361 2026] [core:error] [pid 992537:tid 992792] [client 5.255.124.170:43938] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.362628 2026] [core:error] [pid 992537:tid 992694] [client 5.255.124.170:43928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.362686 2026] [core:error] [pid 992537:tid 992694] [client 5.255.124.170:43928] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.377997 2026] [core:error] [pid 992537:tid 992718] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.378039 2026] [core:error] [pid 992537:tid 992718] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.383304 2026] [core:error] [pid 1011499:tid 1011737] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.383356 2026] [core:error] [pid 1011499:tid 1011737] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.384724 2026] [core:error] [pid 1011499:tid 1011672] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.384762 2026] [core:error] [pid 1011499:tid 1011672] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.413651 2026] [core:error] [pid 1011499:tid 1011697] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.413735 2026] [core:error] [pid 1011499:tid 1011697] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.522496 2026] [proxy:warn] [pid 1011499:tid 1011665] [client 45.79.0.241:41246] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri /400.shtml [Sun Jul 12 18:27:15.522577 2026] [proxy:error] [pid 1011499:tid 1011665] (70014)End of file found: [client 45.79.0.241:41246] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 45.79.0.241 () [Sun Jul 12 18:27:15.703471 2026] [security2:error] [pid 1011499:tid 1011712] [client 45.205.1.241:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQw4jawpHZwffLOvcP-DQAAAM0"] [Sun Jul 12 18:27:15.703515 2026] [security2:error] [pid 1011499:tid 1011712] [client 45.205.1.241:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/index.php"] [unique_id "alQw4jawpHZwffLOvcP-DQAAAM0"] [Sun Jul 12 18:27:15.704287 2026] [security2:error] [pid 1011499:tid 1011664] [client 45.205.1.241:44306] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "colonialcollisionofacton.automotiveadvertisinggroup.com"] [uri "/400.shtml"] [unique_id "alQw4jawpHZwffLOvcP-CgAAAJ0"] [Sun Jul 12 18:27:15.820549 2026] [core:error] [pid 1011499:tid 1011691] [client 13.140.136.17:61729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:15.820588 2026] [core:error] [pid 1011499:tid 1011691] [client 13.140.136.17:61729] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:16.178137 2026] [authz_core:error] [pid 992537:tid 992745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:16.178834 2026] [authz_core:error] [pid 992537:tid 992745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:16.256090 2026] [security2:error] [pid 1011499:tid 1011681] [client 216.157.41.75:14273] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "michigansparc.com"] [uri "/index.php"] [unique_id "alQw4TawpHZwffLOvcP-BAAAAK4"] [Sun Jul 12 18:27:16.472575 2026] [security2:error] [pid 1011499:tid 1011732] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXd5ZXk4LzUxODQvd3kvMTEyOS95"] [unique_id "alQw5DawpHZwffLOvcP-QQAAAOE"] [Sun Jul 12 18:27:16.912852 2026] [security2:error] [pid 1011499:tid 1011739] [client 185.191.171.7:63992] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "theprogressionplaybook.com"] [uri "/can-you-lose-money-in-an-index-fund/"] [unique_id "alQw5DawpHZwffLOvcP-SQAAAOg"] [Sun Jul 12 18:27:16.913088 2026] [security2:error] [pid 1011499:tid 1011739] [client 185.191.171.7:63992] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "theprogressionplaybook.com"] [uri "/can-you-lose-money-in-an-index-fund/"] [unique_id "alQw5DawpHZwffLOvcP-SQAAAOg"] [Sun Jul 12 18:27:16.960511 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:16.961052 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:17.158755 2026] [proxy:warn] [pid 1011499:tid 1011653] [client 45.79.0.241:41252] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be sarahjoyyoga.com for uri /400.shtml [Sun Jul 12 18:27:17.158828 2026] [proxy:error] [pid 1011499:tid 1011653] (70014)End of file found: [client 45.79.0.241:41252] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 45.79.0.241 () [Sun Jul 12 18:27:17.235149 2026] [core:error] [pid 1011499:tid 1011656] [client 5.255.124.170:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.235202 2026] [core:error] [pid 1011499:tid 1011656] [client 5.255.124.170:44002] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.238709 2026] [core:error] [pid 1011499:tid 1011747] [client 5.255.124.170:44042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.238748 2026] [core:error] [pid 1011499:tid 1011747] [client 5.255.124.170:44042] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.238872 2026] [core:error] [pid 1011499:tid 1011726] [client 5.255.124.170:44068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.238919 2026] [core:error] [pid 1011499:tid 1011726] [client 5.255.124.170:44068] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.241364 2026] [core:error] [pid 1011499:tid 1011713] [client 5.255.124.170:44126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.241409 2026] [core:error] [pid 1011499:tid 1011713] [client 5.255.124.170:44126] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.242415 2026] [core:error] [pid 1011499:tid 1011644] [client 5.255.124.170:44012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.242455 2026] [core:error] [pid 1011499:tid 1011644] [client 5.255.124.170:44012] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.245313 2026] [core:error] [pid 1011499:tid 1011650] [client 5.255.124.170:44120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.245372 2026] [core:error] [pid 1011499:tid 1011650] [client 5.255.124.170:44120] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.245756 2026] [core:error] [pid 992537:tid 992797] [client 5.255.124.170:44078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.245801 2026] [core:error] [pid 992537:tid 992797] [client 5.255.124.170:44078] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.247494 2026] [core:error] [pid 992537:tid 992754] [client 5.255.124.170:44108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.247543 2026] [core:error] [pid 992537:tid 992754] [client 5.255.124.170:44108] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.249277 2026] [core:error] [pid 1011499:tid 1011723] [client 5.255.124.170:44066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.249323 2026] [core:error] [pid 1011499:tid 1011723] [client 5.255.124.170:44066] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.277405 2026] [core:error] [pid 1011499:tid 1011755] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.277450 2026] [core:error] [pid 1011499:tid 1011755] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.281250 2026] [core:error] [pid 1011499:tid 1011663] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.281287 2026] [core:error] [pid 1011499:tid 1011663] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.282990 2026] [core:error] [pid 992537:tid 992762] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.283020 2026] [core:error] [pid 992537:tid 992762] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.285522 2026] [core:error] [pid 1011499:tid 1011707] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.285556 2026] [core:error] [pid 1011499:tid 1011707] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.288029 2026] [core:error] [pid 992537:tid 992747] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.288070 2026] [core:error] [pid 992537:tid 992747] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.299125 2026] [core:error] [pid 992537:tid 992792] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.299180 2026] [core:error] [pid 992537:tid 992792] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.344463 2026] [security2:error] [pid 992537:tid 992718] [client 168.100.149.163:59154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35295/bargainor/2308_delphian.jsp"] [unique_id "alQw5WsmDw50MNj9aALQsQAAAbE"] [Sun Jul 12 18:27:17.409307 2026] [security2:error] [pid 992537:tid 992780] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw5GsmDw50MNj9aALQoAAAAe8"] [Sun Jul 12 18:27:17.409360 2026] [security2:error] [pid 992537:tid 992780] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw5GsmDw50MNj9aALQoAAAAe8"] [Sun Jul 12 18:27:17.410398 2026] [security2:error] [pid 1011499:tid 1011678] [client 65.21.113.206:38768] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXd5ZXk4LzUxODQvd3kvMTEyOS95"] [unique_id "alQw5DawpHZwffLOvcP-SwAAAKs"] [Sun Jul 12 18:27:17.728548 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:17.729104 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:17.894196 2026] [core:error] [pid 1011499:tid 1011709] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:17.894249 2026] [core:error] [pid 1011499:tid 1011709] [client 5.255.124.170:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:18.435456 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:18.435997 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:18.653339 2026] [security2:error] [pid 992537:tid 992688] [client 168.100.149.38:32830] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35360/bargainor/2308_anisodactyli.jsp"] [unique_id "alQw5msmDw50MNj9aALQ1wAAAZM"] [Sun Jul 12 18:27:19.056158 2026] [security2:error] [pid 1011499:tid 1011683] [client 74.7.228.60:32876] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "webmail.cddinteriors.com"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "alQw5zawpHZwffLOvcP-lAAAALA"] [Sun Jul 12 18:27:19.342998 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:19.343830 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:19.599815 2026] [security2:error] [pid 1011499:tid 1011745] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXdnaXNuOF8yMjU3L3dnLzQ4MDk3L2c=.html"] [unique_id "alQw5zawpHZwffLOvcP-sAAAAO4"] [Sun Jul 12 18:27:20.569721 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:20.570225 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:20.588952 2026] [security2:error] [pid 1011499:tid 1011583] [remote 47.128.22.199:22032] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.lasoliniere.com"] [uri "/category/news/"] [unique_id "alQw6DawpHZwffLOvcP-4gAAjkg"] [Sun Jul 12 18:27:20.658580 2026] [security2:error] [pid 1011499:tid 1011658] [client 168.100.149.7:61366] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35425/bargainor/2308_birefraction.jsp"] [unique_id "alQw6DawpHZwffLOvcP-5AAAAJc"] [Sun Jul 12 18:27:20.883973 2026] [security2:error] [pid 992537:tid 992775] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw6GsmDw50MNj9aALRbQAAAeo"] [Sun Jul 12 18:27:20.884048 2026] [security2:error] [pid 992537:tid 992775] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw6GsmDw50MNj9aALRbQAAAeo"] [Sun Jul 12 18:27:20.884053 2026] [security2:error] [pid 992537:tid 992725] [client 65.21.113.206:38784] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXdnaXNuOF8yMjU3L3dnLzQ4MDk3L2c=.html"] [unique_id "alQw6GsmDw50MNj9aALRZAAAAbg"] [Sun Jul 12 18:27:21.418202 2026] [security2:error] [pid 1011499:tid 1011721] [client 136.66.113.141:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQw5zawpHZwffLOvcP-swAAANY"] [Sun Jul 12 18:27:21.550633 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:21.551142 2026] [authz_core:error] [pid 992537:tid 992811] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:22.465576 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:22.466179 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:23.324452 2026] [security2:error] [pid 1011499:tid 1011766] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXdoLTQxNTctd2gyOWwtNjc4OS1oMjk=.cgi"] [unique_id "alQw6zawpHZwffLOvcP_DQAAAQM"] [Sun Jul 12 18:27:23.328274 2026] [security2:error] [pid 992537:tid 992789] [client 168.100.149.134:45934] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35490/bargainor/2308_mediator.jsp"] [unique_id "alQw62smDw50MNj9aALSJwAAAfg"] [Sun Jul 12 18:27:23.570977 2026] [authz_core:error] [pid 992537:tid 992697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:23.571534 2026] [authz_core:error] [pid 992537:tid 992697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:23.676596 2026] [proxy:error] [pid 992537:tid 992758] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:23.676877 2026] [proxy_http:error] [pid 992537:tid 992758] [client 93.152.221.13:49330] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:23.679214 2026] [proxy:error] [pid 992537:tid 992758] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:23.679421 2026] [proxy_http:error] [pid 992537:tid 992758] [client 93.152.221.13:49330] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:24.123603 2026] [security2:error] [pid 992537:tid 992776] [client 93.152.221.13:54868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/phpinfo.php"] [unique_id "alQw7GsmDw50MNj9aALSPAAAAes"] [Sun Jul 12 18:27:24.344986 2026] [authz_core:error] [pid 1011499:tid 1011754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:24.345464 2026] [authz_core:error] [pid 1011499:tid 1011754] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:24.491832 2026] [security2:error] [pid 992537:tid 992757] [client 93.152.221.13:50830] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/test.php"] [unique_id "alQw7GsmDw50MNj9aALSSgAAAdg"] [Sun Jul 12 18:27:24.520449 2026] [security2:error] [pid 992537:tid 992720] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw62smDw50MNj9aALSOgAAAbM"] [Sun Jul 12 18:27:24.520515 2026] [security2:error] [pid 992537:tid 992720] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw62smDw50MNj9aALSOgAAAbM"] [Sun Jul 12 18:27:24.521825 2026] [security2:error] [pid 1011499:tid 1011761] [client 65.21.113.206:55280] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXdoLTQxNTctd2gyOWwtNjc4OS1oMjk=.cgi"] [unique_id "alQw6zawpHZwffLOvcP_GAAAAP4"] [Sun Jul 12 18:27:24.569924 2026] [security2:error] [pid 1011499:tid 1011741] [client 5.255.231.19:48908] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "andersonandassociatesllp.com"] [uri "/robots.txt"] [unique_id "alQw7DawpHZwffLOvcP_IwAAAOo"] [Sun Jul 12 18:27:24.825691 2026] [proxy:error] [pid 992537:tid 992769] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:24.825889 2026] [proxy_http:error] [pid 992537:tid 992769] [client 93.152.221.13:51535] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:24.828233 2026] [proxy:error] [pid 992537:tid 992769] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:24.828409 2026] [proxy_http:error] [pid 992537:tid 992769] [client 93.152.221.13:51535] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:25.134257 2026] [security2:error] [pid 992537:tid 992799] [client 93.152.221.13:54998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/info.php"] [unique_id "alQw7WsmDw50MNj9aALSWQAAAgI"] [Sun Jul 12 18:27:25.134734 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:25.135226 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:25.454300 2026] [security2:error] [pid 1011499:tid 1011664] [client 93.152.221.13:57706] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/php.php"] [unique_id "alQw7TawpHZwffLOvcP_LwAAAJ0"] [Sun Jul 12 18:27:25.765870 2026] [security2:error] [pid 992537:tid 992763] [client 93.152.221.13:63836] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/php_info.php"] [unique_id "alQw7WsmDw50MNj9aALSagAAAd4"] [Sun Jul 12 18:27:25.911642 2026] [authz_core:error] [pid 1011499:tid 1011714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:25.912157 2026] [authz_core:error] [pid 1011499:tid 1011714] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:26.077287 2026] [security2:error] [pid 992537:tid 992701] [client 93.152.221.13:55837] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/i.php"] [unique_id "alQw7msmDw50MNj9aALScwAAAaA"] [Sun Jul 12 18:27:26.384762 2026] [security2:error] [pid 992537:tid 992793] [client 93.152.221.13:51459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/pi.php"] [unique_id "alQw7msmDw50MNj9aALSeAAAAfw"] [Sun Jul 12 18:27:26.387212 2026] [security2:error] [pid 1011499:tid 1011642] [client 57.141.18.81:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQw7jawpHZwffLOvcP_PAAAAIc"] [Sun Jul 12 18:27:26.504814 2026] [core:error] [pid 992537:tid 992757] [client 13.140.136.17:57538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:26.504857 2026] [core:error] [pid 992537:tid 992757] [client 13.140.136.17:57538] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:26.641867 2026] [security2:error] [pid 1011499:tid 1011645] [client 65.21.113.206:54838] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXdoLTQxNTctd2gyOWwtNzI1My1oMjk=.cgi"] [unique_id "alQw7jawpHZwffLOvcP_QwAAAIo"] [Sun Jul 12 18:27:26.644428 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:26.644967 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:26.651025 2026] [security2:error] [pid 1011499:tid 1011746] [client 47.128.111.121:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "sportswithapurpose316.com"] [uri "/index.php"] [unique_id "alQw7jawpHZwffLOvcP_PQAAAO8"] [Sun Jul 12 18:27:26.659786 2026] [security2:error] [pid 992537:tid 992775] [client 168.100.149.68:45674] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35620/bargainor/2308_monkey.jsp"] [unique_id "alQw7msmDw50MNj9aALSfwAAAeo"] [Sun Jul 12 18:27:26.698145 2026] [proxy:error] [pid 992537:tid 992717] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:26.698359 2026] [proxy_http:error] [pid 992537:tid 992717] [client 93.152.221.13:59109] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:26.700795 2026] [proxy:error] [pid 992537:tid 992717] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:26.701011 2026] [proxy_http:error] [pid 992537:tid 992717] [client 93.152.221.13:59109] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:27.012860 2026] [security2:error] [pid 992537:tid 992714] [client 93.152.221.13:64496] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/admin/phpinfo.php"] [unique_id "alQw72smDw50MNj9aALSiQAAAa0"] [Sun Jul 12 18:27:27.323865 2026] [security2:error] [pid 992537:tid 992738] [client 93.152.221.13:56860] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/pinfo.php"] [unique_id "alQw72smDw50MNj9aALSlQAAAcU"] [Sun Jul 12 18:27:27.409509 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:27.410246 2026] [authz_core:error] [pid 992537:tid 992721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:27.593889 2026] [security2:error] [pid 1011499:tid 1011677] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw7zawpHZwffLOvcP_RwAAAKo"] [Sun Jul 12 18:27:27.593962 2026] [security2:error] [pid 1011499:tid 1011677] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw7zawpHZwffLOvcP_RwAAAKo"] [Sun Jul 12 18:27:27.594896 2026] [security2:error] [pid 992537:tid 992782] [client 65.21.113.206:55286] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXdoLTQxNTctd2gyOWwtNzI1My1oMjk=.cgi"] [unique_id "alQw72smDw50MNj9aALSigAAAfE"] [Sun Jul 12 18:27:27.632307 2026] [security2:error] [pid 1011499:tid 1011649] [client 93.152.221.13:61928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 13.221.152.93.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/php_version.php"] [unique_id "alQw7zawpHZwffLOvcP_VAAAAI4"] [Sun Jul 12 18:27:27.738207 2026] [security2:error] [pid 992537:tid 992724] [client 172.252.51.53:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQw72smDw50MNj9aALSmAAAAbc"] [Sun Jul 12 18:27:27.949427 2026] [proxy:error] [pid 992537:tid 992765] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:27.949639 2026] [proxy_http:error] [pid 992537:tid 992765] [client 93.152.221.13:57329] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:27.951688 2026] [proxy:error] [pid 992537:tid 992765] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:27.951860 2026] [proxy_http:error] [pid 992537:tid 992765] [client 93.152.221.13:57329] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:28.193583 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:28.194116 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:28.260511 2026] [security2:error] [pid 1011499:tid 1011697] [client 93.152.221.13:59992] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "alQw8DawpHZwffLOvcP_YwAAAL4"] [Sun Jul 12 18:27:28.417714 2026] [proxy:error] [pid 1011499:tid 1011750] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:28.417884 2026] [proxy_http:error] [pid 1011499:tid 1011750] [client 93.152.221.13:59992] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:28.419836 2026] [proxy:error] [pid 1011499:tid 1011750] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:28.419990 2026] [proxy_http:error] [pid 1011499:tid 1011750] [client 93.152.221.13:59992] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:28.647945 2026] [security2:error] [pid 992537:tid 992792] [client 168.100.149.32:51242] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35685/bargainor/2308_impeccance.jsp"] [unique_id "alQw8GsmDw50MNj9aALSrgAAAfs"] [Sun Jul 12 18:27:28.736311 2026] [proxy:error] [pid 1011499:tid 1011712] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:28.736583 2026] [proxy_http:error] [pid 1011499:tid 1011712] [client 93.152.221.13:60558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:28.739602 2026] [proxy:error] [pid 1011499:tid 1011712] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:28.739839 2026] [proxy_http:error] [pid 1011499:tid 1011712] [client 93.152.221.13:60558] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:28.746115 2026] [security2:error] [pid 992537:tid 992770] [client 47.128.111.121:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.sportswithapurpose316.com"] [uri "/index.php"] [unique_id "alQw72smDw50MNj9aALSogAAAeU"] [Sun Jul 12 18:27:28.900346 2026] [security2:error] [pid 1011499:tid 1011670] [client 168.100.149.112:17130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35555/bargainor/2308_gurian.jsp"] [unique_id "alQw8DawpHZwffLOvcP_awAAAKM"] [Sun Jul 12 18:27:28.963045 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:28.963512 2026] [authz_core:error] [pid 992537:tid 992711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:29.012146 2026] [security2:error] [pid 992537:tid 992740] [client 43.164.196.244:57454] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "acedev.net"] [uri "/400.shtml"] [unique_id "alQw8WsmDw50MNj9aALSugAAAcc"] [Sun Jul 12 18:27:29.053182 2026] [security2:error] [pid 992537:tid 992785] [client 93.152.221.13:53132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/___proxy_subdomain_cpcalendars/.env.backup"] [unique_id "alQw8WsmDw50MNj9aALSuwAAAfQ"] [Sun Jul 12 18:27:29.210322 2026] [security2:error] [pid 992537:tid 992726] [client 93.152.221.13:53132] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.spooniepreneur.net"] [uri "/___proxy_subdomain_cpcalendars/config/.env"] [unique_id "alQw8WsmDw50MNj9aALSwAAAAbk"] [Sun Jul 12 18:27:29.648570 2026] [security2:error] [pid 1011499:tid 1011751] [client 157.49.150.193:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQw8TawpHZwffLOvcP_bgAAAPQ"] [Sun Jul 12 18:27:29.682403 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:29.682919 2026] [authz_core:error] [pid 992537:tid 992799] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:29.811194 2026] [core:error] [pid 992537:tid 992809] [client 13.140.136.17:53754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:29.811236 2026] [core:error] [pid 992537:tid 992809] [client 13.140.136.17:53754] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:30.414974 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:30.415462 2026] [authz_core:error] [pid 992537:tid 992701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:30.576710 2026] [core:error] [pid 992537:tid 992584] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.584231 2026] [core:error] [pid 992537:tid 992632] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.589088 2026] [core:error] [pid 992537:tid 992584] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.597579 2026] [core:error] [pid 992537:tid 992632] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.852427 2026] [core:error] [pid 992537:tid 992626] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.857540 2026] [core:error] [pid 992537:tid 992605] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.861739 2026] [core:error] [pid 992537:tid 992626] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.867494 2026] [core:error] [pid 992537:tid 992605] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.914036 2026] [core:error] [pid 992537:tid 992553] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.915208 2026] [core:error] [pid 992537:tid 992565] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.924259 2026] [core:error] [pid 992537:tid 992553] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:30.925752 2026] [core:error] [pid 992537:tid 992565] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.193092 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:31.193589 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:31.342476 2026] [security2:error] [pid 1011499:tid 1011681] [client 168.100.149.242:19298] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35750/bargainor/2308_gunz.jsp"] [unique_id "alQw8zawpHZwffLOvcP_jAAAAK4"] [Sun Jul 12 18:27:31.400456 2026] [core:error] [pid 992537:tid 992571] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.412750 2026] [core:error] [pid 992537:tid 992571] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.469222 2026] [core:error] [pid 992537:tid 992652] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.478909 2026] [core:error] [pid 992537:tid 992652] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.481544 2026] [core:error] [pid 992537:tid 992563] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.509345 2026] [core:error] [pid 992537:tid 992563] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:31.792904 2026] [security2:error] [pid 992537:tid 992779] [client 150.5.132.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQw8WsmDw50MNj9aALS2gAB7m0"] [Sun Jul 12 18:27:31.797590 2026] [security2:error] [pid 1011499:tid 1011682] [client 132.157.128.230:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw8zawpHZwffLOvcP_iwAAAK8"] [Sun Jul 12 18:27:31.919269 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:31.919787 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:32.273688 2026] [security2:error] [pid 992537:tid 992703] [client 145.239.10.137:41327] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jimmybuy.co.uk"] [uri "/f35.php"] [unique_id "alQw9GsmDw50MNj9aALTHQAAAaI"], referer: http://jimmybuy.co.uk/f35.php [Sun Jul 12 18:27:32.460530 2026] [security2:error] [pid 992537:tid 992702] [client 65.21.113.206:42252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXdsbWlxdV82NjQ2L3dsLzQ1ODUvbA==.html"] [unique_id "alQw9GsmDw50MNj9aALTIQAAAaE"] [Sun Jul 12 18:27:32.560044 2026] [security2:error] [pid 992537:tid 992797] [client 93.152.221.65:49224] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.221.152.93.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.pacareerlinkchesco.org"] [uri "/wp-content/uploads/2017/02/UC-FAQ-revised-2-7-17.pdf/wp-login.php"] [unique_id "alQw9GsmDw50MNj9aALTJgAAAgA"] [Sun Jul 12 18:27:32.620640 2026] [core:error] [pid 992537:tid 992646] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:32.639751 2026] [core:error] [pid 992537:tid 992646] [remote 173.95.255.94:62441] AH00125: Request exceeded the limit of 10 subrequest nesting levels due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace., referer: https://www.runcltrun.com/run/ [Sun Jul 12 18:27:32.661808 2026] [security2:error] [pid 992537:tid 992751] [client 168.100.149.134:46420] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35815/bargainor/2308_monadically.jsp"] [unique_id "alQw9GsmDw50MNj9aALTKwAAAdI"] [Sun Jul 12 18:27:32.683912 2026] [authz_core:error] [pid 1011499:tid 1011712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:32.684397 2026] [authz_core:error] [pid 1011499:tid 1011712] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:32.866002 2026] [security2:error] [pid 1011499:tid 1011670] [client 93.152.221.65:61040] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.221.152.93.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "www.pacareerlinkchesco.org"] [uri "/administrator/"] [unique_id "alQw9DawpHZwffLOvcP_pAAAAKM"] [Sun Jul 12 18:27:33.331205 2026] [security2:error] [pid 1011499:tid 1011733] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw9DawpHZwffLOvcP_pQAAAOI"] [Sun Jul 12 18:27:33.331258 2026] [security2:error] [pid 1011499:tid 1011733] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw9DawpHZwffLOvcP_pQAAAOI"] [Sun Jul 12 18:27:33.332403 2026] [security2:error] [pid 992537:tid 992788] [client 65.21.113.206:47994] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXdsbWlxdV82NjQ2L3dsLzQ1ODUvbA==.html"] [unique_id "alQw9GsmDw50MNj9aALTMwAAAfc"] [Sun Jul 12 18:27:33.436121 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:33.436599 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:34.207198 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:34.207747 2026] [authz_core:error] [pid 992537:tid 992785] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:34.815573 2026] [security2:error] [pid 992537:tid 992761] [client 54.236.1.51:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQw9msmDw50MNj9aALTaAAAAdw"] [Sun Jul 12 18:27:34.941135 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:34.941677 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:35.354977 2026] [security2:error] [pid 1011499:tid 1011744] [client 168.100.149.83:36374] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35880/bargainor/2308_enhalo.jsp"] [unique_id "alQw9zawpHZwffLOvcP_uwAAAO0"] [Sun Jul 12 18:27:35.662890 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:35.663368 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:36.189405 2026] [security2:error] [pid 992537:tid 992744] [client 74.125.212.234:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "stage1music.com"] [uri "/index.php"] [unique_id "alQw9msmDw50MNj9aALTWQAAAcs"] [Sun Jul 12 18:27:36.427567 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:36.428102 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:36.442263 2026] [security2:error] [pid 992537:tid 992688] [client 65.21.113.206:42252] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXgtNzQ4My94Z3EvMjQxMjUtZ3E3dw=="] [unique_id "alQw-GsmDw50MNj9aALTkwAAAZM"] [Sun Jul 12 18:27:36.450177 2026] [cgid:error] [pid 992537:tid 992760] [client 13.140.136.17:58000] AH01265: stderr from /home4/homeyeat/public_html/homeyeats/cgi-bin/: attempt to invoke directory as script [Sun Jul 12 18:27:37.177415 2026] [authz_core:error] [pid 1011499:tid 1011738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:37.177932 2026] [authz_core:error] [pid 1011499:tid 1011738] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:37.279881 2026] [fcgid:warn] [pid 992537:tid 992701] (70014)End of file found: [client 199.45.155.105:52696] mod_fcgid: can't get data from http client [Sun Jul 12 18:27:37.358282 2026] [security2:error] [pid 992537:tid 992810] [client 168.100.149.204:18384] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/35945/bargainor/2308_metalogical.jsp"] [unique_id "alQw-WsmDw50MNj9aALTtgAAAg0"] [Sun Jul 12 18:27:37.364379 2026] [security2:error] [pid 992537:tid 992765] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw-GsmDw50MNj9aALTqAAAAeA"] [Sun Jul 12 18:27:37.364429 2026] [security2:error] [pid 992537:tid 992765] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw-GsmDw50MNj9aALTqAAAAeA"] [Sun Jul 12 18:27:37.370334 2026] [security2:error] [pid 1011499:tid 1011754] [client 65.21.113.206:48010] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXgtNzQ4My94Z3EvMjQxMjUtZ3E3dw=="] [unique_id "alQw-DawpHZwffLOvcP_wwAAAPc"] [Sun Jul 12 18:27:37.442275 2026] [cgid:error] [pid 1011499:tid 1011680] [client 202.46.62.10:60913] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/collapsible-drink-holders-custom-p-372.html?osCsid=4sghu29app2o6on7jgr1ma4f44 [Sun Jul 12 18:27:37.494583 2026] [security2:error] [pid 992537:tid 992780] [client 202.46.62.73:25288] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 73.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQw-WsmDw50MNj9aALTuwAAAe8"], referer: https://www.stephenspublishing.com/collapsible-drink-holders-custom-p-372.html?osCsid=4sghu29app2o6on7jgr1ma4f44 [Sun Jul 12 18:27:37.881142 2026] [authz_core:error] [pid 992537:tid 992736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:37.881630 2026] [authz_core:error] [pid 992537:tid 992736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:38.619844 2026] [authz_core:error] [pid 1011499:tid 1011669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:38.620335 2026] [authz_core:error] [pid 1011499:tid 1011669] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:38.676280 2026] [security2:error] [pid 1011499:tid 1011684] [client 168.100.149.121:15924] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36010/bargainor/2308_psychoreflex.jsp"] [unique_id "alQw-jawpHZwffLOvcP_2QAAALE"] [Sun Jul 12 18:27:39.430596 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:39.431252 2026] [authz_core:error] [pid 992537:tid 992722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:39.905890 2026] [security2:error] [pid 992537:tid 992761] [client 177.136.35.79:18203] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 79.35.136.177.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "dentonwelch.com"] [uri "/xmlrpc.php"] [unique_id "alQw-2smDw50MNj9aALT5gAAAdw"] [Sun Jul 12 18:27:39.906160 2026] [security2:error] [pid 992537:tid 992761] [client 177.136.35.79:18203] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "dentonwelch.com"] [uri "/xmlrpc.php"] [unique_id "alQw-2smDw50MNj9aALT5gAAAdw"] [Sun Jul 12 18:27:40.189016 2026] [authz_core:error] [pid 992537:tid 992691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:40.189550 2026] [authz_core:error] [pid 992537:tid 992691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:40.678381 2026] [security2:error] [pid 992537:tid 992740] [client 168.100.149.92:57328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36075/bargainor/2308_mailable.jsp"] [unique_id "alQw_GsmDw50MNj9aALUAAAAAcc"] [Sun Jul 12 18:27:40.680628 2026] [ssl:error] [pid 992537:tid 992794] [client 199.45.154.145:58732] AH02032: Hostname box2216.bluehost.com (default host as no SNI was provided) and hostname www.theblessednewbie.org provided via HTTP have no compatible SSL setup for policy 'secure' [Sun Jul 12 18:27:40.989160 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:40.989681 2026] [authz_core:error] [pid 992537:tid 992760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:41.163853 2026] [security2:error] [pid 992537:tid 992783] [client 90.93.22.157:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQw_GsmDw50MNj9aALUBwAAAfI"] [Sun Jul 12 18:27:41.367720 2026] [security2:error] [pid 992537:tid 992731] [client 51.68.107.157:11693] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "securebydesign.co"] [uri "/robots.txt"] [unique_id "alQw_WsmDw50MNj9aALUHQAAAb4"] [Sun Jul 12 18:27:41.367917 2026] [security2:error] [pid 992537:tid 992731] [client 51.68.107.157:11693] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "securebydesign.co"] [uri "/robots.txt"] [unique_id "alQw_WsmDw50MNj9aALUHQAAAb4"] [Sun Jul 12 18:27:41.702464 2026] [core:error] [pid 1011499:tid 1011649] [client 13.140.136.17:64813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:41.702506 2026] [core:error] [pid 1011499:tid 1011649] [client 13.140.136.17:64813] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:41.728713 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:41.729223 2026] [authz_core:error] [pid 992537:tid 992804] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:42.079891 2026] [security2:error] [pid 992537:tid 992747] [client 136.116.198.170:19580] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 170.198.116.136.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.patriot.eaglestock.com"] [uri "/wp/index.php"] [unique_id "alQw_msmDw50MNj9aALUMQAAAc4"], referer: https://www.patriot.eaglestock.com/ [Sun Jul 12 18:27:42.494228 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:42.494745 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:42.502081 2026] [core:error] [pid 1011499:tid 1011513] (13)Permission denied: [remote 150.5.132.63:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://www.erasmusimpulse.com/page/3/?eventDate=2025-03-30&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:27:42.803458 2026] [core:error] [pid 992537:tid 992552] (13)Permission denied: [remote 150.5.132.63:0] AH00132: file permissions deny server access: /home1/takemev7/public_html/erasmusimpulse/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js, referer: https://www.erasmusimpulse.com/page/3/?eventDate=2025-03-30&eventDisplay=day&post_type=tribe_events [Sun Jul 12 18:27:43.294289 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:43.294817 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:43.347029 2026] [security2:error] [pid 992537:tid 992721] [client 168.100.149.100:41718] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36140/bargainor/2308_epidemiology.jsp"] [unique_id "alQw_2smDw50MNj9aALUXAAAAbQ"] [Sun Jul 12 18:27:43.629918 2026] [security2:error] [pid 1011499:tid 1011721] [client 65.21.113.206:34868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXh1OGd2LTI1Mi94dS0yNDQyMS91OGd2"] [unique_id "alQw_zawpHZwffLOvcMABgAAANY"] [Sun Jul 12 18:27:44.053271 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:44.053926 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:44.501253 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxADawpHZwffLOvcMADgAAAIY"] [Sun Jul 12 18:27:44.501307 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxADawpHZwffLOvcMADgAAAIY"] [Sun Jul 12 18:27:44.502491 2026] [security2:error] [pid 992537:tid 992784] [client 65.21.113.206:45408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXh1OGd2LTI1Mi94dS0yNDQyMS91OGd2"] [unique_id "alQxAGsmDw50MNj9aALUaQAAAfM"] [Sun Jul 12 18:27:44.832677 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:44.833170 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:45.291191 2026] [security2:error] [pid 1011499:tid 1011683] [client 74.7.228.39:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.youareadventuresome.zoeybluesky.com"] [uri "/index.php"] [unique_id "alQxADawpHZwffLOvcMAEQAAALA"] [Sun Jul 12 18:27:45.291206 2026] [security2:error] [pid 992537:tid 992732] [client 74.7.244.42:54568] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.youareadventuresome.com"] [uri "/robots.txt"] [unique_id "alQxAGsmDw50MNj9aALUZwABvws"] [Sun Jul 12 18:27:45.291208 2026] [security2:error] [pid 1011499:tid 1011750] [client 74.7.228.39:37998] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.youareadventuresome.zoeybluesky.com"] [uri "/robots.txt"] [unique_id "alQxADawpHZwffLOvcMADwAA8wQ"] [Sun Jul 12 18:27:45.291233 2026] [security2:error] [pid 1011499:tid 1011732] [client 74.7.244.42:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.youareadventuresome.com"] [uri "/index.php"] [unique_id "alQxADawpHZwffLOvcMADAAAAOE"] [Sun Jul 12 18:27:45.405760 2026] [security2:error] [pid 1011499:tid 1011716] [client 168.100.149.112:61630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36205/bargainor/2308_secque.jsp"] [unique_id "alQxATawpHZwffLOvcMAHQAAANE"] [Sun Jul 12 18:27:45.632097 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:45.632573 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:46.379483 2026] [security2:error] [pid 992537:tid 992806] [client 165.227.86.148:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQxAWsmDw50MNj9aALUggAAAgk"], referer: https://mackinstyle.com/ [Sun Jul 12 18:27:46.391656 2026] [security2:error] [pid 992537:tid 992761] [client 159.223.109.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQxAWsmDw50MNj9aALUgQAAAdw"], referer: https://mackinstyle.com/ [Sun Jul 12 18:27:46.422143 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:46.422639 2026] [authz_core:error] [pid 992537:tid 992713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:46.930250 2026] [security2:error] [pid 992537:tid 992741] [client 57.141.18.69:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxAmsmDw50MNj9aALUnQAAAcg"] [Sun Jul 12 18:27:47.207867 2026] [authz_core:error] [pid 992537:tid 992757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:47.208556 2026] [authz_core:error] [pid 992537:tid 992757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:47.357974 2026] [security2:error] [pid 992537:tid 992767] [client 168.100.149.170:28682] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36270/bargainor/2308_dislevelment.jsp"] [unique_id "alQxA2smDw50MNj9aALUuQAAAeI"] [Sun Jul 12 18:27:47.504308 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:34868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXh1ZGk1LTU4NTMveHUtMjUwMDkvdWRpNQ=="] [unique_id "alQxAzawpHZwffLOvcMAMAAAANo"] [Sun Jul 12 18:27:47.553164 2026] [security2:error] [pid 992537:tid 992798] [client 207.154.192.162:19561] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^0$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "96"] [id "392301"] [rev "7"] [msg "Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header"] [severity "NOTICE"] [tag "no_ar"] [hostname "173.254.107.93"] [uri "/sdk"] [unique_id "alQxA2smDw50MNj9aALUvAAAAgE"] [Sun Jul 12 18:27:48.019813 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:48.020300 2026] [authz_core:error] [pid 992537:tid 992776] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:48.439458 2026] [security2:error] [pid 992537:tid 992810] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxBGsmDw50MNj9aALU0wAAAg0"] [Sun Jul 12 18:27:48.439533 2026] [security2:error] [pid 992537:tid 992810] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxBGsmDw50MNj9aALU0wAAAg0"] [Sun Jul 12 18:27:48.446938 2026] [security2:error] [pid 992537:tid 992708] [client 65.21.113.206:45412] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXh1ZGk1LTU4NTMveHUtMjUwMDkvdWRpNQ=="] [unique_id "alQxA2smDw50MNj9aALU0QAAAac"] [Sun Jul 12 18:27:48.487405 2026] [security2:error] [pid 992537:tid 992750] [client 207.154.192.162:17355] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "173.254.107.93"] [uri "/"] [unique_id "alQxBGsmDw50MNj9aALU3gAAAdE"] [Sun Jul 12 18:27:48.782882 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:48.783363 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:49.129814 2026] [security2:error] [pid 1011499:tid 1011701] [client 123.21.67.72:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQxBDawpHZwffLOvcMANQAAAMI"], referer: https://mackinstyle.com/ [Sun Jul 12 18:27:49.367231 2026] [security2:error] [pid 1011499:tid 1011729] [client 168.100.149.43:44864] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36335/bargainor/2308_limnoria.jsp"] [unique_id "alQxBTawpHZwffLOvcMASgAAAN4"] [Sun Jul 12 18:27:49.434189 2026] [security2:error] [pid 1011499:tid 1011689] [client 170.81.65.207:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mackinstyle.com"] [uri "/index.php"] [unique_id "alQxBDawpHZwffLOvcMAOwAAALY"], referer: https://mackinstyle.com/ [Sun Jul 12 18:27:49.575140 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:49.575630 2026] [authz_core:error] [pid 992537:tid 992770] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:50.324848 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:50.325333 2026] [authz_core:error] [pid 992537:tid 992756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:51.133166 2026] [authz_core:error] [pid 1011499:tid 1011719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:51.133721 2026] [authz_core:error] [pid 1011499:tid 1011719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:51.310540 2026] [security2:error] [pid 992537:tid 992749] [client 168.100.149.146:16962] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36400/bargainor/2308_milksopism.jsp"] [unique_id "alQxB2smDw50MNj9aALVGgAAAdA"] [Sun Jul 12 18:27:51.343934 2026] [security2:error] [pid 1011499:tid 1011538] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.git/config"] [unique_id "alQxBzawpHZwffLOvcMAYAAAmhw"] [Sun Jul 12 18:27:51.358279 2026] [core:error] [pid 1011499:tid 1011538] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.358317 2026] [core:error] [pid 1011499:tid 1011538] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.384858 2026] [core:error] [pid 1011499:tid 1011553] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.385547 2026] [core:error] [pid 1011499:tid 1011553] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.390232 2026] [core:error] [pid 1011499:tid 1011535] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.390276 2026] [core:error] [pid 1011499:tid 1011535] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.395139 2026] [core:error] [pid 1011499:tid 1011543] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.403828 2026] [core:error] [pid 1011499:tid 1011543] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.420240 2026] [core:error] [pid 1011499:tid 1011523] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.421836 2026] [core:error] [pid 1011499:tid 1011523] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.423873 2026] [core:error] [pid 1011499:tid 1011536] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.424227 2026] [core:error] [pid 1011499:tid 1011536] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.424194 2026] [core:error] [pid 1011499:tid 1011546] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.424519 2026] [core:error] [pid 1011499:tid 1011546] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.428202 2026] [core:error] [pid 1011499:tid 1011545] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.428245 2026] [core:error] [pid 1011499:tid 1011545] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.428409 2026] [security2:error] [pid 1011499:tid 1011642] [client 65.21.113.206:34868] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXh1ZGk1LTg5OS94dS0yNTAwOS91ZGk1"] [unique_id "alQxBzawpHZwffLOvcMAbgAAAIc"] [Sun Jul 12 18:27:51.428432 2026] [core:error] [pid 1011499:tid 1011515] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.428485 2026] [core:error] [pid 1011499:tid 1011515] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.429307 2026] [core:error] [pid 1011499:tid 1011510] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.429355 2026] [core:error] [pid 1011499:tid 1011510] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.430434 2026] [core:error] [pid 1011499:tid 1011552] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.430475 2026] [core:error] [pid 1011499:tid 1011552] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.505012 2026] [core:error] [pid 1011499:tid 1011548] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.505058 2026] [core:error] [pid 1011499:tid 1011548] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.537271 2026] [security2:error] [pid 1011499:tid 1011555] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.git/HEAD"] [unique_id "alQxBzawpHZwffLOvcMAcwAAoCw"] [Sun Jul 12 18:27:51.537298 2026] [security2:error] [pid 1011499:tid 1011554] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.gitconfig"] [unique_id "alQxBzawpHZwffLOvcMAcQAAoCs"] [Sun Jul 12 18:27:51.537688 2026] [security2:error] [pid 1011499:tid 1011667] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.git/HEAD"] [unique_id "alQxBzawpHZwffLOvcMAcwAAoCw"] [Sun Jul 12 18:27:51.537857 2026] [security2:error] [pid 1011499:tid 1011667] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.gitconfig"] [unique_id "alQxBzawpHZwffLOvcMAcQAAoCs"] [Sun Jul 12 18:27:51.538504 2026] [security2:error] [pid 1011499:tid 1011555] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mail.shadowarchitect.net"] [uri "/graphql"] [unique_id "alQxBzawpHZwffLOvcMAdAAAoCw"] [Sun Jul 12 18:27:51.550769 2026] [core:error] [pid 1011499:tid 1011561] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.550829 2026] [core:error] [pid 1011499:tid 1011561] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.607224 2026] [security2:error] [pid 1011499:tid 1011562] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.env.backup"] [unique_id "alQxBzawpHZwffLOvcMAdQAA4DM"] [Sun Jul 12 18:27:51.613406 2026] [core:error] [pid 1011499:tid 1011564] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.613459 2026] [core:error] [pid 1011499:tid 1011564] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.637383 2026] [security2:error] [pid 992537:tid 992685] [client 103.73.101.59:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxB2smDw50MNj9aALVFwAAAZA"] [Sun Jul 12 18:27:51.639425 2026] [security2:error] [pid 1011499:tid 1011522] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.github/workflows/deploy.yml"] [unique_id "alQxBzawpHZwffLOvcMAegAA7Qw"] [Sun Jul 12 18:27:51.639413 2026] [security2:error] [pid 1011499:tid 1011565] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.env.bak"] [unique_id "alQxBzawpHZwffLOvcMAfAAA7TY"] [Sun Jul 12 18:27:51.639444 2026] [security2:error] [pid 1011499:tid 1011566] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.env"] [unique_id "alQxBzawpHZwffLOvcMAewAA7Tc"] [Sun Jul 12 18:27:51.640704 2026] [security2:error] [pid 1011499:tid 1011565] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mail.shadowarchitect.net"] [uri "/api/graphql"] [unique_id "alQxBzawpHZwffLOvcMAfwAA7TY"] [Sun Jul 12 18:27:51.642537 2026] [security2:error] [pid 1011499:tid 1011744] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.env.bak"] [unique_id "alQxBzawpHZwffLOvcMAfAAA7TY"] [Sun Jul 12 18:27:51.642571 2026] [security2:error] [pid 1011499:tid 1011531] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/api/.env"] [unique_id "alQxBzawpHZwffLOvcMAfQAA7RU"] [Sun Jul 12 18:27:51.644291 2026] [security2:error] [pid 1011499:tid 1011522] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.env.old"] [unique_id "alQxBzawpHZwffLOvcMAfgAA7Qw"] [Sun Jul 12 18:27:51.646599 2026] [core:error] [pid 1011499:tid 1011518] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.646645 2026] [core:error] [pid 1011499:tid 1011518] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.649295 2026] [core:error] [pid 1011499:tid 1011517] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.649349 2026] [core:error] [pid 1011499:tid 1011517] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.674171 2026] [security2:error] [pid 1011499:tid 1011556] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/backend/.env"] [unique_id "alQxBzawpHZwffLOvcMAggAAmS0"] [Sun Jul 12 18:27:51.709699 2026] [security2:error] [pid 1011499:tid 1011533] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/config/.env"] [unique_id "alQxBzawpHZwffLOvcMAhAAAwxc"] [Sun Jul 12 18:27:51.718013 2026] [core:error] [pid 1011499:tid 1011541] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.718056 2026] [core:error] [pid 1011499:tid 1011541] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.751254 2026] [core:error] [pid 1011499:tid 1011557] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.751318 2026] [core:error] [pid 1011499:tid 1011557] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.789237 2026] [security2:error] [pid 1011499:tid 1011572] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/secrets.yml"] [unique_id "alQxBzawpHZwffLOvcMAiAAAqz0"] [Sun Jul 12 18:27:51.790890 2026] [security2:error] [pid 1011499:tid 1011572] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "mail.shadowarchitect.net"] [uri "/v1/graphql"] [unique_id "alQxBzawpHZwffLOvcMAiQAAqz0"] [Sun Jul 12 18:27:51.800193 2026] [core:error] [pid 1011499:tid 1011542] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.800237 2026] [core:error] [pid 1011499:tid 1011542] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.805366 2026] [core:error] [pid 1011499:tid 1011575] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.805407 2026] [core:error] [pid 1011499:tid 1011575] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.806094 2026] [core:error] [pid 1011499:tid 1011572] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.806130 2026] [core:error] [pid 1011499:tid 1011572] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.812402 2026] [core:error] [pid 1011499:tid 1011587] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.812460 2026] [core:error] [pid 1011499:tid 1011587] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.813099 2026] [core:error] [pid 1011499:tid 1011573] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.813147 2026] [core:error] [pid 1011499:tid 1011573] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.827732 2026] [security2:error] [pid 1011499:tid 1011578] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/serviceAccountKey.json"] [unique_id "alQxBzawpHZwffLOvcMAjwAA2kM"] [Sun Jul 12 18:27:51.828217 2026] [security2:error] [pid 1011499:tid 1011725] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/serviceAccountKey.json"] [unique_id "alQxBzawpHZwffLOvcMAjwAA2kM"] [Sun Jul 12 18:27:51.829060 2026] [security2:error] [pid 1011499:tid 1011580] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/service-account.json"] [unique_id "alQxBzawpHZwffLOvcMAkAAA2kU"] [Sun Jul 12 18:27:51.839570 2026] [core:error] [pid 1011499:tid 1011578] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.839627 2026] [core:error] [pid 1011499:tid 1011578] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.896955 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:51.897458 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:51.920587 2026] [core:error] [pid 1011499:tid 1011567] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.920687 2026] [core:error] [pid 1011499:tid 1011567] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.953555 2026] [security2:error] [pid 1011499:tid 1011568] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/docker-compose.yaml"] [unique_id "alQxBzawpHZwffLOvcMAlgAApTk"] [Sun Jul 12 18:27:51.953582 2026] [security2:error] [pid 1011499:tid 1011569] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.boto"] [unique_id "alQxBzawpHZwffLOvcMAmQAApTo"] [Sun Jul 12 18:27:51.954149 2026] [security2:error] [pid 1011499:tid 1011672] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.boto"] [unique_id "alQxBzawpHZwffLOvcMAmQAApTo"] [Sun Jul 12 18:27:51.957536 2026] [authz_core:error] [pid 1011499:tid 1011592] [remote 104.28.219.192:28945] AH01630: client denied by server configuration: /home3/shadowar/public_html/shadowarchitect/.htpasswd [Sun Jul 12 18:27:51.963083 2026] [core:error] [pid 1011499:tid 1011570] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:51.963138 2026] [core:error] [pid 1011499:tid 1011570] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.067726 2026] [core:error] [pid 1011499:tid 1011602] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.067765 2026] [core:error] [pid 1011499:tid 1011602] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.067928 2026] [core:error] [pid 1011499:tid 1011582] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.067989 2026] [core:error] [pid 1011499:tid 1011582] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.068809 2026] [security2:error] [pid 1011499:tid 1011583] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.ssh/id_rsa"] [unique_id "alQxCDawpHZwffLOvcMAogAAk0g"] [Sun Jul 12 18:27:52.072875 2026] [security2:error] [pid 1011499:tid 1011604] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.ssh/id_dsa"] [unique_id "alQxCDawpHZwffLOvcMAoAAAk10"] [Sun Jul 12 18:27:52.083297 2026] [core:error] [pid 1011499:tid 1011601] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.083341 2026] [core:error] [pid 1011499:tid 1011601] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.085427 2026] [core:error] [pid 1011499:tid 1011600] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.085476 2026] [core:error] [pid 1011499:tid 1011600] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.087341 2026] [core:error] [pid 1011499:tid 1011586] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.087381 2026] [core:error] [pid 1011499:tid 1011586] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.119945 2026] [security2:error] [pid 1011499:tid 1011615] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/id_dsa"] [unique_id "alQxCDawpHZwffLOvcMApgAAx2g"] [Sun Jul 12 18:27:52.123564 2026] [security2:error] [pid 1011499:tid 1011614] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/id_rsa"] [unique_id "alQxCDawpHZwffLOvcMApQAAx2c"] [Sun Jul 12 18:27:52.134372 2026] [core:error] [pid 1011499:tid 1011613] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.134418 2026] [core:error] [pid 1011499:tid 1011613] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.170853 2026] [core:error] [pid 1011499:tid 1011616] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.170909 2026] [core:error] [pid 1011499:tid 1011616] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.211714 2026] [core:error] [pid 1011499:tid 1011617] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.211763 2026] [core:error] [pid 1011499:tid 1011617] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.244428 2026] [security2:error] [pid 1011499:tid 1011585] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/privatekey.key"] [unique_id "alQxCDawpHZwffLOvcMAqwAAoUo"] [Sun Jul 12 18:27:52.250270 2026] [security2:error] [pid 1011499:tid 1011591] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/host.key"] [unique_id "alQxCDawpHZwffLOvcMArgAAoVA"] [Sun Jul 12 18:27:52.255151 2026] [security2:error] [pid 1011499:tid 1011585] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/private-key"] [unique_id "alQxCDawpHZwffLOvcMAsQAAoUo"] [Sun Jul 12 18:27:52.255994 2026] [core:error] [pid 1011499:tid 1011584] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.256051 2026] [core:error] [pid 1011499:tid 1011584] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.258007 2026] [security2:error] [pid 1011499:tid 1011590] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:id_(?:r|d)sa$|key\\\\.pem$|(?:myserver|private-?key)\\\\.key$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1291"] [id "350591"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw Private cryto keys"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/key.pem"] [unique_id "alQxCDawpHZwffLOvcMArwAAoU8"] [Sun Jul 12 18:27:52.272497 2026] [core:error] [pid 1011499:tid 1011618] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.272539 2026] [core:error] [pid 1011499:tid 1011618] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.274503 2026] [core:error] [pid 1011499:tid 1011589] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.274542 2026] [core:error] [pid 1011499:tid 1011589] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.279331 2026] [security2:error] [pid 1011499:tid 1011593] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.cursor/mcp.json"] [unique_id "alQxCDawpHZwffLOvcMAsgAA_1I"] [Sun Jul 12 18:27:52.311766 2026] [security2:error] [pid 1011499:tid 1011594] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.openclaw/openclaw.json"] [unique_id "alQxCDawpHZwffLOvcMAtQAA6lM"] [Sun Jul 12 18:27:52.312146 2026] [security2:error] [pid 1011499:tid 1011741] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.openclaw/openclaw.json"] [unique_id "alQxCDawpHZwffLOvcMAtQAA6lM"] [Sun Jul 12 18:27:52.316000 2026] [security2:error] [pid 1011499:tid 1011595] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.openclaw/.env"] [unique_id "alQxCDawpHZwffLOvcMAtAAA6lQ"] [Sun Jul 12 18:27:52.353497 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxBzawpHZwffLOvcMAlQAAAN0"] [Sun Jul 12 18:27:52.353572 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxBzawpHZwffLOvcMAlQAAAN0"] [Sun Jul 12 18:27:52.355117 2026] [security2:error] [pid 1011499:tid 1011695] [client 65.21.113.206:45428] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXh1ZGk1LTg5OS94dS0yNTAwOS91ZGk1"] [unique_id "alQxBzawpHZwffLOvcMAkgAAALw"] [Sun Jul 12 18:27:52.355928 2026] [core:error] [pid 1011499:tid 1011598] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.355972 2026] [core:error] [pid 1011499:tid 1011598] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.394150 2026] [security2:error] [pid 1011499:tid 1011560] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.hermes/.env"] [unique_id "alQxCDawpHZwffLOvcMAtwAArTE"] [Sun Jul 12 18:27:52.428903 2026] [security2:error] [pid 1011499:tid 1011559] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/.codex/config.toml"] [unique_id "alQxCDawpHZwffLOvcMAugAA-zA"] [Sun Jul 12 18:27:52.429313 2026] [security2:error] [pid 1011499:tid 1011758] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/.codex/config.toml"] [unique_id "alQxCDawpHZwffLOvcMAugAA-zA"] [Sun Jul 12 18:27:52.437274 2026] [core:error] [pid 1011499:tid 1011596] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.437325 2026] [core:error] [pid 1011499:tid 1011596] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.438567 2026] [core:error] [pid 1011499:tid 1011606] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.438619 2026] [core:error] [pid 1011499:tid 1011606] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.451948 2026] [core:error] [pid 1011499:tid 1011605] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.452013 2026] [core:error] [pid 1011499:tid 1011605] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.455276 2026] [core:error] [pid 1011499:tid 1011563] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.455334 2026] [core:error] [pid 1011499:tid 1011563] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.457769 2026] [core:error] [pid 1011499:tid 1011559] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.457814 2026] [core:error] [pid 1011499:tid 1011559] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.479972 2026] [core:error] [pid 1011499:tid 1011619] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.480033 2026] [core:error] [pid 1011499:tid 1011619] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.480162 2026] [core:error] [pid 1011499:tid 1011607] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.480178 2026] [core:error] [pid 1011499:tid 1011607] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.520025 2026] [core:error] [pid 1011499:tid 1011623] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.520078 2026] [core:error] [pid 1011499:tid 1011623] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.520103 2026] [core:error] [pid 1011499:tid 1011612] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.520155 2026] [core:error] [pid 1011499:tid 1011612] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.521221 2026] [core:error] [pid 1011499:tid 1011620] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.521270 2026] [core:error] [pid 1011499:tid 1011620] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.623904 2026] [security2:error] [pid 1011499:tid 1011626] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/storage/logs/laravel.log"] [unique_id "alQxCDawpHZwffLOvcMAyAAA1nM"] [Sun Jul 12 18:27:52.624402 2026] [security2:error] [pid 1011499:tid 1011721] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/storage/logs/laravel.log"] [unique_id "alQxCDawpHZwffLOvcMAyAAA1nM"] [Sun Jul 12 18:27:52.624982 2026] [security2:error] [pid 1011499:tid 1011631] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.shadowarchitect.net"] [uri "/wp-config.php.bak"] [unique_id "alQxCDawpHZwffLOvcMAyQAA1ng"] [Sun Jul 12 18:27:52.624983 2026] [security2:error] [pid 1011499:tid 1011597] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "mail.shadowarchitect.net"] [uri "/wp-config.php.old"] [unique_id "alQxCDawpHZwffLOvcMAygAA1lY"] [Sun Jul 12 18:27:52.626037 2026] [security2:error] [pid 1011499:tid 1011627] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/laravel/.env"] [unique_id "alQxCDawpHZwffLOvcMAxwAA1nQ"] [Sun Jul 12 18:27:52.631349 2026] [core:error] [pid 1011499:tid 1011579] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.631387 2026] [core:error] [pid 1011499:tid 1011579] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.631442 2026] [core:error] [pid 1011499:tid 1011626] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.631480 2026] [core:error] [pid 1011499:tid 1011626] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.649903 2026] [security2:error] [pid 1011499:tid 1011631] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/config/.env.php"] [unique_id "alQxCDawpHZwffLOvcMAzQAA1ng"] [Sun Jul 12 18:27:52.654090 2026] [security2:error] [pid 1011499:tid 1011633] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/configuration.php.bak"] [unique_id "alQxCDawpHZwffLOvcMAzgAAnXo"] [Sun Jul 12 18:27:52.654407 2026] [security2:error] [pid 1011499:tid 1011664] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/configuration.php.bak"] [unique_id "alQxCDawpHZwffLOvcMAzgAAnXo"] [Sun Jul 12 18:27:52.657153 2026] [security2:error] [pid 1011499:tid 1011632] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/core/.env"] [unique_id "alQxCDawpHZwffLOvcMAzwAAnXk"] [Sun Jul 12 18:27:52.676557 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:52.677233 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:52.689748 2026] [security2:error] [pid 1011499:tid 1011610] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/config.php.bak"] [unique_id "alQxCDawpHZwffLOvcMA0gAA8WM"] [Sun Jul 12 18:27:52.691118 2026] [security2:error] [pid 1011499:tid 1011611] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/.env.php.bak"] [unique_id "alQxCDawpHZwffLOvcMA1AAA8WQ"] [Sun Jul 12 18:27:52.699563 2026] [core:error] [pid 1011499:tid 1011638] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.699618 2026] [core:error] [pid 1011499:tid 1011638] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.956346 2026] [security2:error] [pid 1011499:tid 1011514] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/config/application.properties"] [unique_id "alQxCDawpHZwffLOvcMA2gAAzQQ"] [Sun Jul 12 18:27:52.956351 2026] [security2:error] [pid 1011499:tid 1011636] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/bootstrap.properties"] [unique_id "alQxCDawpHZwffLOvcMA2wAAzX0"] [Sun Jul 12 18:27:52.956348 2026] [security2:error] [pid 1011499:tid 1011625] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/web/.env"] [unique_id "alQxCDawpHZwffLOvcMA3QAAzXI"] [Sun Jul 12 18:27:52.957087 2026] [security2:error] [pid 1011499:tid 1011712] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/web/.env"] [unique_id "alQxCDawpHZwffLOvcMA3QAAzXI"] [Sun Jul 12 18:27:52.957376 2026] [security2:error] [pid 1011499:tid 1011629] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/bootstrap.yml"] [unique_id "alQxCDawpHZwffLOvcMA4AAAzXY"] [Sun Jul 12 18:27:52.959415 2026] [security2:error] [pid 1011499:tid 1011608] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/public/.env"] [unique_id "alQxCDawpHZwffLOvcMA2QAAzWE"] [Sun Jul 12 18:27:52.962707 2026] [core:error] [pid 1011499:tid 1011519] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.962749 2026] [core:error] [pid 1011499:tid 1011519] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.964042 2026] [security2:error] [pid 1011499:tid 1011512] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sw[a-z]$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1275"] [id "390587"] [rev "5"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .sw)"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.env.swp"] [unique_id "alQxCDawpHZwffLOvcMA3AAAzQI"] [Sun Jul 12 18:27:52.964148 2026] [core:error] [pid 1011499:tid 1011514] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.964186 2026] [core:error] [pid 1011499:tid 1011514] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.964988 2026] [core:error] [pid 1011499:tid 1011636] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.965022 2026] [core:error] [pid 1011499:tid 1011636] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.965079 2026] [core:error] [pid 1011499:tid 1011513] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.965114 2026] [core:error] [pid 1011499:tid 1011513] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.966962 2026] [core:error] [pid 1011499:tid 1011628] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.967000 2026] [core:error] [pid 1011499:tid 1011628] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.970596 2026] [core:error] [pid 1011499:tid 1011622] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:52.970642 2026] [core:error] [pid 1011499:tid 1011622] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.267996 2026] [security2:error] [pid 1011499:tid 1011637] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/config/storage.yml"] [unique_id "alQxCTawpHZwffLOvcMA5gAAqX4"] [Sun Jul 12 18:27:53.269891 2026] [security2:error] [pid 1011499:tid 1011676] [client 104.28.219.192:28945] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/config/storage.yml"] [unique_id "alQxCTawpHZwffLOvcMA5gAAqX4"] [Sun Jul 12 18:27:53.274549 2026] [security2:error] [pid 1011499:tid 1011530] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/web.config"] [unique_id "alQxCTawpHZwffLOvcMA7QAAqRQ"] [Sun Jul 12 18:27:53.280639 2026] [core:error] [pid 1011499:tid 1011520] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.280712 2026] [core:error] [pid 1011499:tid 1011520] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.282728 2026] [core:error] [pid 1011499:tid 1011527] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.282783 2026] [core:error] [pid 1011499:tid 1011527] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.283090 2026] [core:error] [pid 1011499:tid 1011534] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.283126 2026] [core:error] [pid 1011499:tid 1011534] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.288430 2026] [core:error] [pid 1011499:tid 1011529] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.288860 2026] [core:error] [pid 1011499:tid 1011529] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.289861 2026] [core:error] [pid 1011499:tid 1011537] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.289995 2026] [core:error] [pid 1011499:tid 1011537] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.292047 2026] [core:error] [pid 1011499:tid 1011525] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.292090 2026] [core:error] [pid 1011499:tid 1011525] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.292829 2026] [core:error] [pid 1011499:tid 1011521] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.292866 2026] [core:error] [pid 1011499:tid 1011521] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.293473 2026] [core:error] [pid 1011499:tid 1011530] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.293504 2026] [core:error] [pid 1011499:tid 1011530] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.295233 2026] [core:error] [pid 1011499:tid 1011637] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.295292 2026] [core:error] [pid 1011499:tid 1011637] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.295353 2026] [core:error] [pid 1011499:tid 1011528] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.295398 2026] [core:error] [pid 1011499:tid 1011528] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.321717 2026] [security2:error] [pid 992537:tid 992761] [client 168.100.149.176:40834] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36465/bargainor/2308_capnoides.jsp"] [unique_id "alQxCWsmDw50MNj9aALVQAAAAdw"] [Sun Jul 12 18:27:53.463751 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:53.464259 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:53.520592 2026] [security2:error] [pid 1011499:tid 1011544] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/src/.env"] [unique_id "alQxCTawpHZwffLOvcMA9AAArCI"] [Sun Jul 12 18:27:53.557405 2026] [security2:error] [pid 1011499:tid 1011553] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/frontend/.env"] [unique_id "alQxCTawpHZwffLOvcMA9gAA4io"] [Sun Jul 12 18:27:53.560889 2026] [security2:error] [pid 1011499:tid 1011535] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/production/.env"] [unique_id "alQxCTawpHZwffLOvcMA9wAA4hk"] [Sun Jul 12 18:27:53.563288 2026] [security2:error] [pid 1011499:tid 1011546] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/dev/.env"] [unique_id "alQxCTawpHZwffLOvcMA-wAA4iQ"] [Sun Jul 12 18:27:53.564064 2026] [security2:error] [pid 1011499:tid 1011545] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/app/.env"] [unique_id "alQxCTawpHZwffLOvcMA_AAA4iM"] [Sun Jul 12 18:27:53.570366 2026] [core:error] [pid 1011499:tid 1011538] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.570408 2026] [core:error] [pid 1011499:tid 1011538] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.574083 2026] [core:error] [pid 1011499:tid 1011535] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.574117 2026] [core:error] [pid 1011499:tid 1011535] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.569693 2026] [security2:error] [pid 1011499:tid 1011536] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/server/.env"] [unique_id "alQxCTawpHZwffLOvcMA_QAA4ho"] [Sun Jul 12 18:27:53.576215 2026] [core:error] [pid 1011499:tid 1011543] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.576253 2026] [core:error] [pid 1011499:tid 1011543] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.576989 2026] [core:error] [pid 1011499:tid 1011552] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.577022 2026] [core:error] [pid 1011499:tid 1011552] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.577039 2026] [core:error] [pid 1011499:tid 1011523] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.577067 2026] [core:error] [pid 1011499:tid 1011523] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.577410 2026] [core:error] [pid 1011499:tid 1011553] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.577475 2026] [core:error] [pid 1011499:tid 1011553] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.636778 2026] [security2:error] [pid 1011499:tid 1011549] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/docker/.env"] [unique_id "alQxCTawpHZwffLOvcMBAQAA4SY"] [Sun Jul 12 18:27:53.745410 2026] [security2:error] [pid 1011499:tid 1011562] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/@fs/.env"] [unique_id "alQxCTawpHZwffLOvcMBBgAA7DM"] [Sun Jul 12 18:27:53.745966 2026] [security2:error] [pid 1011499:tid 1011555] [remote 104.28.219.192:28945] ModSecurity: Access denied with connection close (phase 1). Pattern match "proc/self/environ" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1161"] [id "999997"] [msg "proc environ"] [hostname "mail.shadowarchitect.net"] [uri "/@fs/proc/self/environ"] [unique_id "alQxCTawpHZwffLOvcMBAgAA7Cw"] [Sun Jul 12 18:27:53.748933 2026] [security2:error] [pid 1011499:tid 1011555] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/gcp-credentials.json"] [unique_id "alQxCTawpHZwffLOvcMBCQAA7Cw"] [Sun Jul 12 18:27:53.750330 2026] [security2:error] [pid 1011499:tid 1011554] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.env.production.bak"] [unique_id "alQxCTawpHZwffLOvcMBBAAA7Cs"] [Sun Jul 12 18:27:53.753634 2026] [security2:error] [pid 1011499:tid 1011561] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/staging/.env"] [unique_id "alQxCTawpHZwffLOvcMBDQAA7DI"] [Sun Jul 12 18:27:53.756641 2026] [security2:error] [pid 1011499:tid 1011548] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/.env.prod.bak"] [unique_id "alQxCTawpHZwffLOvcMBAwAA7CU"] [Sun Jul 12 18:27:53.760638 2026] [security2:error] [pid 1011499:tid 1011562] [remote 104.28.219.192:28945] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/@fs/root/.env"] [unique_id "alQxCTawpHZwffLOvcMBCAAA7DM"] [Sun Jul 12 18:27:53.765336 2026] [core:error] [pid 1011499:tid 1011564] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.765375 2026] [core:error] [pid 1011499:tid 1011564] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766279 2026] [core:error] [pid 1011499:tid 1011531] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766311 2026] [core:error] [pid 1011499:tid 1011531] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766095 2026] [core:error] [pid 1011499:tid 1011551] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766748 2026] [core:error] [pid 1011499:tid 1011551] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766836 2026] [core:error] [pid 1011499:tid 1011565] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.766871 2026] [core:error] [pid 1011499:tid 1011565] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.775584 2026] [core:error] [pid 1011499:tid 1011540] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:53.775681 2026] [core:error] [pid 1011499:tid 1011540] [remote 104.28.219.192:28945] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.160809 2026] [security2:error] [pid 992537:tid 992588] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/config.js"] [unique_id "alQxCmsmDw50MNj9aALVTwAB4CI"] [Sun Jul 12 18:27:54.160844 2026] [security2:error] [pid 992537:tid 992668] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/config/gcp-credentials.json"] [unique_id "alQxCmsmDw50MNj9aALVVAAB4HE"] [Sun Jul 12 18:27:54.160842 2026] [security2:error] [pid 992537:tid 992645] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/public/admin.json"] [unique_id "alQxCmsmDw50MNj9aALVUQAB4Fo"] [Sun Jul 12 18:27:54.161273 2026] [security2:error] [pid 992537:tid 992765] [client 104.28.219.192:64281] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/config.js"] [unique_id "alQxCmsmDw50MNj9aALVTwAB4CI"] [Sun Jul 12 18:27:54.169157 2026] [core:error] [pid 992537:tid 992588] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.169206 2026] [core:error] [pid 992537:tid 992588] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.169488 2026] [core:error] [pid 992537:tid 992672] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.169539 2026] [core:error] [pid 992537:tid 992672] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.182924 2026] [core:error] [pid 992537:tid 992624] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.182969 2026] [core:error] [pid 992537:tid 992624] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.187438 2026] [core:error] [pid 992537:tid 992635] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.187577 2026] [core:error] [pid 992537:tid 992635] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.188103 2026] [core:error] [pid 992537:tid 992645] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.188146 2026] [core:error] [pid 992537:tid 992645] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.189408 2026] [core:error] [pid 992537:tid 992620] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.189449 2026] [core:error] [pid 992537:tid 992620] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.192462 2026] [core:error] [pid 992537:tid 992672] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.192499 2026] [core:error] [pid 992537:tid 992672] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.193754 2026] [core:error] [pid 992537:tid 992588] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.193787 2026] [core:error] [pid 992537:tid 992588] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.195686 2026] [core:error] [pid 992537:tid 992624] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.195725 2026] [core:error] [pid 992537:tid 992624] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.290059 2026] [security2:error] [pid 992537:tid 992638] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/env.json"] [unique_id "alQxCmsmDw50MNj9aALVYQABklM"] [Sun Jul 12 18:27:54.293410 2026] [security2:error] [pid 992537:tid 992629] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/env.js"] [unique_id "alQxCmsmDw50MNj9aALVYgABkko"] [Sun Jul 12 18:27:54.300250 2026] [core:error] [pid 992537:tid 992647] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.300314 2026] [core:error] [pid 992537:tid 992647] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.300750 2026] [security2:error] [pid 992537:tid 992687] [client 104.28.219.192:64281] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/env.js"] [unique_id "alQxCmsmDw50MNj9aALVYgABkko"] [Sun Jul 12 18:27:54.312267 2026] [core:error] [pid 992537:tid 992617] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.312312 2026] [core:error] [pid 992537:tid 992617] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.324168 2026] [security2:error] [pid 992537:tid 992678] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/api/v2/config"] [unique_id "alQxCmsmDw50MNj9aALVaAABtns"] [Sun Jul 12 18:27:54.328927 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:54.329435 2026] [authz_core:error] [pid 992537:tid 992803] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:54.331814 2026] [core:error] [pid 992537:tid 992648] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.331858 2026] [core:error] [pid 992537:tid 992648] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.332136 2026] [core:error] [pid 992537:tid 992680] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.332169 2026] [core:error] [pid 992537:tid 992680] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.333021 2026] [core:error] [pid 992537:tid 992656] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.333061 2026] [core:error] [pid 992537:tid 992656] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.333429 2026] [core:error] [pid 992537:tid 992609] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.333461 2026] [core:error] [pid 992537:tid 992609] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.338162 2026] [core:error] [pid 992537:tid 992644] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.338208 2026] [core:error] [pid 992537:tid 992644] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.344096 2026] [core:error] [pid 992537:tid 992577] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.344131 2026] [core:error] [pid 992537:tid 992577] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.379088 2026] [core:error] [pid 992537:tid 992641] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.379153 2026] [core:error] [pid 992537:tid 992641] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.425484 2026] [core:error] [pid 992537:tid 992667] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.425493 2026] [core:error] [pid 992537:tid 992618] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.425524 2026] [core:error] [pid 992537:tid 992667] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.425540 2026] [core:error] [pid 992537:tid 992618] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.423650 2026] [core:error] [pid 992537:tid 992612] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.425764 2026] [core:error] [pid 992537:tid 992612] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.431086 2026] [core:error] [pid 992537:tid 992677] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.431462 2026] [core:error] [pid 992537:tid 992677] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.457533 2026] [security2:error] [pid 992537:tid 992660] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/__env.js"] [unique_id "alQxCmsmDw50MNj9aALVdQAB-2k"] [Sun Jul 12 18:27:54.464009 2026] [core:error] [pid 992537:tid 992574] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.464047 2026] [core:error] [pid 992537:tid 992574] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.464050 2026] [core:error] [pid 992537:tid 992584] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.464095 2026] [core:error] [pid 992537:tid 992584] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.465558 2026] [core:error] [pid 992537:tid 992660] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.465591 2026] [core:error] [pid 992537:tid 992660] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.473092 2026] [core:error] [pid 992537:tid 992599] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.473148 2026] [core:error] [pid 992537:tid 992599] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.474948 2026] [core:error] [pid 992537:tid 992579] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.474980 2026] [core:error] [pid 992537:tid 992579] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.501035 2026] [core:error] [pid 992537:tid 992659] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.501078 2026] [core:error] [pid 992537:tid 992659] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.504900 2026] [core:error] [pid 992537:tid 992632] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.504943 2026] [core:error] [pid 992537:tid 992632] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.642484 2026] [security2:error] [pid 992537:tid 992633] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/phpinfo.php"] [unique_id "alQxCmsmDw50MNj9aALVgQAByE4"] [Sun Jul 12 18:27:54.642999 2026] [security2:error] [pid 992537:tid 992682] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/pi.php"] [unique_id "alQxCmsmDw50MNj9aALVhAAByH8"] [Sun Jul 12 18:27:54.643101 2026] [core:error] [pid 992537:tid 992643] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.643135 2026] [core:error] [pid 992537:tid 992643] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.644097 2026] [security2:error] [pid 992537:tid 992565] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/info.php"] [unique_id "alQxCmsmDw50MNj9aALVgwAByA0"] [Sun Jul 12 18:27:54.644268 2026] [security2:error] [pid 992537:tid 992633] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/test.php"] [unique_id "alQxCmsmDw50MNj9aALVhQAByE4"] [Sun Jul 12 18:27:54.644844 2026] [core:error] [pid 992537:tid 992552] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.644889 2026] [core:error] [pid 992537:tid 992552] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.646179 2026] [core:error] [pid 992537:tid 992669] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.646212 2026] [core:error] [pid 992537:tid 992669] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.652250 2026] [core:error] [pid 992537:tid 992634] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.652298 2026] [core:error] [pid 992537:tid 992634] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.655814 2026] [core:error] [pid 992537:tid 992662] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.655870 2026] [core:error] [pid 992537:tid 992662] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.657645 2026] [core:error] [pid 992537:tid 992605] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.657699 2026] [core:error] [pid 992537:tid 992605] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.667987 2026] [security2:error] [pid 992537:tid 992558] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/i.php"] [unique_id "alQxCmsmDw50MNj9aALViQAB2wY"] [Sun Jul 12 18:27:54.678991 2026] [core:error] [pid 992537:tid 992568] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.679035 2026] [core:error] [pid 992537:tid 992568] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.696841 2026] [security2:error] [pid 1011499:tid 1011708] [client 168.100.149.132:24852] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36530/bargainor/2308_deft.jsp"] [unique_id "alQxCjawpHZwffLOvcMBHQAAAMk"] [Sun Jul 12 18:27:54.765452 2026] [security2:error] [pid 992537:tid 992594] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/app_dev.php/_profiler"] [unique_id "alQxCmsmDw50MNj9aALVlAABySc"] [Sun Jul 12 18:27:54.766482 2026] [security2:error] [pid 992537:tid 992742] [client 104.28.219.192:64281] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/app_dev.php/_profiler"] [unique_id "alQxCmsmDw50MNj9aALVlAABySc"] [Sun Jul 12 18:27:54.799495 2026] [security2:error] [pid 992537:tid 992589] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 192.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.shadowarchitect.net"] [uri "/app_dev.php"] [unique_id "alQxCmsmDw50MNj9aALVlgABoiM"] [Sun Jul 12 18:27:54.905211 2026] [security2:error] [pid 992537:tid 992596] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/server-status"] [unique_id "alQxCmsmDw50MNj9aALVmQAB0yk"] [Sun Jul 12 18:27:54.905714 2026] [security2:error] [pid 992537:tid 992752] [client 104.28.219.192:64281] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/server-status"] [unique_id "alQxCmsmDw50MNj9aALVmQAB0yk"] [Sun Jul 12 18:27:54.906450 2026] [security2:error] [pid 992537:tid 992596] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/_debugbar/open"] [unique_id "alQxCmsmDw50MNj9aALVmwAB0yk"] [Sun Jul 12 18:27:54.906913 2026] [security2:error] [pid 992537:tid 992752] [client 104.28.219.192:64281] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "mail.shadowarchitect.net"] [uri "/_debugbar/open"] [unique_id "alQxCmsmDw50MNj9aALVmwAB0yk"] [Sun Jul 12 18:27:54.907522 2026] [security2:error] [pid 992537:tid 992596] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "mail.shadowarchitect.net"] [uri "/_ignition/health-check"] [unique_id "alQxCmsmDw50MNj9aALVnwAB0yk"] [Sun Jul 12 18:27:54.912827 2026] [security2:error] [pid 992537:tid 992616] [remote 104.28.219.192:64281] ModSecurity: Access denied with code 406 (phase 2). Match of "ipMatch 127.0.0.1,::1" against "REMOTE_ADDR" required. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "724"] [id "340114"] [rev "2"] [msg "Atomicorp.com WAF Rules: Apache admin service access attempt"] [severity "CRITICAL"] [hostname "mail.shadowarchitect.net"] [uri "/server-info"] [unique_id "alQxCmsmDw50MNj9aALVoAAB0z0"] [Sun Jul 12 18:27:54.917558 2026] [core:error] [pid 992537:tid 992658] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.917625 2026] [core:error] [pid 992537:tid 992658] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918221 2026] [core:error] [pid 992537:tid 992559] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918300 2026] [core:error] [pid 992537:tid 992559] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918857 2026] [core:error] [pid 992537:tid 992664] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918870 2026] [core:error] [pid 992537:tid 992596] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918900 2026] [core:error] [pid 992537:tid 992664] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.918918 2026] [core:error] [pid 992537:tid 992596] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.923135 2026] [core:error] [pid 992537:tid 992569] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.923172 2026] [core:error] [pid 992537:tid 992569] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.923781 2026] [core:error] [pid 992537:tid 992611] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.923811 2026] [core:error] [pid 992537:tid 992611] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.965414 2026] [core:error] [pid 992537:tid 992679] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:54.965463 2026] [core:error] [pid 992537:tid 992679] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.020184 2026] [core:error] [pid 992537:tid 992601] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.020248 2026] [core:error] [pid 992537:tid 992601] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.136159 2026] [core:error] [pid 992537:tid 992570] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.136232 2026] [core:error] [pid 992537:tid 992570] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.138005 2026] [core:error] [pid 992537:tid 992640] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.138054 2026] [core:error] [pid 992537:tid 992640] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.138906 2026] [core:error] [pid 992537:tid 992578] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.138943 2026] [core:error] [pid 992537:tid 992578] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.139331 2026] [core:error] [pid 992537:tid 992567] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.139369 2026] [core:error] [pid 992537:tid 992567] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.179778 2026] [core:error] [pid 992537:tid 992600] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.179833 2026] [core:error] [pid 992537:tid 992600] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.221028 2026] [core:error] [pid 992537:tid 992676] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.221082 2026] [core:error] [pid 992537:tid 992676] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.230842 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:55.231391 2026] [authz_core:error] [pid 992537:tid 992764] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:55.333115 2026] [core:error] [pid 992537:tid 992572] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.333168 2026] [core:error] [pid 992537:tid 992572] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.333330 2026] [core:error] [pid 992537:tid 992592] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.333367 2026] [core:error] [pid 992537:tid 992592] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.338352 2026] [core:error] [pid 992537:tid 992631] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.338453 2026] [core:error] [pid 992537:tid 992631] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.369295 2026] [proxy:error] [pid 992537:tid 992804] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:55.369440 2026] [proxy_http:error] [pid 992537:tid 992804] [client 185.247.137.35:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:55.372301 2026] [proxy:error] [pid 992537:tid 992804] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:27:55.372481 2026] [proxy_http:error] [pid 992537:tid 992804] [client 185.247.137.35:0] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:27:55.429388 2026] [core:error] [pid 992537:tid 992556] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.429428 2026] [core:error] [pid 992537:tid 992556] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.472513 2026] [core:error] [pid 992537:tid 992587] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.472566 2026] [core:error] [pid 992537:tid 992587] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.472822 2026] [core:error] [pid 992537:tid 992555] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.472863 2026] [core:error] [pid 992537:tid 992555] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.661873 2026] [core:error] [pid 992537:tid 992675] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.661926 2026] [core:error] [pid 992537:tid 992675] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.662011 2026] [core:error] [pid 992537:tid 992670] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:55.662056 2026] [core:error] [pid 992537:tid 992670] [remote 104.28.219.192:64281] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:27:56.017687 2026] [authz_core:error] [pid 992537:tid 992686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:56.018175 2026] [authz_core:error] [pid 992537:tid 992686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:56.335311 2026] [security2:error] [pid 992537:tid 992796] [client 157.245.129.54:39196] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDGsmDw50MNj9aALV2wAAAf8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:56.430310 2026] [security2:error] [pid 992537:tid 992744] [client 161.35.105.92:48912] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDGsmDw50MNj9aALV3gAAAcs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:56.435383 2026] [security2:error] [pid 1011499:tid 1011763] [client 192.241.153.230:51226] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDDawpHZwffLOvcMBMAAAAQA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:56.455038 2026] [security2:error] [pid 992537:tid 992706] [client 192.241.153.230:51230] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDGsmDw50MNj9aALV3wAAAaU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:56.680232 2026] [security2:error] [pid 1011499:tid 1011736] [client 168.100.149.82:31756] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36595/bargainor/2308_did.jsp"] [unique_id "alQxDDawpHZwffLOvcMBMwAAAOU"] [Sun Jul 12 18:27:56.700121 2026] [proxy_http:error] [pid 992244:tid 992423] (70007)The timeout specified has expired: [client 186.107.79.152:53366] AH01102: error reading status line from remote server 127.0.0.1:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.700183 2026] [proxy:error] [pid 992244:tid 992423] [client 186.107.79.152:53366] AH00898: Error reading from remote server returned by /502.shtml, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.702751 2026] [proxy_http:error] [pid 992244:tid 992473] (70007)The timeout specified has expired: [client 127.0.0.1:50814] AH01102: error reading status line from remote server 50.87.254.158:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.702790 2026] [proxy:error] [pid 992244:tid 992473] [client 127.0.0.1:50814] AH00898: Error reading from remote server returned by /502.shtml, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.716727 2026] [proxy_http:error] [pid 992244:tid 992492] (70007)The timeout specified has expired: [client 127.0.0.1:58758] AH01102: error reading status line from remote server 50.87.254.158:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.716774 2026] [proxy:error] [pid 992244:tid 992492] [client 127.0.0.1:58758] AH00898: Error reading from remote server returned by /502.shtml, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:27:56.788680 2026] [authz_core:error] [pid 992537:tid 992808] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:56.789199 2026] [authz_core:error] [pid 992537:tid 992808] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:57.077698 2026] [security2:error] [pid 992537:tid 992776] [client 172.245.21.149:62623] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/_profiler/phpinfo.php"] [unique_id "alQxDWsmDw50MNj9aALV9AAAAes"] [Sun Jul 12 18:27:57.339462 2026] [security2:error] [pid 992537:tid 992784] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXhfMzI0MC94NGsvNzk4MV80aw==.htm"] [unique_id "alQxDWsmDw50MNj9aALV-AAAAfM"] [Sun Jul 12 18:27:57.506736 2026] [security2:error] [pid 1011499:tid 1011757] [client 14.237.28.50:38308] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDTawpHZwffLOvcMBNQAAAPo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:57.589868 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:57.590461 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:58.214942 2026] [security2:error] [pid 1011499:tid 1011669] [client 37.239.25.169:2576] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQxDjawpHZwffLOvcMBPwAAAKI"], referer: https://google.com, https://www.portables-batterie.fr/lenovo-2301/Lenovo-ThinkPad-X200s-pc-batterie.htm [Sun Jul 12 18:27:58.244943 2026] [security2:error] [pid 1011499:tid 1011737] [client 37.28.64.109:40363] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDjawpHZwffLOvcMBPgAAAOY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:58.368690 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:58.369189 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:58.390010 2026] [security2:error] [pid 992537:tid 992711] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxDWsmDw50MNj9aALWBAAAAao"] [Sun Jul 12 18:27:58.390080 2026] [security2:error] [pid 992537:tid 992711] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxDWsmDw50MNj9aALWBAAAAao"] [Sun Jul 12 18:27:58.391434 2026] [security2:error] [pid 1011499:tid 1011694] [client 65.21.113.206:48442] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXhfMzI0MC94NGsvNzk4MV80aw==.htm"] [unique_id "alQxDTawpHZwffLOvcMBOQAAALs"] [Sun Jul 12 18:27:58.652989 2026] [cgid:error] [pid 992537:tid 992732] [client 202.46.62.69:65362] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/wood-mood-rulers-custom-p-861.html?osCsid=0lle2pchnc330fpptfe0sg3ot6 [Sun Jul 12 18:27:58.684621 2026] [security2:error] [pid 992537:tid 992741] [client 168.100.149.107:63678] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36660/bargainor/2308_delphian.jsp"] [unique_id "alQxDmsmDw50MNj9aALWEwAAAcg"] [Sun Jul 12 18:27:58.747588 2026] [security2:error] [pid 992537:tid 992627] [remote 45.132.115.134:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 134.115.132.45.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "divinefeminineleaders.com"] [uri "/wp-login.php"] [unique_id "alQxDmsmDw50MNj9aALWFAAByUg"] [Sun Jul 12 18:27:58.940755 2026] [security2:error] [pid 992537:tid 992694] [client 188.71.204.142:55537] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxDmsmDw50MNj9aALWGwAAAZk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:27:58.955244 2026] [fcgid:warn] [pid 992537:tid 992773] (70014)End of file found: [client 199.45.154.123:60982] mod_fcgid: can't get data from http client [Sun Jul 12 18:27:59.146418 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:59.146990 2026] [authz_core:error] [pid 992537:tid 992772] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:27:59.174958 2026] [security2:error] [pid 992537:tid 992706] [client 201.206.191.58:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxDmsmDw50MNj9aALWFgAAAaU"] [Sun Jul 12 18:27:59.654641 2026] [security2:error] [pid 1011499:tid 1011706] [client 57.141.18.83:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxDzawpHZwffLOvcMBTQAAAMc"] [Sun Jul 12 18:27:59.836726 2026] [security2:error] [pid 992537:tid 992733] [client 52.44.104.142:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "kristinayazmin.com"] [uri "/index.php"] [unique_id "alQxCmsmDw50MNj9aALVpQABwHQ"] [Sun Jul 12 18:27:59.934977 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:27:59.935459 2026] [authz_core:error] [pid 992537:tid 992805] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:00.709630 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:00.710287 2026] [authz_core:error] [pid 992537:tid 992777] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:01.321779 2026] [security2:error] [pid 992537:tid 992693] [client 168.100.149.159:56594] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36725/bargainor/2308_anisodactyli.jsp"] [unique_id "alQxEWsmDw50MNj9aALWTQAAAZg"] [Sun Jul 12 18:28:01.335106 2026] [security2:error] [pid 1011499:tid 1011762] [client 172.252.201.164:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxEDawpHZwffLOvcMBZQAAAP8"] [Sun Jul 12 18:28:01.469064 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:01.469535 2026] [authz_core:error] [pid 992537:tid 992709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:01.565336 2026] [security2:error] [pid 992537:tid 992757] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXhfODQ1My94NGsvNzk4MV80aw==.htm"] [unique_id "alQxEWsmDw50MNj9aALWUAAAAdg"] [Sun Jul 12 18:28:01.568693 2026] [security2:error] [pid 1011499:tid 1011707] [client 149.28.43.156:54038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.43.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "hybridorthography.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxETawpHZwffLOvcMBaQAAAMg"] [Sun Jul 12 18:28:02.114023 2026] [security2:error] [pid 992537:tid 992684] [client 104.156.225.167:64449] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thecuttingedgemallorca.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxEmsmDw50MNj9aALWVgAAAY8"] [Sun Jul 12 18:28:02.260115 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:02.260631 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:02.540927 2026] [security2:error] [pid 1011499:tid 1011646] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxEjawpHZwffLOvcMBcQAAAIs"] [Sun Jul 12 18:28:02.541005 2026] [security2:error] [pid 1011499:tid 1011646] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxEjawpHZwffLOvcMBcQAAAIs"] [Sun Jul 12 18:28:02.542220 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.206:48452] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXhfODQ1My94NGsvNzk4MV80aw==.htm"] [unique_id "alQxEjawpHZwffLOvcMBbwAAAJI"] [Sun Jul 12 18:28:02.705515 2026] [security2:error] [pid 992537:tid 992760] [client 181.121.68.191:58470] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxEmsmDw50MNj9aALWXAAAAds"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:03.072328 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:03.072856 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:03.186144 2026] [security2:error] [pid 992537:tid 992705] [client 216.157.40.91:55939] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "michigansparc.com"] [uri "/index.php"] [unique_id "alQxEmsmDw50MNj9aALWYgAAAaQ"] [Sun Jul 12 18:28:03.371587 2026] [security2:error] [pid 1011499:tid 1011715] [client 168.100.149.202:50322] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36790/bargainor/2308_birefraction.jsp"] [unique_id "alQxEzawpHZwffLOvcMBgQAAANA"] [Sun Jul 12 18:28:03.861059 2026] [authz_core:error] [pid 1011499:tid 1011657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:03.861574 2026] [authz_core:error] [pid 1011499:tid 1011657] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:03.992807 2026] [security2:error] [pid 992537:tid 992667] [remote 84.118.165.250:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 250.165.118.84.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "deskinternacional.com"] [uri "/xmlrpc.php"] [unique_id "alQxE2smDw50MNj9aALWhAAB7XA"] [Sun Jul 12 18:28:03.993263 2026] [security2:error] [pid 992537:tid 992778] [client 84.118.165.250:0] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "deskinternacional.com"] [uri "/xmlrpc.php"] [unique_id "alQxE2smDw50MNj9aALWhAAB7XA"] [Sun Jul 12 18:28:04.602041 2026] [authz_core:error] [pid 992537:tid 992773] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:04.602532 2026] [authz_core:error] [pid 992537:tid 992773] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:04.753862 2026] [security2:error] [pid 1011499:tid 1011760] [client 84.17.60.251:35023] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQxFDawpHZwffLOvcMBkAAAAP0"] [Sun Jul 12 18:28:05.371223 2026] [authz_core:error] [pid 1011499:tid 1011761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:05.371838 2026] [authz_core:error] [pid 1011499:tid 1011761] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:05.401630 2026] [security2:error] [pid 1011499:tid 1011664] [client 168.100.149.26:30790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36855/bargainor/2308_mediator.jsp"] [unique_id "alQxFTawpHZwffLOvcMBoAAAAJ0"] [Sun Jul 12 18:28:05.585886 2026] [security2:error] [pid 992537:tid 992734] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXhfOTQzNy94Z3UvMTk1NDVfZ3U=.htm"] [unique_id "alQxFWsmDw50MNj9aALWpQAAAcE"] [Sun Jul 12 18:28:05.653224 2026] [security2:error] [pid 1011499:tid 1011730] [client 84.17.60.251:45570] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQxFTawpHZwffLOvcMBowAAAN8"] [Sun Jul 12 18:28:06.141165 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:06.141716 2026] [authz_core:error] [pid 992537:tid 992699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:06.272101 2026] [security2:error] [pid 992537:tid 992755] [client 84.17.60.251:56471] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "alQxFmsmDw50MNj9aALWuQAAAdY"] [Sun Jul 12 18:28:06.473008 2026] [security2:error] [pid 992537:tid 992729] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxFmsmDw50MNj9aALWtAAAAbw"] [Sun Jul 12 18:28:06.473074 2026] [security2:error] [pid 992537:tid 992729] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxFmsmDw50MNj9aALWtAAAAbw"] [Sun Jul 12 18:28:06.474156 2026] [security2:error] [pid 1011499:tid 1011676] [client 65.21.113.206:43310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXhfOTQzNy94Z3UvMTk1NDVfZ3U=.htm"] [unique_id "alQxFjawpHZwffLOvcMBqQAAAKk"] [Sun Jul 12 18:28:06.626043 2026] [security2:error] [pid 1011499:tid 1011713] [client 2a03:2880:f800:f:::0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "www.batteryadapter.com.au"] [uri "/product_keyboard.php"] [unique_id "alQxFjawpHZwffLOvcMBqwAAzlQ"] [Sun Jul 12 18:28:06.866418 2026] [security2:error] [pid 1011499:tid 1011722] [client 84.17.60.251:5375] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQxFjawpHZwffLOvcMBrgAAANc"] [Sun Jul 12 18:28:06.883349 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:06.883876 2026] [authz_core:error] [pid 992537:tid 992796] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:06.925149 2026] [security2:error] [pid 992537:tid 992736] [client 91.92.42.63:59798] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webmail.euronovelties.ae"] [uri "/___proxy_subdomain_webmail/.env"] [unique_id "alQxFmsmDw50MNj9aALWxAAAAcM"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:28:06.961397 2026] [security2:error] [pid 992537:tid 992709] [client 91.92.42.63:59806] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxFmsmDw50MNj9aALWxQAAAag"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:28:07.014139 2026] [security2:error] [pid 1011499:tid 1011684] [client 91.92.42.63:59838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxFjawpHZwffLOvcMBsAAAALE"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:28:07.056594 2026] [security2:error] [pid 992537:tid 992773] [client 91.92.42.63:59798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxF2smDw50MNj9aALW0gAAAeg"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:28:07.059714 2026] [security2:error] [pid 1011499:tid 1011732] [client 91.92.42.63:59868] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxFzawpHZwffLOvcMBtAAAAOE"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:28:07.190435 2026] [security2:error] [pid 1011499:tid 1011756] [client 66.249.64.167:37522] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxFzawpHZwffLOvcMBtQAAAPk"] [Sun Jul 12 18:28:07.301811 2026] [security2:error] [pid 1011499:tid 1011719] [client 168.100.149.90:26666] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36920/bargainor/2308_gurian.jsp"] [unique_id "alQxFzawpHZwffLOvcMBuAAAANQ"] [Sun Jul 12 18:28:07.472001 2026] [security2:error] [pid 1011499:tid 1011742] [client 84.17.60.251:45584] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQxFzawpHZwffLOvcMBugAAAOs"] [Sun Jul 12 18:28:07.557442 2026] [security2:error] [pid 992537:tid 992779] [client 47.61.122.36:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxF2smDw50MNj9aALW2wAAAe4"] [Sun Jul 12 18:28:07.587706 2026] [security2:error] [pid 992537:tid 992782] [client 91.92.42.63:59884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/config.php"] [unique_id "alQxF2smDw50MNj9aALW5QAAAfE"], referer: http://euronovelties.ae/ [Sun Jul 12 18:28:07.676157 2026] [security2:error] [pid 992537:tid 992806] [client 91.92.42.63:59920] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxF2smDw50MNj9aALW7gAAAgk"], referer: http://euronovelties.ae/ [Sun Jul 12 18:28:07.678432 2026] [authz_core:error] [pid 992537:tid 992789] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:07.678943 2026] [authz_core:error] [pid 992537:tid 992789] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:07.680592 2026] [security2:error] [pid 992537:tid 992743] [client 91.92.42.63:59880] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/info.php"] [unique_id "alQxF2smDw50MNj9aALW7wAAAco"], referer: http://euronovelties.ae/ [Sun Jul 12 18:28:07.704915 2026] [security2:error] [pid 992537:tid 992808] [client 91.92.42.63:59940] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxF2smDw50MNj9aALW8AAAAgs"], referer: http://euronovelties.ae/ [Sun Jul 12 18:28:07.709280 2026] [security2:error] [pid 992537:tid 992692] [client 91.92.42.63:59926] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "autodiscover.euronovelties.ae"] [uri "/.env"] [unique_id "alQxF2smDw50MNj9aALW8QAAAZc"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:28:07.713445 2026] [security2:error] [pid 992537:tid 992716] [client 91.92.42.63:59970] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxF2smDw50MNj9aALW8wAAAa8"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:28:07.808570 2026] [security2:error] [pid 992537:tid 992699] [client 91.92.42.63:59994] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxF2smDw50MNj9aALW-QAAAZ4"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:28:07.835981 2026] [security2:error] [pid 1011499:tid 1011661] [client 91.92.42.63:60000] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxFzawpHZwffLOvcMBvgAAAJo"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:28:07.837423 2026] [security2:error] [pid 992537:tid 992755] [client 91.92.42.63:60010] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxF2smDw50MNj9aALW-gAAAdY"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:28:08.067429 2026] [security2:error] [pid 992537:tid 992791] [client 84.17.60.251:24340] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQxGGsmDw50MNj9aALXAAAAAfo"] [Sun Jul 12 18:28:08.201912 2026] [security2:error] [pid 992537:tid 992778] [client 91.92.42.63:57932] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "euronovelties.ae"] [uri "/.env"] [unique_id "alQxGGsmDw50MNj9aALXAwAAAe0"], referer: http://euronovelties.ae/.env [Sun Jul 12 18:28:08.335699 2026] [security2:error] [pid 992537:tid 992709] [client 91.92.42.63:60022] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxGGsmDw50MNj9aALXCAAAAag"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:28:08.362993 2026] [security2:error] [pid 1011499:tid 1011675] [client 91.92.42.63:60066] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpanel.euronovelties.ae"] [uri "/___proxy_subdomain_cpanel/.env"] [unique_id "alQxGDawpHZwffLOvcMByAAAAKg"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:28:08.389433 2026] [security2:error] [pid 1011499:tid 1011723] [client 91.92.42.63:60084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxGDawpHZwffLOvcMByQAAANg"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:28:08.390731 2026] [security2:error] [pid 1011499:tid 1011654] [client 91.92.42.63:60068] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxGDawpHZwffLOvcMBygAAAJM"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:28:08.392309 2026] [security2:error] [pid 992537:tid 992723] [client 91.92.42.63:60094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxGGsmDw50MNj9aALXCwAAAbY"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:28:08.437772 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:08.438243 2026] [authz_core:error] [pid 992537:tid 992719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:08.446746 2026] [security2:error] [pid 992537:tid 992747] [client 91.92.42.63:60112] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcalendars.euronovelties.ae"] [uri "/___proxy_subdomain_cpcalendars/.env"] [unique_id "alQxGGsmDw50MNj9aALXDAAAAc4"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.632159 2026] [proxy:error] [pid 992537:tid 992696] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.632381 2026] [proxy_http:error] [pid 992537:tid 992696] [client 91.92.42.63:60112] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.634835 2026] [proxy:error] [pid 992537:tid 992696] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.635047 2026] [proxy_http:error] [pid 992537:tid 992696] [client 91.92.42.63:60112] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.659809 2026] [security2:error] [pid 992537:tid 992781] [client 91.92.42.63:60176] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxGGsmDw50MNj9aALXFwAAAfA"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.663681 2026] [proxy:error] [pid 992537:tid 992731] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.663954 2026] [proxy_http:error] [pid 992537:tid 992731] [client 91.92.42.63:60152] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.665736 2026] [proxy:error] [pid 992537:tid 992700] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.665910 2026] [proxy_http:error] [pid 992537:tid 992700] [client 91.92.42.63:60186] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.666108 2026] [security2:error] [pid 992537:tid 992766] [client 91.92.42.63:60146] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxGGsmDw50MNj9aALXGgAAAeE"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.666457 2026] [proxy:error] [pid 992537:tid 992731] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.666750 2026] [proxy_http:error] [pid 992537:tid 992731] [client 91.92.42.63:60152] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.667682 2026] [proxy:error] [pid 992537:tid 992700] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.667820 2026] [proxy_http:error] [pid 992537:tid 992700] [client 91.92.42.63:60186] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.668183 2026] [security2:error] [pid 992537:tid 992684] [client 91.92.42.63:60128] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxGGsmDw50MNj9aALXGwAAAY8"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.669477 2026] [security2:error] [pid 992537:tid 992793] [client 84.17.60.251:49544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQxGGsmDw50MNj9aALXHQAAAfw"] [Sun Jul 12 18:28:08.675933 2026] [security2:error] [pid 1011499:tid 1011734] [client 91.92.42.63:60132] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxGDawpHZwffLOvcMB1QAAAOM"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.676524 2026] [proxy:error] [pid 992537:tid 992688] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.676834 2026] [proxy_http:error] [pid 992537:tid 992688] [client 91.92.42.63:60168] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.680247 2026] [proxy:error] [pid 992537:tid 992688] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.680454 2026] [proxy_http:error] [pid 992537:tid 992688] [client 91.92.42.63:60168] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.744269 2026] [proxy:error] [pid 1011499:tid 1011647] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.744510 2026] [proxy_http:error] [pid 1011499:tid 1011647] [client 91.92.42.63:60200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.748743 2026] [proxy:error] [pid 1011499:tid 1011647] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.748991 2026] [proxy_http:error] [pid 1011499:tid 1011647] [client 91.92.42.63:60200] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.754520 2026] [security2:error] [pid 992537:tid 992698] [client 91.92.42.63:60212] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxGGsmDw50MNj9aALXHwAAAZ0"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.760891 2026] [proxy:error] [pid 992537:tid 992787] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.761095 2026] [proxy_http:error] [pid 992537:tid 992787] [client 91.92.42.63:60220] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.763536 2026] [proxy:error] [pid 992537:tid 992787] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.763904 2026] [proxy_http:error] [pid 992537:tid 992787] [client 91.92.42.63:60220] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.814000 2026] [security2:error] [pid 1011499:tid 1011701] [client 91.92.42.63:60236] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxGDawpHZwffLOvcMB2QAAAMI"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.816038 2026] [security2:error] [pid 1011499:tid 1011682] [client 91.92.42.63:60232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxGDawpHZwffLOvcMB2wAAAK8"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.817017 2026] [security2:error] [pid 1011499:tid 1011666] [client 91.92.42.63:60222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxGDawpHZwffLOvcMB3AAAAJ8"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.819338 2026] [security2:error] [pid 1011499:tid 1011721] [client 91.92.42.63:60248] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "cpcontacts.euronovelties.ae"] [uri "/___proxy_subdomain_cpcontacts/.env"] [unique_id "alQxGDawpHZwffLOvcMB3QAAANY"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.822773 2026] [proxy:error] [pid 1011499:tid 1011687] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.822933 2026] [proxy_http:error] [pid 1011499:tid 1011687] [client 91.92.42.63:60260] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.824992 2026] [proxy:error] [pid 1011499:tid 1011687] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.825135 2026] [proxy_http:error] [pid 1011499:tid 1011687] [client 91.92.42.63:60260] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:28:08.912591 2026] [proxy:error] [pid 992537:tid 992689] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.912880 2026] [proxy_http:error] [pid 992537:tid 992689] [client 91.92.42.63:60274] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:08.915510 2026] [proxy:error] [pid 992537:tid 992689] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:08.915806 2026] [proxy_http:error] [pid 992537:tid 992689] [client 91.92.42.63:60274] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:28:09.249869 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:09.250367 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:09.278723 2026] [security2:error] [pid 1011499:tid 1011725] [client 91.92.42.63:60310] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/wp-config.php"] [unique_id "alQxGTawpHZwffLOvcMB5gAAANo"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:28:09.280594 2026] [security2:error] [pid 992537:tid 992743] [client 91.92.42.63:60300] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxGWsmDw50MNj9aALXKgAAAco"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:28:09.282537 2026] [security2:error] [pid 992537:tid 992754] [client 84.17.60.251:4549] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "alQxGWsmDw50MNj9aALXKwAAAdU"] [Sun Jul 12 18:28:09.288885 2026] [security2:error] [pid 992537:tid 992808] [client 91.92.42.63:60324] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/config.php"] [unique_id "alQxGWsmDw50MNj9aALXLAAAAgs"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:28:09.361524 2026] [security2:error] [pid 1011499:tid 1011641] [client 168.100.149.7:18610] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/36985/bargainor/2308_monkey.jsp"] [unique_id "alQxGTawpHZwffLOvcMB6QAAAIY"] [Sun Jul 12 18:28:09.378909 2026] [security2:error] [pid 992537:tid 992780] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXhkazY1Lzc0ODMveGQvMjQwODkvZA=="] [unique_id "alQxGWsmDw50MNj9aALXLgAAAe8"] [Sun Jul 12 18:28:09.388046 2026] [security2:error] [pid 992537:tid 992763] [client 91.92.42.63:60348] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/phpinfo.php"] [unique_id "alQxGWsmDw50MNj9aALXLwAAAd4"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:28:09.410901 2026] [security2:error] [pid 1011499:tid 1011676] [client 91.92.42.63:60374] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxGTawpHZwffLOvcMB7QAAAKk"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:28:09.417007 2026] [security2:error] [pid 992537:tid 992707] [client 91.92.42.63:60402] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/info.php"] [unique_id "alQxGWsmDw50MNj9aALXMgAAAaY"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:28:09.428555 2026] [security2:error] [pid 1011499:tid 1011676] [client 91.92.42.63:60426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxGTawpHZwffLOvcMB8gAAAKk"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:28:09.429127 2026] [security2:error] [pid 1011499:tid 1011745] [client 91.92.42.63:60410] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/phpinfo.php"] [unique_id "alQxGTawpHZwffLOvcMB8AAAAO4"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:28:09.442005 2026] [security2:error] [pid 992537:tid 992769] [client 91.92.42.63:60340] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/wp-config.php"] [unique_id "alQxGWsmDw50MNj9aALXNwAAAeQ"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:28:09.476190 2026] [security2:error] [pid 1011499:tid 1011750] [client 91.92.42.63:60476] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/info.php"] [unique_id "alQxGTawpHZwffLOvcMB9QAAAPM"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:28:09.477763 2026] [security2:error] [pid 1011499:tid 1011684] [client 91.92.42.63:60466] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/config.php"] [unique_id "alQxGTawpHZwffLOvcMB9gAAALE"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:28:09.595957 2026] [security2:error] [pid 992537:tid 992741] [client 91.92.42.63:60526] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/wp-config.php"] [unique_id "alQxGWsmDw50MNj9aALXOQAAAcg"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:28:09.685518 2026] [security2:error] [pid 992537:tid 992768] [client 91.92.42.63:60560] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/config.php"] [unique_id "alQxGWsmDw50MNj9aALXOwAAAeM"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:28:09.716235 2026] [security2:error] [pid 1011499:tid 1011605] [remote 95.108.213.131:45814] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "cscmco.com"] [uri "/goods/00269241543.html"] [unique_id "alQxGTawpHZwffLOvcMB-QAA5l4"] [Sun Jul 12 18:28:09.780527 2026] [lsapi:error] [pid 992537:tid 992691] [client 49.235.136.28:0] [host ttbpopup.com] Backend fatal error: PHP Fatal error: Uncaught Exception: Comet Cache: failed to write cache file for: `/`; possible permissions issue (or race condition), please check your cache directory: `/home3/saltwau2/public_html/ttbpopup/wp-content/cache/comet-cache/cache`. in /home3/saltwau2/public_html/ttbpopup/wp-content/plugins/comet-cache-pro/src/includes/traits/Ac/ObUtils.php:457\nStack trace:\n#0 [internal function]: WebSharks\\CometCache\\Pro\\Classes\\AdvancedCache->outputBufferCallbackHandler('<!DOCTYPE html>...', 9)\n#1 /home3/saltwau2/public_html/ttbpopup/wp-includes/functions.php(5481): ob_end_flush()\n#2 /home3/saltwau2/public_html/ttbpopup/wp-includes/class-wp-hook.php(341): wp_ob_end_flush_all('')\n#3 /home3/saltwau2/public_html/ttbpopup/wp-includes/class-wp-hook.php(365): WP_Hook->apply_filters(NULL, Array)\n#4 /home3/saltwau2/public_html/ttbpopup/wp-includes/plugin.php(522): WP_Hook->do_action(Array)\n#5 /home3/saltwau2/public_html/ttbpopup/wp-includes/load.php(1308): do_action('shutdown')\n#6 [internal function]: shutdown_action_hook()\n#7 {main}\n thrown in /home3/saltwau2/public_html/ttbpopup/wp-content/plugins/comet-cache-pro/src/includes/traits/Ac/ObUtils.php on line 457\n, referer: https://www.ttbpopup.com/ [Sun Jul 12 18:28:09.830822 2026] [security2:error] [pid 992537:tid 992711] [client 91.92.42.63:60570] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/phpinfo.php"] [unique_id "alQxGWsmDw50MNj9aALXQAAAAao"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:28:09.832418 2026] [security2:error] [pid 1011499:tid 1011643] [client 91.92.42.63:60600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/info.php"] [unique_id "alQxGTawpHZwffLOvcMB_AAAAIg"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:28:09.897332 2026] [security2:error] [pid 992537:tid 992742] [client 84.17.60.251:49560] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQxGWsmDw50MNj9aALXSAAAAck"] [Sun Jul 12 18:28:09.957520 2026] [security2:error] [pid 992537:tid 992720] [client 91.92.42.63:57986] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.mysouvenir.ae"] [uri "/.env"] [unique_id "alQxGWsmDw50MNj9aALXSwAAAbM"], referer: http://mail.mysouvenir.ae/.env [Sun Jul 12 18:28:09.998272 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:09.998844 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:10.051056 2026] [security2:error] [pid 992537:tid 992717] [client 91.92.42.63:57984] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.euronovelties.ae"] [uri "/.env"] [unique_id "alQxGmsmDw50MNj9aALXTwAAAbA"], referer: http://mail.euronovelties.ae/.env [Sun Jul 12 18:28:10.080077 2026] [security2:error] [pid 992537:tid 992736] [client 91.92.42.63:58072] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mail.habibisouvenir.com"] [uri "/.env"] [unique_id "alQxGmsmDw50MNj9aALXVAAAAcM"], referer: http://mail.habibisouvenir.com/.env [Sun Jul 12 18:28:10.301400 2026] [security2:error] [pid 992537:tid 992737] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxGWsmDw50MNj9aALXRwAAAcQ"] [Sun Jul 12 18:28:10.301454 2026] [security2:error] [pid 992537:tid 992737] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxGWsmDw50MNj9aALXRwAAAcQ"] [Sun Jul 12 18:28:10.303704 2026] [security2:error] [pid 992537:tid 992695] [client 65.21.113.206:43324] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXhkazY1Lzc0ODMveGQvMjQwODkvZA=="] [unique_id "alQxGWsmDw50MNj9aALXRAAAAZo"] [Sun Jul 12 18:28:10.384174 2026] [security2:error] [pid 992537:tid 992730] [client 91.92.42.63:58140] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "mysouvenir.ae"] [uri "/.env"] [unique_id "alQxGmsmDw50MNj9aALXXQAAAb0"], referer: http://mysouvenir.ae/.env [Sun Jul 12 18:28:10.407385 2026] [security2:error] [pid 1011499:tid 1011703] [client 91.92.42.63:60622] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "webdisk.euronovelties.ae"] [uri "/___proxy_subdomain_webdisk/.env"] [unique_id "alQxGjawpHZwffLOvcMCCgAAAMQ"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:28:10.489885 2026] [security2:error] [pid 1011499:tid 1011660] [client 91.92.42.63:60642] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/wp-config.php"] [unique_id "alQxGjawpHZwffLOvcMCDAAAAJk"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:28:10.491318 2026] [security2:error] [pid 1011499:tid 1011678] [client 91.92.42.63:60636] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/info.php"] [unique_id "alQxGjawpHZwffLOvcMCDgAAAKs"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:28:10.504292 2026] [security2:error] [pid 992537:tid 992698] [client 84.17.60.251:49572] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "alQxGmsmDw50MNj9aALXXwAAAZ0"] [Sun Jul 12 18:28:10.522862 2026] [security2:error] [pid 1011499:tid 1011764] [client 91.92.42.63:60666] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/phpinfo.php"] [unique_id "alQxGjawpHZwffLOvcMCEQAAAQE"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:28:10.536334 2026] [security2:error] [pid 1011499:tid 1011675] [client 91.92.42.63:60622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/config.php"] [unique_id "alQxGjawpHZwffLOvcMCEgAAAKg"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:28:10.706029 2026] [security2:error] [pid 1011499:tid 1011763] [client 168.100.149.201:46668] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37050/bargainor/2308_impeccance.jsp"] [unique_id "alQxGjawpHZwffLOvcMCGQAAAQA"] [Sun Jul 12 18:28:10.771356 2026] [authz_core:error] [pid 1011499:tid 1011741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:10.771917 2026] [authz_core:error] [pid 1011499:tid 1011741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:11.107263 2026] [security2:error] [pid 1011499:tid 1011701] [client 84.17.60.251:1997] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQxGzawpHZwffLOvcMCJQAAAMI"] [Sun Jul 12 18:28:11.550219 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:11.550721 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:11.711943 2026] [security2:error] [pid 992537:tid 992704] [client 84.17.60.251:49590] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "alQxG2smDw50MNj9aALXaQAAAaM"] [Sun Jul 12 18:28:12.077084 2026] [proxy:error] [pid 992537:tid 992780] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:12.077391 2026] [proxy_http:error] [pid 992537:tid 992780] [client 185.247.137.27:49127] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:28:12.082631 2026] [proxy:error] [pid 992537:tid 992780] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:28:12.082980 2026] [proxy_http:error] [pid 992537:tid 992780] [client 185.247.137.27:49127] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 [Sun Jul 12 18:28:12.305196 2026] [security2:error] [pid 1011499:tid 1011724] [client 84.17.60.251:49596] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQxHDawpHZwffLOvcMCPQAAANk"] [Sun Jul 12 18:28:12.337806 2026] [authz_core:error] [pid 1011499:tid 1011696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:12.338306 2026] [authz_core:error] [pid 1011499:tid 1011696] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:12.503496 2026] [security2:error] [pid 992537:tid 992726] [client 18.157.238.182:10348] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "michigansparc.com"] [uri "/index.php"] [unique_id "alQxHGsmDw50MNj9aALXeAAAAbk"] [Sun Jul 12 18:28:12.916452 2026] [security2:error] [pid 992537:tid 992811] [client 84.17.60.251:48708] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "colonialvw.com"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "alQxHGsmDw50MNj9aALXgQAAAg4"] [Sun Jul 12 18:28:13.094430 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:13.094949 2026] [authz_core:error] [pid 992537:tid 992723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:13.322984 2026] [security2:error] [pid 992537:tid 992713] [client 168.100.149.152:50674] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37115/bargainor/2308_gunz.jsp"] [unique_id "alQxHWsmDw50MNj9aALXigAAAaw"] [Sun Jul 12 18:28:13.641417 2026] [security2:error] [pid 992537:tid 992750] [client 181.94.226.84:57682] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQxHWsmDw50MNj9aALXkgAAAdE"], referer: https://www.portables-batterie.fr/lenovo/Lenovo-V130-15IGM(81HN00E8GE)-portable-batterie.htm [Sun Jul 12 18:28:13.688912 2026] [security2:error] [pid 992537:tid 992587] [remote 104.131.116.82:51470] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.116.131.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/wp-login.php"] [unique_id "alQxHWsmDw50MNj9aALXlAABlCE"] [Sun Jul 12 18:28:13.846228 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:13.846738 2026] [authz_core:error] [pid 992537:tid 992782] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:14.159560 2026] [security2:error] [pid 992537:tid 992743] [client 65.21.113.206:55826] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXl3LTQ1NzcteXd0b2EtNjY0Ni13dG8=.cgi"] [unique_id "alQxHmsmDw50MNj9aALXnQAAAco"] [Sun Jul 12 18:28:14.663226 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:14.663756 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:14.672297 2026] [security2:error] [pid 1011499:tid 1011695] [client 172.56.22.190:58838] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQxHjawpHZwffLOvcMCdgAAvCM"] [Sun Jul 12 18:28:14.719218 2026] [security2:error] [pid 1011499:tid 1011695] [client 172.56.22.190:58838] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQxHjawpHZwffLOvcMCdQAAvCQ"] [Sun Jul 12 18:28:14.877815 2026] [security2:error] [pid 1011499:tid 1011698] [client 172.245.21.149:63261] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/phpinfo.php"] [unique_id "alQxHjawpHZwffLOvcMCfwAAAL8"] [Sun Jul 12 18:28:15.149712 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxHjawpHZwffLOvcMCfQAAANo"] [Sun Jul 12 18:28:15.149766 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxHjawpHZwffLOvcMCfQAAANo"] [Sun Jul 12 18:28:15.150787 2026] [security2:error] [pid 1011499:tid 1011762] [client 65.21.113.206:57480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXl3LTQ1NzcteXd0b2EtNjY0Ni13dG8=.cgi"] [unique_id "alQxHjawpHZwffLOvcMCewAAAP8"] [Sun Jul 12 18:28:15.230654 2026] [security2:error] [pid 1011499:tid 1011535] [remote 119.148.90.80:43238] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.90.148.119.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "galileofootball.galileolions.org"] [uri "/xmlrpc.php"] [unique_id "alQxHzawpHZwffLOvcMCgAAAthk"] [Sun Jul 12 18:28:15.231034 2026] [security2:error] [pid 1011499:tid 1011689] [client 119.148.90.80:43238] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "galileofootball.galileolions.org"] [uri "/xmlrpc.php"] [unique_id "alQxHzawpHZwffLOvcMCgAAAthk"] [Sun Jul 12 18:28:15.364452 2026] [security2:error] [pid 1011499:tid 1011711] [client 168.100.149.155:56016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37180/bargainor/2308_monadically.jsp"] [unique_id "alQxHzawpHZwffLOvcMChAAAAMw"] [Sun Jul 12 18:28:15.432181 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:15.432657 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:16.203205 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:16.203758 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:16.208067 2026] [security2:error] [pid 1011499:tid 1011650] [client 43.134.120.21:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.neighborspacebaltimorecounty.org"] [uri "/index.php"] [unique_id "alQxHzawpHZwffLOvcMCiwAAAI8"] [Sun Jul 12 18:28:16.632584 2026] [security2:error] [pid 1011499:tid 1011736] [client 195.177.94.60:52884] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.94.177.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "box2216.temp.domains"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxIDawpHZwffLOvcMCrwAAAOU"] [Sun Jul 12 18:28:16.963856 2026] [security2:error] [pid 1011499:tid 1011727] [client 195.177.94.60:57843] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "box2216.temp.domains"] [uri "/"] [unique_id "alQxIDawpHZwffLOvcMCwQAAANw"] [Sun Jul 12 18:28:16.977892 2026] [authz_core:error] [pid 1011499:tid 1011683] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:16.978398 2026] [authz_core:error] [pid 1011499:tid 1011683] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:17.285971 2026] [security2:error] [pid 1011499:tid 1011662] [client 65.49.20.68:3864] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "50.87.17.225"] [uri "/index.php"] [unique_id "alQxIDawpHZwffLOvcMCsgAAAJs"] [Sun Jul 12 18:28:17.297408 2026] [security2:error] [pid 1011499:tid 1011645] [client 195.177.94.60:57849] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.94.177.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "box2216.temp.domains"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxITawpHZwffLOvcMCywAAAIo"] [Sun Jul 12 18:28:17.343828 2026] [security2:error] [pid 1011499:tid 1011669] [client 168.100.149.196:16456] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37245/bargainor/2308_enhalo.jsp"] [unique_id "alQxITawpHZwffLOvcMCzgAAAKI"] [Sun Jul 12 18:28:17.360713 2026] [security2:error] [pid 1011499:tid 1011737] [client 92.239.7.175:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxIDawpHZwffLOvcMCvwAAAOY"] [Sun Jul 12 18:28:17.628816 2026] [security2:error] [pid 1011499:tid 1011675] [client 195.177.94.60:63372] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "box2216.temp.domains"] [uri "/"] [unique_id "alQxITawpHZwffLOvcMC1QAAAKg"] [Sun Jul 12 18:28:17.716143 2026] [security2:error] [pid 1011499:tid 1011731] [client 114.119.148.154:35007] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thegreatermv.org"] [uri "/wp-content/uploads/flipbook/6/files/basic-html/page2.html"] [unique_id "alQxITawpHZwffLOvcMC2wAAAOA"], referer: https://www.thegreatermv.org/wp-content/uploads/flipbook/6/files/basic-html/page4.html [Sun Jul 12 18:28:17.724598 2026] [authz_core:error] [pid 1011499:tid 1011759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:17.725131 2026] [authz_core:error] [pid 1011499:tid 1011759] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:18.027632 2026] [security2:error] [pid 1011499:tid 1011712] [client 172.245.21.149:63413] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/info.php"] [unique_id "alQxIjawpHZwffLOvcMC3QAAAM0"] [Sun Jul 12 18:28:18.494795 2026] [authz_core:error] [pid 1011499:tid 1011686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:18.495297 2026] [authz_core:error] [pid 1011499:tid 1011686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:18.535638 2026] [security2:error] [pid 1011499:tid 1011745] [client 65.21.113.206:51154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXlfNDc5Mi95aWkvMjM4MV9paQ==.htm"] [unique_id "alQxIjawpHZwffLOvcMC9QAAAO4"] [Sun Jul 12 18:28:18.980554 2026] [security2:error] [pid 1011499:tid 1011737] [client 195.177.94.60:55274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.94.177.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "box2216.temp.domains"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxIjawpHZwffLOvcMDBQAAAOY"] [Sun Jul 12 18:28:19.315975 2026] [authz_core:error] [pid 1011499:tid 1011744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:19.316493 2026] [authz_core:error] [pid 1011499:tid 1011744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:19.330699 2026] [security2:error] [pid 1011499:tid 1011764] [client 195.177.94.60:55615] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "box2216.temp.domains"] [uri "/"] [unique_id "alQxIzawpHZwffLOvcMDGAAAAQE"] [Sun Jul 12 18:28:19.355102 2026] [security2:error] [pid 1011499:tid 1011648] [client 168.100.149.105:18904] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37310/bargainor/2308_metalogical.jsp"] [unique_id "alQxIzawpHZwffLOvcMDGgAAAI0"] [Sun Jul 12 18:28:19.546495 2026] [security2:error] [pid 1011499:tid 1011687] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxIzawpHZwffLOvcMDCQAAALQ"] [Sun Jul 12 18:28:19.546559 2026] [security2:error] [pid 1011499:tid 1011687] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxIzawpHZwffLOvcMDCQAAALQ"] [Sun Jul 12 18:28:19.546783 2026] [security2:error] [pid 1011499:tid 1011661] [client 65.21.113.206:57492] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXlfNDc5Mi95aWkvMjM4MV9paQ==.htm"] [unique_id "alQxIzawpHZwffLOvcMDBgAAAJo"] [Sun Jul 12 18:28:19.691359 2026] [security2:error] [pid 1011499:tid 1011706] [client 191.112.25.209:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQxIzawpHZwffLOvcMDIwAAAMc"] [Sun Jul 12 18:28:19.972296 2026] [security2:error] [pid 1011499:tid 1011618] [remote 41.186.86.12:64381] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 12.86.186.41.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "weshouldbesleeping.com"] [uri "/wp-login.php"] [unique_id "alQxIzawpHZwffLOvcMDMwAA8ms"] [Sun Jul 12 18:28:20.116826 2026] [authz_core:error] [pid 1011499:tid 1011709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:20.117329 2026] [authz_core:error] [pid 1011499:tid 1011709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:20.681104 2026] [security2:error] [pid 1011499:tid 1011746] [client 195.177.94.60:55617] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 60.94.177.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "box2216.temp.domains"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxJDawpHZwffLOvcMDSwAAAO8"] [Sun Jul 12 18:28:20.939126 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:20.939818 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:21.042825 2026] [security2:error] [pid 1011499:tid 1011679] [client 195.177.94.60:53306] ModSecurity: Access denied with code 406 (phase 2). Match of "rx [.](png|jpeg|jpg|tiff|bmp|gif|webp|heif|svg|raw|ico|ppm|pgm|pbm|exr|nef|dng|cr2|orf|arw|pef|sr2|raf|kdc|indd|ai|eps|pdf|psd|tga|hdr|j2k|jpf|jp2|pspimage|cut|icns|webm|bpg|avif|heic|fpx|hdri|hdp|yuv|sgi|xpm|svgz)$" against "REQUEST_FILENAME" required. [file "/opt/mod_security/hg_rules.conf"] [line "842"] [id "900095"] [msg "Bad UA :: Fake Mozilla Agent"] [hostname "box2216.temp.domains"] [uri "/"] [unique_id "alQxJTawpHZwffLOvcMDVgAAAKw"] [Sun Jul 12 18:28:21.377376 2026] [security2:error] [pid 1011499:tid 1011752] [client 168.100.149.239:36148] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37375/bargainor/2308_psychoreflex.jsp"] [unique_id "alQxJTawpHZwffLOvcMDYQAAAPU"] [Sun Jul 12 18:28:21.661646 2026] [security2:error] [pid 1011499:tid 1011717] [client 65.21.113.206:51154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXlfOTk1My95aWkvMjM4MV9paQ==.htm"] [unique_id "alQxJTawpHZwffLOvcMDcwAAANI"] [Sun Jul 12 18:28:21.689001 2026] [security2:error] [pid 1011499:tid 1011736] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/.env"] [unique_id "alQxJTawpHZwffLOvcMDdQAAAOU"] [Sun Jul 12 18:28:21.689332 2026] [security2:error] [pid 1011499:tid 1011736] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/.env"] [unique_id "alQxJTawpHZwffLOvcMDdQAAAOU"] [Sun Jul 12 18:28:21.785798 2026] [security2:error] [pid 1011499:tid 1011646] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/.env.production"] [unique_id "alQxJTawpHZwffLOvcMDgwAAAIs"] [Sun Jul 12 18:28:21.792743 2026] [security2:error] [pid 1011499:tid 1011656] [client 172.245.21.149:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/cgi-sys/404.html"] [unique_id "alQxJTawpHZwffLOvcMDhwAAAJU"] [Sun Jul 12 18:28:21.832994 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:21.833506 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:22.639170 2026] [security2:error] [pid 1011499:tid 1011731] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxJjawpHZwffLOvcMDlwAAAOA"] [Sun Jul 12 18:28:22.639307 2026] [security2:error] [pid 1011499:tid 1011731] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxJjawpHZwffLOvcMDlwAAAOA"] [Sun Jul 12 18:28:22.640991 2026] [security2:error] [pid 1011499:tid 1011715] [client 65.21.113.206:57496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXlfOTk1My95aWkvMjM4MV9paQ==.htm"] [unique_id "alQxJjawpHZwffLOvcMDlAAAANA"] [Sun Jul 12 18:28:22.650110 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:22.650618 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:22.688101 2026] [security2:error] [pid 1011499:tid 1011706] [client 168.100.149.179:37454] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37440/bargainor/2308_mailable.jsp"] [unique_id "alQxJjawpHZwffLOvcMDrQAAAMc"] [Sun Jul 12 18:28:23.260140 2026] [security2:error] [pid 1011499:tid 1011648] [client 74.7.228.45:58222] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "glvbox.mesmericmedia.com"] [uri "/index.php"] [unique_id "alQxJjawpHZwffLOvcMDmgAAjX0"] [Sun Jul 12 18:28:23.453680 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:23.454254 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:23.547622 2026] [security2:error] [pid 1011499:tid 1011693] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/application/.env"] [unique_id "alQxJzawpHZwffLOvcMDzwAAALo"] [Sun Jul 12 18:28:23.548116 2026] [security2:error] [pid 1011499:tid 1011693] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/application/.env"] [unique_id "alQxJzawpHZwffLOvcMDzwAAALo"] [Sun Jul 12 18:28:24.205038 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:24.205543 2026] [authz_core:error] [pid 1011499:tid 1011739] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:24.344310 2026] [security2:error] [pid 1011499:tid 1011757] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/prod/.env"] [unique_id "alQxKDawpHZwffLOvcMD5gAAAPo"] [Sun Jul 12 18:28:24.344547 2026] [security2:error] [pid 1011499:tid 1011757] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/prod/.env"] [unique_id "alQxKDawpHZwffLOvcMD5gAAAPo"] [Sun Jul 12 18:28:24.502311 2026] [security2:error] [pid 1011499:tid 1011746] [client 42.113.95.133:34772] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQxKDawpHZwffLOvcMD6QAAAO8"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/IdeaPad-S310-Series-portable-batterie.htm [Sun Jul 12 18:28:24.706451 2026] [security2:error] [pid 1011499:tid 1011716] [client 168.100.149.10:28130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37505/bargainor/2308_epidemiology.jsp"] [unique_id "alQxKDawpHZwffLOvcMD8wAAANE"] [Sun Jul 12 18:28:24.808844 2026] [security2:error] [pid 1011499:tid 1011747] [client 172.245.21.149:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/cgi-sys/404.html"] [unique_id "alQxKDawpHZwffLOvcMEAAAAAPA"] [Sun Jul 12 18:28:24.813158 2026] [security2:error] [pid 1011499:tid 1011735] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/.env.save"] [unique_id "alQxKDawpHZwffLOvcMD_AAAAOQ"] [Sun Jul 12 18:28:24.817185 2026] [security2:error] [pid 1011499:tid 1011759] [client 65.21.113.206:51154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXpfMTMxNTVfenp4Yi96XzQyOTNfeGJ0.html"] [unique_id "alQxKDawpHZwffLOvcMEAQAAAPw"] [Sun Jul 12 18:28:24.984835 2026] [cgid:error] [pid 1011499:tid 1011763] [client 202.46.62.26:38797] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/color-wood-rulers-stock-p-546.html?osCsid=6a4sbo3bsmu6jr1a045e2l0035 [Sun Jul 12 18:28:25.002711 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.49.20.68:39796] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "50.87.17.225"] [uri "/index.php"] [unique_id "alQxKDawpHZwffLOvcMEFQAAAMg"] [Sun Jul 12 18:28:25.014122 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:25.014636 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:25.640180 2026] [security2:error] [pid 1011499:tid 1011761] [client 186.178.228.126:15415] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQxKTawpHZwffLOvcMEIgAAAP4"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/IdeaPad-S310-Series-portable-batterie.htm [Sun Jul 12 18:28:25.781824 2026] [security2:error] [pid 1011499:tid 1011668] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxKTawpHZwffLOvcMEGwAAAKE"] [Sun Jul 12 18:28:25.781875 2026] [security2:error] [pid 1011499:tid 1011668] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxKTawpHZwffLOvcMEGwAAAKE"] [Sun Jul 12 18:28:25.782856 2026] [security2:error] [pid 1011499:tid 1011712] [client 65.21.113.206:56476] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXpfMTMxNTVfenp4Yi96XzQyOTNfeGJ0.html"] [unique_id "alQxKTawpHZwffLOvcMEGQAAAM0"] [Sun Jul 12 18:28:25.805080 2026] [security2:error] [pid 1011499:tid 1011673] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/beta/.env"] [unique_id "alQxKTawpHZwffLOvcMELQAAAKY"] [Sun Jul 12 18:28:25.805344 2026] [security2:error] [pid 1011499:tid 1011673] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/beta/.env"] [unique_id "alQxKTawpHZwffLOvcMELQAAAKY"] [Sun Jul 12 18:28:25.813903 2026] [authz_core:error] [pid 1011499:tid 1011667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:25.814442 2026] [authz_core:error] [pid 1011499:tid 1011667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:26.125830 2026] [security2:error] [pid 1011499:tid 1011753] [client 159.223.211.139:40298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env"] [unique_id "alQxKjawpHZwffLOvcMEPQAAAPY"] [Sun Jul 12 18:28:26.248465 2026] [security2:error] [pid 1011499:tid 1011664] [client 159.223.211.139:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env.bak"] [unique_id "alQxKjawpHZwffLOvcMEQwAAAJ0"] [Sun Jul 12 18:28:26.259097 2026] [security2:error] [pid 1011499:tid 1011765] [client 91.169.57.182:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxKTawpHZwffLOvcMEKQAAAQI"] [Sun Jul 12 18:28:26.604789 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:26.606053 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:26.704107 2026] [security2:error] [pid 1011499:tid 1011671] [client 168.100.149.177:34742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37570/bargainor/2308_secque.jsp"] [unique_id "alQxKjawpHZwffLOvcMETwAAAKQ"] [Sun Jul 12 18:28:26.888977 2026] [security2:error] [pid 1011499:tid 1011752] [client 172.245.21.149:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/cgi-sys/404.html"] [unique_id "alQxKjawpHZwffLOvcMEXQAAAPU"] [Sun Jul 12 18:28:26.889882 2026] [security2:error] [pid 1011499:tid 1011726] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "opportunityalliance.com"] [uri "/admin/.env"] [unique_id "alQxKjawpHZwffLOvcMEWwAAANs"] [Sun Jul 12 18:28:26.906213 2026] [security2:error] [pid 1011499:tid 1011728] [client 159.223.211.139:40298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env"] [unique_id "alQxKjawpHZwffLOvcMEYAAAAN0"] [Sun Jul 12 18:28:27.121727 2026] [security2:error] [pid 1011499:tid 1011673] [client 159.223.211.139:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env.bak"] [unique_id "alQxKzawpHZwffLOvcMEZQAAAKY"] [Sun Jul 12 18:28:27.380433 2026] [authz_core:error] [pid 1011499:tid 1011704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:27.380981 2026] [authz_core:error] [pid 1011499:tid 1011704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:27.573411 2026] [security2:error] [pid 1011499:tid 1011656] [client 57.141.18.43:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxKzawpHZwffLOvcMEZwAAAJU"] [Sun Jul 12 18:28:27.589393 2026] [security2:error] [pid 1011499:tid 1011717] [client 172.121.97.64:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxKzawpHZwffLOvcMEbAAAANI"] [Sun Jul 12 18:28:27.637643 2026] [security2:error] [pid 1011499:tid 1011650] [client 159.223.211.139:40298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env"] [unique_id "alQxKzawpHZwffLOvcMEhAAAAI8"] [Sun Jul 12 18:28:27.740432 2026] [security2:error] [pid 1011499:tid 1011659] [client 159.0.149.44:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxKzawpHZwffLOvcMEdQAAAJg"] [Sun Jul 12 18:28:27.991448 2026] [security2:error] [pid 1011499:tid 1011715] [client 159.223.211.139:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env.bak"] [unique_id "alQxKzawpHZwffLOvcMEjQAAANA"] [Sun Jul 12 18:28:28.187645 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:28.188150 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:28.417839 2026] [security2:error] [pid 1011499:tid 1011757] [client 216.244.66.244:38440] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "learningindia.in"] [uri "/best-of-mark-twain-on-india/"] [unique_id "alQxLDawpHZwffLOvcMEmAAAAPo"] [Sun Jul 12 18:28:28.418084 2026] [security2:error] [pid 1011499:tid 1011757] [client 216.244.66.244:38440] ModSecurity: Warning. Matched phrase "Dotbot" at REQUEST_HEADERS:User-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "learningindia.in"] [uri "/best-of-mark-twain-on-india/"] [unique_id "alQxLDawpHZwffLOvcMEmAAAAPo"] [Sun Jul 12 18:28:28.554283 2026] [security2:error] [pid 1011499:tid 1011738] [client 159.223.211.139:40298] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env"] [unique_id "alQxLDawpHZwffLOvcMEmwAAAOc"] [Sun Jul 12 18:28:28.616251 2026] [security2:error] [pid 1011499:tid 1011694] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/app/.env"] [unique_id "alQxLDawpHZwffLOvcMEnAAAALs"] [Sun Jul 12 18:28:28.616827 2026] [security2:error] [pid 1011499:tid 1011694] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/app/.env"] [unique_id "alQxLDawpHZwffLOvcMEnAAAALs"] [Sun Jul 12 18:28:28.898513 2026] [security2:error] [pid 1011499:tid 1011688] [client 159.223.211.139:40270] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/.env.bak"] [unique_id "alQxLDawpHZwffLOvcMEpwAAALU"] [Sun Jul 12 18:28:29.001542 2026] [authz_core:error] [pid 1011499:tid 1011742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:29.002099 2026] [authz_core:error] [pid 1011499:tid 1011742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:29.176024 2026] [security2:error] [pid 1011499:tid 1011674] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/config/.env"] [unique_id "alQxLTawpHZwffLOvcMEqwAAAKc"] [Sun Jul 12 18:28:29.176264 2026] [security2:error] [pid 1011499:tid 1011674] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/config/.env"] [unique_id "alQxLTawpHZwffLOvcMEqwAAAKc"] [Sun Jul 12 18:28:29.403104 2026] [security2:error] [pid 1011499:tid 1011730] [client 168.100.149.182:28790] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37635/bargainor/2308_dislevelment.jsp"] [unique_id "alQxLTawpHZwffLOvcMEtQAAAN8"] [Sun Jul 12 18:28:29.762064 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:29.762554 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:29.885402 2026] [security2:error] [pid 1011499:tid 1011661] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQxLTawpHZwffLOvcMEvAAAAJo"] [Sun Jul 12 18:28:30.098746 2026] [security2:error] [pid 1011499:tid 1011711] [client 66.249.82.197:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQxKDawpHZwffLOvcMD-AAAAMw"] [Sun Jul 12 18:28:30.271411 2026] [security2:error] [pid 1011499:tid 1011712] [client 136.114.42.190:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "dawnpedersen.com"] [uri "/index.php"] [unique_id "alQxLTawpHZwffLOvcME0AAAAM0"] [Sun Jul 12 18:28:30.288246 2026] [security2:error] [pid 1011499:tid 1011656] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXpfNTI3X3oyZ2svMl85MTQ2X2drdg==.html"] [unique_id "alQxLjawpHZwffLOvcME3AAAAJU"] [Sun Jul 12 18:28:30.522492 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:30.523069 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:31.103397 2026] [security2:error] [pid 1011499:tid 1011651] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/api/.env"] [unique_id "alQxLzawpHZwffLOvcME_gAAAJA"] [Sun Jul 12 18:28:31.103729 2026] [security2:error] [pid 1011499:tid 1011651] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/api/.env"] [unique_id "alQxLzawpHZwffLOvcME_gAAAJA"] [Sun Jul 12 18:28:31.232201 2026] [security2:error] [pid 1011499:tid 1011702] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxLjawpHZwffLOvcME9QAAAMM"] [Sun Jul 12 18:28:31.232256 2026] [security2:error] [pid 1011499:tid 1011702] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxLjawpHZwffLOvcME9QAAAMM"] [Sun Jul 12 18:28:31.233739 2026] [security2:error] [pid 1011499:tid 1011717] [client 65.21.113.206:56480] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXpfNTI3X3oyZ2svMl85MTQ2X2drdg==.html"] [unique_id "alQxLjawpHZwffLOvcME8gAAANI"] [Sun Jul 12 18:28:31.322892 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:31.323437 2026] [authz_core:error] [pid 1011499:tid 1011758] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:31.381364 2026] [security2:error] [pid 1011499:tid 1011734] [client 168.100.149.181:61336] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37700/bargainor/2308_limnoria.jsp"] [unique_id "alQxLzawpHZwffLOvcMFBgAAAOM"] [Sun Jul 12 18:28:31.449277 2026] [security2:error] [pid 1011499:tid 1011700] [client 78.39.19.2:44208] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.portables-batterie.fr"] [uri "/404.php"] [unique_id "alQxLzawpHZwffLOvcMFBwAAAME"], referer: https://google.com, https://www.portables-batterie.fr/lenovo/IdeaPad-S310-Series-portable-batterie.htm [Sun Jul 12 18:28:31.695696 2026] [security2:error] [pid 1011499:tid 1011678] [client 127.0.0.1:47532] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQxLzawpHZwffLOvcMFBQAAAKs"] [Sun Jul 12 18:28:31.695803 2026] [security2:error] [pid 1011499:tid 1011660] [client 74.7.228.16:45436] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "302"] [hostname "autodiscover.vegaspirate.com"] [uri "/robots.txt"] [unique_id "alQxLzawpHZwffLOvcMFBAAAAJk"] [Sun Jul 12 18:28:31.955851 2026] [security2:error] [pid 1011499:tid 1011749] [client 127.0.0.1:47562] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "127.0.0.1"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQxLzawpHZwffLOvcMFEwAAAPI"], referer: http://autodiscover.vegaspirate.com/robots.txt [Sun Jul 12 18:28:31.955932 2026] [security2:error] [pid 1011499:tid 1011732] [client 127.0.0.1:47548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.vegaspirate.com"] [uri "/cgi-sys/autodiscover.cgi"] [unique_id "alQxLzawpHZwffLOvcMFEgAAAOE"], referer: http://autodiscover.vegaspirate.com/robots.txt [Sun Jul 12 18:28:31.956183 2026] [security2:error] [pid 1011499:tid 1011736] [client 74.7.228.16:44134] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "400"] [hostname "autodiscover.vegaspirate.com"] [uri "/autodiscover/autodiscover.xml"] [unique_id "alQxLzawpHZwffLOvcMFEQAA5XQ"], referer: http://autodiscover.vegaspirate.com/robots.txt [Sun Jul 12 18:28:32.024878 2026] [security2:error] [pid 1011499:tid 1011690] [client 172.245.21.149:63602] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "opportunityalliance.com"] [uri "/laravel/.env"] [unique_id "alQxMDawpHZwffLOvcMFFwAAALc"] [Sun Jul 12 18:28:32.025137 2026] [security2:error] [pid 1011499:tid 1011690] [client 172.245.21.149:63602] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "406"] [hostname "opportunityalliance.com"] [uri "/laravel/.env"] [unique_id "alQxMDawpHZwffLOvcMFFwAAALc"] [Sun Jul 12 18:28:32.139398 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:32.139932 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:32.786429 2026] [security2:error] [pid 1011499:tid 1011723] [client 216.157.42.95:64416] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "michigansparc.com"] [uri "/index.php"] [unique_id "alQxMDawpHZwffLOvcMFIwAAANg"] [Sun Jul 12 18:28:32.937576 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:32.938108 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:32.988329 2026] [autoindex:error] [pid 1011499:tid 1011663] [client 167.94.146.50:5302] AH01276: Cannot serve directory /home2/hakursat/public_html/local/: No matching DirectoryIndex (index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.php,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:28:33.340899 2026] [security2:error] [pid 1011499:tid 1011696] [client 45.181.86.115:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.erasmusimpulse.com"] [uri "/index.php"] [unique_id "alQxMDawpHZwffLOvcMFHgAAvVg"] [Sun Jul 12 18:28:33.352978 2026] [security2:error] [pid 1011499:tid 1011726] [client 168.100.149.221:46700] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37765/bargainor/2308_milksopism.jsp"] [unique_id "alQxMTawpHZwffLOvcMFPwAAANs"] [Sun Jul 12 18:28:33.719474 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:33.720004 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:34.015404 2026] [security2:error] [pid 1011499:tid 1011712] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YXpfNTI3X3oyZ2svMl8xOTQwX2drdg==.html"] [unique_id "alQxMjawpHZwffLOvcMFVQAAAM0"] [Sun Jul 12 18:28:34.397910 2026] [security2:error] [pid 1011499:tid 1011727] [client 202.76.188.46:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFVwAAANw"] [Sun Jul 12 18:28:34.504855 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:34.506468 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:34.657159 2026] [security2:error] [pid 1011499:tid 1011740] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFYAAAAOk"] [Sun Jul 12 18:28:34.670570 2026] [security2:error] [pid 1011499:tid 1011662] [client 57.141.18.18:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFZAAAAJs"] [Sun Jul 12 18:28:34.698261 2026] [security2:error] [pid 1011499:tid 1011710] [client 168.100.149.244:51924] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37830/bargainor/2308_capnoides.jsp"] [unique_id "alQxMjawpHZwffLOvcMFcwAAAMs"] [Sun Jul 12 18:28:34.765074 2026] [security2:error] [pid 1011499:tid 1011750] [client 125.167.21.72:61562] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxMjawpHZwffLOvcMFdAAAAPM"] [Sun Jul 12 18:28:34.765325 2026] [security2:error] [pid 1011499:tid 1011750] [client 125.167.21.72:61562] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxMjawpHZwffLOvcMFdAAAAPM"] [Sun Jul 12 18:28:34.895260 2026] [security2:error] [pid 1011499:tid 1011699] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFbAAAAMA"] [Sun Jul 12 18:28:34.895313 2026] [security2:error] [pid 1011499:tid 1011699] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFbAAAAMA"] [Sun Jul 12 18:28:34.896766 2026] [security2:error] [pid 1011499:tid 1011748] [client 65.21.113.206:54534] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YXpfNTI3X3oyZ2svMl8xOTQwX2drdg==.html"] [unique_id "alQxMjawpHZwffLOvcMFaQAAAPE"] [Sun Jul 12 18:28:34.983085 2026] [security2:error] [pid 1011499:tid 1011757] [client 114.119.136.254:62541] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "21csfweb.org"] [uri "/"] [unique_id "alQxMjawpHZwffLOvcMFeQAAAPo"], referer: http://21csfweb.org/ [Sun Jul 12 18:28:35.026583 2026] [security2:error] [pid 1011499:tid 1011760] [client 54.70.190.91:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "spotlightcommunicationsgroup.com"] [uri "/index.php"] [unique_id "alQxLjawpHZwffLOvcME6QAA_U8"], referer: https://spotlightcommunicationsgroup.com/ [Sun Jul 12 18:28:35.290077 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:35.290548 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:35.926482 2026] [security2:error] [pid 1011499:tid 1011663] [client 57.141.18.24:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQxMjawpHZwffLOvcMFcAAAAJw"] [Sun Jul 12 18:28:36.050830 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:36.051315 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:36.085708 2026] [security2:error] [pid 1011499:tid 1011686] [client 65.49.20.68:18382] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "50.87.17.225"] [uri "/index.php"] [unique_id "alQxNDawpHZwffLOvcMFxgAAALM"] [Sun Jul 12 18:28:36.128502 2026] [core:error] [pid 1011499:tid 1011721] [client 44.195.188.79:19512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:28:36.128552 2026] [core:error] [pid 1011499:tid 1011721] [client 44.195.188.79:19512] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:28:36.388962 2026] [security2:error] [pid 1011499:tid 1011533] [remote 157.66.26.183:33050] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxNDawpHZwffLOvcMFzwAAthc"] [Sun Jul 12 18:28:36.402219 2026] [security2:error] [pid 1011499:tid 1011533] [remote 157.66.26.183:33050] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.26.66.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxNDawpHZwffLOvcMFzwAAthc"] [Sun Jul 12 18:28:36.412076 2026] [security2:error] [pid 1011499:tid 1011642] [client 172.245.21.149:64263] ModSecurity: Access denied with code 406 (phase 1). Pattern match "wp-config" at ARGS:file. [file "/opt/mod_security/blacklists/nodupconfig.conf"] [line "1"] [id "77789"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxNDawpHZwffLOvcMF0AAAAIc"] [Sun Jul 12 18:28:36.705271 2026] [security2:error] [pid 1011499:tid 1011703] [client 159.223.211.139:56496] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/%2eenv"] [unique_id "alQxNDawpHZwffLOvcMF1QAAAMQ"] [Sun Jul 12 18:28:36.706436 2026] [security2:error] [pid 1011499:tid 1011649] [client 168.100.149.114:22106] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37895/bargainor/2308_deft.jsp"] [unique_id "alQxNDawpHZwffLOvcMF1AAAAI4"] [Sun Jul 12 18:28:36.839014 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:36.839515 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:36.856002 2026] [security2:error] [pid 1011499:tid 1011679] [client 159.223.211.139:56504] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "yesbossclothing.com"] [uri "/%2eenv%2ebak"] [unique_id "alQxNDawpHZwffLOvcMF3AAAAKw"] [Sun Jul 12 18:28:37.075316 2026] [security2:error] [pid 1011499:tid 1011655] [client 145.239.10.137:43346] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 137.10.239.145.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "jimmybuy.co.uk"] [uri "/wso-2025.php"] [unique_id "alQxNTawpHZwffLOvcMF6gAAAJQ"], referer: http://jimmybuy.co.uk/wso-2025.php [Sun Jul 12 18:28:37.272627 2026] [security2:error] [pid 1011499:tid 1011714] [client 47.128.17.20:37718] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.nwuav.nwuav.net"] [uri "/robots.txt"] [unique_id "alQxNTawpHZwffLOvcMF7AAAAM8"] [Sun Jul 12 18:28:37.588249 2026] [authz_core:error] [pid 1011499:tid 1011646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:37.588809 2026] [authz_core:error] [pid 1011499:tid 1011646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:38.100000 2026] [security2:error] [pid 1011499:tid 1011755] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi00MTQ4LWMvNTAzOTctbA=="] [unique_id "alQxNjawpHZwffLOvcMGBAAAAPg"] [Sun Jul 12 18:28:38.388288 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:38.388965 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:38.765286 2026] [security2:error] [pid 1011499:tid 1011717] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQxNjawpHZwffLOvcMGEQAAANI"] [Sun Jul 12 18:28:39.144222 2026] [security2:error] [pid 1011499:tid 1011690] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxNjawpHZwffLOvcMGHQAAALc"] [Sun Jul 12 18:28:39.144277 2026] [security2:error] [pid 1011499:tid 1011690] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxNjawpHZwffLOvcMGHQAAALc"] [Sun Jul 12 18:28:39.145443 2026] [security2:error] [pid 1011499:tid 1011760] [client 65.21.113.206:54544] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi00MTQ4LWMvNTAzOTctbA=="] [unique_id "alQxNjawpHZwffLOvcMGGQAAAP0"] [Sun Jul 12 18:28:39.199571 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:39.200090 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:39.388580 2026] [security2:error] [pid 1011499:tid 1011698] [client 168.100.149.240:34592] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/37960/bargainor/2308_did.jsp"] [unique_id "alQxNzawpHZwffLOvcMGMwAAAL8"] [Sun Jul 12 18:28:39.783517 2026] [security2:error] [pid 1011499:tid 1011692] [client 74.7.228.26:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "webmail.ilovedatacenters.com"] [uri "/___proxy_subdomain_webmail/robots.txt"] [unique_id "alQxNzawpHZwffLOvcMGQAAAALk"] [Sun Jul 12 18:28:39.989642 2026] [authz_core:error] [pid 1011499:tid 1011678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:39.990405 2026] [authz_core:error] [pid 1011499:tid 1011678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:40.241073 2026] [security2:error] [pid 1011499:tid 1011654] [client 172.245.21.149:64420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-content/plugins/membership-simplified-for-oap-members-only/download.php"] [unique_id "alQxODawpHZwffLOvcMGTgAAAJM"] [Sun Jul 12 18:28:40.729371 2026] [security2:error] [pid 1011499:tid 1011644] [client 47.245.120.20:59582] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxODawpHZwffLOvcMGYwAAAIk"] [Sun Jul 12 18:28:40.798951 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:40.799439 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:41.115072 2026] [security2:error] [pid 1011499:tid 1011686] [client 47.245.120.20:59588] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxOTawpHZwffLOvcMGbgAAALM"] [Sun Jul 12 18:28:41.257739 2026] [security2:error] [pid 1011499:tid 1011647] [client 34.78.93.148:47544] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "50.87.16.240"] [uri "/"] [unique_id "alQxOTawpHZwffLOvcMGbwAAAIw"] [Sun Jul 12 18:28:41.354083 2026] [security2:error] [pid 1011499:tid 1011709] [client 168.100.149.243:21504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38025/bargainor/2308_delphian.jsp"] [unique_id "alQxOTawpHZwffLOvcMGdgAAAMo"] [Sun Jul 12 18:28:41.500654 2026] [security2:error] [pid 1011499:tid 1011757] [client 47.245.120.20:59591] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxOTawpHZwffLOvcMGhgAAAPo"] [Sun Jul 12 18:28:41.613344 2026] [authz_core:error] [pid 1011499:tid 1011717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:41.613847 2026] [authz_core:error] [pid 1011499:tid 1011717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:41.816354 2026] [security2:error] [pid 1011499:tid 1011671] [client 47.245.120.20:59594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOTawpHZwffLOvcMGjQAAAKQ"] [Sun Jul 12 18:28:41.876806 2026] [security2:error] [pid 1011499:tid 1011711] [client 47.245.120.20:59596] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxOTawpHZwffLOvcMGjwAAAMw"] [Sun Jul 12 18:28:42.094061 2026] [security2:error] [pid 1011499:tid 1011610] [remote 185.191.171.6:0] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "fairfaxfence.com"] [uri "/robots.txt"] [unique_id "alQxOjawpHZwffLOvcMGkgAAuGM"] [Sun Jul 12 18:28:42.094516 2026] [security2:error] [pid 1011499:tid 1011691] [client 185.191.171.6:0] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "fairfaxfence.com"] [uri "/robots.txt"] [unique_id "alQxOjawpHZwffLOvcMGkgAAuGM"] [Sun Jul 12 18:28:42.130535 2026] [security2:error] [pid 1011499:tid 1011511] [remote 5.255.231.9:34352] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "www.cscmco.com"] [uri "/goods/0055698606.html"] [unique_id "alQxOjawpHZwffLOvcMGkwAAzQE"] [Sun Jul 12 18:28:42.215712 2026] [security2:error] [pid 1011499:tid 1011664] [client 47.245.120.20:59600] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOjawpHZwffLOvcMGlwAAAJ0"] [Sun Jul 12 18:28:42.252377 2026] [security2:error] [pid 1011499:tid 1011668] [client 47.245.120.20:59602] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxOjawpHZwffLOvcMGmAAAAKE"] [Sun Jul 12 18:28:42.373830 2026] [security2:error] [pid 1011499:tid 1011673] [client 104.234.19.76:23943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 76.19.234.104.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "spartan-web.com"] [uri "/wp-login.php"] [unique_id "alQxOjawpHZwffLOvcMGnAAAAKY"] [Sun Jul 12 18:28:42.396703 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:42.397174 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:42.613212 2026] [security2:error] [pid 1011499:tid 1011647] [client 47.245.120.20:59604] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOjawpHZwffLOvcMGowAAAIw"] [Sun Jul 12 18:28:42.638185 2026] [security2:error] [pid 1011499:tid 1011728] [client 47.245.120.20:59605] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery-org.connorpresbyterianchurch.com"] [uri "/index.php"] [unique_id "alQxOjawpHZwffLOvcMGpQAAAN0"] [Sun Jul 12 18:28:42.695974 2026] [security2:error] [pid 1011499:tid 1011720] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi00NDY4LWUvMzg1NTMtYg=="] [unique_id "alQxOjawpHZwffLOvcMGpwAAANU"] [Sun Jul 12 18:28:43.019750 2026] [security2:error] [pid 1011499:tid 1011740] [client 47.245.120.20:59608] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMGtwAAAOk"] [Sun Jul 12 18:28:43.090600 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.49.20.68:18392] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "50.87.17.225"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMGugAAAJI"] [Sun Jul 12 18:28:43.160556 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:43.161079 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:43.395120 2026] [security2:error] [pid 1011499:tid 1011663] [client 47.245.120.20:59616] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMGzQAAAJw"] [Sun Jul 12 18:28:43.428385 2026] [security2:error] [pid 1011499:tid 1011664] [client 168.100.149.228:48548] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38090/bargainor/2308_anisodactyli.jsp"] [unique_id "alQxOzawpHZwffLOvcMGzwAAAJ0"] [Sun Jul 12 18:28:43.602912 2026] [security2:error] [pid 1011499:tid 1011701] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMGwAAAAMI"] [Sun Jul 12 18:28:43.602979 2026] [security2:error] [pid 1011499:tid 1011701] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMGwAAAAMI"] [Sun Jul 12 18:28:43.605040 2026] [security2:error] [pid 1011499:tid 1011724] [client 65.21.113.206:48164] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi00NDY4LWUvMzg1NTMtYg=="] [unique_id "alQxOzawpHZwffLOvcMGvgAAANk"] [Sun Jul 12 18:28:43.721463 2026] [security2:error] [pid 1011499:tid 1011760] [client 172.245.21.149:64541] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxOzawpHZwffLOvcMG0wAAAP0"] [Sun Jul 12 18:28:43.795538 2026] [security2:error] [pid 1011499:tid 1011728] [client 47.245.120.20:59622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 20.120.245.47.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.ballymenapresbytery.org"] [uri "/index.php"] [unique_id "alQxOzawpHZwffLOvcMG3AAAAN0"] [Sun Jul 12 18:28:43.945900 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:43.946433 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:44.733704 2026] [core:error] [pid 1011499:tid 1011710] [client 47.253.5.130:37518] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:28:44.737463 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:44.737985 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:45.353923 2026] [security2:error] [pid 1011499:tid 1011679] [client 125.167.21.72:62276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxPTawpHZwffLOvcMHBgAAAKw"] [Sun Jul 12 18:28:45.354232 2026] [security2:error] [pid 1011499:tid 1011679] [client 125.167.21.72:62276] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxPTawpHZwffLOvcMHBgAAAKw"] [Sun Jul 12 18:28:45.358652 2026] [security2:error] [pid 1011499:tid 1011760] [client 168.100.149.191:63518] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38155/bargainor/2308_birefraction.jsp"] [unique_id "alQxPTawpHZwffLOvcMHBwAAAP0"] [Sun Jul 12 18:28:45.442572 2026] [security2:error] [pid 1011499:tid 1011668] [client 186.189.88.33:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxPTawpHZwffLOvcMG-gAAAKE"] [Sun Jul 12 18:28:45.579322 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:45.579965 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:45.606073 2026] [security2:error] [pid 1011499:tid 1011675] [client 184.154.139.52:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mimisobsessions.com"] [uri "/cgi-sys/404.html"] [unique_id "alQxPTawpHZwffLOvcMHEAAAAKg"] [Sun Jul 12 18:28:45.607128 2026] [security2:error] [pid 1011499:tid 1011660] [client 184.154.139.52:57622] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mimisobsessions.com"] [uri "/th1s_1s_a_4o4.html"] [unique_id "alQxPTawpHZwffLOvcMHDgAAAJk"] [Sun Jul 12 18:28:45.721936 2026] [security2:error] [pid 1011499:tid 1011704] [client 57.141.18.61:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "neighborspacebaltimorecounty.org"] [uri "/index.php"] [unique_id "alQxPTawpHZwffLOvcMHCAAAAMU"] [Sun Jul 12 18:28:45.775267 2026] [proxy:warn] [pid 1011499:tid 1011714] [client 192.142.28.77:51224] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /414.shtml [Sun Jul 12 18:28:45.775347 2026] [proxy:error] [pid 1011499:tid 1011714] (70014)End of file found: [client 192.142.28.77:51224] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 192.142.28.77 () [Sun Jul 12 18:28:46.120994 2026] [security2:error] [pid 1011499:tid 1011748] [client 40.223.214.92:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxPTawpHZwffLOvcMHEwAAAPE"] [Sun Jul 12 18:28:46.329032 2026] [authz_core:error] [pid 1011499:tid 1011688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:46.329749 2026] [authz_core:error] [pid 1011499:tid 1011688] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:46.442000 2026] [security2:error] [pid 1011499:tid 1011690] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi00NDY4LXUvMzg0OTctaA=="] [unique_id "alQxPjawpHZwffLOvcMHHAAAALc"] [Sun Jul 12 18:28:47.068096 2026] [authz_core:error] [pid 1011499:tid 1011685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:47.068574 2026] [authz_core:error] [pid 1011499:tid 1011685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:47.342842 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxPjawpHZwffLOvcMHLwAAAN0"] [Sun Jul 12 18:28:47.342887 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxPjawpHZwffLOvcMHLwAAAN0"] [Sun Jul 12 18:28:47.346763 2026] [security2:error] [pid 1011499:tid 1011742] [client 65.21.113.206:48178] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi00NDY4LXUvMzg0OTctaA=="] [unique_id "alQxPjawpHZwffLOvcMHKgAAAOs"] [Sun Jul 12 18:28:47.397873 2026] [security2:error] [pid 1011499:tid 1011755] [client 168.100.149.197:31310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38220/bargainor/2308_mediator.jsp"] [unique_id "alQxPzawpHZwffLOvcMHOgAAAPg"] [Sun Jul 12 18:28:47.811391 2026] [authz_core:error] [pid 1011499:tid 1011706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:47.811908 2026] [authz_core:error] [pid 1011499:tid 1011706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:48.604859 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:48.605404 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:48.711175 2026] [security2:error] [pid 1011499:tid 1011683] [client 168.100.149.223:51336] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38285/bargainor/2308_gurian.jsp"] [unique_id "alQxQDawpHZwffLOvcMHYwAAALA"] [Sun Jul 12 18:28:48.999435 2026] [security2:error] [pid 1011499:tid 1011757] [client 172.245.21.149:64701] ModSecurity: Access denied with code 406 (phase 1). Pattern match "wp-config" at ARGS:file. [file "/opt/mod_security/blacklists/nodupconfig.conf"] [line "1"] [id "77789"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxQDawpHZwffLOvcMHbAAAAPo"] [Sun Jul 12 18:28:49.359299 2026] [authz_core:error] [pid 1011499:tid 1011740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:49.359984 2026] [authz_core:error] [pid 1011499:tid 1011740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:49.965188 2026] [security2:error] [pid 1011499:tid 1011693] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi00NDcwLXkvMTIyNjEtdQ=="] [unique_id "alQxQTawpHZwffLOvcMHhgAAALo"] [Sun Jul 12 18:28:50.146820 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:50.147394 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:50.341286 2026] [security2:error] [pid 1011499:tid 1011696] [client 184.154.139.52:0] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mimisobsessions.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "alQxQjawpHZwffLOvcMHlAAAAL0"] [Sun Jul 12 18:28:50.344356 2026] [security2:error] [pid 1011499:tid 1011674] [client 184.154.139.52:60172] ModSecurity: Warning. Matched phrase "SiteLockSpider" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mimisobsessions.com"] [uri "/wp-content/plugins/jetpack/readme.txt"] [unique_id "alQxQjawpHZwffLOvcMHkgAAAKc"] [Sun Jul 12 18:28:50.841201 2026] [security2:error] [pid 1011499:tid 1011763] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxQjawpHZwffLOvcMHnAAAAQA"] [Sun Jul 12 18:28:50.842621 2026] [security2:error] [pid 1011499:tid 1011763] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxQjawpHZwffLOvcMHnAAAAQA"] [Sun Jul 12 18:28:50.843628 2026] [security2:error] [pid 1011499:tid 1011646] [client 65.21.113.206:48190] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi00NDcwLXkvMTIyNjEtdQ=="] [unique_id "alQxQjawpHZwffLOvcMHmQAAAIs"] [Sun Jul 12 18:28:50.919038 2026] [authz_core:error] [pid 1011499:tid 1011740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:50.919516 2026] [authz_core:error] [pid 1011499:tid 1011740] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:50.992163 2026] [security2:error] [pid 1011499:tid 1011727] [client 151.243.11.245:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "74.220.208.93"] [uri "/index.php"] [unique_id "alQxQDawpHZwffLOvcMHZgAAANw"] [Sun Jul 12 18:28:51.399127 2026] [security2:error] [pid 1011499:tid 1011745] [client 168.100.149.200:32074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38350/bargainor/2308_monkey.jsp"] [unique_id "alQxQzawpHZwffLOvcMHugAAAO4"] [Sun Jul 12 18:28:51.708867 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:51.709366 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:51.878488 2026] [cgid:error] [pid 1011499:tid 1011674] [client 202.46.62.64:17230] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/emergency-phone-labels-stock-p-431.html?osCsid=unekl9culem36ljl2180ob4bp7 [Sun Jul 12 18:28:52.054210 2026] [security2:error] [pid 1011499:tid 1011663] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMH1wAAAJw"] [Sun Jul 12 18:28:52.063001 2026] [security2:error] [pid 1011499:tid 1011757] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMH2wAAAPo"] [Sun Jul 12 18:28:52.067308 2026] [security2:error] [pid 1011499:tid 1011662] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMH3wAAAJs"] [Sun Jul 12 18:28:52.125170 2026] [security2:error] [pid 1011499:tid 1011719] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMH4AAA1Fk"] [Sun Jul 12 18:28:52.127968 2026] [security2:error] [pid 1011499:tid 1011695] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMH4wAAvB4"] [Sun Jul 12 18:28:52.263200 2026] [security2:error] [pid 1011499:tid 1011649] [client 172.245.21.149:64896] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-admin/admin-ajax\\\\.php\\\\?action\\\\=(revslider|kbslider)_show_image\\\\&img\\\\=.*?\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "303"] [id "900258"] [msg "Slider LFI Exploit"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxRDawpHZwffLOvcMH6QAAAI4"] [Sun Jul 12 18:28:52.501730 2026] [security2:error] [pid 1011499:tid 1011743] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxRDawpHZwffLOvcMH7gAAAOw"] [Sun Jul 12 18:28:52.509480 2026] [security2:error] [pid 1011499:tid 1011707] [client 15.235.164.211:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theprogressionplaybook.com"] [uri "/index.php"] [unique_id "alQxRDawpHZwffLOvcMH7wAAAMg"] [Sun Jul 12 18:28:52.539234 2026] [authz_core:error] [pid 1011499:tid 1011741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:52.539745 2026] [authz_core:error] [pid 1011499:tid 1011741] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:52.712835 2026] [security2:error] [pid 1011499:tid 1011642] [client 168.100.149.11:22506] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38415/bargainor/2308_impeccance.jsp"] [unique_id "alQxRDawpHZwffLOvcMIDgAAAIc"] [Sun Jul 12 18:28:53.311928 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:53.312420 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:53.329514 2026] [security2:error] [pid 1011499:tid 1011692] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi00NzkyLXovMjM0OS15"] [unique_id "alQxRTawpHZwffLOvcMIOgAAALk"] [Sun Jul 12 18:28:53.943904 2026] [security2:error] [pid 1011499:tid 1011740] [client 175.158.236.165:36317] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQxRTawpHZwffLOvcMIPAAA6WE"], referer: https://prestone.com.ph/prestone-asian-vehicles-green-coolant/ [Sun Jul 12 18:28:53.961066 2026] [security2:error] [pid 1011499:tid 1011664] [client 172.252.153.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxRTawpHZwffLOvcMITQAAAJ0"] [Sun Jul 12 18:28:54.033077 2026] [security2:error] [pid 1011499:tid 1011717] [client 152.232.80.168:65007] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/wp-config.php"] [unique_id "alQxRjawpHZwffLOvcMIawAAANI"] [Sun Jul 12 18:28:54.107404 2026] [authz_core:error] [pid 1011499:tid 1011667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:54.108088 2026] [authz_core:error] [pid 1011499:tid 1011667] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:54.413790 2026] [security2:error] [pid 1011499:tid 1011698] [client 103.155.118.169:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxRTawpHZwffLOvcMIXwAAAL8"] [Sun Jul 12 18:28:54.480008 2026] [security2:error] [pid 1011499:tid 1011684] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxRTawpHZwffLOvcMIYAAAALE"] [Sun Jul 12 18:28:54.480073 2026] [security2:error] [pid 1011499:tid 1011684] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxRTawpHZwffLOvcMIYAAAALE"] [Sun Jul 12 18:28:54.485221 2026] [security2:error] [pid 1011499:tid 1011767] [client 65.21.113.206:42698] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi00NzkyLXovMjM0OS15"] [unique_id "alQxRTawpHZwffLOvcMIWwAAAQQ"] [Sun Jul 12 18:28:54.551687 2026] [security2:error] [pid 1011499:tid 1011529] [remote 175.158.236.165:36317] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQxRjawpHZwffLOvcMIbQABARM"], referer: https://prestone.com.ph/prestone-asian-vehicles-green-coolant/ [Sun Jul 12 18:28:54.615812 2026] [security2:error] [pid 1011499:tid 1011668] [client 172.245.21.149:65019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxRjawpHZwffLOvcMIfgAAAKE"] [Sun Jul 12 18:28:54.722591 2026] [security2:error] [pid 1011499:tid 1011655] [client 168.100.149.210:20094] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38480/bargainor/2308_gunz.jsp"] [unique_id "alQxRjawpHZwffLOvcMIhAAAAJQ"] [Sun Jul 12 18:28:54.910801 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:54.911501 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:54.954634 2026] [security2:error] [pid 1011499:tid 1011747] [client 152.232.80.168:52787] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/app/etc/env.php"] [unique_id "alQxRjawpHZwffLOvcMIkwAAAPA"] [Sun Jul 12 18:28:55.074577 2026] [security2:error] [pid 1011499:tid 1011521] [remote 15.235.167.25:57522] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxRzawpHZwffLOvcMInAAA2gs"] [Sun Jul 12 18:28:55.123464 2026] [security2:error] [pid 1011499:tid 1011521] [remote 15.235.167.25:57522] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 25.167.235.15.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxRzawpHZwffLOvcMInAAA2gs"] [Sun Jul 12 18:28:55.190811 2026] [security2:error] [pid 1011499:tid 1011637] [remote 175.158.236.165:36317] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "prestone.com.ph"] [uri "/index.php"] [unique_id "alQxRjawpHZwffLOvcMIiwAAmH4"], referer: https://prestone.com.ph/prestone-asian-vehicles-green-coolant/ [Sun Jul 12 18:28:55.242573 2026] [security2:error] [pid 1011499:tid 1011763] [client 52.45.29.57:56981] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "srijb.org"] [uri "/jamaica-bay-community-flood-fellowship-program/"] [unique_id "alQxRzawpHZwffLOvcMIpAAAAQA"] [Sun Jul 12 18:28:55.275050 2026] [security2:error] [pid 1011499:tid 1011679] [client 71.58.149.135:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "xrayalphacharlie.com"] [uri "/index.php"] [unique_id "alQxQzawpHZwffLOvcMHuAAAAKw"] [Sun Jul 12 18:28:55.598422 2026] [security2:error] [pid 1011499:tid 1011661] [client 45.191.34.239:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxRzawpHZwffLOvcMInwAAAJo"] [Sun Jul 12 18:28:55.607093 2026] [security2:error] [pid 1011499:tid 1011732] [client 152.232.80.168:55253] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php.bak"] [unique_id "alQxRzawpHZwffLOvcMIswAAAOE"] [Sun Jul 12 18:28:55.673659 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:55.674300 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:55.695434 2026] [security2:error] [pid 1011499:tid 1011672] [client 152.232.80.168:58597] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config.php"] [unique_id "alQxRzawpHZwffLOvcMItgAAAKU"] [Sun Jul 12 18:28:55.833852 2026] [security2:error] [pid 1011499:tid 1011730] [client 125.167.21.72:62737] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxRzawpHZwffLOvcMIvAAAAN8"] [Sun Jul 12 18:28:55.834313 2026] [security2:error] [pid 1011499:tid 1011730] [client 125.167.21.72:62737] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxRzawpHZwffLOvcMIvAAAAN8"] [Sun Jul 12 18:28:56.291929 2026] [security2:error] [pid 1011499:tid 1011722] [client 152.232.80.168:60140] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php.old"] [unique_id "alQxSDawpHZwffLOvcMI0gAAANc"] [Sun Jul 12 18:28:56.403737 2026] [authz_core:error] [pid 1011499:tid 1011650] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:56.404270 2026] [authz_core:error] [pid 1011499:tid 1011650] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:56.729292 2026] [security2:error] [pid 1011499:tid 1011661] [client 168.100.149.242:54646] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38545/bargainor/2308_monadically.jsp"] [unique_id "alQxSDawpHZwffLOvcMI2gAAAJo"] [Sun Jul 12 18:28:56.941646 2026] [security2:error] [pid 1011499:tid 1011695] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi01MzU4LWUvMzg1NTMtYg=="] [unique_id "alQxSDawpHZwffLOvcMI3QAAALw"] [Sun Jul 12 18:28:57.167449 2026] [security2:error] [pid 1011499:tid 1011642] [client 207.180.11.31:47752] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI5wAAAIc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.173978 2026] [security2:error] [pid 1011499:tid 1011646] [client 216.75.132.60:42820] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI6AAAAIs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.187084 2026] [security2:error] [pid 1011499:tid 1011697] [client 143.14.6.94:45384] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI5gAAAL4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.233418 2026] [security2:error] [pid 1011499:tid 1011732] [client 207.180.11.31:47736] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI6gAAAOE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.235481 2026] [security2:error] [pid 1011499:tid 1011751] [client 143.14.6.245:46608] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI6wAAAPQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.236925 2026] [security2:error] [pid 1011499:tid 1011682] [client 143.14.6.245:46620] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI7AAAAK8"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.237652 2026] [security2:error] [pid 1011499:tid 1011672] [client 143.14.6.117:62596] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI7gAAAKU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.247548 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:57.248098 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:57.250412 2026] [security2:error] [pid 1011499:tid 1011692] [client 143.14.6.94:45400] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI7QAAALk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.252371 2026] [security2:error] [pid 1011499:tid 1011683] [client 216.75.132.233:61486] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI6QAAALA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.271528 2026] [security2:error] [pid 1011499:tid 1011671] [client 143.14.6.94:45388] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI8QAAAKQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.334118 2026] [security2:error] [pid 1011499:tid 1011689] [client 143.20.253.155:17496] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSTawpHZwffLOvcMI8wAAALY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:57.849927 2026] [security2:error] [pid 1011499:tid 1011759] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxSTawpHZwffLOvcMI-QAAAPw"] [Sun Jul 12 18:28:57.849999 2026] [security2:error] [pid 1011499:tid 1011759] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxSTawpHZwffLOvcMI-QAAAPw"] [Sun Jul 12 18:28:57.852675 2026] [security2:error] [pid 1011499:tid 1011727] [client 65.21.113.206:42710] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi01MzU4LWUvMzg1NTMtYg=="] [unique_id "alQxSTawpHZwffLOvcMI9gAAANw"] [Sun Jul 12 18:28:58.018913 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:58.019403 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:58.038346 2026] [security2:error] [pid 1011499:tid 1011696] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQxSTawpHZwffLOvcMJBQAAAL0"] [Sun Jul 12 18:28:58.038544 2026] [security2:error] [pid 1011499:tid 1011752] [client 172.245.21.149:65196] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-admin/admin-ajax\\\\.php\\\\?action\\\\=(revslider|kbslider)_show_image\\\\&img\\\\=.*?\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "303"] [id "900258"] [msg "Slider LFI Exploit"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxSjawpHZwffLOvcMJEwAAAPU"] [Sun Jul 12 18:28:58.082755 2026] [security2:error] [pid 1011499:tid 1011740] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.languagesofyoga.sarahjoyyoga.com"] [uri "/index.php"] [unique_id "alQxSTawpHZwffLOvcMJBAAAAOk"] [Sun Jul 12 18:28:58.343756 2026] [security2:error] [pid 1011499:tid 1011640] [client 152.232.80.168:55211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/p.php"] [unique_id "alQxSjawpHZwffLOvcMJIQAAAIU"] [Sun Jul 12 18:28:58.794088 2026] [authz_core:error] [pid 1011499:tid 1011704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:58.794558 2026] [authz_core:error] [pid 1011499:tid 1011704] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:58.818535 2026] [security2:error] [pid 1011499:tid 1011658] [client 85.225.186.150:42262] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSjawpHZwffLOvcMJMwAAAJc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:59.402117 2026] [security2:error] [pid 1011499:tid 1011684] [client 168.100.149.172:46206] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38610/bargainor/2308_enhalo.jsp"] [unique_id "alQxSzawpHZwffLOvcMJQgAAALE"] [Sun Jul 12 18:28:59.542726 2026] [security2:error] [pid 1011499:tid 1011702] [client 181.36.185.236:50250] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSzawpHZwffLOvcMJRAAAAMM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:59.558835 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:28:59.559395 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:28:59.568934 2026] [security2:error] [pid 1011499:tid 1011717] [client 170.245.10.26:33516] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxSzawpHZwffLOvcMJRQAAANI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:28:59.624523 2026] [security2:error] [pid 1011499:tid 1011724] [client 172.245.21.149:65373] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "alQxSzawpHZwffLOvcMJUAAAANk"] [Sun Jul 12 18:29:00.078328 2026] [security2:error] [pid 1011499:tid 1011766] [client 74.7.228.59:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mbitschoolstore.com"] [uri "/index.php"] [unique_id "alQxSzawpHZwffLOvcMJTAAAAQM"] [Sun Jul 12 18:29:00.079780 2026] [security2:error] [pid 1011499:tid 1011698] [client 74.7.228.59:50182] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "mbitschoolstore.com"] [uri "/robots.txt"] [unique_id "alQxSzawpHZwffLOvcMJRwAAv0U"] [Sun Jul 12 18:29:00.128775 2026] [security2:error] [pid 1011499:tid 1011765] [client 177.30.127.111:36622] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTDawpHZwffLOvcMJaAAAAQI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:00.240721 2026] [security2:error] [pid 1011499:tid 1011741] [client 179.125.249.241:47804] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTDawpHZwffLOvcMJagAAAOo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:00.390659 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:00.391178 2026] [authz_core:error] [pid 1011499:tid 1011718] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:00.632854 2026] [security2:error] [pid 1011499:tid 1011716] [client 190.245.137.137:57944] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTDawpHZwffLOvcMJgAAAANE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:00.803072 2026] [security2:error] [pid 1011499:tid 1011760] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi01MzU4LXUvMzg0OTctaA=="] [unique_id "alQxTDawpHZwffLOvcMJjgAAAP0"] [Sun Jul 12 18:29:01.089341 2026] [security2:error] [pid 1011499:tid 1011743] [client 14.175.28.159:44330] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTDawpHZwffLOvcMJkwAAAOw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:01.156475 2026] [authz_core:error] [pid 1011499:tid 1011640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:01.156997 2026] [authz_core:error] [pid 1011499:tid 1011640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:01.415360 2026] [security2:error] [pid 1011499:tid 1011767] [client 168.100.149.171:54372] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38675/bargainor/2308_metalogical.jsp"] [unique_id "alQxTTawpHZwffLOvcMJsgAAAQQ"] [Sun Jul 12 18:29:01.748434 2026] [security2:error] [pid 1011499:tid 1011736] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxTTawpHZwffLOvcMJrwAAAOU"] [Sun Jul 12 18:29:01.748488 2026] [security2:error] [pid 1011499:tid 1011736] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxTTawpHZwffLOvcMJrwAAAOU"] [Sun Jul 12 18:29:01.749592 2026] [security2:error] [pid 1011499:tid 1011741] [client 65.21.113.206:42712] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi01MzU4LXUvMzg0OTctaA=="] [unique_id "alQxTTawpHZwffLOvcMJpAAAAOo"] [Sun Jul 12 18:29:01.756250 2026] [security2:error] [pid 1011499:tid 1011663] [client 172.245.21.149:65532] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin.php"] [unique_id "alQxTTawpHZwffLOvcMJtgAAAJw"] [Sun Jul 12 18:29:01.962197 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:01.963010 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:02.308898 2026] [security2:error] [pid 1011499:tid 1011744] [client 143.137.33.213:24248] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTjawpHZwffLOvcMJwAAAAO0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:02.851001 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:02.851783 2026] [authz_core:error] [pid 1011499:tid 1011682] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:02.851950 2026] [security2:error] [pid 1011499:tid 1011708] [client 196.207.215.4:63755] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxTjawpHZwffLOvcMJ1wAAAMk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:02.974926 2026] [security2:error] [pid 1011499:tid 1011671] [client 176.29.168.6:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxTjawpHZwffLOvcMJxAAAAKQ"] [Sun Jul 12 18:29:03.405630 2026] [security2:error] [pid 1011499:tid 1011689] [client 168.100.149.142:49614] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38740/bargainor/2308_psychoreflex.jsp"] [unique_id "alQxTzawpHZwffLOvcMJ4wAAALY"] [Sun Jul 12 18:29:03.467964 2026] [security2:error] [pid 1011499:tid 1011716] [client 172.245.21.149:49299] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-admin/admin.php"] [unique_id "alQxTzawpHZwffLOvcMJ6wAAANE"] [Sun Jul 12 18:29:03.589133 2026] [security2:error] [pid 1011499:tid 1011612] [remote 103.133.216.219:47634] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxTzawpHZwffLOvcMJ8QAA2GU"] [Sun Jul 12 18:29:03.615990 2026] [authz_core:error] [pid 1011499:tid 1011742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:03.616477 2026] [authz_core:error] [pid 1011499:tid 1011742] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:03.678710 2026] [proxy:warn] [pid 1011499:tid 1011730] [client 192.142.28.77:42248] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /414.shtml [Sun Jul 12 18:29:03.678814 2026] [proxy:error] [pid 1011499:tid 1011730] (70014)End of file found: [client 192.142.28.77:42248] AH01095: prefetch request body failed to 127.0.0.1:8080 (127.0.0.1) from 192.142.28.77 () [Sun Jul 12 18:29:04.282304 2026] [security2:error] [pid 1011499:tid 1011697] [client 41.121.161.224:51714] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxUDawpHZwffLOvcMKCAAAAL4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:29:04.425594 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:04.426157 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:04.734547 2026] [security2:error] [pid 1011499:tid 1011691] [client 168.100.149.232:47406] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38805/bargainor/2308_mailable.jsp"] [unique_id "alQxUDawpHZwffLOvcMKGwAAALg"] [Sun Jul 12 18:29:04.969336 2026] [security2:error] [pid 1011499:tid 1011738] [client 65.21.113.206:52236] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi01ODg2LXkvMzY2NDktaw=="] [unique_id "alQxUDawpHZwffLOvcMKHwAAAOc"] [Sun Jul 12 18:29:05.263601 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:05.264325 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:05.527018 2026] [security2:error] [pid 1011499:tid 1011718] [client 177.93.10.9:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQxUDawpHZwffLOvcMKBAAAANM"] [Sun Jul 12 18:29:05.957428 2026] [security2:error] [pid 1011499:tid 1011703] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxUTawpHZwffLOvcMKOAAAAMQ"] [Sun Jul 12 18:29:05.957627 2026] [security2:error] [pid 1011499:tid 1011703] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxUTawpHZwffLOvcMKOAAAAMQ"] [Sun Jul 12 18:29:05.974263 2026] [security2:error] [pid 1011499:tid 1011661] [client 65.21.113.206:39130] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi01ODg2LXkvMzY2NDktaw=="] [unique_id "alQxUTawpHZwffLOvcMKNQAAAJo"] [Sun Jul 12 18:29:06.076779 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:06.077265 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:06.628572 2026] [security2:error] [pid 1011499:tid 1011767] [client 172.245.21.149:49431] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/wp-content/force-download.php"] [unique_id "alQxUjawpHZwffLOvcMKXAAAAQQ"] [Sun Jul 12 18:29:06.727739 2026] [security2:error] [pid 1011499:tid 1011747] [client 168.100.149.26:61908] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38870/bargainor/2308_epidemiology.jsp"] [unique_id "alQxUjawpHZwffLOvcMKYQAAAPA"] [Sun Jul 12 18:29:06.868827 2026] [authz_core:error] [pid 1011499:tid 1011678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:06.869360 2026] [authz_core:error] [pid 1011499:tid 1011678] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:07.172213 2026] [security2:error] [pid 1011499:tid 1011676] [client 57.141.18.3:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxUjawpHZwffLOvcMKaQAAAKk"] [Sun Jul 12 18:29:07.432048 2026] [security2:error] [pid 1011499:tid 1011728] [client 152.232.80.168:56795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/parameters.php"] [unique_id "alQxUzawpHZwffLOvcMKpQAAAN0"] [Sun Jul 12 18:29:07.497495 2026] [security2:error] [pid 1011499:tid 1011738] [client 57.141.18.88:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxUzawpHZwffLOvcMKiwAAAOc"] [Sun Jul 12 18:29:07.506416 2026] [security2:error] [pid 1011499:tid 1011648] [client 152.232.80.168:56302] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/includes/configure.php"] [unique_id "alQxUzawpHZwffLOvcMKrQAAAI0"] [Sun Jul 12 18:29:07.506751 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 3.130.168.2:0] AH01630: client denied by server configuration: /home1/prcmanag/public_html/php.ini, referer: http://50.87.228.180/ [Sun Jul 12 18:29:07.507214 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 3.130.168.2:0] AH01630: client denied by server configuration: /home1/prcmanag/public_html/error_log, referer: http://50.87.228.180/ [Sun Jul 12 18:29:07.641997 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:07.642611 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:07.760342 2026] [security2:error] [pid 1011499:tid 1011707] [client 125.167.21.72:63181] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxUzawpHZwffLOvcMK2gAAAMg"] [Sun Jul 12 18:29:07.760952 2026] [security2:error] [pid 1011499:tid 1011707] [client 125.167.21.72:63181] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxUzawpHZwffLOvcMK2gAAAMg"] [Sun Jul 12 18:29:08.175171 2026] [core:error] [pid 1011499:tid 1011689] [client 74.7.228.1:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:29:08.175225 2026] [core:error] [pid 1011499:tid 1011689] [client 74.7.228.1:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:29:08.175443 2026] [security2:error] [pid 1011499:tid 1011689] [client 74.7.228.1:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.newsite.gethsemanegardens.com"] [uri "/index.php"] [unique_id "alQxVDawpHZwffLOvcMK6wAAALY"] [Sun Jul 12 18:29:08.176646 2026] [security2:error] [pid 1011499:tid 1011718] [client 74.7.228.1:47900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "500"] [hostname "www.newsite.gethsemanegardens.com"] [uri "/robots.txt"] [unique_id "alQxVDawpHZwffLOvcMK5wAA0wM"] [Sun Jul 12 18:29:08.197997 2026] [security2:error] [pid 1011499:tid 1011740] [client 74.7.230.31:53388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "www.newsite.islandoaksmedia.com"] [uri "/robots.txt"] [unique_id "alQxVDawpHZwffLOvcMK7wAA6TA"] [Sun Jul 12 18:29:08.337042 2026] [security2:error] [pid 1011499:tid 1011741] [client 149.28.43.156:53006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.43.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "maryrossillustration.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxVDawpHZwffLOvcMK_gAAAOo"] [Sun Jul 12 18:29:08.452012 2026] [authz_core:error] [pid 1011499:tid 1011677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:08.452527 2026] [authz_core:error] [pid 1011499:tid 1011677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:08.864639 2026] [security2:error] [pid 1011499:tid 1011676] [client 172.252.91.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxVDawpHZwffLOvcMLBAAAAKk"] [Sun Jul 12 18:29:09.244861 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:09.245393 2026] [authz_core:error] [pid 1011499:tid 1011642] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:09.380789 2026] [security2:error] [pid 1011499:tid 1011757] [client 168.100.149.72:18680] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/38935/bargainor/2308_secque.jsp"] [unique_id "alQxVTawpHZwffLOvcMLLQAAAPo"] [Sun Jul 12 18:29:09.988763 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:09.989323 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:10.187562 2026] [security2:error] [pid 1011499:tid 1011563] [remote 47.128.111.138:57288] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "www.wwcufm.com"] [uri "/robots.txt"] [unique_id "alQxVjawpHZwffLOvcMLQgAA_TQ"] [Sun Jul 12 18:29:10.383172 2026] [security2:error] [pid 1011499:tid 1011699] [client 51.179.193.232:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxVTawpHZwffLOvcMLOwAAAMA"] [Sun Jul 12 18:29:10.412884 2026] [security2:error] [pid 1011499:tid 1011761] [client 85.208.96.212:40562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "coloradodancesport.com"] [uri "/event/contemporary/2025-03-17/"] [unique_id "alQxVjawpHZwffLOvcMLRAAAAP4"] [Sun Jul 12 18:29:10.413115 2026] [security2:error] [pid 1011499:tid 1011761] [client 85.208.96.212:40562] ModSecurity: Warning. Matched phrase "Semrush" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "coloradodancesport.com"] [uri "/event/contemporary/2025-03-17/"] [unique_id "alQxVjawpHZwffLOvcMLRAAAAP4"] [Sun Jul 12 18:29:10.596802 2026] [security2:error] [pid 1011499:tid 1011696] [client 20.63.87.152:25531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/.dj/index.php"] [unique_id "alQxVjawpHZwffLOvcMLTgAAAL0"] [Sun Jul 12 18:29:10.743620 2026] [security2:error] [pid 1011499:tid 1011715] [client 168.100.149.26:61924] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39000/bargainor/2308_dislevelment.jsp"] [unique_id "alQxVjawpHZwffLOvcMLWQAAANA"] [Sun Jul 12 18:29:10.753829 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:10.754318 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:10.970036 2026] [security2:error] [pid 1011499:tid 1011754] [client 20.63.87.152:30698] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/.trash7206/index.php"] [unique_id "alQxVjawpHZwffLOvcMLYQAAAPc"] [Sun Jul 12 18:29:11.072545 2026] [security2:error] [pid 1011499:tid 1011657] [client 186.227.88.218:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxVjawpHZwffLOvcMLWAAAAJY"] [Sun Jul 12 18:29:11.273898 2026] [security2:error] [pid 1011499:tid 1011740] [client 51.68.111.219:22737] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.thomasdatadesign.com"] [uri "/robots.txt"] [unique_id "alQxVzawpHZwffLOvcMLaAAAAOk"] [Sun Jul 12 18:29:11.274150 2026] [security2:error] [pid 1011499:tid 1011740] [client 51.68.111.219:22737] ModSecurity: Warning. Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.thomasdatadesign.com"] [uri "/robots.txt"] [unique_id "alQxVzawpHZwffLOvcMLaAAAAOk"] [Sun Jul 12 18:29:11.326886 2026] [autoindex:error] [pid 1011499:tid 1011688] [client 20.63.87.152:32622] AH01276: Cannot serve directory /var/www/html/.well-known/: No matching DirectoryIndex (index.cgi,index.php,index.html,index.htm) found, and server-generated directory index forbidden by Options directive [Sun Jul 12 18:29:11.330165 2026] [security2:error] [pid 1011499:tid 1011753] [client 172.245.21.149:49638] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 149.21.245.172.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "opportunityalliance.com"] [uri "/force-download.php"] [unique_id "alQxVzawpHZwffLOvcMLagAAAPY"] [Sun Jul 12 18:29:11.446731 2026] [security2:error] [pid 1011499:tid 1011741] [client 20.63.87.152:32622] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQxVzawpHZwffLOvcMLcgAAAOo"] [Sun Jul 12 18:29:11.503466 2026] [security2:error] [pid 1011499:tid 1011555] [remote 202.46.62.15:62371] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 15.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/create_account.php"] [unique_id "alQxVzawpHZwffLOvcMLcwAA4yw"] [Sun Jul 12 18:29:11.536991 2026] [authz_core:error] [pid 1011499:tid 1011691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:11.537472 2026] [authz_core:error] [pid 1011499:tid 1011691] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:11.668360 2026] [security2:error] [pid 1011499:tid 1011564] [remote 103.133.216.219:44840] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxVzawpHZwffLOvcMLegABBDU"] [Sun Jul 12 18:29:11.685257 2026] [security2:error] [pid 1011499:tid 1011686] [client 20.63.87.152:5869] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQxVzawpHZwffLOvcMLewAAALM"] [Sun Jul 12 18:29:11.780814 2026] [security2:error] [pid 1011499:tid 1011671] [client 65.21.113.206:39956] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQxVzawpHZwffLOvcMLfwAAAKQ"] [Sun Jul 12 18:29:11.933306 2026] [security2:error] [pid 1011499:tid 1011644] [client 20.63.87.152:4094] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQxVzawpHZwffLOvcMLhQAAAIk"] [Sun Jul 12 18:29:11.989183 2026] [fcgid:warn] [pid 1011499:tid 1011676] (70014)End of file found: [client 66.132.195.67:30090] mod_fcgid: can't get data from http client [Sun Jul 12 18:29:12.184152 2026] [security2:error] [pid 1011499:tid 1011766] [client 136.114.53.121:60592] ModSecurity: Access denied with code 406 (phase 1). Pattern match "python-requests|python-urllib" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "1460"] [id "909111"] [msg "Python UA brute"] [hostname "goodwebsitebusinessideas.com"] [uri "/"] [unique_id "alQxWDawpHZwffLOvcMLlAAAAQM"] [Sun Jul 12 18:29:12.209143 2026] [security2:error] [pid 1011499:tid 1011720] [client 20.63.87.152:31512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/0.kb-v3.php"] [unique_id "alQxWDawpHZwffLOvcMLlgAAANU"] [Sun Jul 12 18:29:12.279226 2026] [security2:error] [pid 1011499:tid 1011700] [client 65.21.113.206:39138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQxWDawpHZwffLOvcMLmwAAAME"] [Sun Jul 12 18:29:12.310730 2026] [lsapi:warn] [pid 1011499:tid 1011645] [client 192.0.102.146:48054] [host rapports-minoritaires.net] Backend log: PHP Warning: Undefined property: Tooltipck\\Front::$fields in /home1/rapport2/public_html/wp-content/plugins/tooltip-ck/includes/class.front.php on line 99\n [Sun Jul 12 18:29:12.356894 2026] [authz_core:error] [pid 1011499:tid 1011756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:12.357386 2026] [authz_core:error] [pid 1011499:tid 1011756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:12.560319 2026] [security2:error] [pid 1011499:tid 1011753] [client 20.63.87.152:25531] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/0.php"] [unique_id "alQxWDawpHZwffLOvcMLpgAAAPY"] [Sun Jul 12 18:29:12.600036 2026] [security2:error] [pid 1011499:tid 1011691] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi02MzgtZy8yNjcwOS02"] [unique_id "alQxWDawpHZwffLOvcMLpwAAALg"] [Sun Jul 12 18:29:12.732496 2026] [security2:error] [pid 1011499:tid 1011702] [client 154.54.100.177:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "mail.fitlifewithvatsa.com"] [uri "/index.php"] [unique_id "alQxVDawpHZwffLOvcMK8wAAAMM"] [Sun Jul 12 18:29:12.734477 2026] [security2:error] [pid 1011499:tid 1011738] [client 168.100.149.3:46026] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39065/bargainor/2308_limnoria.jsp"] [unique_id "alQxWDawpHZwffLOvcMLsAAAAOc"] [Sun Jul 12 18:29:12.774687 2026] [security2:error] [pid 1011499:tid 1011698] [client 65.21.113.206:39138] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "kurtismyson.com"] [uri "/robots.txt"] [unique_id "alQxWDawpHZwffLOvcMLsgAAAL8"] [Sun Jul 12 18:29:12.854738 2026] [security2:error] [pid 1011499:tid 1011717] [client 20.63.87.152:23818] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/002.php"] [unique_id "alQxWDawpHZwffLOvcMLtQAAANI"] [Sun Jul 12 18:29:12.902471 2026] [security2:error] [pid 1011499:tid 1011644] [client 152.232.80.168:64009] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/inc/config.php"] [unique_id "alQxWDawpHZwffLOvcMLtgAAAIk"] [Sun Jul 12 18:29:13.137963 2026] [security2:error] [pid 1011499:tid 1011696] [client 20.63.87.152:7952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/01.php"] [unique_id "alQxWTawpHZwffLOvcMLwgAAAL0"] [Sun Jul 12 18:29:13.158505 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:13.159045 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:13.467434 2026] [security2:error] [pid 1011499:tid 1011675] [client 20.63.87.152:6876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/0x.php"] [unique_id "alQxWTawpHZwffLOvcMLyQAAAKg"] [Sun Jul 12 18:29:13.504081 2026] [security2:error] [pid 1011499:tid 1011683] [client 152.232.80.168:62211] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config.inc.php"] [unique_id "alQxWTawpHZwffLOvcMLygAAALA"] [Sun Jul 12 18:29:13.677140 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxWTawpHZwffLOvcMLyAAAAIY"] [Sun Jul 12 18:29:13.677188 2026] [security2:error] [pid 1011499:tid 1011641] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxWTawpHZwffLOvcMLyAAAAIY"] [Sun Jul 12 18:29:13.678502 2026] [security2:error] [pid 1011499:tid 1011651] [client 65.21.113.206:36082] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi02MzgtZy8yNjcwOS02"] [unique_id "alQxWTawpHZwffLOvcMLxgAAAJA"] [Sun Jul 12 18:29:13.753023 2026] [security2:error] [pid 1011499:tid 1011750] [client 20.63.87.152:30721] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "mail.whatworldassembly.com"] [uri "/1.php"] [unique_id "alQxWTawpHZwffLOvcML2gAAAPM"] [Sun Jul 12 18:29:13.753303 2026] [security2:error] [pid 1011499:tid 1011750] [client 20.63.87.152:30721] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/1.php"] [unique_id "alQxWTawpHZwffLOvcML2gAAAPM"] [Sun Jul 12 18:29:13.803487 2026] [security2:error] [pid 1011499:tid 1011663] [client 152.232.80.168:63285] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/app/config/parameters.php"] [unique_id "alQxWTawpHZwffLOvcML3gAAAJw"] [Sun Jul 12 18:29:13.877750 2026] [security2:error] [pid 1011499:tid 1011725] [client 152.232.80.168:49621] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/env.php"] [unique_id "alQxWTawpHZwffLOvcML4QAAANo"] [Sun Jul 12 18:29:13.886247 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:13.886778 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:13.976038 2026] [security2:error] [pid 1011499:tid 1011703] [client 20.63.87.152:23854] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/100.php"] [unique_id "alQxWTawpHZwffLOvcML4gAAAMQ"] [Sun Jul 12 18:29:14.185842 2026] [security2:error] [pid 1011499:tid 1011680] [client 149.28.43.156:60401] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.43.28.149.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "americanconco.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxWjawpHZwffLOvcML6QAAAK0"] [Sun Jul 12 18:29:14.257864 2026] [security2:error] [pid 1011499:tid 1011671] [client 20.63.87.152:26026] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/122.php"] [unique_id "alQxWjawpHZwffLOvcML6wAAAKQ"] [Sun Jul 12 18:29:14.488106 2026] [security2:error] [pid 1011499:tid 1011669] [client 20.63.87.152:13412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/123.php"] [unique_id "alQxWjawpHZwffLOvcML9wAAAKI"] [Sun Jul 12 18:29:14.659149 2026] [authz_core:error] [pid 1011499:tid 1011676] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:14.659658 2026] [authz_core:error] [pid 1011499:tid 1011676] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:14.734588 2026] [security2:error] [pid 1011499:tid 1011655] [client 20.63.87.152:27115] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/13.php"] [unique_id "alQxWjawpHZwffLOvcMMAwAAAJQ"] [Sun Jul 12 18:29:14.979072 2026] [security2:error] [pid 1011499:tid 1011640] [client 20.63.87.152:23852] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/133.php"] [unique_id "alQxWjawpHZwffLOvcMMBwAAAIU"] [Sun Jul 12 18:29:15.179087 2026] [security2:error] [pid 1011499:tid 1011709] [client 20.63.87.152:23865] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/155.php"] [unique_id "alQxWzawpHZwffLOvcMMDgAAAMo"] [Sun Jul 12 18:29:15.416784 2026] [security2:error] [pid 1011499:tid 1011643] [client 20.63.87.152:7977] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/177.php"] [unique_id "alQxWzawpHZwffLOvcMMGAAAAIg"] [Sun Jul 12 18:29:15.440271 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:15.440877 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:15.457944 2026] [security2:error] [pid 1011499:tid 1011693] [client 168.100.149.4:51824] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39130/bargainor/2308_milksopism.jsp"] [unique_id "alQxWzawpHZwffLOvcMMGgAAALo"] [Sun Jul 12 18:29:15.645111 2026] [security2:error] [pid 1011499:tid 1011723] [client 20.63.87.152:16533] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/1index.php"] [unique_id "alQxWzawpHZwffLOvcMMHgAAANg"] [Sun Jul 12 18:29:15.746231 2026] [security2:error] [pid 1011499:tid 1011759] [client 202.46.62.65:9773] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 65.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQxWzawpHZwffLOvcMMJAAAAPw"], referer: https://www.stephenspublishing.com/stadium-tote-bags-custom-p-906.html?osCsid=dj29h5iper8v3871os4b02dfh2 [Sun Jul 12 18:29:15.861568 2026] [security2:error] [pid 1011499:tid 1011676] [client 20.63.87.152:14419] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/2.php"] [unique_id "alQxWzawpHZwffLOvcMMJwAAAKk"] [Sun Jul 12 18:29:15.861845 2026] [security2:error] [pid 1011499:tid 1011677] [client 66.249.64.166:46905] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxWzawpHZwffLOvcMMJQAAAKo"] [Sun Jul 12 18:29:15.900765 2026] [cgid:error] [pid 1011499:tid 1011706] [client 202.46.62.115:11776] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/emergency-phone-labels-custom-p-136.html?osCsid=d2us84fhoehbdjkfl36de4l6k7 [Sun Jul 12 18:29:15.951339 2026] [security2:error] [pid 1011499:tid 1011727] [client 14.22.11.166:30575] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxWzawpHZwffLOvcMMGwAAANw"] [Sun Jul 12 18:29:16.095879 2026] [security2:error] [pid 1011499:tid 1011717] [client 20.63.87.152:21630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/222.php"] [unique_id "alQxXDawpHZwffLOvcMMLwAAANI"] [Sun Jul 12 18:29:16.181010 2026] [authz_core:error] [pid 1011499:tid 1011713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:16.181493 2026] [authz_core:error] [pid 1011499:tid 1011713] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:16.327064 2026] [security2:error] [pid 1011499:tid 1011705] [client 20.63.87.152:4048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/2p.update.php"] [unique_id "alQxXDawpHZwffLOvcMMPQAAAMY"] [Sun Jul 12 18:29:16.541990 2026] [security2:error] [pid 1011499:tid 1011729] [client 20.63.87.152:21573] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/3.php"] [unique_id "alQxXDawpHZwffLOvcMMQAAAAN4"] [Sun Jul 12 18:29:16.757108 2026] [security2:error] [pid 1011499:tid 1011699] [client 20.63.87.152:14412] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQxXDawpHZwffLOvcMMTAAAAMA"] [Sun Jul 12 18:29:16.889722 2026] [core:error] [pid 1011499:tid 1011644] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:29:16.889769 2026] [core:error] [pid 1011499:tid 1011644] [client 3.151.194.164:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:29:16.917969 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:16.918442 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:16.961940 2026] [security2:error] [pid 1011499:tid 1011723] [client 20.63.87.152:27109] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/403.php"] [unique_id "alQxXDawpHZwffLOvcMMVgAAANg"] [Sun Jul 12 18:29:17.110921 2026] [security2:error] [pid 1011499:tid 1011754] [client 125.167.21.72:61674] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxXTawpHZwffLOvcMMWAAAAPc"] [Sun Jul 12 18:29:17.111128 2026] [security2:error] [pid 1011499:tid 1011754] [client 125.167.21.72:61674] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxXTawpHZwffLOvcMMWAAAAPc"] [Sun Jul 12 18:29:17.192078 2026] [security2:error] [pid 1011499:tid 1011721] [client 20.63.87.152:21630] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.whatworldassembly.com"] [uri "/404.php"] [unique_id "alQxXTawpHZwffLOvcMMXwAAANY"] [Sun Jul 12 18:29:17.299410 2026] [security2:error] [pid 1011499:tid 1011727] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi02NjQ2LW0vNDY0NS01"] [unique_id "alQxXTawpHZwffLOvcMMYwAAANw"] [Sun Jul 12 18:29:17.425148 2026] [security2:error] [pid 1011499:tid 1011687] [client 168.100.149.19:61662] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39195/bargainor/2308_capnoides.jsp"] [unique_id "alQxXTawpHZwffLOvcMMZwAAALQ"] [Sun Jul 12 18:29:17.673829 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:17.674365 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:18.310419 2026] [security2:error] [pid 1011499:tid 1011683] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxXTawpHZwffLOvcMMewAAALA"] [Sun Jul 12 18:29:18.310473 2026] [security2:error] [pid 1011499:tid 1011683] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxXTawpHZwffLOvcMMewAAALA"] [Sun Jul 12 18:29:18.311031 2026] [security2:error] [pid 1011499:tid 1011733] [client 65.21.113.206:36096] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi02NjQ2LW0vNDY0NS01"] [unique_id "alQxXTawpHZwffLOvcMMeQAAAOI"] [Sun Jul 12 18:29:18.429072 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:18.429820 2026] [authz_core:error] [pid 1011499:tid 1011698] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:18.674392 2026] [security2:error] [pid 1011499:tid 1011767] [client 66.249.64.167:44257] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxXjawpHZwffLOvcMMkwAAAQQ"] [Sun Jul 12 18:29:18.741003 2026] [security2:error] [pid 1011499:tid 1011707] [client 168.100.149.141:44510] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39260/bargainor/2308_deft.jsp"] [unique_id "alQxXjawpHZwffLOvcMMmAAAAMg"] [Sun Jul 12 18:29:18.921164 2026] [security2:error] [pid 1011499:tid 1011596] [remote 103.133.216.219:35280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 219.216.133.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "mattbeyer.com"] [uri "/wp-login.php"] [unique_id "alQxXjawpHZwffLOvcMMnwABAVU"] [Sun Jul 12 18:29:18.921763 2026] [security2:error] [pid 1011499:tid 1011682] [client 146.174.173.34:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxXjawpHZwffLOvcMMkgAAAK8"] [Sun Jul 12 18:29:18.947621 2026] [security2:error] [pid 1011499:tid 1011757] [client 152.232.80.168:62047] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/mail.php"] [unique_id "alQxXjawpHZwffLOvcMMoAAAAPo"] [Sun Jul 12 18:29:19.171866 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:19.172346 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:19.334896 2026] [security2:error] [pid 1011499:tid 1011756] [client 66.249.64.166:46905] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxXzawpHZwffLOvcMMswAAAPk"] [Sun Jul 12 18:29:19.956019 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:19.956531 2026] [authz_core:error] [pid 1011499:tid 1011661] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:20.186791 2026] [security2:error] [pid 1011499:tid 1011697] [client 152.232.80.168:50068] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php.txt"] [unique_id "alQxYDawpHZwffLOvcMMzQAAAL4"] [Sun Jul 12 18:29:20.695968 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi02NzY4LXgvMzg4NjEtcQ=="] [unique_id "alQxYDawpHZwffLOvcMM4QAAANo"] [Sun Jul 12 18:29:20.701124 2026] [security2:error] [pid 1011499:tid 1011658] [client 57.141.18.61:0] ModSecurity: Access denied with code 409 (phase 2). Match of "rx ^/monarx-analyzer.php" against "REQUEST_URI" required. [file "/opt/mod_security/botprotection.conf"] [line "1"] [id "901020"] [msg "TRANSPARENT BOT PROTECTION ADDED BY MONITORING DO NOT WHITELIST"] [hostname "mymmdesign.com"] [uri "/case/tao-chinese-restaurant/"] [unique_id "alQxYDawpHZwffLOvcMM4AAAAJc"] [Sun Jul 12 18:29:20.769657 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:20.770168 2026] [authz_core:error] [pid 1011499:tid 1011757] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:21.388541 2026] [security2:error] [pid 1011499:tid 1011608] [remote 103.133.216.219:35294] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxYTawpHZwffLOvcMM-gAApGE"] [Sun Jul 12 18:29:21.429645 2026] [security2:error] [pid 1011499:tid 1011766] [client 168.100.149.172:28728] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39325/bargainor/2308_did.jsp"] [unique_id "alQxYTawpHZwffLOvcMM-wAAAQM"] [Sun Jul 12 18:29:21.550884 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:21.551364 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:21.668446 2026] [security2:error] [pid 1011499:tid 1011727] [client 152.232.80.168:62911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/hashing.php"] [unique_id "alQxYTawpHZwffLOvcMNAgAAANw"] [Sun Jul 12 18:29:21.734587 2026] [security2:error] [pid 1011499:tid 1011733] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxYTawpHZwffLOvcMM8AAAAOI"] [Sun Jul 12 18:29:21.735539 2026] [security2:error] [pid 1011499:tid 1011753] [client 65.21.113.206:36102] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi02NzY4LXgvMzg4NjEtcQ=="] [unique_id "alQxYTawpHZwffLOvcMM6wAAAPY"] [Sun Jul 12 18:29:21.801759 2026] [security2:error] [pid 1011499:tid 1011733] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxYTawpHZwffLOvcMM8AAAAOI"] [Sun Jul 12 18:29:22.351302 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:22.351813 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:22.771105 2026] [security2:error] [pid 1011499:tid 1011644] [client 168.100.149.15:17328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39390/bargainor/2308_delphian.jsp"] [unique_id "alQxYjawpHZwffLOvcMNHAAAAIk"] [Sun Jul 12 18:29:22.917620 2026] [security2:error] [pid 1011499:tid 1011748] [client 66.249.64.166:46905] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxYjawpHZwffLOvcMNHQAAAPE"] [Sun Jul 12 18:29:23.107890 2026] [authz_core:error] [pid 1011499:tid 1011665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:23.108445 2026] [authz_core:error] [pid 1011499:tid 1011665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:23.134026 2026] [security2:error] [pid 1011499:tid 1011719] [client 152.232.80.168:59475] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/storage/configuration.php"] [unique_id "alQxYzawpHZwffLOvcMNJQAAANQ"] [Sun Jul 12 18:29:23.493312 2026] [security2:error] [pid 1011499:tid 1011674] [client 40.223.139.195:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxYzawpHZwffLOvcMNKAAAAKc"] [Sun Jul 12 18:29:23.854287 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:23.854828 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:24.102024 2026] [security2:error] [pid 1011499:tid 1011573] [remote 3.223.127.185:33654] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 185.127.223.3.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQxZDawpHZwffLOvcMNQQAAqj4"] [Sun Jul 12 18:29:24.228531 2026] [security2:error] [pid 1011499:tid 1011521] [remote 152.53.111.131:39388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 131.111.53.152.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "blackdoganimalfund.org"] [uri "/wp-login.php"] [unique_id "alQxZDawpHZwffLOvcMNQwAA5Qs"] [Sun Jul 12 18:29:24.580879 2026] [security2:error] [pid 1011499:tid 1011640] [client 95.108.213.254:33064] ModSecurity: Access denied with code 429 (phase 2). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; YandexBot\\\\/3\\\\.0; \\\\+http:\\\\/\\\\/yandex\\\\.com\\\\/bots\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/othercrawler.conf"] [line "3"] [id "901008"] [msg "Yandex Crawler 429 ADDED BY MONITORING DO NOT WHITELIST"] [hostname "andersonandassociatesllp.com"] [uri "/robots.txt"] [unique_id "alQxZDawpHZwffLOvcMNTwAAAIU"] [Sun Jul 12 18:29:24.624917 2026] [authz_core:error] [pid 1011499:tid 1011673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:24.625442 2026] [authz_core:error] [pid 1011499:tid 1011673] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:24.643812 2026] [security2:error] [pid 1011499:tid 1011644] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi02Nzg5LWEvNDE2OS1u"] [unique_id "alQxZDawpHZwffLOvcMNUAAAAIk"] [Sun Jul 12 18:29:24.763514 2026] [cgid:error] [pid 1011499:tid 1011566] [remote 74.7.228.31:38504] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/familylifecenter/404.shtml [Sun Jul 12 18:29:24.763849 2026] [security2:error] [pid 1011499:tid 1011747] [client 74.7.228.31:38504] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "gmchcfamilylife.org"] [uri "/404.shtml"] [unique_id "alQxZDawpHZwffLOvcMNVAAA8Dc"] [Sun Jul 12 18:29:24.768297 2026] [security2:error] [pid 1011499:tid 1011761] [client 74.7.230.59:38946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "gmchclegalministry-org.bintechsys.net"] [uri "/robots.txt"] [unique_id "alQxZDawpHZwffLOvcMNVQAA_jQ"] [Sun Jul 12 18:29:24.839913 2026] [cgid:error] [pid 1011499:tid 1011534] [remote 74.7.244.45:52984] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/familylifecenter/404.shtml [Sun Jul 12 18:29:24.840176 2026] [security2:error] [pid 1011499:tid 1011748] [client 74.7.244.45:52984] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "gmchcfamilylife-org.bintechsys.net"] [uri "/404.shtml"] [unique_id "alQxZDawpHZwffLOvcMNWgAA8Rg"] [Sun Jul 12 18:29:24.870011 2026] [security2:error] [pid 1011499:tid 1011762] [client 74.7.230.54:50420] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "gmcnation-org.bintechsys.net"] [uri "/robots.txt"] [unique_id "alQxZDawpHZwffLOvcMNWAAA_yI"] [Sun Jul 12 18:29:25.082437 2026] [security2:error] [pid 1011499:tid 1011707] [client 152.232.80.168:64781] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/core/configuration.php"] [unique_id "alQxZTawpHZwffLOvcMNZgAAAMg"] [Sun Jul 12 18:29:25.274403 2026] [security2:error] [pid 1011499:tid 1011731] [client 66.249.64.166:46905] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxZTawpHZwffLOvcMNagAAAOA"] [Sun Jul 12 18:29:25.377942 2026] [security2:error] [pid 1011499:tid 1011679] [client 168.100.149.24:34336] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39455/bargainor/2308_anisodactyli.jsp"] [unique_id "alQxZTawpHZwffLOvcMNcQAAAKw"] [Sun Jul 12 18:29:25.422949 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:25.423466 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:25.617291 2026] [security2:error] [pid 1011499:tid 1011654] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxZTawpHZwffLOvcMNaQAAAJM"] [Sun Jul 12 18:29:25.617348 2026] [security2:error] [pid 1011499:tid 1011654] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxZTawpHZwffLOvcMNaQAAAJM"] [Sun Jul 12 18:29:25.619320 2026] [security2:error] [pid 1011499:tid 1011697] [client 65.21.113.206:52688] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi02Nzg5LWEvNDE2OS1u"] [unique_id "alQxZTawpHZwffLOvcMNZwAAAL4"] [Sun Jul 12 18:29:26.258246 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:26.258838 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:26.408488 2026] [security2:error] [pid 1011499:tid 1011719] [client 161.118.238.173:64213] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.yesbossclothing.com"] [uri "/wp-login.php"] [unique_id "alQxZjawpHZwffLOvcMNoAAAANQ"] [Sun Jul 12 18:29:26.751203 2026] [security2:error] [pid 1011499:tid 1011650] [client 168.100.149.197:60672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39520/bargainor/2308_birefraction.jsp"] [unique_id "alQxZjawpHZwffLOvcMNsAAAAI8"] [Sun Jul 12 18:29:26.777614 2026] [security2:error] [pid 1011499:tid 1011680] [client 161.118.238.173:64389] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 173.238.118.161.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "autodiscover.yesbossclothing.com"] [uri "/wp-login.php"] [unique_id "alQxZjawpHZwffLOvcMNswAAAK0"] [Sun Jul 12 18:29:27.153007 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:27.153736 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:27.698816 2026] [security2:error] [pid 1011499:tid 1011741] [client 152.232.80.168:49557] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/services.php"] [unique_id "alQxZzawpHZwffLOvcMNzQAAAOo"] [Sun Jul 12 18:29:27.711879 2026] [security2:error] [pid 1011499:tid 1011736] [client 125.167.21.72:62125] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxZzawpHZwffLOvcMNzwAAAOU"] [Sun Jul 12 18:29:27.712169 2026] [security2:error] [pid 1011499:tid 1011736] [client 125.167.21.72:62125] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxZzawpHZwffLOvcMNzwAAAOU"] [Sun Jul 12 18:29:27.995459 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:27.995979 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:28.407354 2026] [security2:error] [pid 1011499:tid 1011647] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi03MDI3LWcvMjY3MDktNg=="] [unique_id "alQxaDawpHZwffLOvcMN6wAAAIw"] [Sun Jul 12 18:29:28.815937 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:28.816478 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:29.354474 2026] [security2:error] [pid 1011499:tid 1011730] [client 152.232.80.168:49845] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/includes/config.php"] [unique_id "alQxaTawpHZwffLOvcMOAAAAAN8"] [Sun Jul 12 18:29:29.384710 2026] [security2:error] [pid 1011499:tid 1011720] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxaDawpHZwffLOvcMN-AAAANU"] [Sun Jul 12 18:29:29.384780 2026] [security2:error] [pid 1011499:tid 1011720] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxaDawpHZwffLOvcMN-AAAANU"] [Sun Jul 12 18:29:29.387409 2026] [security2:error] [pid 1011499:tid 1011756] [client 65.21.113.206:52692] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi03MDI3LWcvMjY3MDktNg=="] [unique_id "alQxaDawpHZwffLOvcMN9gAAAPk"] [Sun Jul 12 18:29:29.439073 2026] [security2:error] [pid 1011499:tid 1011674] [client 168.100.149.11:24310] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39585/bargainor/2308_mediator.jsp"] [unique_id "alQxaTawpHZwffLOvcMOBgAAAKc"] [Sun Jul 12 18:29:29.562952 2026] [security2:error] [pid 1011499:tid 1011660] [client 198.244.226.111:19468] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "www.salon-software.com"] [uri "/robots.txt"] [unique_id "alQxaTawpHZwffLOvcMODQAAAJk"] [Sun Jul 12 18:29:29.563243 2026] [security2:error] [pid 1011499:tid 1011660] [client 198.244.226.111:19468] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.salon-software.com"] [uri "/robots.txt"] [unique_id "alQxaTawpHZwffLOvcMODQAAAJk"] [Sun Jul 12 18:29:29.592374 2026] [authz_core:error] [pid 1011499:tid 1011724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:29.592890 2026] [authz_core:error] [pid 1011499:tid 1011724] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:30.389239 2026] [security2:error] [pid 1011499:tid 1011655] [client 152.232.80.168:64400] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/global.php"] [unique_id "alQxajawpHZwffLOvcMOKAAAAJQ"] [Sun Jul 12 18:29:30.420095 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:30.420633 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:30.480175 2026] [security2:error] [pid 1011499:tid 1011619] [remote 103.133.216.219:34296] ModSecurity: Warning. Pattern match "^POST$" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "1439"] [id "9009999"] [msg "8 char spam"] [hostname "themillennialshandbook.com"] [uri "/wp-admin/includes/taxonomy.php"] [unique_id "alQxajawpHZwffLOvcMOKwAAxWw"] [Sun Jul 12 18:29:30.651432 2026] [security2:error] [pid 1011499:tid 1011664] [client 181.233.186.255:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxajawpHZwffLOvcMOHgAAAJ0"] [Sun Jul 12 18:29:30.764030 2026] [cgid:error] [pid 1011499:tid 1011700] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:30.828267 2026] [cgid:error] [pid 1011499:tid 1011723] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:30.887897 2026] [cgid:error] [pid 1011499:tid 1011645] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:30.950021 2026] [cgid:error] [pid 1011499:tid 1011724] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:31.060729 2026] [security2:error] [pid 1011499:tid 1011709] [client 142.44.225.160:43348] ModSecurity: Access denied with code 406 (phase 1). Pattern match "Mozilla\\\\/5\\\\.0 \\\\(compatible; AhrefsBot\\\\/\\\\d\\\\.\\\\d; \\\\+http:\\\\/\\\\/ahrefs\\\\.com\\\\/robot\\\\/\\\\)" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "578"] [id "900165"] [msg "AhrefsBot BOT Request"] [hostname "www.salon-software.com"] [uri "/privacy-policy/"] [unique_id "alQxazawpHZwffLOvcMOSwAAAMo"] [Sun Jul 12 18:29:31.061168 2026] [security2:error] [pid 1011499:tid 1011709] [client 142.44.225.160:43348] ModSecurity: Warning. Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.salon-software.com"] [uri "/privacy-policy/"] [unique_id "alQxazawpHZwffLOvcMOSwAAAMo"] [Sun Jul 12 18:29:31.140615 2026] [cgid:error] [pid 1011499:tid 1011765] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:31.210457 2026] [cgid:error] [pid 1011499:tid 1011721] [client 34.162.188.36:45382] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/losangq4/public_html/thefinestcaviar/404.shtml [Sun Jul 12 18:29:31.219247 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:31.219778 2026] [authz_core:error] [pid 1011499:tid 1011753] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:31.230886 2026] [security2:error] [pid 1011499:tid 1011593] [remote 103.77.160.92:35166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 92.160.77.103.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "bellesprit.com"] [uri "/wp-login.php"] [unique_id "alQxazawpHZwffLOvcMOUgAAslI"] [Sun Jul 12 18:29:31.440829 2026] [security2:error] [pid 1011499:tid 1011644] [client 168.100.149.107:24700] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39650/bargainor/2308_gurian.jsp"] [unique_id "alQxazawpHZwffLOvcMOZQAAAIk"] [Sun Jul 12 18:29:32.032313 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:32.032885 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:32.811588 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:32.812159 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:33.295102 2026] [security2:error] [pid 1011499:tid 1011748] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi04MjQ0LTkvMTUzNy1o"] [unique_id "alQxbTawpHZwffLOvcMOoQAAAPE"] [Sun Jul 12 18:29:33.369165 2026] [security2:error] [pid 1011499:tid 1011703] [client 152.232.80.168:54671] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/local.php"] [unique_id "alQxbTawpHZwffLOvcMOowAAAMQ"] [Sun Jul 12 18:29:33.421439 2026] [security2:error] [pid 1011499:tid 1011701] [client 152.232.80.168:60195] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/logging.php"] [unique_id "alQxbTawpHZwffLOvcMOpwAAAMI"] [Sun Jul 12 18:29:33.426261 2026] [security2:error] [pid 1011499:tid 1011723] [client 168.100.149.136:52946] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39715/bargainor/2308_monkey.jsp"] [unique_id "alQxbTawpHZwffLOvcMOqAAAANg"] [Sun Jul 12 18:29:33.525728 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:33.526211 2026] [authz_core:error] [pid 1011499:tid 1011645] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:34.275767 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:34.276258 2026] [authz_core:error] [pid 1011499:tid 1011643] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:34.323657 2026] [security2:error] [pid 1011499:tid 1011713] [client 152.232.80.168:50019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/mail.php"] [unique_id "alQxbjawpHZwffLOvcMOwAAAAM4"] [Sun Jul 12 18:29:34.335915 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxbTawpHZwffLOvcMOrwAAAMg"] [Sun Jul 12 18:29:34.335983 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxbTawpHZwffLOvcMOrwAAAMg"] [Sun Jul 12 18:29:34.336961 2026] [security2:error] [pid 1011499:tid 1011659] [client 65.21.113.206:56948] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi04MjQ0LTkvMTUzNy1o"] [unique_id "alQxbTawpHZwffLOvcMOrQAAAJg"] [Sun Jul 12 18:29:34.793469 2026] [security2:error] [pid 1011499:tid 1011729] [client 152.232.80.168:49405] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/autoload.php"] [unique_id "alQxbjawpHZwffLOvcMOzgAAAN4"] [Sun Jul 12 18:29:35.079512 2026] [authz_core:error] [pid 1011499:tid 1011648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:35.080030 2026] [authz_core:error] [pid 1011499:tid 1011648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:35.374949 2026] [security2:error] [pid 1011499:tid 1011744] [client 168.100.149.202:36358] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39780/bargainor/2308_impeccance.jsp"] [unique_id "alQxbzawpHZwffLOvcMO4gAAAO0"] [Sun Jul 12 18:29:35.814002 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:35.814481 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:36.598812 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:36.599302 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:36.748737 2026] [security2:error] [pid 1011499:tid 1011675] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi04NDcxLTUvNDk1My1k"] [unique_id "alQxcDawpHZwffLOvcMPBQAAAKg"] [Sun Jul 12 18:29:37.329507 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:37.330044 2026] [authz_core:error] [pid 1011499:tid 1011720] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:37.420984 2026] [security2:error] [pid 1011499:tid 1011659] [client 168.100.149.54:16714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39845/bargainor/2308_gunz.jsp"] [unique_id "alQxcTawpHZwffLOvcMPIgAAAJg"] [Sun Jul 12 18:29:37.563491 2026] [security2:error] [pid 1011499:tid 1011711] [client 81.254.223.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxcTawpHZwffLOvcMPEAAAAMw"] [Sun Jul 12 18:29:37.703203 2026] [security2:error] [pid 1011499:tid 1011725] [client 43.156.41.180:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.laptop-accu-batterij.nl"] [uri "/404page.php"] [unique_id "alQxcTawpHZwffLOvcMPKgAAANo"] [Sun Jul 12 18:29:37.887785 2026] [security2:error] [pid 1011499:tid 1011735] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxcTawpHZwffLOvcMPGgAAAOQ"] [Sun Jul 12 18:29:37.887830 2026] [security2:error] [pid 1011499:tid 1011735] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxcTawpHZwffLOvcMPGgAAAOQ"] [Sun Jul 12 18:29:37.890021 2026] [security2:error] [pid 1011499:tid 1011723] [client 65.21.113.206:56960] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi04NDcxLTUvNDk1My1k"] [unique_id "alQxcTawpHZwffLOvcMPFgAAANg"] [Sun Jul 12 18:29:37.941959 2026] [security2:error] [pid 1011499:tid 1011663] [client 152.232.80.168:64612] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/bootstrap/cache/config.php"] [unique_id "alQxcTawpHZwffLOvcMPNQAAAJw"] [Sun Jul 12 18:29:38.110083 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:38.110568 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:38.278753 2026] [security2:error] [pid 1011499:tid 1011702] [client 125.167.21.72:62590] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxcjawpHZwffLOvcMPPAAAAMM"] [Sun Jul 12 18:29:38.278982 2026] [security2:error] [pid 1011499:tid 1011702] [client 125.167.21.72:62590] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxcjawpHZwffLOvcMPPAAAAMM"] [Sun Jul 12 18:29:38.903885 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:38.904584 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:39.429629 2026] [security2:error] [pid 1011499:tid 1011738] [client 168.100.149.21:18496] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39910/bargainor/2308_monadically.jsp"] [unique_id "alQxczawpHZwffLOvcMPaAAAAOc"] [Sun Jul 12 18:29:39.729203 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:39.729790 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:40.526343 2026] [authz_core:error] [pid 1011499:tid 1011748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:40.527153 2026] [authz_core:error] [pid 1011499:tid 1011748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:40.723974 2026] [security2:error] [pid 1011499:tid 1011715] [client 152.232.80.168:49820] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/include/config.php"] [unique_id "alQxdDawpHZwffLOvcMPmgAAANA"] [Sun Jul 12 18:29:41.292449 2026] [authz_core:error] [pid 1011499:tid 1011699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:41.292989 2026] [authz_core:error] [pid 1011499:tid 1011699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:41.435472 2026] [security2:error] [pid 1011499:tid 1011767] [client 168.100.149.158:53054] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/39975/bargainor/2308_enhalo.jsp"] [unique_id "alQxdTawpHZwffLOvcMPsAAAAQQ"] [Sun Jul 12 18:29:41.509633 2026] [security2:error] [pid 1011499:tid 1011683] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi05MjAzLXkvMTIyNjEtdQ=="] [unique_id "alQxdTawpHZwffLOvcMPsQAAALA"] [Sun Jul 12 18:29:41.713033 2026] [security2:error] [pid 1011499:tid 1011717] [client 104.194.8.156:54075] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/cache.php"] [unique_id "alQxdTawpHZwffLOvcMPtwAAANI"] [Sun Jul 12 18:29:41.932378 2026] [security2:error] [pid 1011499:tid 1011706] [client 104.194.8.156:49384] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "alQxdTawpHZwffLOvcMPvgAAAMc"] [Sun Jul 12 18:29:42.067120 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:42.067644 2026] [authz_core:error] [pid 1011499:tid 1011662] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:42.088077 2026] [security2:error] [pid 1011499:tid 1011736] [client 104.194.8.156:62911] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/images/images/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMPwgAAAOU"] [Sun Jul 12 18:29:42.243380 2026] [security2:error] [pid 1011499:tid 1011673] [client 104.194.8.156:51220] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/images/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMPxwAAAKY"] [Sun Jul 12 18:29:42.328529 2026] [security2:error] [pid 1011499:tid 1011685] [client 104.194.8.156:62062] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMPzAAAALI"] [Sun Jul 12 18:29:42.440157 2026] [security2:error] [pid 1011499:tid 1011747] [client 104.194.8.156:51266] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP1QAAAPA"] [Sun Jul 12 18:29:42.478781 2026] [security2:error] [pid 1011499:tid 1011640] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxdjawpHZwffLOvcMPwQAAAIU"] [Sun Jul 12 18:29:42.478848 2026] [security2:error] [pid 1011499:tid 1011640] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxdjawpHZwffLOvcMPwQAAAIU"] [Sun Jul 12 18:29:42.480374 2026] [security2:error] [pid 1011499:tid 1011719] [client 65.21.113.206:56974] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi05MjAzLXkvMTIyNjEtdQ=="] [unique_id "alQxdTawpHZwffLOvcMPvwAAANQ"] [Sun Jul 12 18:29:42.525031 2026] [security2:error] [pid 1011499:tid 1011650] [client 104.194.8.156:64952] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP1wAAAI8"] [Sun Jul 12 18:29:42.595101 2026] [security2:error] [pid 1011499:tid 1011715] [client 104.194.8.156:65222] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/images/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP2AAAANA"] [Sun Jul 12 18:29:42.755422 2026] [security2:error] [pid 1011499:tid 1011647] [client 57.141.18.96:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxdjawpHZwffLOvcMP1AAAAIw"] [Sun Jul 12 18:29:42.756826 2026] [security2:error] [pid 1011499:tid 1011677] [client 104.194.8.156:64832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/wp-content/plugins/plugins/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP3AAAAKo"] [Sun Jul 12 18:29:42.813622 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:42.814262 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:42.833712 2026] [security2:error] [pid 1011499:tid 1011696] [client 104.194.8.156:64709] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/assets/images/images/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP3QAAAL0"] [Sun Jul 12 18:29:42.906430 2026] [security2:error] [pid 1011499:tid 1011663] [client 104.194.8.156:60331] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/blogs/media/media/cache.php"] [unique_id "alQxdjawpHZwffLOvcMP5AAAAJw"] [Sun Jul 12 18:29:43.066681 2026] [security2:error] [pid 1011499:tid 1011734] [client 104.194.8.156:60215] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 156.8.194.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.panoramanica.com"] [uri "/cache/cache/cache.php"] [unique_id "alQxdzawpHZwffLOvcMP6AAAAOM"] [Sun Jul 12 18:29:43.473920 2026] [security2:error] [pid 1011499:tid 1011651] [client 168.100.149.236:39444] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40040/bargainor/2308_metalogical.jsp"] [unique_id "alQxdzawpHZwffLOvcMP-wAAAJA"] [Sun Jul 12 18:29:43.604354 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:43.604913 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:44.357172 2026] [authz_core:error] [pid 1011499:tid 1011677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:44.357657 2026] [authz_core:error] [pid 1011499:tid 1011677] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:44.650765 2026] [security2:error] [pid 1011499:tid 1011646] [client 74.7.244.41:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.newworldinvestsgroup.com"] [uri "/index.php"] [unique_id "alQxdTawpHZwffLOvcMPrAAAiyA"] [Sun Jul 12 18:29:44.650820 2026] [security2:error] [pid 1011499:tid 1011646] [client 74.7.244.41:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.newworldinvestsgroup.com"] [uri "/index.php"] [unique_id "alQxdTawpHZwffLOvcMPrAAAiyA"] [Sun Jul 12 18:29:44.887748 2026] [security2:error] [pid 1011499:tid 1011762] [client 74.7.244.41:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "newworldinvestsgroup.com"] [uri "/index.php"] [unique_id "alQxeDawpHZwffLOvcMQHwAA_2M"], referer: https://www.newworldinvestsgroup.com/robots.txt [Sun Jul 12 18:29:45.140048 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:45.140533 2026] [authz_core:error] [pid 1011499:tid 1011745] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:45.390757 2026] [security2:error] [pid 1011499:tid 1011687] [client 168.100.149.3:41876] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40105/bargainor/2308_psychoreflex.jsp"] [unique_id "alQxeTawpHZwffLOvcMQOQAAALQ"] [Sun Jul 12 18:29:45.529400 2026] [security2:error] [pid 1011499:tid 1011593] [remote 217.113.60.80:56798] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 80.60.113.217.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQxeTawpHZwffLOvcMQPAAA3FI"] [Sun Jul 12 18:29:45.657507 2026] [security2:error] [pid 1011499:tid 1011617] [remote 66.33.212.6:55142] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 6.212.33.66.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "camelsandneedles.com"] [uri "/wp-login.php"] [unique_id "alQxeTawpHZwffLOvcMQQQAA92o"] [Sun Jul 12 18:29:45.916275 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:45.916985 2026] [authz_core:error] [pid 1011499:tid 1011668] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:46.069855 2026] [security2:error] [pid 1011499:tid 1011671] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi05OTUzLXovMjM0OS15"] [unique_id "alQxejawpHZwffLOvcMQUAAAAKQ"] [Sun Jul 12 18:29:46.490503 2026] [security2:error] [pid 1011499:tid 1011718] [client 177.242.14.30:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxejawpHZwffLOvcMQUQAAANM"] [Sun Jul 12 18:29:46.662024 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:46.662763 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:46.762929 2026] [security2:error] [pid 1011499:tid 1011685] [client 168.100.149.188:21388] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40170/bargainor/2308_mailable.jsp"] [unique_id "alQxejawpHZwffLOvcMQawAAALI"] [Sun Jul 12 18:29:47.057762 2026] [security2:error] [pid 1011499:tid 1011729] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxejawpHZwffLOvcMQZAAAAN4"] [Sun Jul 12 18:29:47.057821 2026] [security2:error] [pid 1011499:tid 1011729] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxejawpHZwffLOvcMQZAAAAN4"] [Sun Jul 12 18:29:47.058935 2026] [security2:error] [pid 1011499:tid 1011752] [client 65.21.113.206:56556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi05OTUzLXovMjM0OS15"] [unique_id "alQxejawpHZwffLOvcMQYgAAAPU"] [Sun Jul 12 18:29:47.452748 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:47.453248 2026] [authz_core:error] [pid 1011499:tid 1011655] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:47.455986 2026] [security2:error] [pid 1011499:tid 1011707] [client 57.141.18.82:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxejawpHZwffLOvcMQeQAAAMg"] [Sun Jul 12 18:29:48.248210 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:48.248747 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:48.408518 2026] [security2:error] [pid 1011499:tid 1011709] [client 151.80.133.238:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "302"] [hostname "coloradodancesport.com"] [uri "/index.php"] [unique_id "alQxeTawpHZwffLOvcMQKQAAAMo"] [Sun Jul 12 18:29:48.736354 2026] [security2:error] [pid 1011499:tid 1011559] [remote 57.141.18.111:41274] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 111.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/J2W6Hv5kNnwAhIfNSJIpyu/cgDrNR"] [unique_id "alQxfDawpHZwffLOvcMQsAAApzA"] [Sun Jul 12 18:29:48.944193 2026] [security2:error] [pid 1011499:tid 1011676] [client 125.167.21.72:63055] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxfDawpHZwffLOvcMQuAAAAKk"] [Sun Jul 12 18:29:48.944490 2026] [security2:error] [pid 1011499:tid 1011676] [client 125.167.21.72:63055] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxfDawpHZwffLOvcMQuAAAAKk"] [Sun Jul 12 18:29:49.042932 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:49.043431 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:49.444143 2026] [security2:error] [pid 1011499:tid 1011673] [client 168.100.149.115:22546] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40235/bargainor/2308_epidemiology.jsp"] [unique_id "alQxfTawpHZwffLOvcMQ0QAAAKY"] [Sun Jul 12 18:29:49.680335 2026] [security2:error] [pid 1011499:tid 1011528] [remote 8.234.37.247:52358] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 247.37.234.8.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.eaglestock.com"] [uri "/wp/index.php"] [unique_id "alQxfTawpHZwffLOvcMQ1gAA1xI"], referer: https://www.eaglestock.com/ [Sun Jul 12 18:29:49.834649 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:49.835163 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:50.052895 2026] [security2:error] [pid 1011499:tid 1011676] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0xNDc3LTUvNDc4NDktbQ=="] [unique_id "alQxfjawpHZwffLOvcMQ6AAAAKk"] [Sun Jul 12 18:29:50.622035 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:50.622559 2026] [authz_core:error] [pid 1011499:tid 1011692] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:50.743281 2026] [security2:error] [pid 1011499:tid 1011740] [client 57.141.18.119:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQxfTawpHZwffLOvcMQxgAAAOk"] [Sun Jul 12 18:29:50.757893 2026] [security2:error] [pid 1011499:tid 1011673] [client 168.100.149.156:61598] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40300/bargainor/2308_secque.jsp"] [unique_id "alQxfjawpHZwffLOvcMQ_gAAAKY"] [Sun Jul 12 18:29:51.012863 2026] [security2:error] [pid 1011499:tid 1011745] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxfjawpHZwffLOvcMQ-wAAAO4"] [Sun Jul 12 18:29:51.013166 2026] [security2:error] [pid 1011499:tid 1011745] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxfjawpHZwffLOvcMQ-wAAAO4"] [Sun Jul 12 18:29:51.014583 2026] [security2:error] [pid 1011499:tid 1011742] [client 65.21.113.206:56564] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0xNDc3LTUvNDc4NDktbQ=="] [unique_id "alQxfjawpHZwffLOvcMQ-QAAAOs"] [Sun Jul 12 18:29:51.525430 2026] [authz_core:error] [pid 1011499:tid 1011703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:51.525958 2026] [authz_core:error] [pid 1011499:tid 1011703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:52.339513 2026] [authz_core:error] [pid 1011499:tid 1011701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:52.340063 2026] [authz_core:error] [pid 1011499:tid 1011701] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:52.881582 2026] [security2:error] [pid 1011499:tid 1011754] [client 74.7.228.15:53018] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yourfriendscametoseeme.thepinkbridge.com"] [uri "/robots.txt"] [unique_id "alQxgDawpHZwffLOvcMRQgAA9yY"] [Sun Jul 12 18:29:52.901885 2026] [security2:error] [pid 1011499:tid 1011668] [client 74.7.228.42:57776] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "www.yourfriendscametoseeme.com"] [uri "/robots.txt"] [unique_id "alQxgDawpHZwffLOvcMRRAAAoRY"] [Sun Jul 12 18:29:53.180108 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:53.180815 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:53.443451 2026] [security2:error] [pid 1011499:tid 1011740] [client 168.100.149.230:22746] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40365/bargainor/2308_dislevelment.jsp"] [unique_id "alQxgTawpHZwffLOvcMRYAAAAOk"] [Sun Jul 12 18:29:53.948355 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:53.948895 2026] [authz_core:error] [pid 1011499:tid 1011675] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:53.986637 2026] [security2:error] [pid 1011499:tid 1011682] [client 143.244.57.123:50216] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "alQxgTawpHZwffLOvcMRfQAAAK8"] [Sun Jul 12 18:29:54.062800 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0yMTY0LXgvMzg4NjEtcQ=="] [unique_id "alQxgjawpHZwffLOvcMRgAAAAI4"] [Sun Jul 12 18:29:54.286890 2026] [security2:error] [pid 1011499:tid 1011644] [client 143.244.57.123:50226] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 123.57.244.143.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "rogeredwards.net"] [uri "/xmlrpc.php"] [unique_id "alQxgjawpHZwffLOvcMRhAAAAIk"] [Sun Jul 12 18:29:54.549001 2026] [security2:error] [pid 1011499:tid 1011517] [remote 57.141.18.66:40356] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 66.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/E0KTtr3dyXmaqWpVC-S6uQRx3cAwCfp.lWez"] [unique_id "alQxgjawpHZwffLOvcMRjAAA5wc"] [Sun Jul 12 18:29:54.566535 2026] [security2:error] [pid 1011499:tid 1011715] [client 143.244.57.123:50230] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "alQxgjawpHZwffLOvcMRlQAAANA"] [Sun Jul 12 18:29:54.727406 2026] [authz_core:error] [pid 1011499:tid 1011756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:54.727940 2026] [authz_core:error] [pid 1011499:tid 1011756] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:54.845273 2026] [security2:error] [pid 1011499:tid 1011683] [client 143.244.57.123:50236] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "alQxgjawpHZwffLOvcMRowAAALA"] [Sun Jul 12 18:29:55.140332 2026] [security2:error] [pid 1011499:tid 1011714] [client 143.244.57.123:50246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "alQxgzawpHZwffLOvcMRtgAAAM8"] [Sun Jul 12 18:29:55.175758 2026] [security2:error] [pid 1011499:tid 1011747] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxgjawpHZwffLOvcMRlwAAAPA"] [Sun Jul 12 18:29:55.175816 2026] [security2:error] [pid 1011499:tid 1011747] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxgjawpHZwffLOvcMRlwAAAPA"] [Sun Jul 12 18:29:55.180917 2026] [security2:error] [pid 1011499:tid 1011676] [client 65.21.113.206:43900] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0yMTY0LXgvMzg4NjEtcQ=="] [unique_id "alQxgjawpHZwffLOvcMRkAAAAKk"] [Sun Jul 12 18:29:55.425839 2026] [security2:error] [pid 1011499:tid 1011663] [client 143.244.57.123:50258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "alQxgzawpHZwffLOvcMRygAAAJw"] [Sun Jul 12 18:29:55.446519 2026] [security2:error] [pid 1011499:tid 1011694] [client 168.100.149.122:56822] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40430/bargainor/2308_limnoria.jsp"] [unique_id "alQxgzawpHZwffLOvcMRzgAAALs"] [Sun Jul 12 18:29:55.552884 2026] [security2:error] [pid 1011499:tid 1011723] [client 67.222.60.87:43324] ModSecurity: Warning. Matched phrase "Custo" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQxgzawpHZwffLOvcMR2QAAANg"] [Sun Jul 12 18:29:55.552966 2026] [security2:error] [pid 1011499:tid 1011723] [client 67.222.60.87:43324] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.custom-flag-makers.com"] [uri "/wp-cron.php"] [unique_id "alQxgzawpHZwffLOvcMR2QAAANg"] [Sun Jul 12 18:29:55.555336 2026] [security2:error] [pid 1011499:tid 1011657] [client 185.238.231.62:36509] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.231.238.185.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "tcemallorca.com"] [uri "/wp-login.php"] [unique_id "alQxgzawpHZwffLOvcMR1wAAAJY"] [Sun Jul 12 18:29:55.560321 2026] [security2:error] [pid 1011499:tid 1011744] [client 184.105.139.68:56978] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "67.222.60.87"] [uri "/index.php"] [unique_id "alQxgTawpHZwffLOvcMRaQAAAO0"] [Sun Jul 12 18:29:55.565790 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:55.566451 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:55.719262 2026] [security2:error] [pid 1011499:tid 1011691] [client 143.244.57.123:50272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "alQxgzawpHZwffLOvcMR3wAAALg"] [Sun Jul 12 18:29:55.845902 2026] [security2:error] [pid 1011499:tid 1011664] [client 69.159.34.183:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxgzawpHZwffLOvcMRwwAAAJ0"] [Sun Jul 12 18:29:56.003046 2026] [security2:error] [pid 1011499:tid 1011665] [client 143.244.57.123:50286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "alQxhDawpHZwffLOvcMR5wAAAJ4"] [Sun Jul 12 18:29:56.017180 2026] [security2:error] [pid 1011499:tid 1011645] [client 172.121.173.32:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "salon-software.com"] [uri "/index.php"] [unique_id "alQxgzawpHZwffLOvcMR2AAAAIo"] [Sun Jul 12 18:29:56.277358 2026] [fcgid:warn] [pid 1011499:tid 1011743] (70014)End of file found: [client 66.132.172.193:4746] mod_fcgid: can't get data from http client [Sun Jul 12 18:29:56.284321 2026] [security2:error] [pid 1011499:tid 1011694] [client 143.244.57.123:50300] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "alQxhDawpHZwffLOvcMR8gAAALs"] [Sun Jul 12 18:29:56.402363 2026] [security2:error] [pid 1011499:tid 1011718] [client 65.49.20.66:51552] ModSecurity: Access denied with code 406 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "61"] [id "390616"] [rev "2"] [msg "Atomicorp.com WAF Rules: POST request must have a Content-Length header"] [severity "WARNING"] [hostname "173.254.110.140"] [uri "/"] [unique_id "alQxhDawpHZwffLOvcMR-wAAANM"] [Sun Jul 12 18:29:56.426936 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:56.427517 2026] [authz_core:error] [pid 1011499:tid 1011641] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:56.564553 2026] [security2:error] [pid 1011499:tid 1011674] [client 143.244.57.123:50312] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "alQxhDawpHZwffLOvcMSAwAAAKc"] [Sun Jul 12 18:29:56.728164 2026] [lsapi:error] [pid 992537:tid 992795] [client 186.107.79.152:0] [host mail.lazyladylifter.com] Error on sending request(GET /502.shtml HTTP/1.1); uri(/index.php) content-length(0): ReceiveAckHdr: timeout 300 is exceeded, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:29:56.739725 2026] [lsapi:error] [pid 992244:tid 992436] [client 186.107.79.152:0] [host mail.lazyladylifter.com] Error on sending request(GET /502.shtml HTTP/1.1); uri(/index.php) content-length(0): ReceiveAckHdr: timeout 300 is exceeded, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:29:56.846127 2026] [security2:error] [pid 1011499:tid 1011697] [client 143.244.57.123:8622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "alQxhDawpHZwffLOvcMSDAAAAL4"] [Sun Jul 12 18:29:57.126152 2026] [security2:error] [pid 1011499:tid 1011676] [client 143.244.57.123:50332] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-includes/wlwmanifest\\\\.xml" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1541"] [id "900920"] [msg "wlwmanifest spam rule"] [hostname "rogeredwards.net"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "alQxhTawpHZwffLOvcMSGwAAAKk"] [Sun Jul 12 18:29:57.256217 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:57.256910 2026] [authz_core:error] [pid 1011499:tid 1011747] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:57.475561 2026] [security2:error] [pid 1011499:tid 1011695] [client 168.100.149.231:38440] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40495/bargainor/2308_milksopism.jsp"] [unique_id "alQxhTawpHZwffLOvcMSIwAAALw"] [Sun Jul 12 18:29:58.055180 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:58.055724 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:58.290416 2026] [security2:error] [pid 1011499:tid 1011732] [client 203.76.249.129:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxhTawpHZwffLOvcMSKwAAAOE"] [Sun Jul 12 18:29:58.442452 2026] [security2:error] [pid 1011499:tid 1011684] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0yOTk5LTgvMjU0NzctOA=="] [unique_id "alQxhjawpHZwffLOvcMSRgAAALE"] [Sun Jul 12 18:29:58.774860 2026] [security2:error] [pid 1011499:tid 1011764] [client 168.100.149.49:57074] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40560/bargainor/2308_capnoides.jsp"] [unique_id "alQxhjawpHZwffLOvcMSWgAAAQE"] [Sun Jul 12 18:29:58.905961 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:58.906459 2026] [authz_core:error] [pid 1011499:tid 1011644] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:29:59.461729 2026] [security2:error] [pid 1011499:tid 1011677] [client 125.167.21.72:61547] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxhzawpHZwffLOvcMSfQAAAKo"] [Sun Jul 12 18:29:59.462019 2026] [security2:error] [pid 1011499:tid 1011677] [client 125.167.21.72:61547] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxhzawpHZwffLOvcMSfQAAAKo"] [Sun Jul 12 18:29:59.536888 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxhjawpHZwffLOvcMSZQAAAJI"] [Sun Jul 12 18:29:59.536943 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxhjawpHZwffLOvcMSZQAAAJI"] [Sun Jul 12 18:29:59.538755 2026] [security2:error] [pid 1011499:tid 1011647] [client 65.21.113.206:43910] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0yOTk5LTgvMjU0NzctOA=="] [unique_id "alQxhjawpHZwffLOvcMSYAAAAIw"] [Sun Jul 12 18:29:59.688124 2026] [security2:error] [pid 1011499:tid 1011634] [remote 202.46.62.82:62277] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 82.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/shopping_cart.php"] [unique_id "alQxhzawpHZwffLOvcMSiAAAnns"] [Sun Jul 12 18:29:59.700850 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:29:59.701385 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:00.239635 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.100.87.136:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:00.240250 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.100.87.136:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:00.510235 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:00.510902 2026] [authz_core:error] [pid 1011499:tid 1011737] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:00.699399 2026] [proxy:warn] [pid 1011499:tid 1011763] [client 185.100.87.136:49950] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be laraza1023.com for uri /400.shtml [Sun Jul 12 18:30:00.730365 2026] [security2:error] [pid 1011499:tid 1011732] [client 185.100.87.136:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "laraza1023.com"] [uri "/404.shtml"] [unique_id "alQxiDawpHZwffLOvcMStAAAAOE"] [Sun Jul 12 18:30:00.731176 2026] [security2:error] [pid 1011499:tid 1011763] [client 185.100.87.136:49950] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "laraza1023.com"] [uri "/400.shtml"] [unique_id "alQxiDawpHZwffLOvcMSsgAAAQA"] [Sun Jul 12 18:30:01.385093 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:01.385830 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:01.491806 2026] [security2:error] [pid 1011499:tid 1011746] [client 168.100.149.32:38672] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40625/bargainor/2308_deft.jsp"] [unique_id "alQxiTawpHZwffLOvcMSygAAAO8"] [Sun Jul 12 18:30:02.057109 2026] [security2:error] [pid 1011499:tid 1011532] [remote 180.153.197.228:44276] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.acedev.net"] [uri "/forumdisplay.php"] [unique_id "alQxijawpHZwffLOvcMS2gAAyxY"] [Sun Jul 12 18:30:02.085596 2026] [security2:error] [pid 1011499:tid 1011677] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0yOTk5LWwvMjU0MjEteg=="] [unique_id "alQxijawpHZwffLOvcMS3AAAAKo"] [Sun Jul 12 18:30:02.392617 2026] [authz_core:error] [pid 1011499:tid 1011725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:02.393159 2026] [authz_core:error] [pid 1011499:tid 1011725] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:02.761846 2026] [security2:error] [pid 1011499:tid 1011698] [client 168.100.149.83:29064] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40690/bargainor/2308_did.jsp"] [unique_id "alQxijawpHZwffLOvcMS7QAAAL8"] [Sun Jul 12 18:30:02.953179 2026] [security2:error] [pid 1011499:tid 1011642] [client 70.40.196.118:29276] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "cecweb.org"] [uri "/wp-cron.php"] [unique_id "alQxijawpHZwffLOvcMS7wAAAIc"] [Sun Jul 12 18:30:03.254811 2026] [authz_core:error] [pid 1011499:tid 1011746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:03.255335 2026] [authz_core:error] [pid 1011499:tid 1011746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:03.446730 2026] [security2:error] [pid 1011499:tid 1011693] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxijawpHZwffLOvcMS7AAAALo"] [Sun Jul 12 18:30:03.447714 2026] [security2:error] [pid 1011499:tid 1011693] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxijawpHZwffLOvcMS7AAAALo"] [Sun Jul 12 18:30:03.448493 2026] [security2:error] [pid 1011499:tid 1011735] [client 65.21.113.206:43926] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0yOTk5LWwvMjU0MjEteg=="] [unique_id "alQxijawpHZwffLOvcMS6QAAAOQ"] [Sun Jul 12 18:30:03.963569 2026] [security2:error] [pid 1011499:tid 1011757] [client 57.141.18.35:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "hangar34liverpool.co.uk"] [uri "/index.php"] [unique_id "alQxhzawpHZwffLOvcMSjwAAAPo"] [Sun Jul 12 18:30:04.042104 2026] [security2:error] [pid 1011499:tid 1011583] [remote 180.153.197.228:44284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQxjDawpHZwffLOvcMTHQAA_Ug"], referer: https://www.cidclan.acedev.net/ [Sun Jul 12 18:30:04.065896 2026] [authz_core:error] [pid 1011499:tid 1011681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:04.066427 2026] [authz_core:error] [pid 1011499:tid 1011681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:04.282425 2026] [security2:error] [pid 1011499:tid 1011587] [remote 57.141.18.11:21810] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 11.18.141.57.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "kurtismyson.com"] [uri "/index.php/1nABGcKPDqmdFzzl_YmcMZ"] [unique_id "alQxjDawpHZwffLOvcMTJQAAtkw"] [Sun Jul 12 18:30:04.524115 2026] [security2:error] [pid 1011499:tid 1011604] [remote 180.153.197.228:44284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.197.153.180.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.cidclan.net"] [uri "/discord/gamer/gamer.php"] [unique_id "alQxjDawpHZwffLOvcMTMgAA810"], referer: https://www.cidclan.net/discord/gamer/gamer.php [Sun Jul 12 18:30:04.765399 2026] [security2:error] [pid 1011499:tid 1011710] [client 168.100.149.239:28772] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40755/bargainor/2308_delphian.jsp"] [unique_id "alQxjDawpHZwffLOvcMTOAAAAMs"] [Sun Jul 12 18:30:04.857152 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:04.857732 2026] [authz_core:error] [pid 1011499:tid 1011708] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:05.593525 2026] [security2:error] [pid 1011499:tid 1011765] [client 152.232.80.168:54785] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/server/.env"] [unique_id "alQxjTawpHZwffLOvcMTagAAAQI"] [Sun Jul 12 18:30:05.677655 2026] [authz_core:error] [pid 1011499:tid 1011674] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:05.678326 2026] [authz_core:error] [pid 1011499:tid 1011674] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:05.699774 2026] [security2:error] [pid 1011499:tid 1011681] [client 200.123.201.2:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxjTawpHZwffLOvcMTTwAAAK4"] [Sun Jul 12 18:30:05.738551 2026] [security2:error] [pid 1011499:tid 1011698] [client 152.232.80.168:63231] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/laravel/.env"] [unique_id "alQxjTawpHZwffLOvcMTbgAAAL8"] [Sun Jul 12 18:30:05.739104 2026] [security2:error] [pid 1011499:tid 1011766] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0zMTItZy8yNjcwOS02"] [unique_id "alQxjTawpHZwffLOvcMTbwAAAQM"] [Sun Jul 12 18:30:05.741502 2026] [security2:error] [pid 1011499:tid 1011743] [client 152.232.80.168:63234] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/backend/.env"] [unique_id "alQxjTawpHZwffLOvcMTcAAAAOw"] [Sun Jul 12 18:30:05.819079 2026] [security2:error] [pid 1011499:tid 1011683] [client 57.141.18.104:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "spooniepreneur.net"] [uri "/index.php"] [unique_id "alQxjDawpHZwffLOvcMTKwAAALA"] [Sun Jul 12 18:30:05.822317 2026] [security2:error] [pid 1011499:tid 1011741] [client 152.232.80.168:52463] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/.env.old"] [unique_id "alQxjTawpHZwffLOvcMTcwAAAOo"] [Sun Jul 12 18:30:05.831714 2026] [security2:error] [pid 1011499:tid 1011651] [client 152.232.80.168:60477] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php.old"] [unique_id "alQxjTawpHZwffLOvcMTdQAAAJA"] [Sun Jul 12 18:30:05.999960 2026] [security2:error] [pid 1011499:tid 1011723] [client 152.232.80.168:51453] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/configuration.php"] [unique_id "alQxjTawpHZwffLOvcMTfQAAANg"] [Sun Jul 12 18:30:06.271165 2026] [security2:error] [pid 1011499:tid 1011757] [client 152.232.80.168:52743] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php.bak"] [unique_id "alQxjjawpHZwffLOvcMThwAAAPo"] [Sun Jul 12 18:30:06.509130 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:06.509617 2026] [authz_core:error] [pid 1011499:tid 1011654] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:06.786258 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxjjawpHZwffLOvcMThgAAAI4"] [Sun Jul 12 18:30:06.786348 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxjjawpHZwffLOvcMThgAAAI4"] [Sun Jul 12 18:30:06.787703 2026] [security2:error] [pid 1011499:tid 1011763] [client 65.21.113.206:40628] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0zMTItZy8yNjcwOS02"] [unique_id "alQxjjawpHZwffLOvcMThAAAAQA"] [Sun Jul 12 18:30:07.286435 2026] [authz_core:error] [pid 1011499:tid 1011679] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:07.286991 2026] [authz_core:error] [pid 1011499:tid 1011679] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:07.443405 2026] [security2:error] [pid 1011499:tid 1011757] [client 168.100.149.85:20270] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40820/bargainor/2308_anisodactyli.jsp"] [unique_id "alQxjzawpHZwffLOvcMTsgAAAPo"] [Sun Jul 12 18:30:08.088650 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:08.089170 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:08.765354 2026] [security2:error] [pid 1011499:tid 1011661] [client 168.100.149.167:36886] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40885/bargainor/2308_birefraction.jsp"] [unique_id "alQxkDawpHZwffLOvcMT1AAAAJo"] [Sun Jul 12 18:30:08.892612 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:08.893111 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:09.661149 2026] [authz_core:error] [pid 1011499:tid 1011703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:09.661647 2026] [authz_core:error] [pid 1011499:tid 1011703] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:09.905099 2026] [security2:error] [pid 1011499:tid 1011644] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/Yi0zMTQ5LWwvMTE0NzctYw=="] [unique_id "alQxkTawpHZwffLOvcMT7gAAAIk"] [Sun Jul 12 18:30:10.015957 2026] [security2:error] [pid 1011499:tid 1011700] [client 125.167.21.72:62019] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxkjawpHZwffLOvcMT8AAAAME"] [Sun Jul 12 18:30:10.016228 2026] [security2:error] [pid 1011499:tid 1011700] [client 125.167.21.72:62019] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxkjawpHZwffLOvcMT8AAAAME"] [Sun Jul 12 18:30:10.454102 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:10.454639 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:10.922977 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxkjawpHZwffLOvcMUAAAAAMg"] [Sun Jul 12 18:30:10.923044 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxkjawpHZwffLOvcMUAAAAAMg"] [Sun Jul 12 18:30:10.924155 2026] [security2:error] [pid 1011499:tid 1011752] [client 65.21.113.206:40630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/Yi0zMTQ5LWwvMTE0NzctYw=="] [unique_id "alQxkjawpHZwffLOvcMT_gAAAPU"] [Sun Jul 12 18:30:11.224321 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:11.224835 2026] [authz_core:error] [pid 1011499:tid 1011728] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:11.459071 2026] [security2:error] [pid 1011499:tid 1011717] [client 168.100.149.80:32600] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/40950/bargainor/2308_mediator.jsp"] [unique_id "alQxkzawpHZwffLOvcMULQAAANI"] [Sun Jul 12 18:30:12.015243 2026] [authz_core:error] [pid 1011499:tid 1011748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:12.015800 2026] [authz_core:error] [pid 1011499:tid 1011748] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:12.830916 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:12.831405 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:13.190455 2026] [security2:error] [pid 1011499:tid 1011715] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjA3LzQ3Njg3LzA3LzE0NzcvN2lj.asp"] [unique_id "alQxlTawpHZwffLOvcMUZgAAANA"] [Sun Jul 12 18:30:13.429798 2026] [security2:error] [pid 1011499:tid 1011712] [client 168.100.149.93:64558] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41015/bargainor/2308_gurian.jsp"] [unique_id "alQxlTawpHZwffLOvcMUdAAAAM0"] [Sun Jul 12 18:30:13.589345 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:13.589932 2026] [authz_core:error] [pid 1011499:tid 1011695] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:14.325348 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxlTawpHZwffLOvcMUfAAAANo"] [Sun Jul 12 18:30:14.325417 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxlTawpHZwffLOvcMUfAAAANo"] [Sun Jul 12 18:30:14.334237 2026] [security2:error] [pid 1011499:tid 1011655] [client 65.21.113.206:35016] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjA3LzQ3Njg3LzA3LzE0NzcvN2lj.asp"] [unique_id "alQxlTawpHZwffLOvcMUeAAAAJQ"] [Sun Jul 12 18:30:14.430812 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:14.431327 2026] [authz_core:error] [pid 1011499:tid 1011732] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:14.779646 2026] [security2:error] [pid 1011499:tid 1011692] [client 168.100.149.17:46228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41080/bargainor/2308_monkey.jsp"] [unique_id "alQxljawpHZwffLOvcMUmQAAALk"] [Sun Jul 12 18:30:14.859002 2026] [security2:error] [pid 1011499:tid 1011554] [remote 141.94.161.61:34900] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.161.94.141.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "hanoverhumanesociety.com"] [uri "/wp-login.php"] [unique_id "alQxljawpHZwffLOvcMUmwAA_Cs"] [Sun Jul 12 18:30:15.189414 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:15.189931 2026] [authz_core:error] [pid 1011499:tid 1011766] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:15.339973 2026] [security2:error] [pid 1011499:tid 1011724] [client 104.28.251.191:59337] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.treetopsdaynursery.com"] [uri "/.env"] [unique_id "alQxlzawpHZwffLOvcMUtQAAANk"] [Sun Jul 12 18:30:15.987547 2026] [security2:error] [pid 1011499:tid 1011755] [client 104.28.219.194:30009] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "shadowarchitecture.com"] [uri "/.env"] [unique_id "alQxlzawpHZwffLOvcMU5QAAAPg"] [Sun Jul 12 18:30:16.000154 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:16.000714 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:16.212722 2026] [security2:error] [pid 1011499:tid 1011733] [client 57.141.18.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxlzawpHZwffLOvcMU3gAAAOI"] [Sun Jul 12 18:30:16.440263 2026] [core:error] [pid 1011499:tid 1011742] [client 66.226.147.116:58314] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:30:16.542412 2026] [security2:error] [pid 1011499:tid 1011729] [client 152.232.80.168:64588] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/config/.env"] [unique_id "alQxmDawpHZwffLOvcMU-gAAAN4"] [Sun Jul 12 18:30:16.643978 2026] [security2:error] [pid 1011499:tid 1011741] [client 114.119.153.132:31705] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "elisacarrio.org"] [uri "/Elisa/images_old/portada2/"] [unique_id "alQxmDawpHZwffLOvcMU_QAAAOo"], referer: http://elisacarrio.org/Elisa/images_old/portada2?C=M%3BO%3DA [Sun Jul 12 18:30:16.711885 2026] [security2:error] [pid 1011499:tid 1011711] [client 152.232.80.168:62944] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/app/config/mail.php"] [unique_id "alQxmDawpHZwffLOvcMVAgAAAMw"] [Sun Jul 12 18:30:16.712327 2026] [security2:error] [pid 1011499:tid 1011765] [client 152.232.80.168:59351] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/info.php"] [unique_id "alQxmDawpHZwffLOvcMVAwAAAQI"] [Sun Jul 12 18:30:16.716382 2026] [security2:error] [pid 1011499:tid 1011760] [client 152.232.80.168:57258] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/.env.backup.old"] [unique_id "alQxmDawpHZwffLOvcMVBAAAAP0"] [Sun Jul 12 18:30:16.772860 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjA3LzQ3Njg3LzA3Lzk5MTIvN2lj.asp"] [unique_id "alQxmDawpHZwffLOvcMVBgAAAI4"] [Sun Jul 12 18:30:16.790751 2026] [security2:error] [pid 1011499:tid 1011647] [client 152.232.80.168:53433] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/server/.env"] [unique_id "alQxmDawpHZwffLOvcMVCQAAAIw"] [Sun Jul 12 18:30:16.814174 2026] [authz_core:error] [pid 1011499:tid 1011674] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:16.814721 2026] [authz_core:error] [pid 1011499:tid 1011674] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:16.844354 2026] [security2:error] [pid 1011499:tid 1011715] [client 152.232.80.168:49802] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/config/.env"] [unique_id "alQxmDawpHZwffLOvcMVCgAAANA"] [Sun Jul 12 18:30:16.858354 2026] [security2:error] [pid 1011499:tid 1011660] [client 152.232.80.168:61752] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/.env"] [unique_id "alQxmDawpHZwffLOvcMVCwAAAJk"] [Sun Jul 12 18:30:17.048281 2026] [security2:error] [pid 1011499:tid 1011721] [client 152.232.80.168:57297] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/src/.env"] [unique_id "alQxmTawpHZwffLOvcMVEQAAANY"] [Sun Jul 12 18:30:17.066146 2026] [security2:error] [pid 1011499:tid 1011734] [client 152.232.80.168:52565] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/.env.bak"] [unique_id "alQxmTawpHZwffLOvcMVEgAAAOM"] [Sun Jul 12 18:30:17.266814 2026] [security2:error] [pid 1011499:tid 1011680] [client 152.232.80.168:49839] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/backend/.env"] [unique_id "alQxmTawpHZwffLOvcMVGAAAAK0"] [Sun Jul 12 18:30:17.488106 2026] [security2:error] [pid 1011499:tid 1011709] [client 168.100.149.221:29944] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41145/bargainor/2308_impeccance.jsp"] [unique_id "alQxmTawpHZwffLOvcMVJQAAAMo"] [Sun Jul 12 18:30:17.672475 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:17.672987 2026] [authz_core:error] [pid 1011499:tid 1011707] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:17.764528 2026] [security2:error] [pid 1011499:tid 1011740] [client 152.232.80.168:58191] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/backup/.env"] [unique_id "alQxmTawpHZwffLOvcMVLAAAAOk"] [Sun Jul 12 18:30:17.992268 2026] [core:error] [pid 1011499:tid 1011750] [client 159.69.72.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:18.091901 2026] [core:error] [pid 1011499:tid 1011750] [client 159.69.72.167:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:18.197896 2026] [security2:error] [pid 1011499:tid 1011720] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxmTawpHZwffLOvcMVGwAAANU"] [Sun Jul 12 18:30:18.197951 2026] [security2:error] [pid 1011499:tid 1011720] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxmTawpHZwffLOvcMVGwAAANU"] [Sun Jul 12 18:30:18.199065 2026] [security2:error] [pid 1011499:tid 1011716] [client 65.21.113.206:35032] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjA3LzQ3Njg3LzA3Lzk5MTIvN2lj.asp"] [unique_id "alQxmTawpHZwffLOvcMVFgAAANE"] [Sun Jul 12 18:30:18.504939 2026] [authz_core:error] [pid 1011499:tid 1011736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:18.505439 2026] [authz_core:error] [pid 1011499:tid 1011736] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:18.507214 2026] [security2:error] [pid 1011499:tid 1011762] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxlzawpHZwffLOvcMUygAAAP8"] [Sun Jul 12 18:30:18.538714 2026] [security2:error] [pid 1011499:tid 1011746] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxlzawpHZwffLOvcMUzgAAAO8"] [Sun Jul 12 18:30:18.565800 2026] [security2:error] [pid 1011499:tid 1011726] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxlzawpHZwffLOvcMUwwAAANs"] [Sun Jul 12 18:30:18.573754 2026] [security2:error] [pid 1011499:tid 1011651] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxlzawpHZwffLOvcMUywAAAJA"] [Sun Jul 12 18:30:18.785141 2026] [security2:error] [pid 1011499:tid 1011716] [client 168.100.149.214:56902] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41210/bargainor/2308_gunz.jsp"] [unique_id "alQxmjawpHZwffLOvcMVaAAAANE"] [Sun Jul 12 18:30:18.821827 2026] [security2:error] [pid 1011499:tid 1011764] [client 178.156.235.26:48594] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "eaglestock.com"] [uri "/wp/index.php"] [unique_id "alQxmjawpHZwffLOvcMVSgAAAQE"] [Sun Jul 12 18:30:18.851018 2026] [security2:error] [pid 1011499:tid 1011627] [remote 74.125.215.98:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "girlwithbluesails.com"] [uri "/index.php"] [unique_id "alQxhzawpHZwffLOvcMSigAAvXQ"] [Sun Jul 12 18:30:19.365709 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:19.366411 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:19.874735 2026] [security2:error] [pid 1011499:tid 1011669] [client 75.157.162.118:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxmzawpHZwffLOvcMVfAAAAKI"] [Sun Jul 12 18:30:19.964461 2026] [security2:error] [pid 1011499:tid 1011533] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/.dj/index.php"] [unique_id "alQxmzawpHZwffLOvcMViwAAsxc"] [Sun Jul 12 18:30:20.194037 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:20.194525 2026] [authz_core:error] [pid 1011499:tid 1011743] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:20.720290 2026] [security2:error] [pid 1011499:tid 1011728] [client 125.167.21.72:62478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxnDawpHZwffLOvcMVpAAAAN0"] [Sun Jul 12 18:30:20.721312 2026] [security2:error] [pid 1011499:tid 1011728] [client 125.167.21.72:62478] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxnDawpHZwffLOvcMVpAAAAN0"] [Sun Jul 12 18:30:20.774893 2026] [security2:error] [pid 1011499:tid 1011684] [client 168.100.149.79:28474] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41275/bargainor/2308_monadically.jsp"] [unique_id "alQxnDawpHZwffLOvcMVpQAAALE"] [Sun Jul 12 18:30:21.057102 2026] [authz_core:error] [pid 1011499:tid 1011727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:21.057587 2026] [authz_core:error] [pid 1011499:tid 1011727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:21.392892 2026] [security2:error] [pid 1011499:tid 1011698] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjBfMjgxMzVfMGhsOC9oXzE4MjdfbDh1.html"] [unique_id "alQxnTawpHZwffLOvcMVsQAAAL8"] [Sun Jul 12 18:30:21.881392 2026] [authz_core:error] [pid 1011499:tid 1011746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:21.882124 2026] [authz_core:error] [pid 1011499:tid 1011746] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:22.415916 2026] [security2:error] [pid 1011499:tid 1011676] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxmjawpHZwffLOvcMVYwAAAKk"] [Sun Jul 12 18:30:22.416820 2026] [security2:error] [pid 1011499:tid 1011734] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxmjawpHZwffLOvcMVYAAAAOM"] [Sun Jul 12 18:30:22.450528 2026] [security2:error] [pid 1011499:tid 1011744] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxmjawpHZwffLOvcMVZAAAAO0"] [Sun Jul 12 18:30:22.452553 2026] [security2:error] [pid 1011499:tid 1011723] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxmjawpHZwffLOvcMVWgAAANg"] [Sun Jul 12 18:30:22.473204 2026] [security2:error] [pid 1011499:tid 1011764] [client 104.28.251.191:59346] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.treetopsdaynursery.com"] [uri "/.env.bak"] [unique_id "alQxnjawpHZwffLOvcMV0gAAAQE"] [Sun Jul 12 18:30:22.507700 2026] [security2:error] [pid 1011499:tid 1011642] [client 104.28.251.191:59337] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.old$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1263"] [id "390583"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .old)"] [severity "CRITICAL"] [hostname "www.treetopsdaynursery.com"] [uri "/.env.old"] [unique_id "alQxnjawpHZwffLOvcMV2AAAAIc"] [Sun Jul 12 18:30:22.511356 2026] [security2:error] [pid 1011499:tid 1011661] [client 104.28.251.191:59341] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.treetopsdaynursery.com"] [uri "/.env.backup"] [unique_id "alQxnjawpHZwffLOvcMV2QAAAJo"] [Sun Jul 12 18:30:22.583984 2026] [security2:error] [pid 1011499:tid 1011763] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxnTawpHZwffLOvcMVyAAAAQA"] [Sun Jul 12 18:30:22.584053 2026] [security2:error] [pid 1011499:tid 1011763] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxnTawpHZwffLOvcMVyAAAAQA"] [Sun Jul 12 18:30:22.585152 2026] [security2:error] [pid 1011499:tid 1011688] [client 65.21.113.206:35048] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjBfMjgxMzVfMGhsOC9oXzE4MjdfbDh1.html"] [unique_id "alQxnTawpHZwffLOvcMVxQAAALU"] [Sun Jul 12 18:30:22.688821 2026] [authz_core:error] [pid 1011499:tid 1011699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:22.689310 2026] [authz_core:error] [pid 1011499:tid 1011699] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:22.707748 2026] [security2:error] [pid 1011499:tid 1011722] [client 104.28.219.191:24858] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.treetopsdaynursery.com"] [uri "/wp-config.php.old"] [unique_id "alQxnjawpHZwffLOvcMV8gAAANc"] [Sun Jul 12 18:30:22.707748 2026] [security2:error] [pid 1011499:tid 1011735] [client 104.28.219.191:24868] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.treetopsdaynursery.com"] [uri "/wp-config.php~"] [unique_id "alQxnjawpHZwffLOvcMV8wAAAOQ"] [Sun Jul 12 18:30:22.708155 2026] [security2:error] [pid 1011499:tid 1011736] [client 104.28.219.191:24867] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "www.treetopsdaynursery.com"] [uri "/wp-config.php.bak"] [unique_id "alQxnjawpHZwffLOvcMV9AAAAOU"] [Sun Jul 12 18:30:22.778103 2026] [security2:error] [pid 1011499:tid 1011668] [client 104.28.219.191:24857] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 191.219.28.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.treetopsdaynursery.com"] [uri "/wp-config.php"] [unique_id "alQxnjawpHZwffLOvcMV-AAAAKE"] [Sun Jul 12 18:30:23.463579 2026] [security2:error] [pid 1011499:tid 1011646] [client 168.100.149.209:44446] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41340/bargainor/2308_enhalo.jsp"] [unique_id "alQxnzawpHZwffLOvcMWEgAAAIs"] [Sun Jul 12 18:30:23.498954 2026] [authz_core:error] [pid 1011499:tid 1011727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:23.499496 2026] [authz_core:error] [pid 1011499:tid 1011727] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:23.942936 2026] [security2:error] [pid 1011499:tid 1011707] [client 20.226.22.37:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.sourcecodecontrol.in"] [uri "/index.php"] [unique_id "alQxnDawpHZwffLOvcMVlgAAyFA"] [Sun Jul 12 18:30:23.967923 2026] [security2:error] [pid 1011499:tid 1011675] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxnjawpHZwffLOvcMV4QAAAKg"] [Sun Jul 12 18:30:24.054160 2026] [security2:error] [pid 1011499:tid 1011662] [client 104.28.251.191:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.treetopsdaynursery.com"] [uri "/index.php"] [unique_id "alQxnjawpHZwffLOvcMV5QAAAJs"] [Sun Jul 12 18:30:24.313089 2026] [authz_core:error] [pid 1011499:tid 1011706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:24.313709 2026] [authz_core:error] [pid 1011499:tid 1011706] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:24.460337 2026] [security2:error] [pid 1011499:tid 1011621] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/.trash7206/index.php"] [unique_id "alQxoDawpHZwffLOvcMWPgAAqW4"] [Sun Jul 12 18:30:24.480910 2026] [security2:error] [pid 1011499:tid 1011740] [client 45.4.2.47:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxnzawpHZwffLOvcMWGwAAAOk"] [Sun Jul 12 18:30:24.532193 2026] [security2:error] [pid 1011499:tid 1011647] [client 202.76.136.113:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxnzawpHZwffLOvcMWLgAAAIw"] [Sun Jul 12 18:30:25.119395 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:25.119952 2026] [authz_core:error] [pid 1011499:tid 1011670] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:25.337903 2026] [security2:error] [pid 1011499:tid 1011561] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQxoTawpHZwffLOvcMWdQAA2DI"] [Sun Jul 12 18:30:25.412851 2026] [security2:error] [pid 1011499:tid 1011730] [client 168.100.149.28:48630] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41405/bargainor/2308_metalogical.jsp"] [unique_id "alQxoTawpHZwffLOvcMWeAAAAN8"] [Sun Jul 12 18:30:25.508898 2026] [security2:error] [pid 1011499:tid 1011549] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/.well-known/logs233/index.php"] [unique_id "alQxoTawpHZwffLOvcMWeQAA4CY"] [Sun Jul 12 18:30:25.684538 2026] [security2:error] [pid 1011499:tid 1011532] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/.well-known/wp-cron.php"] [unique_id "alQxoTawpHZwffLOvcMWgAAAihY"] [Sun Jul 12 18:30:25.715804 2026] [security2:error] [pid 1011499:tid 1011767] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjBlMWsxLTY4MTYvMGUtMTYwMjEvZTFrMQ=="] [unique_id "alQxoTawpHZwffLOvcMWgQAAAQQ"] [Sun Jul 12 18:30:25.866659 2026] [security2:error] [pid 1011499:tid 1011518] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/0.kb-v3.php"] [unique_id "alQxoTawpHZwffLOvcMWkgAA3gg"] [Sun Jul 12 18:30:26.016105 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:26.016622 2026] [authz_core:error] [pid 1011499:tid 1011760] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:26.043556 2026] [security2:error] [pid 1011499:tid 1011557] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/0.php"] [unique_id "alQxojawpHZwffLOvcMWkwAAvC4"] [Sun Jul 12 18:30:26.221597 2026] [security2:error] [pid 1011499:tid 1011581] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/002.php"] [unique_id "alQxojawpHZwffLOvcMWmAAAyUY"] [Sun Jul 12 18:30:26.398351 2026] [security2:error] [pid 1011499:tid 1011541] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/01.php"] [unique_id "alQxojawpHZwffLOvcMWogAAjx8"] [Sun Jul 12 18:30:26.571961 2026] [security2:error] [pid 1011499:tid 1011550] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/0x.php"] [unique_id "alQxojawpHZwffLOvcMWqwAAoyc"] [Sun Jul 12 18:30:26.744051 2026] [security2:error] [pid 1011499:tid 1011586] [remote 20.226.22.37:0] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "www.sourcecodecontrol.in"] [uri "/1.php"] [unique_id "alQxojawpHZwffLOvcMWsQAAlks"] [Sun Jul 12 18:30:26.744479 2026] [security2:error] [pid 1011499:tid 1011586] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/1.php"] [unique_id "alQxojawpHZwffLOvcMWsQAAlks"] [Sun Jul 12 18:30:26.852481 2026] [authz_core:error] [pid 1011499:tid 1011762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:26.853017 2026] [authz_core:error] [pid 1011499:tid 1011762] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:26.888649 2026] [security2:error] [pid 1011499:tid 1011654] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxojawpHZwffLOvcMWmgAAAJM"] [Sun Jul 12 18:30:26.888740 2026] [security2:error] [pid 1011499:tid 1011654] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxojawpHZwffLOvcMWmgAAAJM"] [Sun Jul 12 18:30:26.889952 2026] [security2:error] [pid 1011499:tid 1011758] [client 65.21.113.206:51750] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjBlMWsxLTY4MTYvMGUtMTYwMjEvZTFrMQ=="] [unique_id "alQxojawpHZwffLOvcMWlwAAAPs"] [Sun Jul 12 18:30:26.916333 2026] [security2:error] [pid 1011499:tid 1011611] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/100.php"] [unique_id "alQxojawpHZwffLOvcMWuAAAqWQ"] [Sun Jul 12 18:30:26.935239 2026] [security2:error] [pid 1011499:tid 1011699] [client 74.7.241.157:53742] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "mail.stephaniestravels.com"] [uri "/robots.txt"] [unique_id "alQxojawpHZwffLOvcMWuQAAAMA"] [Sun Jul 12 18:30:27.088969 2026] [security2:error] [pid 1011499:tid 1011613] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/122.php"] [unique_id "alQxozawpHZwffLOvcMWvQAA8mY"] [Sun Jul 12 18:30:27.114459 2026] [security2:error] [pid 1011499:tid 1011731] [client 74.7.241.157:41730] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "mail.stephaniestravels.com"] [uri "/robots.txt"] [unique_id "alQxozawpHZwffLOvcMWvgAA4D8"], referer: http://mail.stephaniestravels.com/robots.txt [Sun Jul 12 18:30:27.127191 2026] [security2:error] [pid 1011499:tid 1011753] [client 57.141.18.63:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxojawpHZwffLOvcMWrQAAAPY"] [Sun Jul 12 18:30:27.286128 2026] [security2:error] [pid 1011499:tid 1011627] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/123.php"] [unique_id "alQxozawpHZwffLOvcMWwwAAsHQ"] [Sun Jul 12 18:30:27.343121 2026] [rewrite:error] [pid 1011499:tid 1011552] [remote 35.254.54.13:0] AH10411: Rewritten query string contains control characters or spaces, referer: https://batteryadapter.com.au/nokia-cell-battery-BV-T4B%20BVT4B.html [Sun Jul 12 18:30:27.415944 2026] [security2:error] [pid 1011499:tid 1011761] [client 168.100.149.171:64714] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41470/bargainor/2308_psychoreflex.jsp"] [unique_id "alQxozawpHZwffLOvcMWywAAAP4"] [Sun Jul 12 18:30:27.457878 2026] [security2:error] [pid 1011499:tid 1011588] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/13.php"] [unique_id "alQxozawpHZwffLOvcMWzAAAv00"] [Sun Jul 12 18:30:27.636444 2026] [security2:error] [pid 1011499:tid 1011511] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/133.php"] [unique_id "alQxozawpHZwffLOvcMW1gAAyQE"] [Sun Jul 12 18:30:27.671654 2026] [authz_core:error] [pid 1011499:tid 1011709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:27.672189 2026] [authz_core:error] [pid 1011499:tid 1011709] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:27.817228 2026] [security2:error] [pid 1011499:tid 1011592] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/155.php"] [unique_id "alQxozawpHZwffLOvcMW2AAA2FE"] [Sun Jul 12 18:30:27.991067 2026] [security2:error] [pid 1011499:tid 1011631] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/177.php"] [unique_id "alQxozawpHZwffLOvcMW2wAA23g"] [Sun Jul 12 18:30:28.082396 2026] [security2:error] [pid 1011499:tid 1011678] [client 152.232.80.168:62375] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/db_dump.sql"] [unique_id "alQxpDawpHZwffLOvcMW4wAAAKs"] [Sun Jul 12 18:30:28.083487 2026] [security2:error] [pid 1011499:tid 1011736] [client 152.232.80.168:61064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/services/.env"] [unique_id "alQxpDawpHZwffLOvcMW4gAAAOU"] [Sun Jul 12 18:30:28.162933 2026] [security2:error] [pid 1011499:tid 1011593] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/1index.php"] [unique_id "alQxpDawpHZwffLOvcMW6gAAh1I"] [Sun Jul 12 18:30:28.272698 2026] [security2:error] [pid 1011499:tid 1011727] [client 152.232.80.168:53530] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/main/.env"] [unique_id "alQxpDawpHZwffLOvcMW8QAAANw"] [Sun Jul 12 18:30:28.338332 2026] [security2:error] [pid 1011499:tid 1011616] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/2.php"] [unique_id "alQxpDawpHZwffLOvcMW-wAAimk"] [Sun Jul 12 18:30:28.369535 2026] [security2:error] [pid 1011499:tid 1011766] [client 152.232.80.168:53193] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/queue.php"] [unique_id "alQxpDawpHZwffLOvcMW_QAAAQM"] [Sun Jul 12 18:30:28.369737 2026] [security2:error] [pid 1011499:tid 1011697] [client 152.232.80.168:58823] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/sites/default/settings.local.php"] [unique_id "alQxpDawpHZwffLOvcMW_gAAAL4"] [Sun Jul 12 18:30:28.408254 2026] [proxy:warn] [pid 1011499:tid 1011761] [client 45.205.1.223:57928] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be dancetrenz.com for uri /400.shtml [Sun Jul 12 18:30:28.444113 2026] [security2:error] [pid 1011499:tid 1011672] [client 45.205.1.223:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "dancetrenz.com"] [uri "/400.shtml"] [unique_id "alQxpDawpHZwffLOvcMXAwAAAKU"] [Sun Jul 12 18:30:28.445384 2026] [security2:error] [pid 1011499:tid 1011761] [client 45.205.1.223:57928] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "dancetrenz.com"] [uri "/400.shtml"] [unique_id "alQxpDawpHZwffLOvcMW_wAAAP4"] [Sun Jul 12 18:30:28.480029 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:28.480736 2026] [authz_core:error] [pid 1011499:tid 1011715] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:28.513624 2026] [proxy:warn] [pid 1011499:tid 1011677] [client 43.159.148.221:40466] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be huakionline.com for uri /400.shtml [Sun Jul 12 18:30:28.514450 2026] [security2:error] [pid 1011499:tid 1011614] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/222.php"] [unique_id "alQxpDawpHZwffLOvcMXCQAAlGc"] [Sun Jul 12 18:30:28.549725 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 47.79.207.199:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/php.ini, referer: https://www.google.com/ [Sun Jul 12 18:30:28.564352 2026] [security2:error] [pid 1011499:tid 1011759] [client 43.159.148.221:0] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "huakionline.com"] [uri "/cgi-sys/404.html"] [unique_id "alQxpDawpHZwffLOvcMXDAAAAPw"] [Sun Jul 12 18:30:28.565426 2026] [security2:error] [pid 1011499:tid 1011677] [client 43.159.148.221:40466] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "404"] [hostname "huakionline.com"] [uri "/400.shtml"] [unique_id "alQxpDawpHZwffLOvcMXCAAAAKo"] [Sun Jul 12 18:30:28.570474 2026] [security2:error] [pid 1011499:tid 1011746] [client 152.232.80.168:52835] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/service/.env"] [unique_id "alQxpDawpHZwffLOvcMXDQAAAO8"] [Sun Jul 12 18:30:28.605132 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 47.79.207.199:0] AH01630: client denied by server configuration: /home2/faberrug/public_html/error_log, referer: https://www.google.com/ [Sun Jul 12 18:30:28.687109 2026] [security2:error] [pid 1011499:tid 1011578] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/2p.update.php"] [unique_id "alQxpDawpHZwffLOvcMXEAAAtUM"] [Sun Jul 12 18:30:28.796082 2026] [security2:error] [pid 1011499:tid 1011716] [client 136.144.35.145:45877] ModSecurity: Access denied with code 406 (phase 1). Match of "ipMatch 127.0.0.1" against "REMOTE_ADDR" required. [file "/opt/mod_security/hg_rules.conf"] [line "1461"] [id "909116"] [msg "Golang default UA"] [hostname "webdisk.cognitions.co.uk"] [uri "/wp-includes/css/buttons.css"] [unique_id "alQxpDawpHZwffLOvcMXFQAAANE"] [Sun Jul 12 18:30:28.858796 2026] [security2:error] [pid 1011499:tid 1011625] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/3.php"] [unique_id "alQxpDawpHZwffLOvcMXGQABAHI"] [Sun Jul 12 18:30:29.031282 2026] [security2:error] [pid 1011499:tid 1011626] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQxpTawpHZwffLOvcMXIQAAonM"] [Sun Jul 12 18:30:29.130976 2026] [security2:error] [pid 1011499:tid 1011687] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjBtZ2NzLzc0ODMvMG0vMjQwNjEvbQ=="] [unique_id "alQxpTawpHZwffLOvcMXIwAAALQ"] [Sun Jul 12 18:30:29.209106 2026] [security2:error] [pid 1011499:tid 1011615] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/403.php"] [unique_id "alQxpTawpHZwffLOvcMXJgAAh2g"] [Sun Jul 12 18:30:29.273761 2026] [authz_core:error] [pid 1011499:tid 1011744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:29.274266 2026] [authz_core:error] [pid 1011499:tid 1011744] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:29.380653 2026] [security2:error] [pid 1011499:tid 1011602] [remote 20.226.22.37:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 37.22.226.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.sourcecodecontrol.in"] [uri "/404.php"] [unique_id "alQxpTawpHZwffLOvcMXKwAAk1s"] [Sun Jul 12 18:30:29.478611 2026] [security2:error] [pid 1011499:tid 1011684] [client 168.100.149.203:58570] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41535/bargainor/2308_mailable.jsp"] [unique_id "alQxpTawpHZwffLOvcMXLQAAALE"] [Sun Jul 12 18:30:30.073031 2026] [proxy:warn] [pid 1011499:tid 1011686] [client 45.205.1.223:57942] AH01092: no HTTP 0.9 request (with no host line) on incoming request and preserve host set forcing hostname to be dancetrenz.com for uri /400.shtml [Sun Jul 12 18:30:30.087473 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:30.088006 2026] [authz_core:error] [pid 1011499:tid 1011663] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:30.105770 2026] [security2:error] [pid 1011499:tid 1011686] [client 45.205.1.223:57942] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "200"] [hostname "dancetrenz.com"] [uri "/400.shtml"] [unique_id "alQxpjawpHZwffLOvcMXSwAAALM"] [Sun Jul 12 18:30:30.175718 2026] [security2:error] [pid 1011499:tid 1011694] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxpTawpHZwffLOvcMXNwAAALs"] [Sun Jul 12 18:30:30.175788 2026] [security2:error] [pid 1011499:tid 1011694] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxpTawpHZwffLOvcMXNwAAALs"] [Sun Jul 12 18:30:30.176889 2026] [security2:error] [pid 1011499:tid 1011745] [client 65.21.113.206:51766] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjBtZ2NzLzc0ODMvMG0vMjQwNjEvbQ=="] [unique_id "alQxpTawpHZwffLOvcMXMwAAAO4"] [Sun Jul 12 18:30:30.843911 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:30.844391 2026] [authz_core:error] [pid 1011499:tid 1011767] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:31.015146 2026] [security2:error] [pid 1011499:tid 1011653] [client 91.92.42.63:10230] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMXdgAAAJI"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:30:31.025393 2026] [security2:error] [pid 1011499:tid 1011681] [client 91.92.42.63:10232] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMXegAAAK4"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:30:31.025434 2026] [security2:error] [pid 1011499:tid 1011737] [client 91.92.42.63:10242] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webmail.euronovelties.ae"] [uri "/___proxy_subdomain_webmail/web.config"] [unique_id "alQxpzawpHZwffLOvcMXdwAAAOY"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:30:31.052492 2026] [security2:error] [pid 1011499:tid 1011650] [client 91.92.42.63:10268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webmail.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMXfQAAAI8"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:30:31.196029 2026] [security2:error] [pid 1011499:tid 1011664] [client 125.167.21.72:63006] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxpzawpHZwffLOvcMXhAAAAJ0"] [Sun Jul 12 18:30:31.196309 2026] [security2:error] [pid 1011499:tid 1011664] [client 125.167.21.72:63006] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxpzawpHZwffLOvcMXhAAAAJ0"] [Sun Jul 12 18:30:31.227277 2026] [security2:error] [pid 1011499:tid 1011667] [client 91.92.42.63:10324] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webmail.euronovelties.ae"] [uri "/___proxy_subdomain_webmail/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXhgAAAKA"], referer: http://webmail.euronovelties.ae/ [Sun Jul 12 18:30:31.308699 2026] [security2:error] [pid 1011499:tid 1011758] [client 91.92.42.63:10284] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMXjQAAAPs"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:30:31.312203 2026] [security2:error] [pid 1011499:tid 1011746] [client 91.92.42.63:10378] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMXkAAAAO8"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:30:31.317180 2026] [security2:error] [pid 1011499:tid 1011726] [client 91.92.42.63:10308] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "autodiscover.euronovelties.ae"] [uri "/web.config"] [unique_id "alQxpzawpHZwffLOvcMXkwAAANs"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:30:31.418893 2026] [security2:error] [pid 1011499:tid 1011691] [client 91.92.42.63:10420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMXoAAAALg"], referer: http://euronovelties.ae/ [Sun Jul 12 18:30:31.422335 2026] [security2:error] [pid 1011499:tid 1011691] [client 91.92.42.63:10450] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMXoQAAALg"], referer: http://euronovelties.ae/ [Sun Jul 12 18:30:31.427613 2026] [security2:error] [pid 1011499:tid 1011750] [client 91.92.42.63:10396] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMXowAAAPM"], referer: http://euronovelties.ae/ [Sun Jul 12 18:30:31.438722 2026] [security2:error] [pid 1011499:tid 1011676] [client 168.100.149.231:24408] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41600/bargainor/2308_epidemiology.jsp"] [unique_id "alQxpzawpHZwffLOvcMXpAAAAKk"] [Sun Jul 12 18:30:31.485719 2026] [proxy:error] [pid 1011499:tid 1011652] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.485980 2026] [proxy_http:error] [pid 1011499:tid 1011652] [client 91.92.42.63:10518] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.488471 2026] [security2:error] [pid 1011499:tid 1011660] [client 91.92.42.63:10308] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "autodiscover.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMXpwAAAJk"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:30:31.490988 2026] [security2:error] [pid 1011499:tid 1011641] [client 91.92.42.63:10474] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "autodiscover.euronovelties.ae"] [uri "/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXqgAAAIY"], referer: http://autodiscover.euronovelties.ae/ [Sun Jul 12 18:30:31.488615 2026] [proxy:error] [pid 1011499:tid 1011652] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.491568 2026] [proxy_http:error] [pid 1011499:tid 1011652] [client 91.92.42.63:10518] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.498833 2026] [security2:error] [pid 1011499:tid 1011697] [client 91.92.42.63:10540] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcalendars.euronovelties.ae"] [uri "/___proxy_subdomain_cpcalendars/web.config"] [unique_id "alQxpzawpHZwffLOvcMXsAAAAL4"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.500860 2026] [security2:error] [pid 1011499:tid 1011705] [client 91.92.42.63:10512] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMXsQAAAMY"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.504800 2026] [proxy:error] [pid 1011499:tid 1011672] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.505017 2026] [proxy_http:error] [pid 1011499:tid 1011672] [client 91.92.42.63:10456] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.508693 2026] [proxy:error] [pid 1011499:tid 1011672] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.508886 2026] [proxy_http:error] [pid 1011499:tid 1011672] [client 91.92.42.63:10456] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.511707 2026] [proxy:error] [pid 1011499:tid 1011660] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.512289 2026] [proxy_http:error] [pid 1011499:tid 1011660] [client 91.92.42.63:10530] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.515588 2026] [proxy:error] [pid 1011499:tid 1011660] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.516221 2026] [proxy_http:error] [pid 1011499:tid 1011660] [client 91.92.42.63:10530] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.519871 2026] [security2:error] [pid 1011499:tid 1011740] [client 91.92.42.63:10584] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpanel.euronovelties.ae"] [uri "/___proxy_subdomain_cpanel/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXrAAAAOk"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:30:31.548730 2026] [proxy:error] [pid 1011499:tid 1011733] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.548976 2026] [proxy_http:error] [pid 1011499:tid 1011733] [client 91.92.42.63:10556] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.554975 2026] [proxy:error] [pid 1011499:tid 1011733] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.555291 2026] [proxy_http:error] [pid 1011499:tid 1011733] [client 91.92.42.63:10556] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.603002 2026] [authz_core:error] [pid 1011499:tid 1011671] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:31.604437 2026] [authz_core:error] [pid 1011499:tid 1011671] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:31.618521 2026] [security2:error] [pid 1011499:tid 1011739] [client 91.92.42.63:10606] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMXwQAAAOg"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.619147 2026] [security2:error] [pid 1011499:tid 1011648] [client 91.92.42.63:10648] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMXvwAAAI0"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:30:31.623013 2026] [security2:error] [pid 1011499:tid 1011720] [client 91.92.42.63:10664] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMXwgAAANU"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:30:31.627282 2026] [security2:error] [pid 1011499:tid 1011731] [client 91.92.42.63:10624] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpanel.euronovelties.ae"] [uri "/___proxy_subdomain_cpanel/web.config"] [unique_id "alQxpzawpHZwffLOvcMXxAAAAOA"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:30:31.629255 2026] [security2:error] [pid 1011499:tid 1011681] [client 91.92.42.63:10660] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpanel.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMXwwAAAK4"], referer: http://cpanel.euronovelties.ae/ [Sun Jul 12 18:30:31.656966 2026] [proxy:error] [pid 1011499:tid 1011762] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.657440 2026] [proxy_http:error] [pid 1011499:tid 1011762] [client 91.92.42.63:10608] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.661336 2026] [security2:error] [pid 1011499:tid 1011737] [client 91.92.42.63:10610] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcalendars.euronovelties.ae"] [uri "/___proxy_subdomain_cpcalendars/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXyAAAAOY"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.663225 2026] [proxy:error] [pid 1011499:tid 1011762] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.663729 2026] [proxy_http:error] [pid 1011499:tid 1011762] [client 91.92.42.63:10608] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.666092 2026] [security2:error] [pid 1011499:tid 1011686] [client 91.92.42.63:10594] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcalendars.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMXyQAAALM"], referer: http://cpcalendars.euronovelties.ae/ [Sun Jul 12 18:30:31.669566 2026] [security2:error] [pid 1011499:tid 1011717] [client 91.92.42.63:55688] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "euronovelties.ae"] [uri "/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXxQAAANI"], referer: http://euronovelties.ae/.env.bak [Sun Jul 12 18:30:31.742857 2026] [security2:error] [pid 1011499:tid 1011655] [client 91.92.42.63:40724] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "cpcontacts.euronovelties.ae"] [uri "/___proxy_subdomain_cpcontacts/.env.bak"] [unique_id "alQxpzawpHZwffLOvcMXzwAAAJQ"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.752466 2026] [proxy:error] [pid 1011499:tid 1011649] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.761756 2026] [proxy_http:error] [pid 1011499:tid 1011649] [client 91.92.42.63:40728] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.767390 2026] [proxy:error] [pid 1011499:tid 1011649] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.780826 2026] [proxy_http:error] [pid 1011499:tid 1011649] [client 91.92.42.63:40728] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.800005 2026] [security2:error] [pid 1011499:tid 1011695] [client 91.92.42.63:55692] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "euronovelties.ae"] [uri "/web.config"] [unique_id "alQxpzawpHZwffLOvcMX0wAAALw"], referer: http://euronovelties.ae/web.config [Sun Jul 12 18:30:31.849205 2026] [proxy:error] [pid 1011499:tid 1011673] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.849401 2026] [proxy_http:error] [pid 1011499:tid 1011673] [client 91.92.42.63:40738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.854448 2026] [proxy:error] [pid 1011499:tid 1011673] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.854646 2026] [proxy_http:error] [pid 1011499:tid 1011673] [client 91.92.42.63:40738] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.856994 2026] [security2:error] [pid 1011499:tid 1011661] [client 91.92.42.63:40758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxpzawpHZwffLOvcMX2gAAAJo"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.862796 2026] [proxy:error] [pid 1011499:tid 1011750] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.863164 2026] [proxy_http:error] [pid 1011499:tid 1011750] [client 91.92.42.63:40752] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.870503 2026] [proxy:error] [pid 1011499:tid 1011750] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.870782 2026] [proxy_http:error] [pid 1011499:tid 1011750] [client 91.92.42.63:40752] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.881274 2026] [security2:error] [pid 1011499:tid 1011646] [client 91.92.42.63:40772] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMX3wAAAIs"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.883580 2026] [proxy:error] [pid 1011499:tid 1011676] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.889747 2026] [proxy_http:error] [pid 1011499:tid 1011676] [client 91.92.42.63:40770] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.890233 2026] [proxy:error] [pid 1011499:tid 1011658] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.890464 2026] [proxy_http:error] [pid 1011499:tid 1011658] [client 91.92.42.63:40724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.893214 2026] [proxy:error] [pid 1011499:tid 1011658] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.893479 2026] [proxy_http:error] [pid 1011499:tid 1011658] [client 91.92.42.63:40724] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.896328 2026] [proxy:error] [pid 1011499:tid 1011676] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:2079 (127.0.0.1:2079) failed [Sun Jul 12 18:30:31.896493 2026] [proxy_http:error] [pid 1011499:tid 1011676] [client 91.92.42.63:40770] AH01114: HTTP: failed to make connection to backend: 127.0.0.1, referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.963214 2026] [security2:error] [pid 1011499:tid 1011672] [client 91.92.42.63:40786] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "cpcontacts.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxpzawpHZwffLOvcMX4wAAAKU"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.967458 2026] [security2:error] [pid 1011499:tid 1011741] [client 91.92.42.63:40800] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "cpcontacts.euronovelties.ae"] [uri "/___proxy_subdomain_cpcontacts/web.config"] [unique_id "alQxpzawpHZwffLOvcMX4gAAAOo"], referer: http://cpcontacts.euronovelties.ae/ [Sun Jul 12 18:30:31.995192 2026] [security2:error] [pid 1011499:tid 1011698] [client 91.92.42.63:40842] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxpzawpHZwffLOvcMX5wAAAL8"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:30:32.097429 2026] [security2:error] [pid 1011499:tid 1011707] [client 91.92.42.63:40914] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxqDawpHZwffLOvcMX9AAAAMg"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:30:32.097963 2026] [security2:error] [pid 1011499:tid 1011706] [client 91.92.42.63:40876] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxqDawpHZwffLOvcMX9QAAAMc"], referer: http://mail.euronovelties.ae/ [Sun Jul 12 18:30:32.131369 2026] [security2:error] [pid 1011499:tid 1011745] [client 91.92.42.63:40960] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/database.php"] [unique_id "alQxqDawpHZwffLOvcMX-wAAAO4"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:30:32.233709 2026] [security2:error] [pid 1011499:tid 1011730] [client 91.92.42.63:40928] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/db.php"] [unique_id "alQxqDawpHZwffLOvcMYAgAAAN8"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:30:32.234501 2026] [security2:error] [pid 1011499:tid 1011713] [client 91.92.42.63:40964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/db.php"] [unique_id "alQxqDawpHZwffLOvcMYBQAAAM4"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:30:32.248282 2026] [security2:error] [pid 1011499:tid 1011711] [client 91.92.42.63:41020] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/settings.php"] [unique_id "alQxqDawpHZwffLOvcMYCwAAAMw"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:30:32.248739 2026] [security2:error] [pid 1011499:tid 1011763] [client 91.92.42.63:40962] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.habibisouvenir.com"] [uri "/settings.php"] [unique_id "alQxqDawpHZwffLOvcMYCAAAAQA"], referer: http://mail.habibisouvenir.com/ [Sun Jul 12 18:30:32.261566 2026] [security2:error] [pid 1011499:tid 1011699] [client 91.92.42.63:41004] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mail.mysouvenir.ae"] [uri "/database.php"] [unique_id "alQxqDawpHZwffLOvcMYDgAAAMA"], referer: http://mail.mysouvenir.ae/ [Sun Jul 12 18:30:32.309727 2026] [security2:error] [pid 1011499:tid 1011734] [client 91.92.42.63:41086] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/settings.php"] [unique_id "alQxqDawpHZwffLOvcMYFQAAAOM"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:30:32.318551 2026] [security2:error] [pid 1011499:tid 1011677] [client 91.92.42.63:41110] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/database.php"] [unique_id "alQxqDawpHZwffLOvcMYGAAAAKo"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:30:32.325390 2026] [security2:error] [pid 1011499:tid 1011680] [client 91.92.42.63:41126] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/db.php"] [unique_id "alQxqDawpHZwffLOvcMYGQAAAK0"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:30:32.353476 2026] [security2:error] [pid 1011499:tid 1011523] [remote 194.164.192.228:45264] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 228.192.164.194.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "eatthedistrict.com"] [uri "/wp-login.php"] [unique_id "alQxqDawpHZwffLOvcMYGwAA8w0"] [Sun Jul 12 18:30:32.388925 2026] [security2:error] [pid 1011499:tid 1011672] [client 91.92.42.63:41168] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "mysouvenir.ae"] [uri "/db.php"] [unique_id "alQxqDawpHZwffLOvcMYIwAAAKU"], referer: http://mysouvenir.ae/ [Sun Jul 12 18:30:32.432494 2026] [security2:error] [pid 1011499:tid 1011695] [client 91.92.42.63:60904] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.euronovelties.ae"] [uri "/.env.bak"] [unique_id "alQxqDawpHZwffLOvcMYJAAAALw"], referer: http://mail.euronovelties.ae/.env.bak [Sun Jul 12 18:30:32.447535 2026] [security2:error] [pid 1011499:tid 1011669] [client 91.92.42.63:41210] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/settings.php"] [unique_id "alQxqDawpHZwffLOvcMYLAAAAKI"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:30:32.454465 2026] [security2:error] [pid 1011499:tid 1011701] [client 91.92.42.63:60924] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.euronovelties.ae"] [uri "/web.config"] [unique_id "alQxqDawpHZwffLOvcMYKwAAAMI"], referer: http://mail.euronovelties.ae/web.config [Sun Jul 12 18:30:32.459409 2026] [security2:error] [pid 1011499:tid 1011647] [client 91.92.42.63:41250] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "webdisk.euronovelties.ae"] [uri "/___proxy_subdomain_webdisk/.env.bak"] [unique_id "alQxqDawpHZwffLOvcMYLQAAAIw"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:30:32.468749 2026] [security2:error] [pid 1011499:tid 1011732] [client 91.92.42.63:41262] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "webdisk.euronovelties.ae"] [uri "/___proxy_subdomain_webdisk/web.config"] [unique_id "alQxqDawpHZwffLOvcMYLgAAAOE"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:30:32.474138 2026] [security2:error] [pid 1011499:tid 1011683] [client 91.92.42.63:41268] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 63.42.92.91.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.euronovelties.ae"] [uri "/database.php"] [unique_id "alQxqDawpHZwffLOvcMYLwAAALA"], referer: http://webdisk.euronovelties.ae/ [Sun Jul 12 18:30:32.479894 2026] [authz_core:error] [pid 1011499:tid 1011726] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:32.480487 2026] [authz_core:error] [pid 1011499:tid 1011726] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:32.538632 2026] [security2:error] [pid 1011499:tid 1011676] [client 91.92.42.63:60934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.habibisouvenir.com"] [uri "/web.config"] [unique_id "alQxqDawpHZwffLOvcMYNQAAAKk"], referer: http://mail.habibisouvenir.com/web.config [Sun Jul 12 18:30:32.593022 2026] [security2:error] [pid 1011499:tid 1011744] [client 91.92.42.63:60972] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.mysouvenir.ae"] [uri "/.env.bak"] [unique_id "alQxqDawpHZwffLOvcMYOQAAAO0"], referer: http://mail.mysouvenir.ae/.env.bak [Sun Jul 12 18:30:32.723660 2026] [security2:error] [pid 1011499:tid 1011692] [client 91.92.42.63:60934] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mail.habibisouvenir.com"] [uri "/.env.bak"] [unique_id "alQxqDawpHZwffLOvcMYQQAAALk"], referer: http://mail.habibisouvenir.com/.env.bak [Sun Jul 12 18:30:32.746874 2026] [security2:error] [pid 1011499:tid 1011686] [client 91.92.42.63:61026] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mail.mysouvenir.ae"] [uri "/web.config"] [unique_id "alQxqDawpHZwffLOvcMYRwAAALM"], referer: http://mail.mysouvenir.ae/web.config [Sun Jul 12 18:30:32.807319 2026] [security2:error] [pid 1011499:tid 1011655] [client 91.92.42.63:61064] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "web.config"] [severity "CRITICAL"] [hostname "mysouvenir.ae"] [uri "/web.config"] [unique_id "alQxqDawpHZwffLOvcMYUgAAAJQ"], referer: http://mysouvenir.ae/web.config [Sun Jul 12 18:30:32.950281 2026] [security2:error] [pid 1011499:tid 1011677] [client 91.92.42.63:61096] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "mysouvenir.ae"] [uri "/.env.bak"] [unique_id "alQxqDawpHZwffLOvcMYVgAAAKo"], referer: http://mysouvenir.ae/.env.bak [Sun Jul 12 18:30:33.032044 2026] [security2:error] [pid 1011499:tid 1011728] [client 152.232.80.168:50673] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/app/config/app.php"] [unique_id "alQxqTawpHZwffLOvcMYXQAAAN0"] [Sun Jul 12 18:30:33.125158 2026] [core:error] [pid 1011499:tid 1011659] [client 58.249.193.7:48742] AH10244: invalid URI path (/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh) [Sun Jul 12 18:30:33.191132 2026] [security2:error] [pid 1011499:tid 1011663] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjEtMjIzOS8xeXYvNDA2MTcteXZ6cg=="] [unique_id "alQxqTawpHZwffLOvcMYbgAAAJw"] [Sun Jul 12 18:30:33.335394 2026] [authz_core:error] [pid 1011499:tid 1011731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:33.336156 2026] [authz_core:error] [pid 1011499:tid 1011731] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:33.465131 2026] [security2:error] [pid 1011499:tid 1011699] [client 168.100.149.195:22332] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41665/bargainor/2308_secque.jsp"] [unique_id "alQxqTawpHZwffLOvcMYdwAAAMA"] [Sun Jul 12 18:30:34.130209 2026] [security2:error] [pid 1011499:tid 1011650] [client 152.232.80.168:60611] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/ui/.env"] [unique_id "alQxqjawpHZwffLOvcMYjQAAAI8"] [Sun Jul 12 18:30:34.174632 2026] [authz_core:error] [pid 1011499:tid 1011652] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:34.175161 2026] [authz_core:error] [pid 1011499:tid 1011652] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:34.296857 2026] [security2:error] [pid 1011499:tid 1011750] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxqTawpHZwffLOvcMYfgAAAPM"] [Sun Jul 12 18:30:34.296859 2026] [security2:error] [pid 1011499:tid 1011755] [client 65.21.113.206:43550] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjEtMjIzOS8xeXYvNDA2MTcteXZ6cg=="] [unique_id "alQxqTawpHZwffLOvcMYegAAAPg"] [Sun Jul 12 18:30:34.296932 2026] [security2:error] [pid 1011499:tid 1011750] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxqTawpHZwffLOvcMYfgAAAPM"] [Sun Jul 12 18:30:34.785896 2026] [security2:error] [pid 1011499:tid 1011697] [client 168.100.149.125:35982] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41730/bargainor/2308_dislevelment.jsp"] [unique_id "alQxqjawpHZwffLOvcMYowAAAL4"] [Sun Jul 12 18:30:34.967121 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:34.967724 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:35.529356 2026] [security2:error] [pid 1011499:tid 1011743] [client 152.232.80.168:50576] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/htdocs/.env"] [unique_id "alQxqzawpHZwffLOvcMYvwAAAOw"] [Sun Jul 12 18:30:35.735107 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:35.735766 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:36.475749 2026] [security2:error] [pid 1011499:tid 1011763] [client 152.232.80.168:50785] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/config/environments/.env"] [unique_id "alQxrDawpHZwffLOvcMZFwAAAQA"] [Sun Jul 12 18:30:36.502847 2026] [authz_core:error] [pid 1011499:tid 1011658] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:36.503417 2026] [authz_core:error] [pid 1011499:tid 1011658] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:36.714836 2026] [security2:error] [pid 1011499:tid 1011748] [client 104.156.225.167:53795] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "thedermatologydigest.net"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxrDawpHZwffLOvcMZHQAAAPE"] [Sun Jul 12 18:30:36.717597 2026] [security2:error] [pid 1011499:tid 1011659] [client 152.232.80.168:60675] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/global.php"] [unique_id "alQxrDawpHZwffLOvcMZHgAAAJg"] [Sun Jul 12 18:30:36.727518 2026] [security2:error] [pid 1011499:tid 1011705] [client 152.232.80.168:51629] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/includes/configure.php"] [unique_id "alQxrDawpHZwffLOvcMZHwAAAMY"] [Sun Jul 12 18:30:36.793698 2026] [security2:error] [pid 1011499:tid 1011691] [client 168.100.149.167:20368] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41795/bargainor/2308_limnoria.jsp"] [unique_id "alQxrDawpHZwffLOvcMZIQAAALg"] [Sun Jul 12 18:30:36.870618 2026] [security2:error] [pid 1011499:tid 1011762] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjEtNDE3LzE4Yy8zMTA2OS04Y3B5"] [unique_id "alQxrDawpHZwffLOvcMZJwAAAP8"] [Sun Jul 12 18:30:37.408487 2026] [authz_core:error] [pid 1011499:tid 1011640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:37.410163 2026] [authz_core:error] [pid 1011499:tid 1011640] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:37.927644 2026] [security2:error] [pid 1011499:tid 1011751] [client 184.105.139.68:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "69.89.23.101"] [uri "/index.php"] [unique_id "alQxrDawpHZwffLOvcMZJgAAAPQ"] [Sun Jul 12 18:30:38.051559 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZUAAAAMg"] [Sun Jul 12 18:30:38.051653 2026] [security2:error] [pid 1011499:tid 1011707] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZUAAAAMg"] [Sun Jul 12 18:30:38.055902 2026] [security2:error] [pid 1011499:tid 1011735] [client 65.21.113.206:43556] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjEtNDE3LzE4Yy8zMTA2OS04Y3B5"] [unique_id "alQxrTawpHZwffLOvcMZTAAAAOQ"] [Sun Jul 12 18:30:38.267332 2026] [authz_core:error] [pid 1011499:tid 1011646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:38.268057 2026] [authz_core:error] [pid 1011499:tid 1011646] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:39.124691 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:39.204378 2026] [authz_core:error] [pid 1011499:tid 1011710] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:39.412380 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZOQAA530"] [Sun Jul 12 18:30:39.451659 2026] [security2:error] [pid 1011499:tid 1011667] [client 168.100.149.174:16122] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41860/bargainor/2308_milksopism.jsp"] [unique_id "alQxrzawpHZwffLOvcMZmwAAAKA"] [Sun Jul 12 18:30:39.745211 2026] [security2:error] [pid 1011499:tid 1011532] [remote 199.189.225.167:49437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.189.199.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "undameta.com"] [uri "/wp-login.php"] [unique_id "alQxrzawpHZwffLOvcMZqgABABY"] [Sun Jul 12 18:30:40.057510 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:40.058359 2026] [authz_core:error] [pid 1011499:tid 1011750] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:40.278479 2026] [security2:error] [pid 1011499:tid 1011678] [client 185.24.11.139:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZRwAAAKs"] [Sun Jul 12 18:30:40.326175 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZMwAA52E"] [Sun Jul 12 18:30:40.338002 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZMQAA5xI"] [Sun Jul 12 18:30:40.338407 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZOwAA53w"] [Sun Jul 12 18:30:40.367004 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZNwAA5xw"] [Sun Jul 12 18:30:40.494065 2026] [security2:error] [pid 1011499:tid 1011746] [client 152.232.80.168:52995] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/uploads/.env"] [unique_id "alQxsDawpHZwffLOvcMZwAAAAO8"] [Sun Jul 12 18:30:40.643165 2026] [core:error] [pid 1011499:tid 1011719] [client 185.247.137.47:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:40.643219 2026] [core:error] [pid 1011499:tid 1011719] [client 185.247.137.47:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:40.742772 2026] [security2:error] [pid 1011499:tid 1011751] [client 152.232.80.168:50099] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.sql$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1288"] [id "350590"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access raw SQL files (disable this rule if you require access to files that end with .sql)"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/postgres.sql"] [unique_id "alQxsDawpHZwffLOvcMZyQAAAPQ"] [Sun Jul 12 18:30:40.790898 2026] [security2:error] [pid 1011499:tid 1011696] [client 168.100.149.23:56392] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41925/bargainor/2308_capnoides.jsp"] [unique_id "alQxsDawpHZwffLOvcMZzgAAAL0"] [Sun Jul 12 18:30:40.939575 2026] [authz_core:error] [pid 1011499:tid 1011660] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:40.946767 2026] [authz_core:error] [pid 1011499:tid 1011660] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:41.165032 2026] [security2:error] [pid 1011499:tid 1011686] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjEtNTA1OC8xeXYvNDA2MTcteXZ6cg=="] [unique_id "alQxsTawpHZwffLOvcMZ5QAAALM"] [Sun Jul 12 18:30:41.296643 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZMAAA5xQ"] [Sun Jul 12 18:30:41.324056 2026] [security2:error] [pid 1011499:tid 1011738] [client 185.24.11.139:62213] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "renepico.art"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZNgAA5wk"] [Sun Jul 12 18:30:41.573019 2026] [security2:error] [pid 1011499:tid 1011745] [client 94.176.248.220:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxsDawpHZwffLOvcMZ0AAAAO4"] [Sun Jul 12 18:30:41.782313 2026] [authz_core:error] [pid 1011499:tid 1011719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:41.782895 2026] [authz_core:error] [pid 1011499:tid 1011719] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:41.824260 2026] [security2:error] [pid 1011499:tid 1011732] [client 125.167.21.72:61505] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxsTawpHZwffLOvcMZ_wAAAOE"] [Sun Jul 12 18:30:41.824618 2026] [security2:error] [pid 1011499:tid 1011732] [client 125.167.21.72:61505] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxsTawpHZwffLOvcMZ_wAAAOE"] [Sun Jul 12 18:30:41.970264 2026] [security2:error] [pid 1011499:tid 1011739] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "173.254.110.140"] [uri "/index.php"] [unique_id "alQxsTawpHZwffLOvcMZ8QAAAOg"] [Sun Jul 12 18:30:42.292911 2026] [security2:error] [pid 1011499:tid 1011582] [remote 212.64.199.62:40038] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 62.199.64.212.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "upperpottsgrovejournal.com"] [uri "/xmlrpc.php"] [unique_id "alQxsjawpHZwffLOvcMaFQAAo0c"] [Sun Jul 12 18:30:42.293309 2026] [security2:error] [pid 1011499:tid 1011670] [client 212.64.199.62:40038] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "upperpottsgrovejournal.com"] [uri "/xmlrpc.php"] [unique_id "alQxsjawpHZwffLOvcMaFQAAo0c"] [Sun Jul 12 18:30:42.349098 2026] [security2:error] [pid 1011499:tid 1011751] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxsTawpHZwffLOvcMZ_AAAAPQ"] [Sun Jul 12 18:30:42.349153 2026] [security2:error] [pid 1011499:tid 1011751] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxsTawpHZwffLOvcMZ_AAAAPQ"] [Sun Jul 12 18:30:42.350892 2026] [security2:error] [pid 1011499:tid 1011746] [client 65.21.113.206:43566] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjEtNTA1OC8xeXYvNDA2MTcteXZ6cg=="] [unique_id "alQxsTawpHZwffLOvcMZ-gAAAO8"] [Sun Jul 12 18:30:42.575518 2026] [authz_core:error] [pid 1011499:tid 1011665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:42.576118 2026] [authz_core:error] [pid 1011499:tid 1011665] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:43.407210 2026] [authz_core:error] [pid 1011499:tid 1011660] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:43.407731 2026] [authz_core:error] [pid 1011499:tid 1011660] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:43.438850 2026] [security2:error] [pid 1011499:tid 1011760] [client 168.100.149.76:27116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/41990/bargainor/2308_deft.jsp"] [unique_id "alQxszawpHZwffLOvcMaLgAAAP0"] [Sun Jul 12 18:30:44.188342 2026] [authz_core:error] [pid 1011499:tid 1011684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:44.188878 2026] [authz_core:error] [pid 1011499:tid 1011684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:44.193202 2026] [security2:error] [pid 1011499:tid 1011682] [client 43.165.127.126:58272] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQxrTawpHZwffLOvcMZXAAAAK8"] [Sun Jul 12 18:30:44.616161 2026] [security2:error] [pid 1011499:tid 1011744] [client 152.232.80.168:65254] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/temp/.env"] [unique_id "alQxtDawpHZwffLOvcMaWwAAAO0"] [Sun Jul 12 18:30:44.775187 2026] [security2:error] [pid 1011499:tid 1011762] [client 43.165.127.126:58311] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.tgoffineart.com"] [uri "/index.php"] [unique_id "alQxtDawpHZwffLOvcMaUgAAAP8"] [Sun Jul 12 18:30:44.994779 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:44.995540 2026] [authz_core:error] [pid 1011499:tid 1011734] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:45.043242 2026] [security2:error] [pid 1011499:tid 1011642] [client 65.49.20.66:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "74.220.208.93"] [uri "/index.php"] [unique_id "alQxtDawpHZwffLOvcMaXQAAAIc"] [Sun Jul 12 18:30:45.128757 2026] [security2:error] [pid 1011499:tid 1011727] [client 152.232.80.168:51635] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/storage/app/public/.env"] [unique_id "alQxtTawpHZwffLOvcMabwAAANw"] [Sun Jul 12 18:30:45.171858 2026] [security2:error] [pid 1011499:tid 1011675] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjEzLzM4NjQzLzEzLzUzNjUvM281.asp"] [unique_id "alQxtTawpHZwffLOvcMacAAAAKg"] [Sun Jul 12 18:30:45.477208 2026] [security2:error] [pid 1011499:tid 1011672] [client 168.100.149.0:22112] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42055/bargainor/2308_did.jsp"] [unique_id "alQxtTawpHZwffLOvcMadgAAAKU"] [Sun Jul 12 18:30:45.726635 2026] [security2:error] [pid 1011499:tid 1011716] [client 152.232.80.168:51886] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/auth.php"] [unique_id "alQxtTawpHZwffLOvcMaiQAAANE"] [Sun Jul 12 18:30:45.798148 2026] [authz_core:error] [pid 1011499:tid 1011687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:45.798860 2026] [authz_core:error] [pid 1011499:tid 1011687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:46.240052 2026] [security2:error] [pid 1011499:tid 1011724] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxtTawpHZwffLOvcMaiAAAANk"] [Sun Jul 12 18:30:46.240145 2026] [security2:error] [pid 1011499:tid 1011724] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxtTawpHZwffLOvcMaiAAAANk"] [Sun Jul 12 18:30:46.241291 2026] [security2:error] [pid 1011499:tid 1011691] [client 65.21.113.206:59328] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjEzLzM4NjQzLzEzLzUzNjUvM281.asp"] [unique_id "alQxtTawpHZwffLOvcMagwAAALg"] [Sun Jul 12 18:30:46.588692 2026] [authz_core:error] [pid 1011499:tid 1011681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:46.589217 2026] [authz_core:error] [pid 1011499:tid 1011681] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:46.795725 2026] [security2:error] [pid 1011499:tid 1011725] [client 168.100.149.75:64154] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42120/bargainor/2308_delphian.jsp"] [unique_id "alQxtjawpHZwffLOvcMasQAAANo"] [Sun Jul 12 18:30:46.983792 2026] [security2:error] [pid 1011499:tid 1011659] [client 74.7.175.157:51092] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "401"] [hostname "webdisk.carmedic.biz"] [uri "/___proxy_subdomain_webdisk/robots.txt"] [unique_id "alQxtjawpHZwffLOvcMaswAAAJg"] [Sun Jul 12 18:30:47.405593 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:47.406195 2026] [authz_core:error] [pid 1011499:tid 1011721] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:48.221866 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:48.222376 2026] [authz_core:error] [pid 1011499:tid 1011722] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:48.358154 2026] [core:error] [pid 1011499:tid 1011566] (13)Permission denied: [remote 69.132.185.72:0] AH00132: file permissions deny server access: /home1/lizatter/public_html/website_fe806af2/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://keylimekitchen.com/creamy-chicken-pie-with-spinach/?utm_source=Pinterest&utm_medium=organic [Sun Jul 12 18:30:48.576513 2026] [core:error] [pid 1011499:tid 1011543] (13)Permission denied: [remote 69.132.185.72:0] AH00132: file permissions deny server access: /home1/lizatter/public_html/website_fe806af2/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js, referer: https://keylimekitchen.com/creamy-chicken-pie-with-spinach/?utm_source=Pinterest&utm_medium=organic [Sun Jul 12 18:30:48.702019 2026] [security2:error] [pid 1011499:tid 1011745] [client 152.232.80.168:53242] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/site/.env"] [unique_id "alQxuDawpHZwffLOvcMbDAAAAO4"] [Sun Jul 12 18:30:48.782276 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjF0a3kyLzY0NTAvMXQvMTU2NjEvdA=="] [unique_id "alQxuDawpHZwffLOvcMbDgAAAI4"] [Sun Jul 12 18:30:49.028328 2026] [authz_core:error] [pid 1011499:tid 1011648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:49.028905 2026] [authz_core:error] [pid 1011499:tid 1011648] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:49.332163 2026] [security2:error] [pid 1011499:tid 1011712] [client 152.232.80.168:58776] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config.inc.php"] [unique_id "alQxuTawpHZwffLOvcMbLwAAAM0"] [Sun Jul 12 18:30:49.453470 2026] [security2:error] [pid 1011499:tid 1011733] [client 168.100.149.49:40880] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42185/bargainor/2308_anisodactyli.jsp"] [unique_id "alQxuTawpHZwffLOvcMbMAAAAOI"] [Sun Jul 12 18:30:49.533154 2026] [security2:error] [pid 1011499:tid 1011747] [client 146.174.161.232:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxuDawpHZwffLOvcMbHAAAAPA"] [Sun Jul 12 18:30:49.626329 2026] [security2:error] [pid 1011499:tid 1011710] [client 152.232.80.168:52943] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/includes/config.php"] [unique_id "alQxuTawpHZwffLOvcMbNAAAAMs"] [Sun Jul 12 18:30:49.794446 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxuTawpHZwffLOvcMbLQAAAJI"] [Sun Jul 12 18:30:49.794503 2026] [security2:error] [pid 1011499:tid 1011653] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxuTawpHZwffLOvcMbLQAAAJI"] [Sun Jul 12 18:30:49.796174 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:59342] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjF0a3kyLzY0NTAvMXQvMTU2NjEvdA=="] [unique_id "alQxuTawpHZwffLOvcMbKwAAAN0"] [Sun Jul 12 18:30:49.838357 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:49.838943 2026] [authz_core:error] [pid 1011499:tid 1011690] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:50.291302 2026] [security2:error] [pid 1011499:tid 1011671] [client 209.85.238.229:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "301"] [hostname "www.idreamofjeannemarie.com"] [uri "/index.php"] [unique_id "alQxuTawpHZwffLOvcMbPwAAAKQ"] [Sun Jul 12 18:30:50.435816 2026] [security2:error] [pid 1011499:tid 1011676] [client 20.63.87.152:25121] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/.dj/index.php"] [unique_id "alQxujawpHZwffLOvcMbXgAAAKk"] [Sun Jul 12 18:30:50.660639 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:50.661322 2026] [authz_core:error] [pid 1011499:tid 1011755] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:50.797745 2026] [security2:error] [pid 1011499:tid 1011757] [client 168.100.149.138:17296] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42250/bargainor/2308_birefraction.jsp"] [unique_id "alQxujawpHZwffLOvcMbdgAAAPo"] [Sun Jul 12 18:30:50.800085 2026] [core:error] [pid 1011499:tid 1011754] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:50.800127 2026] [core:error] [pid 1011499:tid 1011754] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:50.880136 2026] [security2:error] [pid 1011499:tid 1011705] [client 57.141.18.93:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "bloomadminservices.com"] [uri "/index.php"] [unique_id "alQxujawpHZwffLOvcMbWwAAAMY"] [Sun Jul 12 18:30:51.088750 2026] [security2:error] [pid 1011499:tid 1011681] [client 20.63.87.152:22131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/.trash7206/index.php"] [unique_id "alQxuzawpHZwffLOvcMbiwAAAK4"] [Sun Jul 12 18:30:51.390225 2026] [security2:error] [pid 1011499:tid 1011716] [client 195.3.220.7:35316] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/a.php"] [unique_id "alQxuzawpHZwffLOvcMbkwAAANE"] [Sun Jul 12 18:30:51.435825 2026] [core:error] [pid 1011499:tid 1011696] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:51.435890 2026] [core:error] [pid 1011499:tid 1011696] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:51.484559 2026] [authz_core:error] [pid 1011499:tid 1011685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:51.485071 2026] [authz_core:error] [pid 1011499:tid 1011685] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:51.775493 2026] [core:error] [pid 1011499:tid 1011746] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:51.775545 2026] [core:error] [pid 1011499:tid 1011746] [client 20.63.87.152:0] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace. [Sun Jul 12 18:30:51.925076 2026] [security2:error] [pid 1011499:tid 1011755] [client 195.3.220.7:37838] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/chosen.php"] [unique_id "alQxuzawpHZwffLOvcMbpQAAAPg"] [Sun Jul 12 18:30:51.945190 2026] [security2:error] [pid 1011499:tid 1011599] [remote 103.255.134.61:35382] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 61.134.255.103.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-content/plugins/ultimate-elementor/modules/login-form/includes/vendor/guzzlehttp/guzzle/src/Handler/lib.php"] [unique_id "alQxuzawpHZwffLOvcMbpgAArVg"] [Sun Jul 12 18:30:52.027058 2026] [security2:error] [pid 1011499:tid 1011745] [client 20.63.87.152:39485] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "alQxvDawpHZwffLOvcMbtwAAAO4"] [Sun Jul 12 18:30:52.308456 2026] [authz_core:error] [pid 1011499:tid 1011729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:52.308984 2026] [authz_core:error] [pid 1011499:tid 1011729] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:52.320504 2026] [security2:error] [pid 1011499:tid 1011739] [client 66.187.5.104:59758] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "whatworld.org"] [uri "/"] [unique_id "alQxvDawpHZwffLOvcMb2AAAAOg"] [Sun Jul 12 18:30:52.320760 2026] [security2:error] [pid 1011499:tid 1011739] [client 66.187.5.104:59758] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "whatworld.org"] [uri "/"] [unique_id "alQxvDawpHZwffLOvcMb2AAAAOg"] [Sun Jul 12 18:30:52.332634 2026] [security2:error] [pid 1011499:tid 1011744] [client 20.63.87.152:39480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/.well-known/logs233/index.php"] [unique_id "alQxvDawpHZwffLOvcMb2QAAAO0"] [Sun Jul 12 18:30:52.383343 2026] [security2:error] [pid 1011499:tid 1011742] [client 125.167.21.72:61964] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxvDawpHZwffLOvcMb2wAAAOs"] [Sun Jul 12 18:30:52.383880 2026] [security2:error] [pid 1011499:tid 1011742] [client 125.167.21.72:61964] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxvDawpHZwffLOvcMb2wAAAOs"] [Sun Jul 12 18:30:52.384405 2026] [security2:error] [pid 1011499:tid 1011687] [client 195.3.220.7:40064] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/simple.php"] [unique_id "alQxvDawpHZwffLOvcMb3AAAALQ"] [Sun Jul 12 18:30:52.728352 2026] [security2:error] [pid 1011499:tid 1011665] [client 20.63.87.152:39478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/.well-known/wp-cron.php"] [unique_id "alQxvDawpHZwffLOvcMb7gAAAJ4"] [Sun Jul 12 18:30:52.736370 2026] [security2:error] [pid 1011499:tid 1011644] [client 202.46.62.108:28705] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 108.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQxvDawpHZwffLOvcMb7AAAAIk"], referer: https://www.stephenspublishing.com/economy-tote-custom-p-695.html?osCsid=tdtr2afm43ol01t753d0utnpf3 [Sun Jul 12 18:30:52.867419 2026] [security2:error] [pid 1011499:tid 1011693] [client 107.149.159.96:0] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 96.159.149.107.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "barrozolaw.com"] [uri "/baker.php/"] [unique_id "alQxvDawpHZwffLOvcMb8AAAALo"] [Sun Jul 12 18:30:52.907258 2026] [security2:error] [pid 1011499:tid 1011749] [client 195.3.220.7:42458] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxvDawpHZwffLOvcMb8QAAAPI"] [Sun Jul 12 18:30:53.054809 2026] [security2:error] [pid 1011499:tid 1011703] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjFfMzEyMTVfMW1lOS9tXzQ5OF9lOTI=.html"] [unique_id "alQxvTawpHZwffLOvcMb9QAAAMQ"] [Sun Jul 12 18:30:53.060262 2026] [security2:error] [pid 1011499:tid 1011642] [client 20.63.87.152:39426] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/0.kb-v3.php"] [unique_id "alQxvTawpHZwffLOvcMb9wAAAIc"] [Sun Jul 12 18:30:53.077733 2026] [authz_core:error] [pid 1011499:tid 1011680] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:53.078212 2026] [authz_core:error] [pid 1011499:tid 1011680] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:53.310223 2026] [security2:error] [pid 1011499:tid 1011591] [remote 72.167.50.103:43888] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 103.50.167.72.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-content/plugins/ultimate-elementor/modules/login-form/includes/vendor/guzzlehttp/guzzle/src/Handler/lib.php"] [unique_id "alQxvTawpHZwffLOvcMb_wAA7lA"] [Sun Jul 12 18:30:53.316186 2026] [security2:error] [pid 1011499:tid 1011723] [client 20.63.87.152:10732] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/0.php"] [unique_id "alQxvTawpHZwffLOvcMcAQAAANg"] [Sun Jul 12 18:30:53.408084 2026] [security2:error] [pid 1011499:tid 1011724] [client 195.3.220.7:44688] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/index.php"] [unique_id "alQxvTawpHZwffLOvcMcCgAAANk"] [Sun Jul 12 18:30:53.493153 2026] [security2:error] [pid 1011499:tid 1011711] [client 168.100.149.187:33472] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42315/bargainor/2308_mediator.jsp"] [unique_id "alQxvTawpHZwffLOvcMcEAAAAMw"] [Sun Jul 12 18:30:53.561322 2026] [security2:error] [pid 1011499:tid 1011685] [client 20.63.87.152:14542] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/002.php"] [unique_id "alQxvTawpHZwffLOvcMcFAAAALI"] [Sun Jul 12 18:30:53.693326 2026] [security2:error] [pid 1011499:tid 1011646] [client 202.46.62.95:28525] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 95.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQxvTawpHZwffLOvcMcGwAAAIs"], referer: https://www.stephenspublishing.com/mouse-pads-antimicrobial-custom-p-1132.html?osCsid=glnfcunbrkjncaus9ua8fmcpo7 [Sun Jul 12 18:30:53.823016 2026] [security2:error] [pid 1011499:tid 1011693] [client 20.63.87.152:39455] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/01.php"] [unique_id "alQxvTawpHZwffLOvcMcJQAAALo"] [Sun Jul 12 18:30:53.871523 2026] [security2:error] [pid 1011499:tid 1011763] [client 195.3.220.7:46754] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "alQxvTawpHZwffLOvcMcJwAAAQA"] [Sun Jul 12 18:30:53.908155 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:53.951163 2026] [authz_core:error] [pid 1011499:tid 1011649] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:54.136549 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxvTawpHZwffLOvcMcEwAAAN0"] [Sun Jul 12 18:30:54.136634 2026] [security2:error] [pid 1011499:tid 1011728] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxvTawpHZwffLOvcMcEwAAAN0"] [Sun Jul 12 18:30:54.137897 2026] [security2:error] [pid 1011499:tid 1011692] [client 65.21.113.206:41000] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjFfMzEyMTVfMW1lOS9tXzQ5OF9lOTI=.html"] [unique_id "alQxvTawpHZwffLOvcMcEQAAALk"] [Sun Jul 12 18:30:54.207738 2026] [security2:error] [pid 1011499:tid 1011646] [client 20.63.87.152:22141] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/0x.php"] [unique_id "alQxvjawpHZwffLOvcMcTgAAAIs"] [Sun Jul 12 18:30:54.381161 2026] [security2:error] [pid 1011499:tid 1011764] [client 195.3.220.7:49182] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "alQxvjawpHZwffLOvcMcXQAAAQE"] [Sun Jul 12 18:30:54.506185 2026] [security2:error] [pid 1011499:tid 1011671] [client 20.63.87.152:24947] ModSecurity: Warning. Pattern match "/1\\\\.php" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "1543"] [id "900921"] [msg "temporary TUW-72162 logging rule"] [hostname "webdisk.forcefieldit.com"] [uri "/1.php"] [unique_id "alQxvjawpHZwffLOvcMcYgAAAKQ"] [Sun Jul 12 18:30:54.506538 2026] [security2:error] [pid 1011499:tid 1011671] [client 20.63.87.152:24947] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/1.php"] [unique_id "alQxvjawpHZwffLOvcMcYgAAAKQ"] [Sun Jul 12 18:30:54.732522 2026] [security2:error] [pid 1011499:tid 1011743] [client 20.63.87.152:24909] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/100.php"] [unique_id "alQxvjawpHZwffLOvcMcdQAAAOw"] [Sun Jul 12 18:30:54.820817 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:54.839532 2026] [authz_core:error] [pid 1011499:tid 1011647] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:54.843751 2026] [security2:error] [pid 1011499:tid 1011711] [client 195.3.220.7:51328] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/worksec.php"] [unique_id "alQxvjawpHZwffLOvcMcgAAAAMw"] [Sun Jul 12 18:30:54.941068 2026] [security2:error] [pid 1011499:tid 1011766] [client 152.232.80.168:62223] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/environments/.env"] [unique_id "alQxvjawpHZwffLOvcMckAAAAQM"] [Sun Jul 12 18:30:54.955510 2026] [security2:error] [pid 1011499:tid 1011715] [client 20.63.87.152:7442] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/122.php"] [unique_id "alQxvjawpHZwffLOvcMckQAAANA"] [Sun Jul 12 18:30:55.206053 2026] [security2:error] [pid 1011499:tid 1011660] [client 20.63.87.152:3084] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/123.php"] [unique_id "alQxvzawpHZwffLOvcMcrgAAAJk"] [Sun Jul 12 18:30:55.335842 2026] [security2:error] [pid 1011499:tid 1011758] [client 195.3.220.7:53634] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/worksec.php"] [unique_id "alQxvzawpHZwffLOvcMcvAAAAPs"] [Sun Jul 12 18:30:55.467864 2026] [security2:error] [pid 1011499:tid 1011652] [client 168.100.149.86:51228] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42380/bargainor/2308_gurian.jsp"] [unique_id "alQxvzawpHZwffLOvcMcwQAAAJE"] [Sun Jul 12 18:30:55.480527 2026] [security2:error] [pid 1011499:tid 1011668] [client 20.63.87.152:7375] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/13.php"] [unique_id "alQxvzawpHZwffLOvcMcxAAAAKE"] [Sun Jul 12 18:30:55.684882 2026] [authz_core:error] [pid 1011499:tid 1011711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:55.685544 2026] [authz_core:error] [pid 1011499:tid 1011711] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:55.760185 2026] [security2:error] [pid 1011499:tid 1011702] [client 20.63.87.152:3122] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/133.php"] [unique_id "alQxvzawpHZwffLOvcMc1AAAAMM"] [Sun Jul 12 18:30:55.803902 2026] [security2:error] [pid 1011499:tid 1011696] [client 195.3.220.7:55898] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/themes/twentynineteen/404.php"] [unique_id "alQxvzawpHZwffLOvcMc1wAAAL0"] [Sun Jul 12 18:30:55.994496 2026] [security2:error] [pid 1011499:tid 1011744] [client 20.63.87.152:10587] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/155.php"] [unique_id "alQxvzawpHZwffLOvcMc3AAAAO0"] [Sun Jul 12 18:30:56.047514 2026] [security2:error] [pid 1011499:tid 1011681] [client 104.156.225.167:61057] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 167.225.156.104.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "tentmakersinamerica.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "alQxwDawpHZwffLOvcMc3wAAAK4"] [Sun Jul 12 18:30:56.127587 2026] [security2:error] [pid 1011499:tid 1011672] [client 88.18.233.202:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxvzawpHZwffLOvcMc0AAAAKU"] [Sun Jul 12 18:30:56.165080 2026] [security2:error] [pid 1011499:tid 1011725] [client 152.232.80.168:63893] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/config/development/.env"] [unique_id "alQxwDawpHZwffLOvcMc5gAAANo"] [Sun Jul 12 18:30:56.220638 2026] [security2:error] [pid 1011499:tid 1011760] [client 20.63.87.152:29131] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/177.php"] [unique_id "alQxwDawpHZwffLOvcMc7QAAAP0"] [Sun Jul 12 18:30:56.322618 2026] [security2:error] [pid 1011499:tid 1011765] [client 195.3.220.7:58514] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/themes/twentytwentyone/404.php"] [unique_id "alQxwDawpHZwffLOvcMc8wAAAQI"] [Sun Jul 12 18:30:56.480224 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:56.480787 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:56.488689 2026] [security2:error] [pid 1011499:tid 1011762] [client 20.63.87.152:29846] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/1index.php"] [unique_id "alQxwDawpHZwffLOvcMc9gAAAP8"] [Sun Jul 12 18:30:56.638393 2026] [security2:error] [pid 1011499:tid 1011743] [client 92.60.127.186:57800] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.127.60.92.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "74.220.212.209"] [uri "/wp-config.php"] [unique_id "alQxwDawpHZwffLOvcMc_wAAAOw"] [Sun Jul 12 18:30:56.663832 2026] [security2:error] [pid 1011499:tid 1011670] [client 20.63.87.152:10578] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/2.php"] [unique_id "alQxwDawpHZwffLOvcMdAgAAAKM"] [Sun Jul 12 18:30:56.703108 2026] [security2:error] [pid 1011499:tid 1011691] [client 107.189.28.30:42750] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.boundaryplanner.bintechsys.net"] [uri "/.env"] [unique_id "alQxwDawpHZwffLOvcMdAwAAALg"] [Sun Jul 12 18:30:56.782038 2026] [security2:error] [pid 1011499:tid 1011721] [client 195.3.220.7:60566] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/cache/index.php"] [unique_id "alQxwDawpHZwffLOvcMdBAAAANY"] [Sun Jul 12 18:30:56.821818 2026] [proxy_http:error] [pid 992244:tid 992492] (70007)The timeout specified has expired: [client 127.0.0.1:58758] AH01102: error reading status line from remote server 50.87.254.158:8443, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:30:56.842526 2026] [proxy:error] [pid 992244:tid 992492] [client 127.0.0.1:58758] AH00898: Error reading from remote server returned by /502.shtml, referer: https://mail.lazyladylifter.com/ [Sun Jul 12 18:30:56.871651 2026] [security2:error] [pid 1011499:tid 1011678] [client 20.63.87.152:3087] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/222.php"] [unique_id "alQxwDawpHZwffLOvcMdBQAAAKs"] [Sun Jul 12 18:30:56.939180 2026] [security2:error] [pid 1011499:tid 1011614] [remote 157.66.26.183:41528] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 183.26.66.157.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "themillennialshandbook.com"] [uri "/wp-content/plugins/ultimate-elementor/modules/login-form/includes/vendor/guzzlehttp/guzzle/src/Handler/lib.php"] [unique_id "alQxwDawpHZwffLOvcMdBgABAGc"] [Sun Jul 12 18:30:57.064864 2026] [security2:error] [pid 1011499:tid 1011665] [client 20.63.87.152:35635] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/2p.update.php"] [unique_id "alQxwTawpHZwffLOvcMdDAAAAJ4"] [Sun Jul 12 18:30:57.274018 2026] [security2:error] [pid 1011499:tid 1011681] [client 20.63.87.152:14011] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/3.php"] [unique_id "alQxwTawpHZwffLOvcMdHQAAAK4"] [Sun Jul 12 18:30:57.283944 2026] [authz_core:error] [pid 1011499:tid 1011686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:57.284429 2026] [authz_core:error] [pid 1011499:tid 1011686] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:57.298389 2026] [cgid:error] [pid 1011499:tid 1011726] [client 107.189.28.30:42750] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:30:57.312805 2026] [security2:error] [pid 1011499:tid 1011725] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjFfMzIxOTVfMWlwYi9pXzcwMzBfcGI3.html"] [unique_id "alQxwTawpHZwffLOvcMdHgAAANo"] [Sun Jul 12 18:30:57.318280 2026] [security2:error] [pid 1011499:tid 1011658] [client 195.3.220.7:34758] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/index.php"] [unique_id "alQxwTawpHZwffLOvcMdHwAAAJc"] [Sun Jul 12 18:30:57.385356 2026] [security2:error] [pid 1011499:tid 1011760] [client 92.60.127.186:34502] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "74.220.212.209"] [uri "/wp-config.php.bak"] [unique_id "alQxwTawpHZwffLOvcMdIAAAAP0"] [Sun Jul 12 18:30:57.489964 2026] [security2:error] [pid 1011499:tid 1011688] [client 168.100.149.96:17920] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42445/bargainor/2308_monkey.jsp"] [unique_id "alQxwTawpHZwffLOvcMdJQAAALU"] [Sun Jul 12 18:30:57.505881 2026] [security2:error] [pid 1011499:tid 1011741] [client 20.63.87.152:29871] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/3pjcpmfsd8b.php"] [unique_id "alQxwTawpHZwffLOvcMdJgAAAOo"] [Sun Jul 12 18:30:57.574797 2026] [security2:error] [pid 1011499:tid 1011680] [client 66.249.64.166:35019] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwTawpHZwffLOvcMdJAAAAK0"] [Sun Jul 12 18:30:57.699955 2026] [security2:error] [pid 1011499:tid 1011670] [client 20.63.87.152:10704] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/403.php"] [unique_id "alQxwTawpHZwffLOvcMdKwAAAKM"] [Sun Jul 12 18:30:57.782864 2026] [security2:error] [pid 1011499:tid 1011743] [client 195.3.220.7:36832] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/languages/index.php"] [unique_id "alQxwTawpHZwffLOvcMdLwAAAOw"] [Sun Jul 12 18:30:57.907107 2026] [security2:error] [pid 1011499:tid 1011663] [client 20.63.87.152:31459] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 152.87.63.20.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "webdisk.forcefieldit.com"] [uri "/404.php"] [unique_id "alQxwTawpHZwffLOvcMdMwAAAJw"] [Sun Jul 12 18:30:58.107622 2026] [authz_core:error] [pid 1011499:tid 1011735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:58.108300 2026] [authz_core:error] [pid 1011499:tid 1011735] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:58.120799 2026] [security2:error] [pid 1011499:tid 1011684] [client 68.183.235.188:58550] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdOgAAALE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.141891 2026] [security2:error] [pid 1011499:tid 1011721] [client 143.198.90.144:38678] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdOwAAANY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.187441 2026] [security2:error] [pid 1011499:tid 1011678] [client 167.172.65.32:56846] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdPwAAAKs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.221780 2026] [security2:error] [pid 1011499:tid 1011679] [client 152.42.199.107:52672] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdPQAAAKw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.229974 2026] [security2:error] [pid 1011499:tid 1011689] [client 152.42.180.165:52562] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdQQAAALY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.246483 2026] [security2:error] [pid 1011499:tid 1011729] [client 195.3.220.7:38998] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/plugins/index.php"] [unique_id "alQxwjawpHZwffLOvcMdSQAAAN4"] [Sun Jul 12 18:30:58.345954 2026] [security2:error] [pid 1011499:tid 1011706] [client 92.60.127.186:40968] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.127.60.92.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "74.220.212.209"] [uri "/phpinfo.php"] [unique_id "alQxwjawpHZwffLOvcMdSwAAAMc"] [Sun Jul 12 18:30:58.351141 2026] [security2:error] [pid 1011499:tid 1011644] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxwTawpHZwffLOvcMdMgAAAIk"] [Sun Jul 12 18:30:58.351200 2026] [security2:error] [pid 1011499:tid 1011644] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxwTawpHZwffLOvcMdMgAAAIk"] [Sun Jul 12 18:30:58.352205 2026] [security2:error] [pid 1011499:tid 1011761] [client 65.21.113.206:41006] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjFfMzIxOTVfMWlwYi9pXzcwMzBfcGI3.html"] [unique_id "alQxwTawpHZwffLOvcMdMAAAAP4"] [Sun Jul 12 18:30:58.565163 2026] [security2:error] [pid 1011499:tid 1011643] [client 134.122.116.157:56344] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdTwAAAIg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.589459 2026] [security2:error] [pid 1011499:tid 1011749] [client 165.22.185.18:52002] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdUQAAAPI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.589704 2026] [security2:error] [pid 1011499:tid 1011722] [client 147.182.134.140:38516] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdVgAAANc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.627166 2026] [security2:error] [pid 1011499:tid 1011672] [client 165.22.185.18:52012] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdVQAAAKU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.633748 2026] [security2:error] [pid 1011499:tid 1011715] [client 165.22.185.18:51986] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdUwAAANA"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.647562 2026] [security2:error] [pid 1011499:tid 1011674] [client 143.244.162.203:52026] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdWAAAAKc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.665553 2026] [security2:error] [pid 1011499:tid 1011658] [client 159.89.90.221:32946] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdXQAAAJc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.669787 2026] [security2:error] [pid 1011499:tid 1011754] [client 147.182.134.140:38520] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdWwAAAPc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.675102 2026] [security2:error] [pid 1011499:tid 1011707] [client 143.244.162.203:52030] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdXAAAAMg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.675726 2026] [security2:error] [pid 1011499:tid 1011648] [client 143.244.162.203:52002] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdYgAAAI0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.676827 2026] [security2:error] [pid 1011499:tid 1011681] [client 165.22.185.18:52004] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdYAAAAK4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.692963 2026] [security2:error] [pid 1011499:tid 1011740] [client 159.89.90.221:32942] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdWQAAAOk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.697395 2026] [security2:error] [pid 1011499:tid 1011725] [client 143.244.162.203:52016] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdYQAAANo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.698372 2026] [security2:error] [pid 1011499:tid 1011726] [client 143.244.162.203:52008] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdXgAAANs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.701746 2026] [security2:error] [pid 1011499:tid 1011661] [client 162.243.161.177:53534] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdVwAAAJo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.704174 2026] [security2:error] [pid 1011499:tid 1011640] [client 134.122.116.157:56346] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdXwAAAIU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.718746 2026] [security2:error] [pid 1011499:tid 1011738] [client 195.3.220.7:41048] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/themes/index.php"] [unique_id "alQxwjawpHZwffLOvcMdawAAAOc"] [Sun Jul 12 18:30:58.727971 2026] [security2:error] [pid 1011499:tid 1011655] [client 165.22.185.18:52014] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwjawpHZwffLOvcMdYwAAAJQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:58.816178 2026] [security2:error] [pid 1011499:tid 1011665] [client 168.100.149.24:59950] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42510/bargainor/2308_impeccance.jsp"] [unique_id "alQxwjawpHZwffLOvcMdcAAAAJ4"] [Sun Jul 12 18:30:58.916271 2026] [authz_core:error] [pid 1011499:tid 1011687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:58.969175 2026] [authz_core:error] [pid 1011499:tid 1011687] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:59.182291 2026] [security2:error] [pid 1011499:tid 1011662] [client 195.3.220.7:43280] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "alQxwzawpHZwffLOvcMdhQAAAJs"] [Sun Jul 12 18:30:59.235037 2026] [security2:error] [pid 1011499:tid 1011672] [client 166.199.150.142:51555] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQxwzawpHZwffLOvcMdeQAApUU"] [Sun Jul 12 18:30:59.248699 2026] [security2:error] [pid 1011499:tid 1011570] [remote 166.199.150.142:51555] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "newjetnet.com"] [uri "/index.php"] [unique_id "alQxwzawpHZwffLOvcMdegAApTs"] [Sun Jul 12 18:30:59.351900 2026] [security2:error] [pid 1011499:tid 1011711] [client 171.225.200.123:27821] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwzawpHZwffLOvcMdjAAAAMw"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:59.363486 2026] [cgid:error] [pid 1011499:tid 1011693] [client 107.189.28.30:34720] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:30:59.641023 2026] [security2:error] [pid 1011499:tid 1011732] [client 195.3.220.7:45420] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/uploads/index.php"] [unique_id "alQxwzawpHZwffLOvcMdpQAAAOE"] [Sun Jul 12 18:30:59.674019 2026] [security2:error] [pid 1011499:tid 1011751] [client 176.44.16.148:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxwzawpHZwffLOvcMdiQAAAPQ"] [Sun Jul 12 18:30:59.717109 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:30:59.717650 2026] [authz_core:error] [pid 1011499:tid 1011749] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:30:59.887198 2026] [security2:error] [pid 1011499:tid 1011697] [client 113.173.22.204:45401] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwzawpHZwffLOvcMdsgAAAL4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:59.940289 2026] [security2:error] [pid 1011499:tid 1011673] [client 5.53.222.73:44140] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwzawpHZwffLOvcMdtAAAAKY"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:30:59.967050 2026] [security2:error] [pid 1011499:tid 1011709] [client 14.226.121.89:56594] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxwzawpHZwffLOvcMdtQAAAMo"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.052123 2026] [security2:error] [pid 1011499:tid 1011733] [client 92.60.127.186:60166] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 186.127.60.92.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "74.220.212.209"] [uri "/config.php"] [unique_id "alQxxDawpHZwffLOvcMdvAAAAOI"] [Sun Jul 12 18:31:00.097435 2026] [security2:error] [pid 1011499:tid 1011675] [client 195.3.220.7:47478] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/index.php"] [unique_id "alQxxDawpHZwffLOvcMdvgAAAKg"] [Sun Jul 12 18:31:00.113316 2026] [security2:error] [pid 1011499:tid 1011693] [client 107.189.28.30:34748] ModSecurity: Access denied with code 406 (phase 1). Pattern match "ZoominfoBot|NetcraftSurveyAgent|MJ12bot|(?i:BUbiNG)|D(?i:otbot)| oBot/|MegaIndex\\\\.ru|Barkrowler|Spbot|DomainCrawler|Seznam|CCBot|SiteExplorer|OpenLinkProfiler|Sogou web spider|360Spider|Semrush|Panscient|crawler\\\\.feedback([+]\\\\S+)?@gmail\\\\.com|MauiBo ..." at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "585"] [id "999812"] [msg "Problematic Crawler"] [hostname "www.boundaryplanner.bintechsys.net"] [uri "/.env.development"] [unique_id "alQxxDawpHZwffLOvcMdwAAAALo"] [Sun Jul 12 18:31:00.113503 2026] [security2:error] [pid 1011499:tid 1011665] [client 107.189.28.30:34732] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "www.boundaryplanner.com"] [uri "/.env"] [unique_id "alQxxDawpHZwffLOvcMdvwAAAJ4"] [Sun Jul 12 18:31:00.113511 2026] [security2:error] [pid 1011499:tid 1011693] [client 107.189.28.30:34748] ModSecurity: Warning. Matched phrase "CCBot" at REQUEST_HEADERS:user-agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "406"] [hostname "www.boundaryplanner.bintechsys.net"] [uri "/.env.development"] [unique_id "alQxxDawpHZwffLOvcMdwAAAALo"] [Sun Jul 12 18:31:00.379126 2026] [security2:error] [pid 1011499:tid 1011703] [client 200.68.164.236:21899] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMdygAAAMQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.432739 2026] [security2:error] [pid 1011499:tid 1011717] [client 45.224.210.54:47255] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMdzAAAANI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.455317 2026] [security2:error] [pid 1011499:tid 1011716] [client 38.171.233.4:38582] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMdzwAAANE"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.464309 2026] [security2:error] [pid 1011499:tid 1011688] [client 107.189.28.30:34752] ModSecurity: Access denied with code 406 (phase 1). Match of "rx ^/llms.txt" against "REQUEST_URI" required. [file "/opt/mod_security/hg_rules.conf"] [line "588"] [id "999814"] [msg "Misbehaving AI Crawler"] [hostname "www.boundaryplanner.bintechsys.net"] [uri "/.env.bak"] [unique_id "alQxxDawpHZwffLOvcMd0gAAALU"] [Sun Jul 12 18:31:00.504803 2026] [security2:error] [pid 1011499:tid 1011756] [client 187.252.207.183:59936] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd0QAAAPk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.528945 2026] [authz_core:error] [pid 1011499:tid 1011684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:00.529705 2026] [authz_core:error] [pid 1011499:tid 1011684] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:00.556981 2026] [security2:error] [pid 1011499:tid 1011699] [client 195.3.220.7:49388] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "alQxxDawpHZwffLOvcMd1AAAAMA"] [Sun Jul 12 18:31:00.584968 2026] [security2:error] [pid 1011499:tid 1011642] [client 168.195.117.147:52008] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd0wAAAIc"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.629068 2026] [security2:error] [pid 1011499:tid 1011751] [client 38.196.80.25:60868] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd1QAAAPQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.759882 2026] [security2:error] [pid 1011499:tid 1011729] [client 152.232.80.168:56021] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/app/config/services.php"] [unique_id "alQxxDawpHZwffLOvcMd4wAAAN4"] [Sun Jul 12 18:31:00.790643 2026] [security2:error] [pid 1011499:tid 1011707] [client 190.5.41.160:56852] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd4QAAAMg"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.822740 2026] [security2:error] [pid 1011499:tid 1011705] [client 168.100.149.84:56116] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42575/bargainor/2308_gunz.jsp"] [unique_id "alQxxDawpHZwffLOvcMd5AAAAMY"] [Sun Jul 12 18:31:00.848924 2026] [cgid:error] [pid 1011499:tid 1011661] [client 107.189.28.30:34768] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:00.850894 2026] [cgid:error] [pid 1011499:tid 1011728] [client 107.189.28.30:34732] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:00.977721 2026] [security2:error] [pid 1011499:tid 1011745] [client 160.155.4.109:40636] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd6QAAAO4"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:00.991008 2026] [security2:error] [pid 1011499:tid 1011760] [client 160.238.27.25:4647] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd6wAAAP0"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.019582 2026] [security2:error] [pid 1011499:tid 1011645] [client 195.3.220.7:51294] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/index.php"] [unique_id "alQxxTawpHZwffLOvcMd7QAAAIo"] [Sun Jul 12 18:31:01.065116 2026] [security2:error] [pid 1011499:tid 1011734] [client 168.121.98.28:22574] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxDawpHZwffLOvcMd7AAAAOM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.154439 2026] [security2:error] [pid 1011499:tid 1011765] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjFfMzQ0MzVfMThqMS84XzU0MzZfajEx.html"] [unique_id "alQxxTawpHZwffLOvcMd8AAAAQI"] [Sun Jul 12 18:31:01.366633 2026] [security2:error] [pid 1011499:tid 1011672] [client 170.246.210.56:3680] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxTawpHZwffLOvcMd9QAAAKU"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.368256 2026] [authz_core:error] [pid 1011499:tid 1011680] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:01.369021 2026] [authz_core:error] [pid 1011499:tid 1011680] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:01.486133 2026] [security2:error] [pid 1011499:tid 1011665] [client 195.3.220.7:53480] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/css/index.php"] [unique_id "alQxxTawpHZwffLOvcMeEAAAAJ4"] [Sun Jul 12 18:31:01.595580 2026] [security2:error] [pid 1011499:tid 1011695] [client 152.232.80.168:50989] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/env.php"] [unique_id "alQxxTawpHZwffLOvcMeGAAAALw"] [Sun Jul 12 18:31:01.651912 2026] [security2:error] [pid 1011499:tid 1011749] [client 190.5.35.227:54177] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxTawpHZwffLOvcMeEwAAAPI"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.781460 2026] [security2:error] [pid 1011499:tid 1011651] [client 152.232.80.168:59420] ModSecurity: Access denied with code 406 (phase 1). Pattern match "/wp-config\\\\.php(?:\\\\W[a-z]*|bak)" at REQUEST_URI. [file "/opt/mod_security/hg_rules.conf"] [line "300"] [id "900256"] [msg "Wp-Config Backup/edit file request"] [hostname "50.87.177.149"] [uri "/wp-config.php~"] [unique_id "alQxxTawpHZwffLOvcMeKAAAAJA"] [Sun Jul 12 18:31:01.797118 2026] [security2:error] [pid 1011499:tid 1011710] [client 200.217.142.112:5790] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxTawpHZwffLOvcMeJgAAAMs"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.923314 2026] [security2:error] [pid 1011499:tid 1011644] [client 187.72.26.91:34428] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxTawpHZwffLOvcMeKQAAAIk"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:01.948874 2026] [security2:error] [pid 1011499:tid 1011661] [client 195.3.220.7:55452] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/images/index.php"] [unique_id "alQxxTawpHZwffLOvcMeMQAAAJo"] [Sun Jul 12 18:31:02.094067 2026] [security2:error] [pid 1011499:tid 1011670] [client 102.100.92.198:33784] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxTawpHZwffLOvcMeMgAAAKM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:02.128238 2026] [security2:error] [pid 1011499:tid 1011642] [client 107.189.28.30:34788] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.boundaryplanner.bintechsys.net"] [uri "/.env.backup"] [unique_id "alQxxjawpHZwffLOvcMeOwAAAIc"] [Sun Jul 12 18:31:02.177092 2026] [security2:error] [pid 1011499:tid 1011731] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxxTawpHZwffLOvcMeIwAAAOA"] [Sun Jul 12 18:31:02.177167 2026] [security2:error] [pid 1011499:tid 1011731] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxxTawpHZwffLOvcMeIwAAAOA"] [Sun Jul 12 18:31:02.179244 2026] [security2:error] [pid 1011499:tid 1011658] [client 65.21.113.206:41012] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjFfMzQ0MzVfMThqMS84XzU0MzZfajEx.html"] [unique_id "alQxxTawpHZwffLOvcMeHQAAAJc"] [Sun Jul 12 18:31:02.184552 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:02.185447 2026] [authz_core:error] [pid 1011499:tid 1011723] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:02.200586 2026] [cgid:error] [pid 1011499:tid 1011701] [client 107.189.28.30:34774] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:02.280963 2026] [cgid:error] [pid 1011499:tid 1011766] [client 202.46.62.12:18550] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home4/stephgq8/public_html/stephenspublishing/404.shtml, referer: https://www.stephenspublishing.com/when-call-bookmarks-custom-p-586.html?osCsid=iu482mqm3a18db2njkf10f7ub5 [Sun Jul 12 18:31:02.299120 2026] [security2:error] [pid 1011499:tid 1011643] [client 152.232.80.168:63459] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/config/production/.env"] [unique_id "alQxxjawpHZwffLOvcMeSAAAAIg"] [Sun Jul 12 18:31:02.418164 2026] [security2:error] [pid 1011499:tid 1011757] [client 195.3.220.7:57536] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/includes/index.php"] [unique_id "alQxxjawpHZwffLOvcMeUAAAAPo"] [Sun Jul 12 18:31:02.613741 2026] [security2:error] [pid 1011499:tid 1011703] [client 46.185.190.215:8678] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxjawpHZwffLOvcMeUwAAAMQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:02.616293 2026] [cgid:error] [pid 1011499:tid 1011710] [client 107.189.28.30:34788] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:02.804375 2026] [security2:error] [pid 1011499:tid 1011660] [client 168.100.149.133:38894] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42640/bargainor/2308_monadically.jsp"] [unique_id "alQxxjawpHZwffLOvcMeWwAAAJk"] [Sun Jul 12 18:31:02.815150 2026] [security2:error] [pid 1011499:tid 1011654] [client 107.189.28.30:34794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\.bak|\\\\.bak\\\\.php)$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1260"] [id "390582"] [rev "2"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that nclude .bak)"] [severity "CRITICAL"] [hostname "www.boundaryplanner.com"] [uri "/.env.bak"] [unique_id "alQxxjawpHZwffLOvcMeXAAAAJM"] [Sun Jul 12 18:31:02.873359 2026] [security2:error] [pid 1011499:tid 1011674] [client 195.3.220.7:59652] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/js/index.php"] [unique_id "alQxxjawpHZwffLOvcMeYwAAAKc"] [Sun Jul 12 18:31:02.987933 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:02.988452 2026] [authz_core:error] [pid 1011499:tid 1011672] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:03.066825 2026] [security2:error] [pid 1011499:tid 1011767] [client 105.76.184.18:5824] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxxjawpHZwffLOvcMeagAAAQQ"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:03.156528 2026] [security2:error] [pid 1011499:tid 1011694] [client 125.167.21.72:62436] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 72.21.167.125.testwprbl.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "176"] [id "900407"] [msg "Wordpress and Joomla Brute RBL: testwprbl.websitewelcome.com"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxxzawpHZwffLOvcMecQAAALs"] [Sun Jul 12 18:31:03.156853 2026] [security2:error] [pid 1011499:tid 1011694] [client 125.167.21.72:62436] ModSecurity: Warning. Pattern match "POST" at REQUEST_METHOD. [file "/opt/mod_security/hg_rules.conf"] [line "151"] [id "900405"] [msg "xmlrpc POST logging"] [data "409"] [hostname "iso5230.training"] [uri "/xmlrpc.php"] [unique_id "alQxxzawpHZwffLOvcMecQAAALs"] [Sun Jul 12 18:31:03.217313 2026] [cgid:error] [pid 1011499:tid 1011705] [client 107.189.28.30:34804] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:03.335089 2026] [security2:error] [pid 1011499:tid 1011723] [client 195.3.220.7:33826] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/maint/index.php"] [unique_id "alQxxzawpHZwffLOvcMeeQAAANg"] [Sun Jul 12 18:31:03.721031 2026] [security2:error] [pid 1011499:tid 1011676] [client 107.189.28.30:34794] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\.backup$" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "1279"] [id "390588"] [rev "1"] [msg "Atomicorp.com WAF Rules: Attack Blocked - Data leakage - attempt to access backup file (disable this rule if you require access to files that end with .backup)"] [severity "CRITICAL"] [hostname "www.boundaryplanner.com"] [uri "/.env.backup"] [unique_id "alQxxzawpHZwffLOvcMeiQAAAKk"] [Sun Jul 12 18:31:03.736578 2026] [authz_core:error] [pid 1011499:tid 1011659] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:03.737103 2026] [authz_core:error] [pid 1011499:tid 1011659] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:03.746013 2026] [security2:error] [pid 1011499:tid 1011706] [client 202.46.62.70:19793] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 70.62.46.202.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "www.stephenspublishing.com"] [uri "/ajax_cliparts.php"] [unique_id "alQxxzawpHZwffLOvcMeiAAAAMc"], referer: https://www.stephenspublishing.com/flip-pencil-sharpeners-custom-p-1107.html?osCsid=6bss0kuf7sbrbvto23272us856 [Sun Jul 12 18:31:03.809981 2026] [security2:error] [pid 1011499:tid 1011679] [client 195.3.220.7:36118] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/network/index.php"] [unique_id "alQxxzawpHZwffLOvcMeigAAAKw"] [Sun Jul 12 18:31:04.280464 2026] [security2:error] [pid 1011499:tid 1011672] [client 195.3.220.7:38474] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 7.220.3.195.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "sheehycareers.com"] [uri "/wp-admin/user/index.php"] [unique_id "alQxyDawpHZwffLOvcMemwAAAKU"] [Sun Jul 12 18:31:04.477039 2026] [authz_core:error] [pid 1011499:tid 1011697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:04.477574 2026] [authz_core:error] [pid 1011499:tid 1011697] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:04.807228 2026] [security2:error] [pid 1011499:tid 1011666] [client 168.100.149.17:29980] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42705/bargainor/2308_enhalo.jsp"] [unique_id "alQxyDawpHZwffLOvcMerwAAAJ8"] [Sun Jul 12 18:31:04.853651 2026] [security2:error] [pid 1011499:tid 1011718] [client 118.179.184.63:43676] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "www.lap-baterie.pl"] [uri "/404.php"] [unique_id "alQxyDawpHZwffLOvcMergAAANM"], referer: https://www.lap-baterie.pl/ [Sun Jul 12 18:31:04.868422 2026] [security2:error] [pid 1011499:tid 1011687] [client 5.161.73.160:19274] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "200"] [hostname "nwuav.com"] [uri "/index.html"] [unique_id "alQxyDawpHZwffLOvcMetAAAALQ"], referer: https://nwuav.com [Sun Jul 12 18:31:04.904753 2026] [security2:error] [pid 1011499:tid 1011761] [client 43.135.182.95:60920] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/opt/mod_security/hg_rules.conf"] [line "1577"] [id "900935"] [msg "Empty User-Agent LOGGING"] [data "301"] [hostname "centerofholistichealthcare.org"] [uri "/400.shtml"] [unique_id "alQxyDawpHZwffLOvcMetgAAAP4"] [Sun Jul 12 18:31:04.926440 2026] [security2:error] [pid 1011499:tid 1011649] [client 65.21.113.206:37192] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "kurtismyson.com"] [uri "/YjFfMzQ0MzVfMThqMS84Xzc4NTVfajEx.html"] [unique_id "alQxyDawpHZwffLOvcMetwAAAI4"] [Sun Jul 12 18:31:05.054326 2026] [cgid:error] [pid 1011499:tid 1011709] [client 107.189.28.30:34794] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:05.279550 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:05.280074 2026] [authz_core:error] [pid 1011499:tid 1011751] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:05.527848 2026] [security2:error] [pid 1011499:tid 1011747] [client 152.232.80.168:51437] ModSecurity: Access denied with code 409 (phase 1). RBL lookup of 168.80.232.152.vulnscan.websitewelcome.com succeeded at REMOTE_ADDR. [file "/opt/mod_security/hg_rules.conf"] [line "1570"] [id "900933"] [msg "Vulnerability Scan RBL: vulnscan.websitewelcome.com"] [hostname "50.87.177.149"] [uri "/config/services.php"] [unique_id "alQxyTawpHZwffLOvcMezwAAAPA"] [Sun Jul 12 18:31:05.529740 2026] [security2:error] [pid 1011499:tid 1011733] [client 152.232.80.168:50345] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:\\\\.(?:ht(?:access|passwd|group)|www_?acl)|global\\\\.asa|httpd\\\\.conf|boot\\\\.ini|web.config)\\\\b|( |^|\\\\.\\\\.)/etc/|/\\\\.(?:history|bash_history|sh_history|env)$)" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "211"] [id "390709"] [rev "30"] [msg "Atomicorp.com WAF Rules: Attempt to access protected file remotely"] [data "/.env"] [severity "CRITICAL"] [hostname "50.87.177.149"] [uri "/laravel/storage/.env"] [unique_id "alQxyTawpHZwffLOvcMezgAAAOI"] [Sun Jul 12 18:31:05.909886 2026] [security2:error] [pid 1011499:tid 1011678] [client 65.21.113.206:0] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxyTawpHZwffLOvcMezAAAAKs"] [Sun Jul 12 18:31:05.909955 2026] [security2:error] [pid 1011499:tid 1011678] [client 65.21.113.206:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/index.php"] [unique_id "alQxyTawpHZwffLOvcMezAAAAKs"] [Sun Jul 12 18:31:05.911647 2026] [security2:error] [pid 1011499:tid 1011710] [client 65.21.113.206:47026] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "404"] [hostname "kurtismyson.com"] [uri "/YjFfMzQ0MzVfMThqMS84Xzc4NTVfajEx.html"] [unique_id "alQxyTawpHZwffLOvcMeygAAAMs"] [Sun Jul 12 18:31:05.944483 2026] [cgid:error] [pid 1011499:tid 1011655] [client 107.189.28.30:34824] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:06.065789 2026] [authz_core:error] [pid 1011499:tid 1011717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:06.066330 2026] [authz_core:error] [pid 1011499:tid 1011717] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:06.170393 2026] [cgid:error] [pid 1011499:tid 1011691] [client 107.189.28.30:34812] AH01230: invalid CGI ref "/cgi-sys/fourohfour.cgi" in /home2/bintechs/public_html/boundaryplanner/404.shtml [Sun Jul 12 18:31:06.817980 2026] [security2:error] [pid 1011499:tid 1011688] [client 168.100.149.242:15114] ModSecurity: Warning. Matched phrase "oBot" at REQUEST_HEADERS:User-Agent. [file "/opt/mod_security/hg_rules.conf"] [line "168"] [id "350001"] [msg "BAD BOT - Detected LOGGING"] [data "301"] [hostname "automotiveadvertisinggroup.com"] [uri "/42770/bargainor/2308_metalogical.jsp"] [unique_id "alQxyjawpHZwffLOvcMfAwAAALU"] [Sun Jul 12 18:31:06.872575 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/php.ini [Sun Jul 12 18:31:06.873131 2026] [authz_core:error] [pid 1011499:tid 1011752] [client 185.177.72.12:0] AH01630: client denied by server configuration: /home1/larazaon/public_html/error_log [Sun Jul 12 18:31:06.925093 2026] [security2:error] [pid 1011499:tid 1011732] [client 57.141.18.17:0] ModSecurity: Warning. Pattern match "301|404|302" at RESPONSE_STATUS. [file "/opt/mod_security/hg_rules.conf"] [line "1574"] [id "900934"] [msg "404 php LOGGING"] [data "404"] [hostname "theresilientva.com"] [uri "/index.php"] [unique_id "alQxyjawpHZwffLOvcMe8wAAAOE"]